NHS Digital

We welcome you to our website. We would like to inform you about the management of your personal data.

DAUK is the Data Controller and a Data Processor of NHS Hospital Episode Statistics (HES) data provided under a formal Data Sharing Agreement with NHS Digital.

Hospital Episode Statistics (HES) is a data warehouse containing details of all admissions, outpatient appointments and A and E attendances at NHS hospitals in England. See NHS Digital and DARS for further details.


We receive and process this data as a result of the Data Sharing Agreement with NHS Digital and our legitimate interest in conducting scientific and statistical research in order to enable medical device providers to achieve NICE approvals and accreditation and subsequent NHS Adoption, and thus positively impact patients Hospitals and the NHS.

This is covered under GDPR as the most appropriate lawful basis for processing under Article 6 being “Legitimate interest”; coupled with Article 9 condition: – Article 9(2) (j) following a formal assessment to ensure that this meets the purpose, necessity and balancing test criteria

The preparation and delivery of the bespoke anonymised, aggregated dataset to any medical device manufacturer is only processed; following a formal approval process to ensure it meets the Purpose, Necessity and balancing test criteria for each particular recipient.

The NHS HES data we receive is pseudonymised special category “health data” and non-identifiable; which means individuals cannot be identified from the data.

We never give direct access to unprocessed NHS HES data to any third parties. We do aggregate and anonymise the data at appropriate levels level in accordance with the NHS Digital HES Analysis Guide Methodology to provide insight and build analytical models into bespoke data sets. These are provided to medical device manufacturers following formal external approval process to ensure the requirements for purpose and benefit are met.

We have been able to identify where new technologies could replace the current standard of care and show significant benefits to patients, providers of care, and payers of care. This has been the foundation of the success in over 27 NICE evaluations since 2010.
The HES data sets containing the pseudonymised data are retained for four (4) years after which they are securely destroyed. These data sets are downloaded stored and processed securely in conformance with the NHS Digital Toolkit requirements and the Data Sharing Agreement conditions.

DAUK only has access to pseudonymised NHS HES data for the past four years and cannot remove individuals from the datasets.

Should you wish to request that your data is removed from future datasets, then please visit NHS Digital Opting Out Choices for more information about how to opt out of your data being shared.

Contact us