Countries and territories of access

Information on the countries and territories that Our Future Health can and cannot grant access to data

Accessing Our Future Health data in different countries and territories

Our Future Health data is only available to access in specific countries and territories.

The table below lists the countries and territories Our Future Health can and cannot grant access to. Countries and territories are categorised as:

Accepted: Researchers or organisations based in these countries and territories can request access to the data Our Future Health holds via the Access Process.
Under review: Our Future Health is currently reviewing this country or territory.
Requires review by NHS England: After a country or territory is accepted by Our Future Health, NHS England carries out a separate review to assess whether the NHS England data it provides to Our Future Health can be accessed. While the review is pending, access to NHS England data cannot be granted.
Not listed: A review has not yet been undertaken. Any countries not listed in the table require further review by Our Future Health to determine whether access can or cannot be granted.
Not accepted: We are unable to issue access to the data Our Future Health holds. Countries/territories listed on the UK, EU and/or USA sanction lists and/or considered too high risk after review by the Our Future Health, cannot be granted access.

IDTA: For countries that are accepted but do not have an adequacy decision in place, an International Data Transfer Agreement (IDTA) is required. There is a guide to international transfers for more information.

Countries with partial adequacy in place

Canada

Partial adequacy - only covers data that is subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Not all data is subject to PIPEDA. ICO guidance states that an adequacy decision in place if data is processed in the course of ‘commercial activity’. Institutions should consider whether they consider themselves subject to the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) regarding their access to TRE data. Please read the guidance on the scope of PIPEDA from the Office of the Privacy Commissioner of Canada for further information.

Japan

Partial adequacy - only covers personal data transferred to private sector organisations subject to Japan’s Act on the Protection of Personal Information. This does not include transfers of the types listed in the EU’s adequacy decision for Japan.

United States of America

Partial adequacy - only covers data which is transferred under the UK Extension to the EU-US Data Privacy Framework. You can find more information about the UK Extension, including a factsheet for UK organisations, on gov.uk and on the US Department of Commerce’s Data Privacy Framework Program website.

Countries and territories of access
Country	Accepted to access Our Future Health data?	Accepted to access NHS England data?	Adequacy decision
Afghanistan	Not accepted	N/A	N/A
Andorra	Accepted	Accepted	European Commission’s adequacy decision
Australia	Accepted	Accepted	None – IDTA required
Austria	Accepted	Accepted	EEA (EU)
Argentina	Accepted	Accepted	European Commission’s adequacy decision
Belarus	Not accepted	N/A	N/A
Belgium	Accepted	Accepted	EEA (EU)
Bosnia and Herzegovina	Not accepted	N/A	N/A
Bulgaria	Accepted	Accepted	EEA (EU)
Burundi	Not accepted	N/A	N/A
Canada	Accepted	Accepted	IDTA may be required
Central African Republic	Not accepted	N/A	N/A
China, People's Republic of	Not accepted	N/A	N/A
Congo, Democratic Republic of	Not accepted	N/A	N/A
Crimea, Autonomous Republic of (Crimea Region of Ukraine)	Not accepted	N/A	N/A
Croatia	Accepted	Accepted	EEA (EU)
Cuba	Not accepted	N/A	N/A
Cyprus	Accepted	Accepted	EEA (EU)
Czech Republic	Accepted	Accepted	EEA (EU)
Denmark	Accepted	Accepted	EEA (EU)
Egypt	Accepted	Requires review by NHS England	None - IDTA required
Estonia	Accepted	Accepted	EEA (EU)
EU or EEA institutions, bodies, offices, or agencies	Accepted	Accepted	EEA
Faroe Islands	Accepted	Accepted	European Commission’s adequacy decision
Finland	Accepted	Accepted	EEA (EU)
France	Accepted	Accepted	EEA (EU)
Germany	Accepted	Accepted	EEA (EU)
Gibraltar	Accepted	Accepted	UK adequacy decision
Greece	Accepted	Accepted	EEA
Guernsey	Accepted	Accepted	European Commission’s adequacy decision
Guinea, Republic of	Not accepted	N/A	N/A
Guinea-Bissau, Republic of	Not accepted	N/A	N/A
Haiti	Not accepted	N/A	N/A
Hungary	Accepted	Accepted	EEA (EU)
Iceland	Accepted	Accepted	EEA (EFTA)
Iran	Not accepted	N/A	N/A
Iraq	Not accepted	N/A	N/A
Ireland	Accepted	Accepted	EEA (EU)
Isle of Man	Accepted	Accepted	European Commission’s adequacy decision
Israel	Accepted	Accepted	European Commission’s adequacy decision
Italy	Accepted	Accepted	EEA (EU)
Japan	Accepted	Accepted	IDTA may be required
Jersey	Accepted	Accepted	European Commission’s adequacy decision
Kenya	Accepted	Accepted	None – IDTA required
Korea, Democratic People’s Republic of (North Korea)	Not accepted	N/A	N/A
Korea, Republic of (South Korea)	Accepted	Accepted	UK adequacy decision
Latvia	Accepted	Accepted	EEA (EU)
Lebanon	Not accepted	N/A	N/A
Libya	Not accepted	N/A	N/A
Liechtenstein	Accepted	Accepted	EEA (EFTA)
Lithuania	Accepted	Accepted	EEA (EU)
Luxembourg	Accepted	Accepted	EEA (EU)
Mali	Not accepted	N/A	N/A
Malta	Accepted	Accepted	EEA (EU)
Moldova	Not accepted	N/A	N/A
Myanmar, Republic of the Union of	Not accepted	N/A	N/A
Netherlands	Accepted	Accepted	EEA (EU)
New Zealand	Accepted	Accepted	European Commission’s adequacy decision
Nicaragua	Not accepted	N/A	N/A
Norway	Accepted	Accepted	EEA (EFTA)
Poland	Accepted	Accepted	EEA (EU)
Portugal	Accepted	Accepted	EEA (EU)
Romania	Accepted	Accepted	EEA (EU)
Russia	Not accepted	N/A	N/A
Slovakia	Accepted	Accepted	EEA (EU)
Slovenia	Accepted	Accepted	EEA (EU)
Somalia	Not accepted	N/A	N/A
South Sudan	Not accepted	N/A	N/A
Spain	Accepted	Accepted	EEA (EU)
Sudan	Not accepted	N/A	N/A
Sweden	Accepted	Accepted	EEA (EU)
Switzerland	Accepted	Accepted	European Commission’s adequacy decision
Syria	Not accepted	N/A	N/A
Turkey	Accepted	Requires review by NHS England	None - IDTA required
Ukraine	Not accepted	N/A	N/A
Uruguay	Accepted	Accepted	European Commission’s adequacy decision
United States of America	Accepted	Accepted	IDTA may be required
Venezuela	Not accepted	N/A	N/A
Yemen	Not accepted	N/A	N/A
Zimbabwe	Not accepted	N/A	N/A

Updated: 05 May 2026

Cookies on Our Future Health

Countries and territories of access

Accessing Our Future Health data in different countries and territories