NHS Digital Data Release Register - reformatted

This is a readable version of NHS Digital's Data Release Registers since April 2016 - the "complete" list of where NHS Digital sends data on hospital patients after being paid a fee, and whether that release respected opt outs or not. For how to express that choice, medConfidential has more details.

This page is updated when NHS Digital publish more data. This page doesn't currnetly include anything from the cancer registry, whose release register is incomplete and wrong (e.g. when NDRS says 'You can find out more about these research projects here' many organisations simply aren't listed). PHE started respecting the National Data Opt Out in September 2018, and releases made after this date will be included (register publication lags release by at least 3 months).

Organisations that breached the rules:

• University College London (ucl) [SMLS reported a DPA serious incident; breached contract — read the audit report]
• Methods Analytics Ltd [breached contract — read the audit report]
• University Of Bristol [breached contract — read the audit report]
• Harvey Walsh Ltd [unreported DPA breaches; breached contract — read the audit report]
• Device Access Uk Ltd [breached contract with "high risk" — read the audit report]
• University Of Nottingham [breached contract — read the audit report]
• Health Iq Ltd [breached contract — read the audit report]
• London Borough Of Enfield [unreported DPA serious incident — read the audit report]
• Leeds Teaching Hospitals NHS Trust [breached contract — read the audit report]
• Pathway Communications Ltd [breached contract — read the audit report]
• Vanguard - Moorfields Eye Hospital NHS Foundation Trust [breached contract — read the audit report]
• Gateshead Metropolitan Borough Council [breached contract — read the audit report]

Projects above are ordered by volumes of data they receive (longer projects or more data appear higher).

CSU/CCGs

These are grouped in the release register, but audited (and fail) independently