NHSmail

NHSmail
Name	NHSmail
Type	Secure email and collaboration service
Country	United Kingdom
Owner	Health and Social Care Information Centre / NHS Digital
Established	2006
Users	Healthcare and social care staff across NHS organisations

NHSmail is a secure messaging and collaboration service provided for staff within the United Kingdom's National Health Service and allied public bodies. It offers managed email, calendar, and instant messaging functionality tailored to clinical, administrative, and managerial roles across trusts, commissioning groups, and partner organisations. The platform is positioned as a centrally procured communications backbone intended to support interoperability between frontline services and national programmes.

Overview

NHSmail is delivered as a centrally commissioned service enabling staff in NHS England, NHS Scotland, NHS Wales, and organisations linked to the Department of Health and Social Care to exchange information using approved information-governance protocols. The service integrates with commercial offerings from firms such as Microsoft and had procurement ties to suppliers like Accenture and Atos in different phases. NHSmail accounts are issued to personnel in NHS trusts, Clinical Commissioning Groups, and partner organisations including Public Health England and local Clinical Commissioning Group predecessors, to support patient pathway coordination, administrative workflows, and national initiatives such as digitisation of records and secure correspondence with external agencies like Care Quality Commission inspectors or General Medical Council enquiries.

History and Development

NHSmail originated from early 2000s drives to modernise communication across disparate NHS IT estates, with major milestones emerging in the mid-2000s under programmes coordinated by bodies such as Connecting for Health and later NHS Digital. Early contracts involved outsourcing and managed services suppliers including BT Group and Vodafone for connectivity elements. The platform evolved through procurement rounds influenced by policy documents from the Department of Health and Social Care and governance frameworks from the National Information Board. Strategic decisions were informed by comparative technology adoption in organisations like Royal Free London NHS Foundation Trust and international examples such as NHS Scotland's parallel services. Upgrades and migrations — notably integrations with Microsoft Exchange Online and collaboration with cloud vendors like Amazon Web Services for adjunct systems — reflected broader public-sector moves to cloud-first strategies advocated by the Crown Commercial Service.

Services and Features

Core offerings include managed email, calendaring, shared mailboxes, contact lists, and instant messaging with chat and presence functionality. Features have been extended to include secure attachments, encrypted message routing, and integration points for directory services such as the NHS Directory of Services and organisational authentication via identity providers like NHS Identity. Additional functionality supports group working through shared mailboxes for teams in Accident and Emergency Departments, integration with clinical systems used by organisations such as NHS Foundation Trusts, and administrative tooling for HR and rota management in bodies like Health Education England. The service has provided APIs and connectors for interoperability with third-party products from vendors like EMIS Health and System C to aid information flow between primary care, secondary care, and commissioning organisations.

Security and Compliance

NHSmail operates under statutory and regulatory frameworks including data protection statutes overseen by the Information Commissioner's Office and information governance guidance from NHS England. Technical controls have included TLS encryption for transport, message-level encryption for sensitive attachments, and audit logging designed to meet requirements set by entities such as the Care Quality Commission. Supplier security assessments have referenced standards like ISO/IEC 27001 and compliance expectations articulated in procurement contracts drafted with input from the Crown Commercial Service. The service has been required to align with national interoperability standards such as those promulgated by the Professional Records Standards Body and to support clinicians complying with guidance from professional regulators including the General Medical Council and Nursing and Midwifery Council.

Governance and Management

Operational governance has involved joint oversight by NHS national bodies and supplier management teams, with programme boards including representatives from NHS Digital, regional Sustainability and Transformation Partnerships, and provider chief information officers from major hospital trusts like Guy's and St Thomas' NHS Foundation Trust. Contractual relationships have been shaped by central procurement decisions and monitored by steering groups liaising with commissioners in bodies such as former Clinical Commissioning Groups and current Integrated Care Systems. Change control and upgrade schedules have required coordination with stakeholders including professional associations such as the British Medical Association and unions representing healthcare staff during significant migrations.

Adoption and Usage

Uptake has been widespread among acute trusts, community services, mental health providers, and primary care networks, with account provisioning aligned to staff roles in organisations such as Royal College of Nursing members and trainees registered with the Faculty of General Dental Practice (UK). Usage patterns have included routine inter-professional referrals, appointment communications with secondary providers, and administrative exchanges between commissioning teams and service providers. Training and support have been provided through regional informatics teams and national user guides produced by NHS Digital; early roll-outs drew on lessons from digital transformation efforts in institutions like Great Ormond Street Hospital.

Criticisms and Incidents

NHSmail has faced criticism over service outages, migration difficulties, and limitations in supporting modern collaborative workflows compared with commercial platforms used in sectors represented by Tesco and Barclays; high-profile incidents prompted reviews by bodies such as the National Audit Office. Privacy and governance concerns have arisen in the context of mis-sent emails and inappropriate sharing incidents investigated by the Information Commissioner's Office, while procurement debates attracted commentary from think tanks and professional bodies including The King's Fund. Operational incidents have occasionally required coordinated responses from supplier incident teams and NHS incident response leads in trusts such as Barts Health NHS Trust to restore service and address data-handling implications.

Category:Health information technology in the United Kingdom