NHS (Prohibition of Data Transfer) Bill

A Bill to prohibit the transfer of personal data by the NHS without the authority of the data subject; and for connected purposes.

Originating House

House of Commons

Sponsor

Sir Christopher ChopeConservative

Last Updated

5 May 2022

In Plain English

AI-generated

The NHS (Prohibition of Data Transfer) Bill would require the National Health Service to obtain the data subject's explicit authority before transferring personal data. It aims to give people greater control over how their information is moved between NHS bodies and other organisations, with related rules included under connected purposes.

Key Points

Prohibits NHS from transferring personal data without the data subject's authorisation.
Requires explicit consent or authorisation for transfers within the NHS and to external bodies.
Covers transfers and related processing activities under connected purposes.
Aims to strengthen data protection and individuals' control over health information.
Details such as definitions, exemptions and enforcement are expected to be clarified in later stages.

Progress

The bill is at the 2nd reading in the House of Commons; it will move to committee stage for detailed scrutiny and amendments.

Who is affected?

NHS patients and other individuals whose personal data are held by the NHSNHS staff and contractors who handle personal dataNHS bodies (hospitals, GP practices, clinics) and partner organisations that transfer dataExternal organisations and data processors that receive NHS dataResearchers and healthcare organisations that rely on NHS data transfers

Generated 21 February 2026

Updates & Documents

News (1)

NHS (Prohibition of Data Transfer) Bill

24 Jun 2021

The 2021-2022 session of Parliament has prorogued and this Bill will make no further progress.

Parliamentary Votes (0)

No recorded votes for this bill yet.

NHS (Prohibition of Data Transfer) Bill | TrackPolitics