Question to the Department of Health and Social Care:

To ask the Secretary of State for Health and Social Care, whether (a) data sharing agreements were entered into and (b) data impact assessments were conducted on potential work with (i) Microsoft, (ii) Palantir Technologies UK, (iii)Faculty, (iv) Google and (v) Amazon Web Services on the covid-19 datastore.

NHS England is the data controller for data processed in the NHS Data Store. Data is not 'shared' with organisations who are working under contract on the NHS Data Store and, as such, there are no data sharing agreements required. The organisations contracted by NHS England to act as data processors have access to the data but can only process it under instruction from NHS England which is included in their contracts.

Further information on the organisations involved, the contracts in place and their level of access to the data can be found on the NHS Data Store Privacy Notice which is being published by NHS England imminently.

The Data Protection Impact Assessment for the NHS Data Store has been completed and is also being published imminently.