Summary

This Joint Controller Arrangement Table (Table) sets out the roles and responsibilities under Article 26 of the UK General Data Protection Regulation (“UK GDPR”) of the following parties:

• NHS England (known in statute as the Health and Social Care Information Centre); and
• The health and social care organisations consuming and operating NHSmail at a local level (“Local Organisations”),

in relation to the processing of personal data through the delivery, maintenance and operation of the secure email and collaboration live service known as the NHSmail O365 shared tenant, hereafter referred to as ‘NHSmail’.

Document information and downloads