The Federated Data Platform and Associated Services contract will stipulate that all data must be held within the United Kingdom and is subject to UK Data Protection Law including the General Data Protection Regulation.

There will not be marketing activity within the Federated Data Platform (FDP). It will comply with the Data Protection Act 2018 and the United Kingdom General Data Protection Regulation (GDPR), Information Commissioner’s Office guidance and associated regulations, standards and guidance. Access to data in the FDP will always be controlled by National Health Service organisations. Use of data in the FDP will be clearly auditable and will be assessed to ensure compliance with GDPR and Information Governance rules.

The Federated Data Platform will be a data processor on behalf of National Health Service organisations. Each integrated care system and trust will need to determine how they will use their platform and each use case will require a Data Protection Impact Assessment to articulate the data security and protection principals and lawful bases for deployment.

The type of data will depend on the uses of the data as defined by the individual NHS organisations. It is anticipated that there will be various types of data used including anonymised, pseudonymised and in some cases identifiable data, but subject to stringent controls on access and use.

My Rt hon. Friend, the Secretary of State for Health and Social Care, regularly meets with a range of officials to advance transformational improvements across National Health Service data systems. These meetings include discussions on the proposed procurement of the Federated Data Platform.

The Department’s Joint Investment Committee approved the Federated Data Platform Outline Business Case, which provided details of the scope of the platform and the likely estimated benefits. The Federated Data Platform will be initially built on five use cases, selected based on the National Health Service strategic priorities, the immediate benefit that they will realise and the wider insights that they will be able to provide. These are: population health management; care coordination; elective recovery; vaccines; and immunisation and supply chain.

Access to data in the Federated Data Platform will always be controlled by NHS organisations and only those working in health and social care will be able to access the data.

It is envisaged that the primary users of the Federated Data Platform will be NHS hospitals, integrated care systems (ICSs) and NHS England. At ICS level, the benefits of the Federated Data Platform will also be realised by local authorities, local government and the third sector, who all contribute to providing health and care services.

The Department’s Joint Investment Committee approved the Federated Data Platform Outline Business Case, which provided details of the scope of the platform and the likely estimated benefits. The Federated Data Platform will be initially built on five use cases, selected based on the National Health Service strategic priorities, the immediate benefit that they will realise and the wider insights that they will be able to provide. These are: population health management; care coordination; elective recovery; vaccines; and immunisation and supply chain.

Access to data in the Federated Data Platform will always be controlled by NHS organisations and only those working in health and social care will be able to access the data.

It is envisaged that the primary users of the Federated Data Platform will be NHS hospitals, integrated care systems (ICSs) and NHS England. At ICS level, the benefits of the Federated Data Platform will also be realised by local authorities, local government and the third sector, who all contribute to providing health and care services.

Security clearance checks will be undertaken for all staff as required once a preferred supplier has been identified for the Federated Data Platform, in line with standard practices.

The Federated Data Platform Programme in NHS England is working through the requirements for training, deployment support, and implementation to ensure that trusts, integrated care boards and NHS England are in a position to make full use of the Federated Data Platform capabilities.

Requirements for the ease of use and training solutions has been included within the platform procurement. A budget has been allocated to the Federated Data Platform programme to support the training and adoption support to trusts.

The Department and NHS England do not hold information relating to correspondence between patients and trusts in relation to the Federated Data Platform. Where applicable, National Data Opt Outs and Type 1 opt outs will apply to the Federated Data Platform. These opt-outs apply where confidential patient information is being processed for secondary purposes and will not apply to an individual's direct care.

Where applicable, National Data opt outs and Type 1 opt outs will apply to the Federated Data Platform. These opt outs apply where confidential patient information is being processed for secondary purposes and will not apply to an individual's direct care.

Public facing information was published ahead of the procurement contract notice launch and will continue to be published throughout the lifecycle of the programme. This information was developed with public voice advocacy groups which included medConfidential, useMYdata and The Patients Association.

NHS England continue to engage members of the public directly on complex data topics, such as the public’s expectations of transparency and communications for future stages of the Federated Data Platform through various methods, including through focus groups and public dialogues. Engagement has identified concerns about who will be awarded the contract, who will have access to the data, and how it might be used.

NHS England are working to develop a public facing campaign to run in 2023 to support greater understanding of the power and impact of the use of health data to transform services, improve care and save lives, and to address these concerns.

The primary users of the Federated Data Platform will be National Health Service hospitals, integrated care systems (ICS) and NHS England. At ICS level, the benefits of the Federated Data Platform will also be realised by local authorities, local government, and the third sector providing health and care services, although they will not access the data within the Federated Data Platform. Only private companies contracted to NHS or social care to deliver services will have access to data within the Federated Data Platform.

Only people with a need to see patient identifiable information will be able to, for example a clinician treating a patient or a theatre scheduler scheduling a procedure. Each user of the platform will only see the data required to carry out a specific task and must have the correct legal basis to do so. At a national level, no confidential patient information will be used, the data will be pseudonymised or deidentified.

Access to data in the Federated Data Platform will always be controlled by NHS organisations and will be compliant with General Data Protection Regulation and Information Governance rules. Use of data in the Federated Data Platform will be clearly auditable and assessed to ensure it meets data governance controls including compliance with legislation. Each use case will require a Data Protection Impact Assessment to articulate the data security and protection principals and lawful bases for deployment.

The primary users of the Federated Data Platform will be National Health Service hospitals, integrated care systems (ICS) and NHS England. At ICS level, the benefits of the Federated Data Platform will also be realised by local authorities, local government, and the third sector providing health and care services, although they will not access the data within the Federated Data Platform. Only private companies contracted to NHS or social care to deliver services will have access to data within the Federated Data Platform.

Only people with a need to see patient identifiable information will be able to, for example a clinician treating a patient or a theatre scheduler scheduling a procedure. Each user of the platform will only see the data required to carry out a specific task and must have the correct legal basis to do so. At a national level, no confidential patient information will be used, the data will be pseudonymised or deidentified.

Access to data in the Federated Data Platform will always be controlled by NHS organisations and will be compliant with General Data Protection Regulation and Information Governance rules. Use of data in the Federated Data Platform will be clearly auditable and assessed to ensure it meets data governance controls including compliance with legislation. Each use case will require a Data Protection Impact Assessment to articulate the data security and protection principals and lawful bases for deployment.

The primary users of the Federated Data Platform will be National Health Service hospitals, integrated care systems (ICS) and NHS England. At ICS level, the benefits of the Federated Data Platform will also be realised by local authorities, local government, and the third sector providing health and care services, although they will not access the data within the Federated Data Platform. Only private companies contracted to NHS or social care to deliver services will have access to data within the Federated Data Platform.

Only people with a need to see patient identifiable information will be able to, for example a clinician treating a patient or a theatre scheduler scheduling a procedure. Each user of the platform will only see the data required to carry out a specific task and must have the correct legal basis to do so. At a national level, no confidential patient information will be used, the data will be pseudonymised or deidentified.

Access to data in the Federated Data Platform will always be controlled by NHS organisations and will be compliant with General Data Protection Regulation and Information Governance rules. Use of data in the Federated Data Platform will be clearly auditable and assessed to ensure it meets data governance controls including compliance with legislation. Each use case will require a Data Protection Impact Assessment to articulate the data security and protection principals and lawful bases for deployment.

It is estimated that the staffing hours required would be less than one hour per month per provider.