nhs data held abroad

The government has stated that NHS and social services data “can be safely hosted” in the US and a number of other locations across Europe and beyond.

The Department of Health and Social Care, alongside NHS England, NHS Improvement, and NHS Digital, has issued a document laying out the government’s position on offshore hosting and the use of public cloud for NHS and social-care bodies.

“The NHS and social-care providers may use cloud computing services for NHS data,” says the document. “Data must only be hosted within the European Economic Area (EEA), a country deemed adequate by the European Commission, or in the US, where covered by Privacy Shield.”

https://publictechnology.net/articles/news/government-advises-nhs-data-can-be-safely-hosted-us-and-other-countries

if you are aware of your data been stored out of the country

it means nothing as not uk based or held by uk law

Last Tuesday, October 6th 2015, the ECJ came back and ruled that the US EU Safe Harbor Agreement is invalid because the US Government can access the data of European citizens and is not subject to the same safe-harbor standards as the companies storing that data.

This is an important verdict because the ECJ is making a clear statement that American companies can’t be trusted with user data because that data can (and has) been accessed by the National Security Agency and other intelligence organizations. Those organizations are not held to the US-EU Safe Harbor standards when they gain access to European customer data, and therefore the entire Safe Harbor agreement is invalid. The ECJ has effectively dropped a legislative bomb on international data privacy.

https://www.wordfence.com/blog/2015/10/european-data-on-usa-servers-safe-harbor/