The health and care data landscape in England is undergoing profound transformation.
As outlined by the National Data Guardian (NDG), National Data Guardian 2024-2025 report – GOV.UK the core programme of work will continue through to March 2027, aligned closely with its strategic objectives. This period will not only be defined by policy developments but also by a critical transition, as Dr Nicola Byrne’s tenure as National Data Guardian concludes at the end of March 2027. Dr Nicola Byrne reappointed as National Data Guardian – GOV.UK
With structural reform on the horizon – including the planned integration of NHS England into the Department of Health and Social Care (DHSC) by April 2027 Joint executive team to be set up across DHSC and NHS England – GOV.UK and the delivery of the NHS 10 Year Health Plan – the role of robust information governance has never been more vital. At the heart of this sits the Caldicott Principles, and the professionals responsible for upholding them: Caldicott Guardians.
In this evolving environment, comprehensive Caldicott Guardian training and managed services are essential to ensure clarity, confidence, and compliance across health and care organisations.
A Changing Landscape, Underpinned by Data
The NHS 10 Year Health Plan outlines their long-term vision for a health and care system which is increasingly underpinned by data to improve outcomes, efficiency, and population health. However, innovation must be balanced with public trust, transparency, and strong safeguards. The National Data Guardian’s report highlights several “big ticket” areas where sustained focus will be maintained, including:
Opt-Out Reform
As reforms to the national data opt-out continue to develop, the NDG will advise on the importance of clarity, coherence, and timing, ensuring that any changes align with wider system developments. For Caldicott Guardians, this reinforces the need for up-to-date knowledge and practical guidance to help organisations interpret and implement changes consistently.
Health Data Research Service (HDRS)
The NDG will continue to advocate for simpler access to data for projects delivering public benefit, alongside robust protections and meaningful patient choice. Clear communication about how data is accessed, used, and safeguarded will be critical—an area where well-trained Caldicott Guardians play a central role. NHS England » Health Data Research Service – unlocking the potential of health and care data to transform lives
NHS Single Patient Record
The ambition for a single patient record across the NHS brings opportunities for joined-up care, but also significant governance challenges. The NDG will champion clarity, transparency, and inclusivity, ensuring that clinician and patient voices shape a system that delivers benefits without compromising equity or safeguards. NHS England » The Single Patient Record
NHS Federated Data Platform (FDP)
As the Federated Data Platform continues to be developed and implemented, the focus remains on consistency, clarity, and appropriate safeguards across the system. Caldicott Guardians will need to understand how FDP affects data flows, responsibilities, and accountability within their organisations. NHS England » NHS Federated Data Platform
COPI Regulations Reform
Ongoing discussions with DHSC on modernising the Health Service (Control of Patient Information) Regulations 2002 (COPI) will focus on enabling timely and proportionate data use, while maintaining strong protections. This is a complex and high-risk area where expert governance oversight is essential. C1660-health-service-copi-regulations-2002-notice-exit-v2.pdf
Public and Staff Engagement
Building on insights from the report “Can communications create reasonable expectations about uses of health and care data?”, the NDG will support public and staff engagement to shape next steps. There is also exploration of a staff-facing communications campaign with the UK Caldicott Guardian Council to promote good practice in maintaining confidentiality.
The Growing Responsibility of Caldicott Guardians
Across all these priority areas, Caldicott Guardians are central to ensuring that data is used lawfully, ethically, and in ways that maintain public trust. However, the scale and pace of change mean that many organisations face challenges such as:
- Keeping Caldicott Guardians and deputies up to date with evolving policy and regulation for those new to post and for those that are experienced and have been in post a while.
- Ensuring consistent interpretation of national guidance
- Managing increased scrutiny, risk, and complexity around data sharing
- Supporting meaningful engagement with patients, staff, and partners
This is where specialist Caldicott Guardian training and managed services add real value.
Why Invest in Caldicott Guardian Training and Managed Services?
- Confidence Through Competence
High-quality training ensures Caldicott Guardians understand not only the principles, but how to apply them in real-world scenarios involving FDP, HDRS, opt-outs, and COPI. - Consistency and Resilience
Managed services provide continuity, expert support, and assurance—particularly valuable during periods of organisational change, staff turnover, or increased regulatory pressure. - Proactive Risk Management
With expert oversight, organisations can identify and address information governance risks early, rather than reacting to incidents or compliance failures. - Supporting Public Trust
Well-supported Caldicott Guardians are better equipped to champion transparency, explain data use clearly, and ensure that patient confidentiality remains at the forefront of innovation.
Preparing for 2027 and Beyond
As the National Data Guardian’s programme progresses towards 2027, health and care organisations must be ready to operate confidently in a data-driven system while upholding the highest standards of confidentiality and trust.
Investing in Caldicott Guardian training and managed services is no longer optional—it is a strategic necessity. By strengthening governance capability now, organisations can navigate reform, support innovation, and maintain public confidence in how health and care data is used.
If your organisation is preparing for these changes, now is the time to ensure your Caldicott Guardian arrangements are strong, well-supported, and future-ready. BLS Stay Compliant has trained thousands of Caldicott Guardians over the years and continues to support and complement their evolving role through advanced training and managed service solutions, tailored to the specific needs of each organisation.
