Question to the Department of Health and Social Care:

To ask His Majesty's Government what assessment they have made of the risks to patient confidentiality of digital medical records being shared across multiple healthcare trusts.

Where medical records are shared across National Health Service organisations, such as the Shared Care Record program, organisations should complete a Data Protection Impact Assessment. This allows them to consider the data protection and confidentiality risks involved, and outlines what actions they can take to mitigate the risk to an acceptable level. NHS England has published guidance on this subject, Information Governance Framework: Shared Care Records, a copy of which is attached.