NHS Now Have Guidance on Use of Public Cloud
News|by Leanne Bevan|22 January 2018
NHS Digital has recently published a guidance document that informs NHS and social care organisations how to use public cloud services securely.
The document will help organisations with their approach to offshoring and the use of public cloud services.
Key takeaways from the guidance document include:
- NHS and social care providers can use cloud computing services for NHS data.
- This data must only be hosted within the UK, European Economic Area (EEA) – a country deemed adequate by the European Commission, or within the US, which is covered by Privacy Shield.
- Using National Cyber Security Essentials as a guide, local Senior Information Risk Owners (SIROs) should be fulfilled with the appropriate security arrangements, in conjunction with Data Protection Officers and Caldicott Gardens.
- Regularly updated advice is available from the Information Commissioner’s Office.
- There are also changes to data protection laws, including the General Data Protection Regulation (GDPR) from 25 May 2018 – this includes restrictions on the transfer of personal data outside the European Union. The ICO’s GDPR guidance can be found here.
View the full guidance document here.
This guidance document sees NHS Digital meet some of their goals, which include: ensuring everyone’s data is protected, and supporting organisation to get the best from technology, data and information.
Embracing cloud technology may help health and social care organisations to benefit from more productivity, better security and cost savings.
As a Gold Partner, we work closely with the likes of Microsoft, who deliver Azure, a secure public cloud with datacentres in the UK and Europe.
If you would like help with migrating to the cloud, we can provide licensing, advice and migration services; please call +44 (0) 1364 654100 for more information.
Contact Grey Matter
If you have any questions or want some extra information, complete the form below and one of the team will be in touch ASAP. If you have a specific use case, please let us know and we'll help you find the right solution faster.
By submitting this form you are agreeing to our Privacy Policy and Website Terms of Use.
Leanne Bevan
Related News
Firewall first: Blocking ransomware before it hits
Why blocking ransomware is important The average recovery cost following a ransomware attack has soared to over £2 million, according to Sophos’ latest State of Ransomware Report. More than a third of victimised businesses take longer than a month to...
Endpoint security essentials: What every business should know
How can you enhance your endpoint security layer? In episode four of our Seven Layers of Security miniseries, we unpack the critical role the endpoint security layer plays in modern layered defence strategies. From laptops to mobile devices, endpoints are...
Network security: The silent defender
It’s not just firewalls – your network security layer does more than you think In episode three of our seven layers of security podcast miniseries, we dive deep into the network security layer; the silent defender that underpins your entire...
[WEBINAR] Cyber curveball: What 2025 taught us about security
Thu 4 December 2025 3:00 pm - 4:00 pm GMT
Cyber security: 2025 in review, 2026 in focus What a year. 2025 delivered some of the most disruptive cyber security moments we’ve seen – AI-powered threats, headline-making breaches, and a fast-moving regulatory landscape. Join us for a high-impact panel webinar...