Legislation – Health and Social Care Act 2012

Health and Social Care Act 2012, Cross Heading: Functions: information systems is up to date with all changes known to be in force on or before 03 April 2026. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations.

Changes to Legislation

Revised legislation carried on this site may not be fully up to date. Changes and effects are recorded by our editorial team in lists which can be found in the ‘Changes to Legislation’ area. Where those effects have yet to be applied to the text of the legislation by the editorial team they are also listed alongside the legislation in the affected provisions. Use the ‘more’ link to open the changes and effects relevant to the provision you are viewing.

View outstanding changes

Changes and effects yet to be applied to Part 9 Chapter 2 Crossheading Functions-information-systems:

Pt. 9 Ch. 1B inserted by 2022 c. 31 s. 96
s. 105(3A) (3B) inserted by 2013 c. 24 Sch. 14 para. 21
s. 106(3A) (3B) inserted by 2013 c. 24 Sch. 14 para. 22
s. 259(1)(aa)(b) substituted for s. 259(1)(b) by 2022 c. 31 s. 98(b)
s. 259(1)(aa) words substituted by S.I. 2023/98 Sch. para. 17(11)(a)(iii) (This amendment comes in force at the same time as 2022 c. 31, s. 98 comes into force)
s. 259(10A)(10B) inserted by 2022 c. 31 s. 98(h)
s. 261(5)(da) inserted by 2026 c. 8 s. 3(2)
s. 261(5A) inserted by 2026 c. 8 s. 3(3)
s. 261(6A)(6B) inserted by 2026 c. 8 s. 3(4)

Changes and effects yet to be applied to the whole Act associated Parts and Chapters:

Whole provisions yet to be inserted into this Act (including any effects on those provisions):

Pt. 9 Ch. 1B inserted by 2022 c. 31 s. 96
s. 105(3A) (3B) inserted by 2013 c. 24 Sch. 14 para. 21
s. 106(3A) (3B) inserted by 2013 c. 24 Sch. 14 para. 22
s. 259(1)(aa)(b) substituted for s. 259(1)(b) by 2022 c. 31 s. 98(b)
s. 259(1)(aa) words substituted by S.I. 2023/98 Sch. para. 17(11)(a)(iii) (This amendment comes in force at the same time as 2022 c. 31, s. 98 comes into force)
s. 259(10A)(10B) inserted by 2022 c. 31 s. 98(h)
s. 261(5)(da) inserted by 2026 c. 8 s. 3(2)
s. 261(5A) inserted by 2026 c. 8 s. 3(3)
s. 261(6A)(6B) inserted by 2026 c. 8 s. 3(4)

Functions: information systems

254Powers to direct F1NHS England to establish information systems

(1)

The Secretary of State F2… may direct F3NHS England to establish and operate a system for the collection or analysis of information of a description specified in the direction.

(2)

A direction may be given under subsection (1) by the Secretary of State only if—

(a)

the Secretary of State considers that the information which could be obtained by complying with the direction is information which it is necessary or expedient for the Secretary of State to have in relation to the exercise by the Secretary of State of the Secretary of State’s functions in connection with the provision of health services or of adult social care in England, or

(b)

the Secretary of State otherwise considers it to be in the interests of the health service in England or of the recipients or providers of adult social care in England for the direction to be given.

F4(3)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F5(4)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(5)

Before giving a direction under subsection (1) the Secretary of State F6… must consult F7NHS England.

F8(6)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F9(7)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

255Powers to request F10NHS England to establish information systems

(1)

Any person (including a devolved authority) may request F11NHS England to establish and operate a system for the collection or analysis of information of a description specified in the request.

(2)

A request may be made under subsection (1) by a person only if the person considers that the information which could be obtained by complying with the request is information which it is necessary or expedient for the person to have in relation to the person’s exercise of functions, or carrying out of activities, in connection with the provision of health care or adult social care.

