Why the digital duties differ across the four nations
The UK shares a data-protection framework, but NHS digital-delivery duties are organised nationally. A rule can attach to a GP contract, a hospital service contract, a statutory direction, a specified collection or a particular request. Public ownership or NHS funding alone does not establish the same interface, dataset or deadline everywhere. 183, 195, 216, 221
For a board, the practical task is to identify its organisation's national and service obligations. For a specialist, the next task is to trace each digital action to the exact provision and applicability conditions. The home answer supplies the overview; this page explains the differences behind it.
Compare the legal routes
| Nation | Where concrete digital duties arise | How that changes the answer |
|---|---|---|
| England | Prescribed GP terms cover Summary Care Records, GP Connect access, electronic registration transfers and defined patient online access. An applicable NHS service contract specifies discharge/correspondence delivery and key-GP-information viewing. A statutory notice requires covered national activity submissions. 183, 181, 193 | Identify the GP arrangement or adopted service contract and its categories. Older information standards can require the provider to consider the applicable standard, alongside any separate contractual conformance. |
| Wales | Prescribed GP terms require summary retrieval, electronic registration transfer and appointment-information extraction arrangements. Welsh information circulars and access schemes add their own requirements. 195, 196, 200 | Apply Welsh terms. Some administrative standards have a documented mandate but an unverified statutory or adopted-contract link; their evidence class stays visible. |
| Scotland | The current Community Glaucoma Service directions require specified record actions and clinician terms for electronic claims. GP terms include specific electronic-record audit access. 216, 212 | Keep the patient, service, accreditation and claim/request trigger explicit. Boards must request an Emergency Care Summary and any existing Key Information Summary when necessary for care, with electronic means permitted. The general hospital-statistics timetable is recorded as a target with binding authority unresolved. |
| Northern Ireland | Prescribed GP terms require defined computerised audit access. Trusts must provide Department-required reports in the required form. Specific collection instructions and service arrangements describe additional digital routes. 221, 280, 283 | The selected hospital report has a qualified digital legal linkage. Shared-record and portal descriptions establish service operation; additional provider-wide duties need their actual direction, request or contract. |
The legal-force guide explains the labels. The catalogue keeps the information, sender, recipient, method and timing together.
Compare the same exchange
A summary record can be uploaded automatically, retrieved from a source or viewed through a portal. These are separate actions, and the national services hold different information. Use the summary-record example before treating SCR, Welsh GP Record, ECS/KIS and NI services as equivalent.
A blood-test result has separate ordering, reporting, clinical receipt, patient-access and notification steps. One duty at one step does not determine every later disclosure. The blood-results example follows that chain.
A discharge handover identifies the continuing-care recipients and their delivery rules. England's covered service contract has a specified digital deadline; the Scottish eye-care direction has a narrower pathway. The discharge example preserves those boundaries. 181, 216
Public funding and private providers
An independent organisation can owe an NHS digital duty when its covered contract or service participation requires it. Some NHS hospital reporting also includes private-patient activity. Wholly private services need their own assessment; they do not automatically acquire every NHS clause. Read the provider comparison with the national rule and the organisation's actual arrangements. 141, 193, 195
Shared patient rights and cross-border care
UK GDPR Article 15(3) can require an electronic subject-access copy after an electronic request. Qualifying Article 20 portability has different conditions and excludes necessary public-task/official-authority processing. Neither right by itself establishes a universal real-time patient portal. 260, 261
A sending organisation's obligation does not automatically impose the same contract on a receiver in another nation. Establish the sender's duty, the recipient's role and each relevant access/disclosure condition. Capacity and representative rules also differ; the discharge authority map compares them within one care transition.
Next depth: choose a worked exchange, open the relevant national chapter above, or look up an exact requirement. Terms and abbreviations provide a quick reference.