NHS Now Have Guidance on Use of Public Cloud
News|by Leanne Bevan|22 January 2018
NHS Digital has recently published a guidance document that informs NHS and social care organisations how to use public cloud services securely.
The document will help organisations with their approach to offshoring and the use of public cloud services.
Key takeaways from the guidance document include:
- NHS and social care providers can use cloud computing services for NHS data.
- This data must only be hosted within the UK, European Economic Area (EEA) – a country deemed adequate by the European Commission, or within the US, which is covered by Privacy Shield.
- Using National Cyber Security Essentials as a guide, local Senior Information Risk Owners (SIROs) should be fulfilled with the appropriate security arrangements, in conjunction with Data Protection Officers and Caldicott Gardens.
- Regularly updated advice is available from the Information Commissioner’s Office.
- There are also changes to data protection laws, including the General Data Protection Regulation (GDPR) from 25 May 2018 – this includes restrictions on the transfer of personal data outside the European Union. The ICO’s GDPR guidance can be found here.
View the full guidance document here.
This guidance document sees NHS Digital meet some of their goals, which include: ensuring everyone’s data is protected, and supporting organisation to get the best from technology, data and information.
Embracing cloud technology may help health and social care organisations to benefit from more productivity, better security and cost savings.
As a Gold Partner, we work closely with the likes of Microsoft, who deliver Azure, a secure public cloud with datacentres in the UK and Europe.
If you would like help with migrating to the cloud, we can provide licensing, advice and migration services; please call +44 (0) 1364 654100 for more information.
Contact Grey Matter
If you have any questions or want some extra information, complete the form below and one of the team will be in touch ASAP. If you have a specific use case, please let us know and we'll help you find the right solution faster.
By submitting this form you are agreeing to our Privacy Policy and Website Terms of Use.
Leanne Bevan
Related News
Cyber Assessment Framework
What is the Cyber Assessment framework? The Cyber Assessment Framework (CAF), developed by the UK’s National Cyber Security Centre (NCSC), is a structured approach designed to help you assess and improve your cyber resilience, particularly if you’re responsible for critical...
Design Smarter, Not Harder: What’s New in Adobe Creative Cloud
In May 2025, Adobe Creative Cloud rolled out powerful updates across its suite of tools, with a strong focus on AI-driven creativity, speed, and collaboration. For small and medium-sized businesses (SMBs), these updates aren’t just bells and whistles-they’re game-changers that...
Readying your cloud migration: operating models and Azure landing zones
Learn how to migrate to the cloud in episode five of our Azure series. Previously, we covered the why and what of your migration and walked you through some helpful tools to help you understand the cost of your migration....
Grey Matter celebrates double win at ESET UK Partner Awards
Recognition for our partnership engagement at the ESET UK Partner Awards We are thrilled to announce that we have been named Engagement Partner of the Year at the ESET UK Partner Awards 2025. This recognition highlights our unwavering commitment to...