(3)

F12NHS England must comply with a mandatory request unless F12NHS England considers that the request relates to information of a description prescribed in regulations.

(4)

For the purposes of this Chapter a request under subsection (1) is a mandatory request if—

(a)

it is made by a principal body, and

(b)

the body considers that the information which could be obtained by complying with the request is information which it is necessary or expedient for the body to have in relation to its discharge of a duty in connection with the provision of health services or of adult social care in England.

F13(5)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F14(6)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(7)

Subsection (8) applies where F15NHS England has discretion under this section as to whether to comply with—

(a)

a mandatory request, or

(b)

other request under subsection (1).

(8)

In deciding whether to comply with the request, F16NHS England—

(a)

must, in particular, consider whether doing so would interfere to an unreasonable extent with the exercise by F16NHS England of any of its functions, and

(b)

may take into account the extent to which the principal body or other person making the request has had regard to—

(i)

the code of practice prepared and published by F16NHS England under section 263, and

(ii)

advice or guidance given by F16NHS England under section 265.

(9)

In this section “principal body” means—

F17(a)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(b)

the Care Quality Commission,

(c)

the National Institute for Health and Care Excellence, and

(d)

such other persons as may be prescribed in regulations.

(10)

In this Chapter “health care” includes all forms of health care whether relating to physical or mental health and also includes procedures that are similar to forms of medical or surgical care but are not provided in connection with a medical condition.

256Requests for collection under section 255: confidential information

(1)

A request under section 255 is a confidential collection request if it is a request for F18NHS England to establish and operate a system for the collection of information which is in a form which—

(a)

identifies any individual to whom the information relates who is not an individual who provides health care or adult social care, or

(b)

enables the identity of such an individual to be ascertained.

(2)

A person may make a confidential collection request under section 255 only if the request—

(a)

is a mandatory request,

(b)

relates to information which the person making the request (“R”) may require to be disclosed to R or to F18NHS England by the person holding it, or

(c)

relates to information which may otherwise be lawfully disclosed to F18NHS England or to R by the person holding it.

257Requests under section 255: supplementary

(1)

F19NHS England must publish procedures for—

(a)

the making and consideration of requests under section 255, and

(b)

the reconsideration by F19NHS England of a decision not to comply with such a request.

(2)

The procedure mentioned in subsection (1)(b) must provide for the person who made the request to have an opportunity to make representations to F19NHS England within a reasonable period for the purposes of the reconsideration.

(3)

F19NHS England may charge a person a reasonable fee in respect of the cost of complying with a request made by that person under section 255.

(4)

Before making a request under section 255 a person must consult F19NHS England.

(5)

F19NHS England must publish details of—

(a)

any mandatory request, and

(b)

any other request under section 255 with which F19NHS England is obliged, or decides, to comply.

258Information systems: supplementary

(1)

Before establishing an information system pursuant to a direction under section 254 or a request under section 255 F20NHS England must consult—

(a)

the person who gave the direction or made the request,

(b)

representatives of other persons who F20NHS England considers are likely to use the information to which the direction or request relates,

(c)

representatives of persons from whom any information will be collected, and

(d)

such other persons as F20NHS England considers appropriate.

(2)

If F20NHS England reasonably believes that there is no longer a need to retain information which it has obtained by complying with a direction under section 254 or a request under section 255, F20NHS England may destroy the information.

259Powers to require and request provision of information

(1)

F21NHS England may—

(a)

require any person mentioned in subsection (2) to provide it with any information which F22NHS England considers it necessary or expedient for F22NHS England to have for the purposes of any function it exercises by virtue of this Chapter, and

(b)

request any other person to provide it with such information.

(2)

Those persons are—

(a)

a health or social care body;

(b)

any person (other than a public body) who provides health services, or adult social care in England, pursuant to arrangements made with a public body exercising functions in connection with the provision of such services or care.

(3)

But F23NHS England may not impose a requirement under subsection (1)(a) for the purpose of complying with a confidential collection request falling within section 256(2)(c).

