NHS: Data Protection
Commons · Question 6079 · Tabled 2 Jun 2026 · Department of Health and Social Care · Official record
Answered 15 Jun 2026
Question
Asked by James McMurdock
To ask the Secretary of State for Health and Social Care, what plans he has to require NHS bodies to conduct Data Protection Impact Assessments when ownership of contracted data processors changes.
Answer
Answered by Preet Kaur Gill, 15 Jun 2026
National Health Service organisations should be ensuring all relevant information governance requirements are met in relation to their processing of patient data, including completing Data Protection Impact Assessments (DPIA) where appropriate. Article 35...