Question to the Department of Health and Social Care:

To ask the Secretary of State for Health and Social Care, pursuant to the HL1033, 6 July 2026, how many times the audit trail for access to data on the National Data Integration Tenant has been reviewed or audited since its implementation, and what the outcomes of those audits were.

The current access management process for the National Data Integration Tenant (NDIT) was implemented in November 2025. All access and user activity is strictly monitored and audited by a dedicated NHS England team as part of a regular assurance process, as detailed in NHS England's response to the National Data Guardian, available at the following link:

https://www.england.nhs.uk/digitaltechnology/nhs-federated-data-platform/security-privacy/response-to-the-national-data-guardians-request/

Audit logs are reviewed to confirm the actions undertaken by users. In addition, comprehensive access audits have been carried out in December 2025, for all NDIT users; and in March and May 2026, for a subset of users.

These additional audits have confirmed that users have the appropriate permissions in line with approved access, that access corresponds to the projects established on the NDIT, that the level of access remains appropriate and necessary, and that Security Check clearance has been correctly evidenced and remains in date.