The government works closely with critical national infrastructure operators, alongside our national technical authorities and industry partners, to ensure preparedness for the diverse range of threats and risks the UK faces.

The government does not generally comment on national security matters, including the resilience of individual suppliers into CNI.

The MOT plays a vital role in keeping people safe on our roads. That is why the Department for Transport published a call for evidence in 2023 which sought views on how to keep it up to date. The monitoring of software updates for both electric and ICE vehicles is something that was raised in responses and is under consideration. Any proposals will, however, need to answer how to identify the software version on the vehicle and what the latest available version is.

Instead of sharing an email, the NHS App supports proxy access through linked profiles, enabling parents or carers to manage health services for children or dependents through properly configured access. The registered email address and multi-factor authentication is used for security-sensitive activities, such as resetting an NHS login password or recovering an account, so should be kept private, ensuring an individual’s data is protected and secured in compliance with the requirements of Article 5.1(f), the ‘integrity and confidentiality’ principle, of the UK General Data Protection Regulation.

Using and sharing the same email address for multiple users may increase the risk of exposing sensitive health information inadvertently to others, limit controls to protect individuals against coercive behaviour, and increase the risk of cyberattacks including brute force attacks and fraudulent access.

The NHS Federated Data Platform (FDP) began its national roll-out in April 2024, following a pilot phase that commenced in 2022. NHS England has invited all National Health Service trusts and integrated care boards (ICBs) to develop plans for how they will maximise the benefits of the FDP for their patients within the next two years

Uptake of the NHS FDP continues to grow. As of 31 March 2025, 108 NHS hospital trusts had signed up to the FDP, and 72 trusts are currently live and in delivery

To monitor participation and progress, NHS England publishes quarterly updates on uptake and the benefits being realised. This includes NHS trusts and ICBs that have signed up, metrics on operational improvements, such as reductions in inpatient and outpatient waitlists, and insights into product adoption and benefit realisation across use cases like elective recovery, care coordination, and crisis response. These updates are available at the following link:

https://www.england.nhs.uk/digitaltechnology/nhs-federated-data-platform/impact/fdp-uptake-and-benefits/

NHS England has procured and paid for licences to provide a Federated Data Platform instance for all trusts and integrated care boards for the full duration of the contract. This includes providing onboarding and implementation support and ongoing access to a National Centre of Excellence and user forums.

The National Health Service retains the intellectual property of solutions it funds or develops, including all associated data models, products, and analytical solutions of the NHS Federated Data Platform, and the background intellectual property remains the property of the respective party.

The contract for the FDP and Associated Services includes specific provisions to mitigate vendor lock-in and support transition to an alternative provider at the end of the contractual period. The contract is available at the following link:

https://www.contractsfinder.service.gov.uk/Notice/0f8a65b5-23a2-4294-abb1-a7fd8efb3ad0

The contract for the Federated Data Platform and Associated Services (FDP-AS) includes provisions to ensure transparency, interoperability, and a smooth transition at the end of the contract period. These provisions are designed to mitigate vendor lock-in and support the National Health Service in maintaining control over its data and digital infrastructure. The FDP-AS agreement includes comprehensive audit and exit mechanisms. These provisions enable NHS England to conduct audits and reviews to support effective transition planning and ensure contractual compliance. The contract is available at the following link:

https://www.contractsfinder.service.gov.uk/Notice/0f8a65b5-23a2-4294-abb1-a7fd8efb3ad0

The NHS Federated Data Platform (FDP) is built with robust security and privacy controls to ensure that access to National Health Service data is tightly governed and independently auditable.

All user activity within the FDP environment is logged for auditing purposes. These logs are actively monitored by both Palantir’s UK security team and the NHS Cyber Security Operations Centre, to detect and respond to any malicious activity. Security logs are encrypted at rest and in transit, and stored on a secure Security Information and Event Management server accessible only to authorised personnel.

Access to data within the FDP is governed by strict controls, including the principle of least privilege and mandatory access control systems. Only authorised users are granted access for approved purposes, and all permissions are subject to audit and review. In addition to these technical safeguards, the FDP Associated Services contract includes audit provisions that allow NHS England to validate and confirm that contractual requirements are being met. These rights of audit are standard within NHS commercial agreements and provide assurance that the platform operates in accordance with NHS England’s expectations and legal obligations.

The contract for the Federated Data Platform and Associated Services (FDP AS) includes provisions to ensure interoperability and support for market development through the use of open standards.

As part of this, the platform is underpinned by the NHS Canonical Data Model (CDM), which provides a consistent and open data schema that all parties connecting to the FDP must use. This ensures that data can be shared and understood across different systems and platforms, supporting interoperability and reducing the risk of vendor lock-in.

To further support transparency and innovation, NHS England has taken steps to publish the CDM on GitHub. This enables developers and suppliers to understand the structure and semantics of the data used within the platform, and to build compatible solutions that can integrate with the FDP.

The publication of the CDM is part of a broader commitment to openness and technical sovereignty, ensuring that the National Health Service retains control over its data infrastructure and can transition to alternative providers if needed.

The Government continues to support the concept of a National Parking Platform (NPP), a digital system designed to connect parking apps across the UK to provide a simpler service for users, by enabling them to use the app of their choice wherever they park. The Government recognises the many benefits of an NPP and the depth of support for it across the parking sector with over 200 local authorities having expressed an interest in joining. However, we are of the view that it could and should be delivered without the need to rely on public funding, particularly given the dire financial position the Government inherited.

The Department is working with the parking industry to explore options for taking forward delivery of a national platform. The industry has responded positively to this and the pilot version of the NPP will continue to be funded to 31 March 2025 while these discussions continue.