(4)

In such a case, F23NHS England may, however, request any person mentioned in subsection (2) to provide it with any information which F23NHS England considers it necessary or expedient for F23NHS England to have for the purpose of complying with the request.

(5)

A requirement under subsection (1)(a) must be complied with by providing the information to F23NHS England in such form and manner, and within such period, as F23NHS England may specify.

(6)

If F23NHS England considers it appropriate to do so, F23NHS England may make a payment to any person who has provided information to F23NHS England pursuant to a request made under subsection (1)(b) in respect of the costs to that person of doing so.

(7)

If F23NHS England considers it appropriate to do so, F23NHS England may make a payment to any person mentioned in subsection (2)(b) who has provided information to F23NHS England pursuant to a request made under subsection (4) in respect of the costs to that person of doing so.

(8)

F23NHS England must publish a procedure for notifying persons of requirements imposed, and requests made, under this section.

(9)

In imposing requirements under this section F23NHS England must co-operate with any other person who is authorised to require the provision of information by a person mentioned in subsection (2).

(10)

The provision of information under this section—

(a)

does not breach any obligation of confidence owed by the person providing it, but

(b)

is subject to any express restriction on disclosure imposed by or under another Act (other than any restriction which allows disclosure if authorised by or under an Act).

(11)

In this Chapter “health or social care body” means a public body which exercises functions in connection with the provision of health services or of adult social care in England.

260Publication of information

(1)

F24NHS England must publish all information which it obtains by complying with a direction under section 254 or a request under section 255 unless the information falls within subsection (2); and, subject to subsection (3), if the information falls within that subsection, F24NHS England must not publish it.

(2)

Information falls within this subsection if—

(a)

the information is in a form which identifies any relevant person to whom the information relates or enables the identity of such a relevant person to be ascertained and F25NHS England, after taking into account the public interest as well as the interests of the relevant person, considers that it is not appropriate for the information to be published,

(b)

the information is in a form which identifies any individual to whom the information relates who is not a relevant person or enables the identity of such an individual to be ascertained,

(c)

F25NHS England considers that—

(i)

the information fails to meet the information standards published under section 250 (so far as they are applicable), and

(ii)

it would not be in the public interest to publish the information, or

(d)

the information is of a description specified in a direction given to F25NHS England by the Secretary of State F26….

(3)

A direction under section 254 may provide that the obligation to publish imposed by subsection (1) applies to information falling within subsection (2)(a) which is obtained by complying with the direction.

(4)

Where F27NHS England publishes information which it obtains by complying with F28… a mandatory request under section 255, F27NHS England—

(a)

must comply with the requirements (if any) specified in the F29… mandatory request as to the form, manner and timing of publication of the information, and

(b)

may publish the information in such other form and such other manner, and at such other times, as it considers appropriate.

(5)

Where F30NHS England publishes information which it obtains by complying with a request under section 255 other than a mandatory request, F30NHS England—

(a)

may act in accordance with such provision (if any) as may be included in the request as to the form, manner and timing of publication of the information, and

(b)

may publish the information in such other form and such other manner, and at such other times, as it considers appropriate.

(6)

In considering the appropriate form, manner and timing of publication of information under this section, F31NHS England must have regard to—

(a)

the need for the information to be easily accessible,

(b)

the persons who F31NHS England considers likely to use the information, and

(c)

the uses to which F31NHS England considers the information is likely to be put.

(7)

In this Chapter “relevant person” means—

(a)

any person who provides health care or adult social care, or

(b)

any body corporate not falling within paragraph (a).

261Other dissemination of information

(1)

F32NHS England may disseminate (other than by way of publication), to any such persons and in such form and manner and at such times, as it considers appropriate, any information—

(a)

which it obtains by complying with a direction under section 254 or a request under section 255, and

(b)

which falls within subsection (2).

F33(1A)

But F34NHS England may do so only if it considers that disseminating the information would be for F35purposes connected with—

(a)

the provision of health care or adult social care, or

(b)

the promotion of health.

