National Data Opt Out

The NHS National Data Opt Out: what it is and why it Matters

national data opt out and medical records

About the Author
Michael has many years’ experience supporting, developing and improving effective data protection and GDPR compliance systems. He has worked in this field in the public, private and charity sectors including at Board level. This experience has made him the ideal lead trainer for WuDo Solutions’ five-star rated GDPR training course.

What is the NHS National Data Opt Out?

 

The NHS National Data Opt-Out is a system that allows people in England to opt out of their identifiable patient information being used for research and planning purposes. It is part of the UK’s approach to protecting patient privacy while enabling the NHS and researchers to use data responsibly to improve healthcare services.

Implemented in May 2018, the opt-out was introduced as part of the government’s response to concerns about how patient data is used. It replaced previous opt-out mechanisms and applies to all health and adult social care organisations in England.

 

Why Does the National Data Opt Out Exist?

 

The opt-out was introduced to address public concerns about the use of health data while maintaining trust in the NHS. It ensures that patients have control over how their information is used beyond their direct care. The key reasons for its existence include:

  1. Respect for Patient Autonomy – the national data opt out allows individuals to make an informed choice about how their personal data is used.

  2. Privacy and Data Protection – the opt out aligns with data protection laws, including the UK GDPR and the Data Protection Act 2018.

  3. Transparency and Trust – there have been historical concerns about the use of personal data for purposes other than direct care. An example is the NHS’s Care.Data programme, which was scrapped in 2016 due to privacy fears.

  4. Balancing Research and Rights – the opt out ensures data can still be used for research and other purposes while giving individuals the right to opt out.

 

When Does the Opt-Out Apply?

 

The National Data Opt-Out applies when:

  • Patient data is used for research (e.g., studies on disease patterns, drug effectiveness).

  • Patient data is used for NHS planning (e.g., improving services, commissioning care).

It does not apply when:

  • Data is used for individual care (e.g., sharing information between GPs and hospitals).

  • Data sharing is required by law (e.g., public health emergencies like COVID-19).

  • Anonymised data is used (where individuals cannot be identified).

 

How Can Individuals Use the Opt-Out?

 

Patients can set their opt-out preference at any time via:

  • The NHS website – Using their NHS login.

  • The NHS App – Through the settings section.

  • Telephone or post – By requesting a paper form or calling the NHS opt-out helpline.

It applies to all NHS and adult social care services in England, but not private healthcare providers unless they are working on behalf of the NHS.

Enjoying this content?
Get articles like this direct to your inbox with our free newsletter. Full of articles, news and resources with all our content accessible in one place. Plus subscribers get exclusive content, priority access to events, and exclusive special offers. You can unsubscribe any time and we won;t use your data for anything else.

Sign Up Here:

 

How Should Organisations Use the Opt-Out?

 

Health and social care organisations must comply with the opt-out when using patient data for research and planning. They should:

  1. Check Opt-Out Status – Use the NHS’s Data Access Request Service (DARS) to ensure compliance.

  2. Apply the Opt-Out Correctly – Ensure patient data is excluded from non-direct care uses unless required by law.

  3. Maintain Transparency – Inform patients about how their data is used and their right to opt out.

  4. Review Compliance Regularly – Ensure policies align with NHS Digital’s guidance and legal requirements.

 

Final Thoughts

 

The NHS National Data Opt-Out is a crucial mechanism that balances privacy with progress. It protects patient rights while still enabling essential healthcare research and planning. By respecting opt-out choices, health organisations can build public trust and ensure ethical data use in the ever-evolving landscape of digital healthcare.

Learn About the GDPR

Gain the practical skills you need to identify and manage data protection and GDPR with this five-star rated training course.

Available in person, online or in-house the focus on practical skills and unique post-course support you get by learning with us will ensure you and your organisation can tackle this key governance activity with confidence.

Five star training testimonial