---

NHS: Databases

Answer

The NHS Federated Data Platform (NHS FDP) safely connects information from different systems across the National Health Service into a single, secure environment. This allows staff to co-ordinate care better to improve outcomes for patients.

The NHS FDP is delivering for the NHS, helping people get the care they need quicker and more efficiently. Since March 2024, more than 100,000 additional patients have been supported to undergo procedures in theatres partly by increasing theatre utilisation. Nearly 94,000 people have been supported on their cancer journey, with 7% seeing a reduction in the time it took to diagnose their cancer. There has been a 14% decrease in delays discharging patients staying in hospital for more than seven days, freeing up beds for those who need them most. NHS England publishes quarterly information on benefits realised from the FDP, which is available at the following link:

https://www.england.nhs.uk/digitaltechnology/nhs-federated-data-platform/impact/fdp-uptake-and-benefits/

As of the end of May 2026, 170 trusts have signed up for the NHS FDP, including the Mid Yorkshire Teaching NHS Trust.

NHS England’s legal basis for the processing of identifiable data prior to pseudonymisation is derived from its statutory functions and the applicable provisions of United Kingdom data protection law.

Processing of personal data is carried out in accordance with Article 6 of the UK General Data Protection Regulation (UK GDPR), including Article 6(1)(e), where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority. In some cases, Article 6(1)(c) also applies where processing is necessary for compliance with a legal obligation, such as where data is collected under a Direction.

Where special category data is processed, this is supported by Article 9(2)(g) of UK GDPR, where processing is necessary for reasons of substantial public interest, together with the relevant conditions under Schedule 1 of the Data Protection Act 2018, reflecting NHS England’s statutory responsibilities.

The processing of identifiable data at this stage is necessary to enable core functions such as data collection, validation, quality assurance, and linkage, which support NHS England’s role in managing and operating the health service. This processing is undertaken in accordance with the relevant legal framework, including the common law duty of confidentiality, and is set out in the applicable Data Protection Impact Assessments.

Where appropriate for downstream uses, data is subsequently de‑identified using privacy‑enhancing technologies, including NHS Privacy‑Enhancing Technology, in line with the approved purpose and the relevant Data Protection Impact Assessment.

Secondary information

Type

Written question

Reference

9252

Session

2026-27

Related items

NHS: Databases
Tuesday, 28 April 2026
Written questions
House of Commons

Subjects

Data protection Databases NHS

Link

View this Written question on www.parliament.uk