(2)

Information falls within this subsection if—

(a)

the information is required to be published under section 260;

(b)

the information is in a form which identifies any relevant person to whom the information relates or enables the identity of such a relevant person to be ascertained and—

(i)

the relevant person has consented to the dissemination, or

(ii)

F34NHS England, after taking into account the public interest as well as the interests of the relevant person, considers that it is appropriate for the information to be disseminated;

(c)

the information is in a form which identifies any individual to whom the information relates who is not a relevant person or enables the identity of such an individual to be ascertained and the individual has consented to the dissemination;

(d)

F34NHS England is prohibited from publishing the information only by virtue of it falling within section 260(2)(c) and F34NHS England considers it would be in the public interest for the information to be disseminated;

(e)

F34NHS England is prohibited from publishing the information only by virtue of a direction given under section 260(2)(d) and that direction provides that the power in subsection (1) applies to the information.

(3)

A direction under section 260(2)(d) may require F34NHS England to disseminate information which F34NHS England is prohibited from publishing only by virtue of the direction.

(4)

F36NHS England may also disseminate, in such form and manner and at such times as it considers appropriate, any information which it collects pursuant to a direction under section 254 or a request under section 255 (whether or not it falls within subsection (2)) to any person to whom the information could have been lawfully disclosed by the person from whom F36NHS England collected the information.

(5)

F37NHS England may also disclose information which it obtains by complying with a direction under section 254 or a request under section 255 (whether or not it falls within subsection (2)) if—

(a)

the information has previously been lawfully disclosed to the public,

(b)

the disclosure is made in accordance with any court order,

(c)

the disclosure is necessary or expedient for the purposes of protecting the welfare of any individual,

(d)

the disclosure is made to any person in circumstances where it is necessary or expedient for the person to have the information for the purpose of exercising functions of that person conferred under or by virtue of any provision of this or any other Act,

(e)

the disclosure is made in connection with the investigation of a criminal offence (whether or not in the United Kingdom), or

(f)

the disclosure is made for the purpose of criminal proceedings (whether or not in the United Kingdom).

(6)

Paragraphs (a), (b) and (f) of subsection (5) have effect notwithstanding any rule of common law which would otherwise prohibit or restrict the disclosure.

(7)

Nothing in this section or section 262 prevents F38NHS England from disseminating information (otherwise than by publishing it) under or by virtue of any other provision of this or any other Act.

F39(8)

For the purposes of this section, the provision by NHS England of information which it has obtained by complying with a direction under section 254 to the Secretary of State is to be treated as dissemination by NHS England of that information to the Secretary of State.

(9)

For the purposes of this section and section 262, the provision by NHS England of information which it has obtained by complying with a request under section 255 to the person who made the request is to be treated as dissemination by NHS England of that information to that person.

262Other dissemination: directions and requests under sections 254 and 255

F40(1)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F40(2)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F40(3)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(4)

A request under section 255 may request F41NHS England to exercise—

(a)

the power conferred by section 261(1) or (4) in relation to information which it obtains by complying with the request, or

(b)

any other power it has to disseminate such information under or by virtue of any other provision of this or any other Act.

(5)

A F42… request under section 255 may request, F43NHS England not to exercise the power conferred by section 261(1) or (4) in relation to information which it obtains by complying with the F44… request.

(6)

Section 255(3) does not apply in relation to anything included in a mandatory request by virtue of subsection (4) or (5).

F45(7)

A request made to NHS England in accordance with this section to disseminate information may include a request about the persons to whom the information is to be disseminated and the form, manner and timing of dissemination.

F46262APublication and other dissemination: supplementary

In exercising any function F47… of publishing or otherwise disseminating information F48obtained in connection with the exercise of its relevant data functions, NHS England must have regard to any advice given to it by the committee appointed by the Health Research Authority under paragraph 8(1) of Schedule 7 to the Care Act 2014 (committee to advise in connection with information dissemination etc).

