NHS and healthcare data on UK Sovereign Cloud: A compliance primer
Healthcare data sits at the top of the sensitivity hierarchy. Patient records are personal data under UK GDPR. Medical records are separately regulated under sector-specific frameworks. Clinical research data may be subject to research-specific rules. Genomics data carries residency implications that go beyond standard personal data protections. NHS data specifically is governed by frameworks that add UK public sector expectations on top of the healthcare-specific ones.