SBS - The Best Value in QMS software

Offshoring Data of NHS (National Health Service) England


Involved In Discussions

I have heard that the offshore storage of sensitive data from NHS England is prohibited.

Does anyone have any specific references for this?

Elsmar Forum Sponsor


Trusted Information Resource
I'd take a look here:

It doesn't appear to be specifically prohibited, but it must comply with the Data protection act (soon to be replaced by the General data protection regulation)


Involved In Discussions
I would ask where the instruction that data must not be off-shored has come from, it may be a mis-interpretation of the requirement or someone who is mitigating the potential risk for a data breach by not allowing off-shoring the data.

Looking at the site mentioned by pkost, the NHS site references the Data Protection Act and the DPA principle 8 states

"Personal data shall not be transferred to a country or territory outside the European Economic Area unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data."

There are circumstances where data can be off-shored, i.e. the EU-US bi-lateral agreement known as the privacy shield, but generally you have to be careful to ensure that no data goes outside of these parameters.

The key thing would be to check data storage and transfer to make sure that it is bound contractually to being compliant with EU Directives and DPA and there is no clauses about the supplier moving the data.

Just one final thought, as with anything like this, I would recommend obtaining legal advice and use specialist contractors for data storage or processing.

Hope this helps.

Thread starter Similar threads Forum Replies Date
B GR&R Destructive Data Analysis Gage R&R (GR&R) and MSA (Measurement Systems Analysis) 2
E Raw data retention EU Medical Device Regulations 0
Y Exporting data to the cloud is a "Significant Change"? EU Medical Device Regulations 5
Z Data sheet from McMasterCarr enough for RoHS/REACH documentation? REACH and RoHS Conversations 4
S Eudamed data fields EU Medical Device Regulations 4
J Need Help with FPY Data in Assembly Process Manufacturing and Related Processes 7
Q AMS 2750 E or F Continuous Furnace TUS Data Collection AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 5
M Reduce occurrence rating based on the PMS data and customer complaint data ISO 14971 - Medical Device Risk Management 2
J Customer Complaint & SCAR, false data Nonconformance and Corrective Action 14
Brizilla Employee Data Privacy Policy - ISO 9001:2015 requirement(s)? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 6
D Safety data sheets software REACH and RoHS Conversations 2
M Data Protection and Privacy Policy - looking for a template/example EU Medical Device Regulations 1
S Non parametric test for semi-quantitative data. Statistical Analysis Tools, Techniques and SPC 5
M Disabling measurement data during fault conditions IEC 60601 - Medical Electrical Equipment Safety Standards Series 5
C EU MDR - Annex II 6.1 Pre-clinical and clinical data EU Medical Device Regulations 4
P Ppk results shown as asterisk after the transformation of Non-normal data Using Minitab Software 4
lanley liao How to correctly understand the bullet list d) of 6.3 Analysis of Data for API Spec Q1 Oil and Gas Industry Standards and Regulations 7
Steve Prevette Informational I am presenting a webinar Thursday - "Data Driven Decision Making" - 19 November 2020 Statistical Analysis Tools, Techniques and SPC 5
qualprod Best practice to ensure inputting of data in production Lean in Manufacturing and Service Industries 19
D Preservation of Electronic Data / Information Technology ISO 13485:2016 - Medical Device Quality Management Systems 5
M Comparing data from destructive testing Inspection, Prints (Drawings), Testing, Sampling and Related Topics 7
DuncanGibbons Technical Data Package vs Digital Product Definition APQP and PPAP 0
Z Putting back excluded rows/data points in a control chart Using Minitab Software 0
F General Data Protection Regulation (GDRP) CE Marking (Conformité Européene) / CB Scheme 6
Z Minitab - Updating Graph with specific data points Using Minitab Software 2
E PEMS Hazards - IEC 60601 Clause 14.6 - Internal data use - Pressure sensor IEC 60601 - Medical Electrical Equipment Safety Standards Series 3
K Transform variable data into attribute data Reliability Analysis - Predictions, Testing and Standards 24
R Clinical evaluation without clinical data - MDR Article 61(10) EU Medical Device Regulations 8
H Capability Data for Paint Thickness on Painted Parts Statistical Analysis Tools, Techniques and SPC 10
D BS EN 62304 - Medical-Relevant Data C.5 - Definition of IEC 62304 - Medical Device Software Life Cycle Processes 5
T Submitting MR Compatibility Data for 510(k) Cleared Device Other Medical Device and Orthopedic Related Topics 2
S Quality manager considering data science Quality Manager and Management Related Issues 19
A What are Practical data center best practices IEC 27001 - Information Security Management Systems (ISMS) 1
U Do we need clinical trial data for Class IIa medical device under MDR EU Medical Device Regulations 7
S Average and standard deviation of Cumulative Data Statistical Analysis Tools, Techniques and SPC 5
V IS/ISO/IEC 17025:2017 Clause 7, sub clause 7.11 Control of data and information management ISO 17025 related Discussions 1
Watchcat CERs Literature Databases - Searching for data to evaluate EU Medical Device Regulations 16
D Transformation of Data Normality Failed Using Minitab Software 11
J Sample size for creating a data base as a reference to a tested variable Other Medical Device and Orthopedic Related Topics 6
M GUDID data deficiency communication - IS THIS A SCAM? ISO 13485:2016 - Medical Device Quality Management Systems 29
H Question about implications of performing Firmware upgrade via MDDS - Medical Device Data Systems 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 2
R Demonstrate how sufficient levels of access to data is achieved - Claims of equivalence EU Medical Device Regulations 3
R Material safety data sheet (MSDS) related clause in IATF 16949 manual IATF 16949 - Automotive Quality Systems Standard 17
CPhelan Using clinical trial safety data for evidence for CE marking EU Medical Device Regulations 8
M Informational US FDA – MDR Data Files – Alternative Summary Report Data Since 1999 Available Medical Device and FDA Regulations and Standards News 0
CPhelan Do you require MDSAP for CE Marking of a Medical Device or is ISO13485:2016 with clinical data sufficient? CE Marking (Conformité Européene) / CB Scheme 6
M Data analysis Design of Experiments Using Minitab Software 3
silentmonkey Seeking efficient method to manage install base data Manufacturing and Related Processes 0
V Every good documentation practice observation is an data integrity issue US Food and Drug Administration (FDA) 7
M Informational US – National Evaluation System for Health Technology Coordinating Center (NESTcc) Solicits Public Comments for Data Quality and Methods Frameworks Medical Device and FDA Regulations and Standards News 0

Similar threads

Top Bottom