Question to the Department of Health and Social Care:

To ask the Secretary of State for Health and Social Care, if he will take steps to ensure that (a) couples and (b) families are able to use the same email when signing up for the NHS app.

Instead of sharing an email, the NHS App supports proxy access through linked profiles, enabling parents or carers to manage health services for children or dependents through properly configured access. The registered email address and multi-factor authentication is used for security-sensitive activities, such as resetting an NHS login password or recovering an account, so should be kept private, ensuring an individual’s data is protected and secured in compliance with the requirements of Article 5.1(f), the ‘integrity and confidentiality’ principle, of the UK General Data Protection Regulation.

Using and sharing the same email address for multiple users may increase the risk of exposing sensitive health information inadvertently to others, limit controls to protect individuals against coercive behaviour, and increase the risk of cyberattacks including brute force attacks and fraudulent access.