Skip to main content

Data Access Request Service (DARS) guidance

Track your application via DARS online and browse the application guidance catalogue.

Log in to DARS online

We've developed a range of materials to help you make the most of our Data Access Request Service (DARS).

Log in to DARS online 

Contact us

If you wish to discuss your requirements and to obtain a login, please email: [email protected]


Standards of information expected in a data access application

Review of current DARS standards

As a result of an amendment to section 97 of the Health and Social Care Act, NHS Digital are reviewing all current DARS standards and will, if necessary, update these standards to ensure alignment with this amendment.

You do not have to action anything at this time.

NHS Digital has produced guidance on the information expected in the various sections of a DARS application, named ‘Standards’.

For each ‘Standard’ there is written guidance covering important items to consider when writing your application and, where available, an accompanying video, both accessible via the table below.

Title/name of standard

Version

Last updated

Term of Data Sharing Agreement

v2.1

9 August 2022

Data Controllers

v1.0

24 July 2019

Data Processors

v1.0

24 July 2019

Security Assurance

v2.0

16 April 2021

Data Protection Act Registration

v1.0

24 July 2019

Data Minimisation

v1.0

24 July 2019

Patient Objections

v1.0

24 July 2019

Objective for Processing

v1.0

24 July 2019

Processing Activities 

v1.0 14 August 2019 

Expected Outcomes   

v1.0 14 August 2019 

Expected Measurable Benefits

v1.0

24 July 2019

Commercial Purpose

v3.0

23 March 2023

Special Conditions

v1.0

24 July 2019

Ethical Approval

v1.0

24 July 2019

Duty of Confidentiality

v1.0 26 September 2019
GDPR Consent v1.0 24 July 2019

Sub-Licencing and Onward Sharing

v1.0

24 July 2019

Transparency (fair processing)

v1.0

24 July 2019

Territory of Use

v1.0

24 July 2019

Honorary contract v1.0 12 September 2023

Agreement breaches

All organisations that gain approval to receive data from NHS Digital are subject to the terms set out within a specific Data Sharing Agreement (DSA) and the Data Sharing Framework Contract (DSFC). There may be an occasion when an organisation believes that they have not acted in accordance with these terms. In these circumstances it is important that the organisation acts immediately, to firstly control/stop the activity and then to contact the Data Access Request Service. NHS Digital will provide a confirmation receipt of this contact, so if you do not receive one please contact DARS directly (as per section 4.1.8 of the DSFC). You may also be required to undertake additional actions as outlined within the Data Security Protection Toolkit (DSPT).

In such circumstances NHS Digital will look to establish the details of what has happened, whether this constitutes a breach of agreement, the level of seriousness and what actions should be taken.

Ultimately a breach of the agreement(s) could result in the need to destroy the data held and the termination of the DSA and the DSFC. This is clearly a position that all would wish to avoid, and DARS are keen to work with organisations to ensure they fully understand and meet their obligations.

Please note that an organisation also has obligations to notify the Information Commissioners Office (ICO) in specific circumstances. Notifying NHS Digital does not remove those obligations which exist separately and must be complied with.


Further information

internal DARS: online fair processing

Where your application involves personal data, then it is a legal requirement under the Data Protection Act (first principle) that personal data must be processed fairly and lawfully.

Last edited: 23 April 2026 11:34 am