National Imaging Registry privacy notice

To use the National Imaging Registry (NIR), your organisation should have a publicly available privacy notice. It is recommended that the content of your privacy notice follows the guidance provided by the Information Commissioner's Office on what should be included.

Please ensure that you update your privacy notice to include reference to the NIR. You may wish to add the following suggested text to your privacy notice, or you may draft your own if you prefer:

“NHS England has been directed by the government to establish and operate the National Imaging Registry (NIR). This service provides a secure environment that supports on-demand retrieval of imaging datasets from numerous Controller source systems including [insert organisation name]. NIR supports the timely and efficient discovery of patient history which is fundamental for well-informed diagnosis and clinical safety.

How it works: Authorised systems acting on behalf of healthcare professionals initiate queries to discover imaging records held by other healthcare organisations (both public and private). These queries are routed through the NIR, which facilitates federated discovery and retrieval of records nationally across the NIR.

Each individual organisation, including [insert organisation name], remains the Controller of its own data and images. The NIR does not store clinical content centrally. NIR enables the querying of imaging data and the retrieval of records directly from the originating provider for the purposes of direct care provision by the querying organisation.”