Chamber and committees

The Scottish Government is committed to addressing patient concerns about data privacy in the sharing of medical records across healthcare providers. We provide clear guidance on privacy and confidentiality, promote robust information governance practices, and support the NHS and healthcare providers in implementing appropriate processes to safeguard patient data.

The responsibility for developing data sharing agreements and publishing privacy notices is down to each individual Board. However, NHS Inform provides patients with supportive information to ensure they have an understanding of the holistic approach to data privacy NHS Scotland take. This information can be found here https://www.nhsinform.scot/care-support-and-rights/health-rights/confidentiality-and-data-protection/how-the-nhs-handles-your-personal-health-information/.

In addition to the guidance on Inform, Privacy by design is at the core of the National Information Governance Programme, forming a key part of our Data Strategy to ensure that digital and data-driven practices are developed with privacy safeguards embedded from the outset.

The Scottish Government also engages regularly with patients, the ICO, and citizen interest groups to ensure data-sharing practices respect patients' rights and expectations

I refer the member to the answer to the question S6W-33751 on 29 January 2025. All answers to written Parliamentary Questions are available on the Parliament’s website, the search facility for which can be found at https://www.parliament.scot/chamber-and-committees/written-questions-and-answers

The Scottish Government actively promotes cyber security. Our goal is to reduce the risk of cyber-attacks and protect against the unauthorised exploitation of systems, networks, and technologies. As the Scottish Health Competent Authority for health in Scotland we promote best practice, regulatory requirements, and global international standards for the improvement of cyber security practices.

Health Boards must individually go through the Network Information Systems Regulations audit lifecycle, demonstrating continual improvements against the Scottish Public Sector Cyber Resilience Framework to the Scottish Health Competent Authority.

The Scottish Government has also invested in the Cyber Centre of Excellence (CCoE). The CCoE empowers continuous improvements by focusing on key enablement pillars including Centralised Security, 24/7 Monitoring, Threat Hunting, Incident Response and Training & Awareness. It is complimented by the Scottish Cyber Coordination Centre which is a key partner to the CCoE, enhancing our national incident response capacity and capabilities.

I refer the member to the answer to question S6W-33707 on 29 January 2025. All answers to written parliamentary questions are available on the Parliament's website, the search facility for which can be found at https://www.parliament.scot/chamber-and-committees/questions-and-answers.

I refer the member to the answer to question S6W-33303 on 24 January 2025. All answers to written parliamentary questions are available on the Parliament's website, the search facility for which can be found at https://www.parliament.scot/chamber-and-committees/questions-and-answers

The Scottish Government remains committed to the integration of digital services in Scotland’s health and social care systems. This work has been supported and progressed through the National Digital Platform (NDP). Since its creation, the NDP has made it easier for the public sector to collect and utilize data for improved integration. In addition, the federation of Microsoft 365 into NHS and Social Care services has allowed for improved joint working between health boards and local authorities.

Additionally, the Scottish Government intends to improve digital integration through a personalised digital health and social care service, the first phase of which will be launched in December 2025.

I refer the member to the answer to question S6W-33707 on 29 January 2025. All answers to written parliamentary questions are available on the Parliament's website, the search facility for which can be found at https://www.parliament.scot/chamber-and-committees/questions-and-answers

Social media management includes the management of Scottish Government social media accounts across platforms, and the directly related services comprise organic content production and outreach to secure content from creators and influencers.

I refer the member to the answer to the question S6W-33748 on 29 January 2025. All answers to written Parliamentary Questions are available on the Parliament’s website, the search facility for which can be found at https://www.parliament.scot/chamber-and-committees/written-questions-and-answers

We continue to develop the capabilities of the National Digital Platform (NDP), with core components that will enable individual access, such as standards-based data storage and integration, and access controls and user authentication for the workforce now largely in place.

However, the Platform itself will not provide patients digital access to their medical records or the ability to book appointments, rather it will power the underlying data requirements and systems integration for digital services that are public facing such as the Scotland-wide national vaccine service or the development of a Digital Front Door.

The Recommended Summary Plan for Emergency Care and Treatment digital application that is deployed on NDP is currently live in multiple health boards. In the past year, the platform has supported the delivery of the ANIA Digital Dermatology Pathway and will be providing the single source of the truth for Medical Devices Data as part of the Scan for Safety Programme in 2025-26.

The platform will be used to deliver the Digital Front Door service - an online app for patients which will begin to be rolled out in December 2025. The national roll out of this service will be incremental, starting in Lanarkshire. It will allow people to access and manage their hospital appointments online, receive communications, find local services, and access and update their personal information from day one. This will be the first step in a nationally committed, five-year programme for the Programme for Government 2024-25 commitment in launching a new personalised digital health and social care service.