263Code of practice on confidential information

(1)

F49NHS England must prepare and publish a code in respect of the practice to be followed in relation to the collection, analysis, publication and other dissemination of confidential information concerning, or connected with, the provision of health services or of adult social care in England.

(2)

For the purposes of this section “confidential information” is—

(a)

information which is in a form which identifies any individual to whom the information relates or enables the identity of such an individual to be ascertained, or

(b)

any other information in respect of which the person who holds it owes an obligation of confidence.

(3)

Before publishing the code, F50NHS England must consult—

(a)

the Secretary of State, F51and

F52(b)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(c)

such other persons as F53NHS England considers appropriate.

F54(4)

NHS England must not publish the code without the approval of the Secretary of State.

(5)

F55NHS England must keep the code under review and may revise it as it considers appropriate (and a reference in this section to the code includes a reference to any revised code).

(6)

A health or social care body must have regard to the code in exercising functions in connection with the provision of health services or of adult social care in England.

(7)

A person, other than a public body, who provides health services, or adult social care in England, pursuant to arrangements made with a public body exercising functions in connection with the provision of such services or care must, in providing those services or that care, have regard to the code.

F56(8)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

264Information Register

F57NHS England must maintain and publish a register containing descriptions of the information which has been obtained by virtue of this Chapter.

265Advice or guidance

(1)

F58NHS England—

(a)

may give advice or guidance to any person mentioned in subsection (2) on any matter relating to the collection, analysis, publication or other dissemination of information, and

(b)

must, if requested to do so by the Secretary of State F59…, give advice or guidance on any such matter as may be specified in the request to—

(i)

the Secretary of State F60…;

(ii)

such other persons as may be specified in the request.

(2)

Those persons are—

(a)

the Secretary of State,

F61(b)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(c)

any person who makes, or is proposing to make, a request under section 255,

(d)

any health or social care body, and

(e)

any person (including a devolved authority) who collects, or is proposing to collect, information which relates to the provision of health care or adult social care.

(3)

The Secretary of State must, at least once in any review period, exercise the power under subsection (1)(b) by requesting F62NHS England to give the Secretary of State advice about ways in which the burdens relating to the collection of information imposed on health or social care bodies and other persons may be minimised.

(4)

For the purposes of subsection (3) a review period is—

(a)

the period of 3 years beginning with the day on which this section comes into force, and

(b)

each subsequent period of 3 years.

(5)

A health or social care body to whom advice or guidance is given under this section must have regard to the advice or guidance in exercising functions in connection with the provision of health services or of adult social care in England.

Changes to legislation:

Changes to Legislation

Changes and effects yet to be applied to Part 9 Chapter 2 Crossheading Functions-information-systems:

Changes and effects yet to be applied to the whole Act associated Parts and Chapters:

PART 9Health and adult social care services: information

CHAPTER 2NHS ENGLAND: HEALTH AND SOCIAL CARE INFORMATION ETC.

Functions: information systems

254Powers to direct F1NHS England to establish information systems

(1)

(2)

(a)

(b)

F4(3)

F5(4)

(5)

F8(6)

F9(7)

255Powers to request F10NHS England to establish information systems

(1)

(2)

(3)

(4)

(a)

(b)

F13(5)

F14(6)

(7)

(a)

(b)

(8)

(a)

(b)

(i)

(ii)

(9)

F17(a)

(b)

(c)

(d)

(10)

256Requests for collection under section 255: confidential information

(1)

(a)

(b)

(2)

(a)

(b)

(c)

257Requests under section 255: supplementary

(1)

(a)

(b)

(2)

(3)

(4)

(5)

(a)

(b)

258Information systems: supplementary

(1)

(a)

(b)

(c)

(d)

(2)

259Powers to require and request provision of information

(1)

(a)

(b)

(2)

(a)

(b)

(3)

(4)

(5)

(6)

(7)

(8)

(9)

(10)