Question to the Department of Health and Social Care:

To ask the Secretary of State for Health and Social Care, what steps his Department has taken to ensure that private health corporations and their subsidiaries do not move personal health data outside of the UK.

All organisations providing services to patients in the United Kingdom, whether in the National Health Service or privately, must abide by UK data protection legislation - the Data Protection Act 2018, the UK General Data Protection Regulation and the common law duty of confidentiality. These place strict conditions on how identifiable patient data can be used and shared.