Health and Social Care Act 2012

250Powers to publish information standardsE+W
This section has no associated Explanatory Notes

(1)The Secretary of State or [F1NHS England] may prepare and publish an information standard.

[F2(2)For the purposes of this Part “an information standard” is a standard in relation to the processing of information [F3and includes, among other things, a standard relating to information technology or IT services used, or intended to be used, in connection with the processing of information (see section 250A)].

(2A)An information standard must specify to whom it applies.

(2B)An information standard may apply to one or more persons falling within the following paragraphs—

(a)the Secretary of State;

(b)NHS England;

(c)a public body which exercises functions in connection with the provision [F4in, or in relation to, England] of health care or of adult social care F5...;

(d)any person, other than a public body, who is required to be registered under Chapter 2 of Part 1 of the Health and Social Care Act 2008 in respect of the carrying on of a regulated activity (within the meaning of Part 1 of that Act).]

[F6(e)a relevant IT provider.]

(3)The Secretary of State may exercise the power under subsection (1) only in relation to information concerning, or connected with, the provision [F7in, or in relation to, England] of health [F8care] or of adult social care F9....

(4)[F10NHS England] may exercise the power under subsection (1) only in relation to information concerning, or connected with, the provision of NHS services.

F11(5). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

[F12(6)The Secretary of State must—

(a)have regard to any information standard published by NHS England that applies to the Secretary of State, and

(b)comply with any information standard published by the Secretary of State that applies to the Secretary of State.

(6A)Any other person to whom an information standard published under this section applies must comply with the information standard, except in so far as the requirement to comply is waived (see subsection (6B)).

(6B)Regulations may confer on a person who publishes an information standard the power to waive a person’s requirement to comply with the information standard (in whole or in part and generally or for a specific period).

(6C)The regulations may include provision—

(a)limiting the circumstances in which waivers may be granted;

(b)setting out the procedure to be followed in connection with waivers;

(c)requiring an information standard to include specified information about waivers.

(6D)For enforcement of information standards against persons other than public bodies, see section 277E.]

(d)any person (other than a public body) who provides health services, or adult social care in England, pursuant to arrangements made with a public body exercising functions in connection with the provision of such services or care.

(7)In this [F13Chapter]—

  • “adult social care”—

    (a)

    includes all forms of personal care and other practical assistance provided for individuals who, by reason of age, illness, disability, pregnancy, childbirth, dependence on alcohol or drugs, or any other similar circumstances, are in need of such care or other assistance, but

    (b)

    does not include anything provided by an establishment or agency for which Her Majesty's Chief Inspector of Education, Children's Services and Skills is the registration authority under section 5 of the Care Standards Act 2000;

  • [F14“health care” includes all forms of health care whether relating to physical or mental health and also includes procedures that are similar to forms of medical or surgical care but are not provided in connection with a medical condition;]

  • [F15“information technology” includes—

    (a)

    computers,

    (b)

    other devices whose uses include the processing of information by electronic means (“IT devices”),

    (c)

    parts, accessories and other equipment made or adapted for use in connection with computers or IT devices,

    (d)

    software and code made or adapted for use in connection with computers or IT devices, and

    (e)

    networks and other infrastructure (whether physical or virtual) used in connection with other information technology;

  • “IT service” means an information technology service, including any service (whether physical or virtual) which consists of, or is provided in connection with, the development, making available, operation or maintenance of information technology;]

  • F16...

  • [F17“NHS services” means services the provision of which is arranged by NHS England or an integrated care board (including services the provision of which is arranged by it in the exercise of functions of another person by virtue of any provision of the National Health Service Act 2006);]

  • [F18“processing” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(4) F19... of that Act);]

  • “public body” means a body or other person whose functions—

    (a)

    are of a public nature, or

    (b)

    include functions of that nature,

    but in the latter case, the body or person is a public body to the extent only of those functions.

  • [F20“relevant IT provider” means a person involved in marketing, supplying, providing or otherwise making available—

    (a)

    information technology,

    (b)

    an IT service, or

    (c)

    a service which consists of processing information using information technology,

    whether for payment or free of charge, but only so far as the technology or service is used, or intended to be used, in connection with the provision in, or in relation to, England of health care or of adult social care.]

Textual Amendments

F1Words in s. 250(1) substituted (1.7.2022) by Health and Care Act 2022 (c. 31), s. 186(6), Sch. 1 para. 19; S.I. 2022/734, reg. 2(a), Sch. (with regs. 13, 29, 30)

F2S. 250(2)-(2B) substituted for s. 250(2) (7.7.2025) by Health and Care Act 2022 (c. 31), ss. 95(2)(a), 186(6); S.I. 2025/807, reg. 2 (with reg. 3)

F5Words in s. 250(2B)(c) omitted (5.2.2026) by virtue of Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 15 para. 3(3)(b); S.I. 2026/82, reg. 2(z15)

F8Word in s. 250(3) substituted (7.7.2025) by Health and Care Act 2022 (c. 31), ss. 95(2)(b), 186(6); S.I. 2025/807, reg. 2 (with reg. 3)

F11S. 250(5) omitted (7.7.2025) by virtue of Health and Care Act 2022 (c. 31), ss. 95(2)(c), 186(6); S.I. 2025/807, reg. 2 (with reg. 3)

F12S. 250(6)-(6D) substituted for s. 250(6) (7.7.2025) by Health and Care Act 2022 (c. 31), ss. 95(2)(d), 186(6); S.I. 2025/807, reg. 2 (with reg. 3)

F14Words in s. 250(7) inserted (7.7.2025) by Health and Care Act 2022 (c. 31), ss. 95(2)(e)(i), 186(6); S.I. 2025/807, reg. 2 (with reg. 3)

F16Words in s. 250(7) omitted (7.7.2025) by virtue of Health and Care Act 2022 (c. 31), ss. 95(2)(e)(ii), 186(6); S.I. 2025/807, reg. 2 (with reg. 3)

F17Words in s. 250(7) substituted (1.7.2022) by Health and Care Act 2022 (c. 31), s. 186(6), Sch. 9 para. 22; S.I. 2022/734, reg. 2(a), Sch. (with regs. 13, 29, 30)

F18Words in s. 250(7) substituted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 172 (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)

Commencement Information

I1S. 250 in force at 1.4.2013 by S.I. 2013/160, art. 2(2) (with arts. 7-9)