NHSE SD
Version: 1.0.2 | Published: 1 Dec 2025 | Updated: 84 days ago

Secure Email

Dataset
CONTACT

Summary

Reference Code:
DCB1596 Amd 75/2019
Publication Version:
2.3.0
Type:
  • Information standards
  • Technical standards and specifications
Effective From:
31 March 2020
Applies To:
  • Public, private and third sector organisations commissioned to deliver publicly funded health, public health and adult social care
  • Commissioned email service providers (any commissioned supplier providing email services within health and care)
  • Commissioners of health and care within England
Impacts On:
Implementation of this information standard impacts all IT service providers of email systems to the above providers and commissioners. IT service providers should work with their customers to determine necessary changes.
Conformance Date:
31 March 2020
Topics:
  • Information governance
  • Security, Safety and Privacy
Care Settings:
  • Community health
  • Dentistry
  • Hospital
  • Maternity
  • Mental health
  • Pharmacy
  • Social care
  • Urgent and Emergency Care
Publication Date:
09 January 2020

Contact Point

Contact Point:
feedback@nhs.net

Documentation

Associated Media:
Secure Email further guidance
Description:

About this change

Introduces a change removing the requirement for a local organisation to implement a secure domain (secure.nhs.uk) in order to meet the standard.

Documentation Link:
https://digital.nhs.uk/data-and-information/information-standards/information-standards-and-data-collections-including-extractions/publications-and-notifications/standards-and-collections/dcb1596-secure-email
Relations:
Name:
Data Security and Protection Toolkit
Url:
https://standards.nhs.uk/published-standards/data-security-and-protection-toolkit
Explanation:
DCB0086
Name:
Clinical Risk Management: its Application in the Deployment and Use of Health IT Systems
Url:
https://standards.nhs.uk/published-standards/clinical-risk-management-its-application-in-the-deployment-and-use-of-health-it-systems
Explanation:
DCB0160
Name:
Clinical Risk Management: its Application in the Manufacture of Health IT Systems
Url:
https://standards.nhs.uk/published-standards/clinical-risk-management-its-application-in-the-manufacture-of-health-it-systems
Explanation:
DCB0129
Name:
Information technology - Security techniques - Information security management systems
Explanation:
BS ISO/IEC 27001:2013 - Requirements
Name:
Information technology Security techniques Code of practice for information security controls
Url:
https://www.gov.uk/guidance/securing-government-email
Explanation:
BS ISO/IEC 27002:2013: Cabinet Office Guidance
Name:
RFC5246 and RFC 8446 (TLS)
Name:
RFC7208 (SPF)
Name:
RFC6377 (DKIM)
Name:
RFC7489 (DMARC)
Name:
RFC8640 (TLS-RPT)
Name:
RFC8461 (MTA-STS)
Name:
NHS and social care data: off-shoring and the use of public cloud services
Url:
https://digital.nhs.uk/data-and-information/looking-after-information/data-security-and-information-governance/nhs-and-social-care-data-off-shoring-and-the-use-of-public-cloud-services

Review & Status

Sponsor:
Managing Director of Platforms, Infrastructure and Live Services, NHS Digital
Approval Date:
20 December 2019
Business Lead:
Chris Parsons, Programme Head, NHS Digital
Post Implementation Review Date:
31 December 2020
Scope:
NHS Services, Health Services, Adult Social Care
SRO:
Neil Bennett, Service Director, Live Services, NHS Digital
Technical Committee:
Data Co-ordination Board (DCB)
Dataset Identifier:
46669e73-e50f-4ded-bb42-d68acab3bd37
Mandated:
Yes
Status:
active

Legal Authority 1

Legal Authority:
Section 250 of the Health and Social Care Act 2012
Legal Authority Description:
This information standard is published under section 250 of the Health and Social Care Act 2012

Origin

Name:
NHSE-SD Data Catalogue
URL:
https://sd-asc-ui-sd.metadata.works
Link:
https://sd-asc-ui-sd.metadata.works/browser/dataset/285446/0