Get Answers
Can identifiable NHS data be shared?
Yes, in some situations identifiable NHS data can be shared without your direct permission. “Identifiable” means information that could be used to recognise you, such as your name, NHS number, address, or full date of birth.
The NHS must follow UK data protection law and keep your information secure. Sharing is only allowed when there is a lawful reason to do so, and staff should only use the minimum amount of data needed.
When sharing without consent may happen
Your identifiable data may be shared for your direct care, for example between your GP, hospital, and other health professionals involved in your treatment. This helps clinicians make safe decisions and avoid delays.
It may also be shared for reasons such as safeguarding, public health, legal duties, audits, fraud prevention, or serious research approved under strict rules. In some cases, the law allows data sharing even if you have not given specific permission.
For example, if there is a risk of serious harm to you or someone else, information may be shared to protect safety. NHS organisations may also be required to provide data to regulators, courts, or law enforcement where the law says they must.
What usually happens in practice
Most NHS organisations use privacy notices to explain how your data is used. They should tell you what information is shared, who it may be shared with, and the legal basis for doing so.
Where possible, the NHS will use anonymised or pseudonymised data instead of data that directly identifies you. This reduces the risk to your privacy while still allowing services to plan, improve, and monitor care.
Can you object or opt out?
In many cases, you can ask questions, raise concerns, or object to how your data is being used. If the sharing is for something other than your direct care, you may have stronger rights to refuse or opt out.
The National Data Opt-out lets you stop your confidential patient information from being used for research and planning in some cases. However, it does not apply to every situation, especially where the law requires data sharing or where your safety is at stake.
What rights do you have?
You can ask to see what information the NHS holds about you by making a Subject Access Request. You can also ask for corrections if your records are inaccurate or incomplete.
If you are unhappy with how your data has been shared, you can complain to the organisation involved and, if needed, escalate the issue to the Information Commissioner’s Office. NHS staff should be able to explain the reasons for sharing and point you to the relevant policy or privacy notice.
Frequently Asked Questions
In most cases, your identifiable NHS data cannot be shared without your explicit consent, except in certain situations outlined by law.
Identifiable NHS data refers to information held by the NHS that can directly or indirectly identify you, such as name, address, or NHS number.
Yes, your data can be shared without consent if there is a legal requirement or overriding public interest, such as in emergencies, safeguarding, or for crime prevention.
Authorised NHS officials or legal authorities, following strict guidelines and legislation, decide when data can be shared without your consent.
Generally, your permission is assumed for data sharing directly related to your care under implied consent, but not for unrelated purposes.
Identifiable data for research is usually only shared with your explicit consent or with special legal approval.
The NHS follows strict data protection laws, including the Data Protection Act and GDPR, to keep your identifiable data safe.
No, identifiable NHS data is not shared with insurance companies without your explicit consent.
Exceptions include situations involving a court order, public health emergencies, safeguarding vulnerable people, or statutory obligations.
You can opt out of your confidential patient information being used for research and planning, but there are limits in situations like emergencies.
Law enforcement can only access your identifiable NHS data if it's legally mandated, such as by a court order or in the prevention of serious crime.
You may not always be informed if your data is shared for legal or emergency reasons, although transparency is encouraged wherever possible.
Your data may be shared with other healthcare professionals, government agencies, or law enforcement if the law requires it.
No, the NHS does not sell identifiable patient data. Data sharing is strictly regulated and only happens with legal justification.
Yes, sharing identifiable NHS data unlawfully can lead to serious penalties, including fines and disciplinary action.
NHS staff can only access your identifiable data if it is necessary for your care or for specific legal reasons.
You can request access logs or ask your GP or NHS provider who has accessed your data in accordance with your rights under data protection laws.
Section 251 of the NHS Act 2006 allows the Secretary of State to set aside the duty of confidentiality in specific cases for medical purposes.
Yes, you can lodge a complaint with the NHS organisation involved or contact the Information Commissioner's Office (ICO).
You can find more information about your NHS data rights on the NHS website or by contacting the Information Commissioner's Office (ICO).
Ergsy Search Results
This website offers general information and is not a substitute for professional advice.
Always seek guidance from qualified professionals.
If you have any medical concerns or need urgent help, contact a healthcare professional or emergency services immediately.
Some of this content was generated with AI assistance. We've done our best to keep it accurate, helpful, and human-friendly.
- Ergsy carefully checks the information in the videos we provide here.
- Videos shown by Youtube after a video has completed, have NOT been reviewed by ERGSY.
- To view, click the arrow in centre of video.
- Most of the videos you find here will have subtitles and/or closed captions available.
- You may need to turn these on, and choose your preferred language.
- Go to the video you'd like to watch.
- If closed captions (CC) are available, settings will be visible on the bottom right of the video player.
- To turn on Captions, click settings.
- To turn off Captions, click settings again.