Skip to main content

NHS: Data Protection

Volume 488: debated on Monday 23 February 2009

To ask the Secretary of State for Health which private sector companies have access to (a) NHS databases and (b) patient information. (256702)

Access to national health service patient information is permitted, with patient consent, to approved private sector organisations involved in providing services to NHS patients. Companies which provide technical support and maintenance for NHS databases may be given controlled access to databases and information for essential work. In both cases, companies will operate under contractual terms that require NHS information governance standards covering confidentiality, security and record retention to be complied with in full.