Info Gov

The National Data Guardian Dr Nicola Byrne said her remaining term will focus on supporting major national data programmes, strengthening public trust, and ensuring transparency and safeguards as the NHS undergoes significant digital and structural change.

In her 2024–25 annual report , Dr Byrne said she will concentrate on supporting the implementation of several major national programmes - including the Health Data Research Service, the Single Patient Record, the Federated Data Platform, and the modernisation of the Control of Patient Information (COPI) Regulations - ensuring each is delivered in ways the public can understand and accept. Ongoing reforms including the Government’s 10 Year Health Plan and the abolition of NHS England also presented information governance challenges, she added.

Dr Byrne also committed to strengthening public engagement, improving information governance guidance, and reducing unnecessary bureaucracy that prevents safe and effective data use. Cyber resilience and organisational preparedness will remain central themes.

Dr Byrne said her office will continue to champion clarity, inclusivity and ethical data use across the system, emphasising that trust must be earned and maintained as the NHS becomes increasingly data driven.

The National Data Guardian (NDG) is an independent statutory adviser to the Government and to the health and adult social care system in England, to ensure that people’s confidential health and care information is used safely and ethically while maintaining public trust.

The Guardian Issues formal guidance that organisations must “have regard to” under the Health and Social Care (National Data Guardian) Act 2018 but does not have investigative or enforcement powers. Dr Byrne's tenureship of the post extends to 2027.

Also in this section

Oct 19, 2026

ICO audit finds "limited" assurance over Derbyshire Constabulary data protection governance

The Information Commissioner's Office (ICO) has given Derbyshire Constabulary a "limited" assurance rating for governance and accountability following a consensual data protection audit, finding that the force does not hold a comprehensive record of processing activities and is not yet meeting the logging requirements for law enforcement processing under section 62 of the Data Protection Act 2018.
Oct 19, 2026

DSG to pay £200,000 as consent order ends long-running cyber attack penalty dispute with ICO

The Information Commission (ICO) has confirmed that its long-running enforcement action against DSG Retail Ltd over the 2017 malware attack on Currys PC World and Dixons Travel tills has ended, after the First-tier Tribunal approved a consent order under which the retailer will pay £200,000 of the monetary penalty imposed by the tribunal rather than contest a fresh hearing.
Oct 14, 2026

ICO reprimands Met Police over unlawful data sharing

The Metropolitan Police Service (MPS) has been reprimanded by the Information Commission’s Office (ICO) after officers and staff unlawfully shared personal information through an unapproved third-party platform used to identify suspected shoplifters.