Territories of access
Information on the countries and territories that Our Future Health can and cannot grant access to data
Accessing Our Future Health data in different countries and territories
Our Future Health data is only available to access in specific countries and territories.
The table below lists the countries and territories Our Future Health can and cannot grant access to. Countries and territories are categorised as:
Accepted: Researchers or organisations based in these countries and territories can request access to the data Our Future Health holds via the Access Process.
- Under review: Our Future Health is currently reviewing this country or territory.
- Requires review/not listed: A review has not yet been undertaken. Any countries not listed in the table require further review by Our Future Health to determine whether access can or cannot be granted. If the study requests access to NHSE data, this review may include the requirement to submit an amendment to NHS England. This amendment would require approval before access could be granted.
- Not accepted: We are unable to issue access to the data Our Future Health holds. Countries/territories listed on the UK, EU and/or USA sanction lists and/or considered too high risk after review by the Our Future Health, cannot be granted access.
- IDTA: For countries that are accepted but do not have an adequacy decision in place, an International Data Transfer Agreement (IDTA) is required. There is a guide to international transfers for more information.
Countries requiring International Data Transfer Agreements (IDTA)
Canada
Partial adequacy - only covers data that is subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Not all data is subject to PIPEDA. ICO guidance states that an adequacy decision in place if data is processed in the course of ‘commercial activity’. Institutions should consider whether they consider themselves subject to the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) regarding their access to TRE data. Please read the guidance on the scope of PIPEDA from the Office of the Privacy Commissioner of Canada for further information.
Japan
Partial adequacy - only covers personal data transferred to private sector organisations subject to Japan’s Act on the Protection of Personal Information. This does not include transfers of the types listed in the EU’s adequacy decision for Japan.
United States of America
Partial adequacy - only covers data which is transferred under the UK Extension to the EU-US Data Privacy Framework. You can find more information about the UK Extension, including a factsheet for UK organisations, on gov.uk and on the US Department of Commerce’s Data Privacy Framework Program website.
Country |
Accepted to access Our Future Health data? |
Accepted to access NHS England data? |
Adequacy decision |
---|---|---|---|
Afghanistan |
Not accepted |
||
Andorra |
Accepted |
Accepted |
European Commission’s adequacy decision |
Australia |
Partially accepted: |
Under review |
None – IDTA required |
Austria |
Accepted |
Accepted |
EEA (EU) |
Argentina |
Accepted |
Accepted |
European Commission’s adequacy decision |
Belarus |
Not accepted |
||
Belgium |
Accepted |
Accepted |
EEA (EU) |
Bosnia and Herzegovina |
Not accepted |
||
Bulgaria |
Accepted |
Accepted |
EEA (EU) |
Burundi |
Not accepted |
||
Canada |
Accepted |
Accepted |
IDTA may be required |
Central African Republic |
Not accepted |
||
Congo, Democratic Republic of |
Not accepted |
||
Crimea, Autonomous Republic of (Crimea Region of Ukraine) |
Not accepted |
||
Croatia |
Accepted |
Accepted |
EEA (EU) |
Cuba |
Not accepted |
||
Cyprus |
Accepted |
Accepted |
EEA (EU) |
Czech Republic |
Accepted |
Accepted |
EEA (EU) |
Denmark |
Accepted |
Accepted |
EEA (EU) |
Estonia |
Accepted |
Accepted |
EEA (EU) |
EU or EEA institutions, bodies, offices, or agencies |
Accepted |
Accepted |
EEA |
Faroe Islands |
Accepted |
Accepted |
European Commission’s adequacy decision |
Finland |
Accepted |
Accepted |
EEA (EU) |
France |
Accepted |
Accepted |
EEA (EU) |
Germany |
Accepted |
Accepted |
EEA (EU) |
Gibraltar |
Accepted |
Accepted |
UK adequacy decision |
Greece |
Accepted |
Accepted |
EEA |
Guernsey |
Accepted |
Accepted |
European Commission’s adequacy decision |
Guinea, Republic of |
Not accepted |
||
Guinea-Bissau, Republic of |
Not accepted |
||
Haiti |
Not accepted |
||
Hungary |
Accepted |
Accepted |
EEA (EU) |
Iceland |
Accepted |
Accepted |
EEA (EFTA) |
Iran |
Not accepted |
||
Iraq |
Not accepted |
||
Ireland |
Accepted |
Accepted |
EEA (EU) |
Isle of Man |
Accepted |
Accepted |
European Commission’s adequacy decision |
Israel |
Accepted |
Accepted |
European Commission’s adequacy decision |
Italy |
Accepted |
Accepted |
EEA (EU) |
Japan |
Accepted |
Accepted |
IDTA may be required |
Jersey |
Accepted |
Accepted |
European Commission’s adequacy decision |
Kenya |
Accepted |
Requires review |
None – IDTA required |
Korea, Democratic People’s Republic of (North Korea) |
Not accepted |
||
Korea, Republic of (South Korea) |
Accepted |
Accepted |
UK adequacy decision |
Latvia |
Accepted |
Accepted |
EEA (EU) |
Lebanon |
Not accepted |
||
Libya |
Not accepted |
||
Liechtenstein |
Accepted |
Accepted |
EEA (EFTA) |
Lithuania |
Accepted |
Accepted |
EEA (EU) |
Luxembourg |
Accepted |
Accepted |
EEA (EU) |
Mali |
Not accepted |
||
Malta |
Accepted |
Accepted |
EEA (EU) |
Moldova |
Not accepted |
||
Myanmar, Republic of the Union of |
Not accepted |
||
Netherlands |
Accepted |
Accepted |
EEA (EU) |
New Zealand |
Accepted |
Accepted |
European Commission’s adequacy decision |
Nicaragua |
Not accepted |
||
Norway |
Accepted |
Accepted |
EEA (EFTA) |
Poland |
Accepted |
Accepted |
EEA (EU) |
Portugal |
Accepted |
Accepted |
EEA (EU) |
Romania |
Accepted |
Accepted |
EEA (EU) |
Russia |
Not accepted |
||
Slovakia |
Accepted |
Accepted |
EEA (EU) |
Slovenia |
Accepted |
Accepted |
EEA (EU) |
Somalia |
Not accepted |
||
South Sudan |
Not accepted |
||
Spain |
Accepted |
Accepted |
EEA (EU) |
Sudan |
Not accepted |
||
Sweden |
Accepted |
Accepted |
EEA (EU) |
Switzerland |
Accepted |
Accepted |
European Commission’s adequacy decision |
Syria |
Not accepted |
||
Ukraine |
Not accepted |
||
Uruguay |
Accepted |
Accepted |
European Commission’s adequacy decision |
United States of America |
Accepted |
Accepted |
IDTA may be required |
Venezuela |
Not accepted |
||
Yemen |
Not accepted |
||
Zimbabwe |
Not accepted |
Updated: 03 February 2025