Skip to main content

Identity and Access Management User Research Panel

Join our panel to help us improve how NHS staff log in, manage access to systems, and use smartcards and other authentication and identity services.

About the panel

Thank you for your interest in joining the Identity and Access Management (IAM) user research panel.

The panel is run by the IAM user research team in NHS England. The panel is a collection of NHS staff (HR, IT, RA and related roles) who agree to be contacted for occasional research by the various project teams within IAM (CIS2, DSP, CIM and SSI).

By joining, you’ll help us improve how NHS staff log in, manage access to systems, and use smartcards as well as other authenticators and identity services.


Joining the panel

  • Joining is voluntary
  • You may be invited to take part every couple of months - we’ll make sure you’re not asked too often
  • Most research happens on weekdays, between 9am and 5pm, and we’ll always try to give you at least two weeks’ notice
  • You can say yes or no to any invitation - there’s no obligation to take part

To join the panel, complete this sign-up form.


Leaving the panel

You can leave at any time by completing the unsubscribe form.


What taking part in research looks like

We’re interested in hearing about your lived experiences in the work you do so that we can design and build services that work for you and people like you. This includes learning about how things are done, what works, what doesn’t work, and what your frustrations and challenges are.

Taking part in research might involve:

  • a conversation with a user researcher via Microsoft Teams
  • hosting a site visit for a researcher
  • completing an online survey
  • testing new or updated designs for NHS services
  • joining a small group discussion

What you can expect from us

  • Clear information about each study before you decide to take part
  • Respect for your time - we’ll keep sessions to the agreed length
  • A safe and supportive environment - you can skip questions, take breaks, or stop at any time
  • Updates on what we’ve learned and how your input has shaped services
  • Sessions that take into consideration any access needs or disabilities you may have

How we use your data

For the panel

  • We follow the UK GDPR and the Data Protection Act 2018
  • We collect your contact details and some information about your role so we can invite a diverse mix of people
  • We will keep your personal data on the panel for 2 years, then check if you want to continue (unless you unsubscribe from the panel)
  • Your taking part in the session will not be shared with anyone outside of the IAM user research team

We also ask for some optional demographic information (for example, your ethnicity, disability or health condition, age range, and gender identity).

This helps us make sure that our research includes a wide range of NHS staff and that we can invite people whose lived experiences and accessibility needs reflect the diversity of the workforce.

This information is only visible to the IAM user research team, used solely for selecting and inviting participants, and will never be shared in identifiable form.

For the research sessions and findings

We follow the UK GDPR and the Data Protection Act 2018.

In some sessions, we may ask to record video, audio, or your screen to help us understand how you use systems, take notes or share it with the wider project team. This will always be optional, and we will ask for your consent before recording and sharing those recordings.

Anything that could identify you (like your name, email, or recordings) will be stored securely on Sharepoint. Access will be restricted to the IAM user research team.

When we write reports or presentations, your input will be anonymised (e.g. "Participant 3, RA Manager").


Your rights

  • You can choose whether to take part or not - there's no pressure either way.
  • You can change your mind and withdraw at any time - before, during, or after a session.
  • If your data has already been anonymised, we may not be able to remove it from reports.
  • Your information will always be stored securely.
User Research Panel privacy notice

Who we are 

The Identity and Access Management (IAM) team at NHS England runs the IAM User Research Panel.

The panel is made up of NHS staff volunteers who agree to be contacted occasionally for research. This helps us improve how NHS staff log in, manage access to systems, and use smartcards and other authenticators and identity services. 

What information we collect 

When you sign up, we collect:

  • name, NHS email address, and (optionally) phone number, so we can identify and contact you

  • role, role activities, organisation, and NHS region, so we can ensure representation across staff groups and locations

  • optional demographic information, such as ethnicity and disability or health condition, to help us identify and invite a diverse mix of participants and to monitor diversity and inclusion

During some research sessions, you may be asked to share your experiences and opinions. If you consent, we may record video, audio, or your screen. 

Why we collect this information 

We collect this information to: 

  • invite you to take part in user research activities 

  • ensure the panel represents a wide range of NHS staff roles and experiences 

  • monitor diversity and inclusivity in our research 

  • use your feedback to improve NHS services related to identity and access 

How your information will be used 

  • Your identifiable information will only be used by the IAM User Research team to manage the panel and invite you to take part in research. 

  • We will not share your identifiable information outside NHS England. 

  • Research outputs (notes, reports, presentations) will be anonymised so you cannot be identified (e.g. “Participant 3, RA Manager”). 

  • Optional recordings are securely stored and accessed only by the research team. 

How long we keep your information 

  • Your panel data will be kept for up to 2 years. 

  • After this time, we will contact you to ask if you wish to re-consent. If you do not, your data will be securely deleted. 

  • If you withdraw before then, your data will be deleted promptly. 

  • Anonymised research notes or reports may be kept beyond this, but you will not be identifiable. 

How we keep your information secure 

  • Data is stored in NHS England–approved systems (Microsoft 365, SharePoint, Teams, Qualtrics). 

  • Access is restricted to IAM User Researchers. 

  • All researchers complete mandatory Data Security and Protection training. 

Our lawful basis for processing your information 

  • Personal data: Article 6(1)(e), UK GDPR – processing is necessary for the performance of a task carried out in the public interest (improving NHS services).

  • Special category data (optional ethnicity, disability/health information): Article 9(2)(g), UK GDPR – substantial public interest; Data Protection Act 2018 Schedule 1 Part 2 Paragraph 8 (equality of opportunity or treatment).

Your rights

You have the right to: 

  • be informed about how your data is used 

  • request access to your data 

  • ask for corrections to your data 

  • ask us to stop using your data and delete it 

  • restrict or object to how your data is used 

Some rights may be limited once data has been anonymised and included in reports. 

Contact

If you have any questions about the panel or how your data will be used, please contact the team.

If you have any questions, concerns, or complaints that you’d like to raise outside of the IAM team, please email [email protected]

Contact the NHS England Data Protection Officer at [email protected]

You also have the right to complain to the Information Commissioner’s Office (ICO).


Accessibility and adjustments

We want everyone to be able to take part easily and comfortably. Let us know if you need any support or adjustments.

Examples include:

  • sending questions in advance
  • adjusting session times
  • providing captions, transcripts, or alternative formats
  • running sessions in your preferred format (phone, video or text)

Safety

Your privacy and safety are important to us. In rare cases, if we believe you or someone else may be at risk of serious harm (for example, from abuse or self harm), we may need to share information with the right people to keep everyone safe. If this happens, we’ll do our best to let you know.


Contact us

If you have any questions about the panel or how your data will be used, please contact:

If you have any questions, concerns or complaints that you’d like to raise outside of the IAM team, please email [email protected]

Last edited: 5 March 2026 12:16 pm