Identity Verification and Authentication Std for Health / Care Digital, Data, Analytics and Tech Use
This information standard provides the basis to ensure that all approved digital, data, analytics and technologies are secure and have a controlled standard access protocol.
Contents
- Documentation
About this standard
- Publisher
- NHS England
- Also known as
- This standard was previously called DCB3051: Identity Verification and Authentication Standard for Digital Health and Care Services
- Reference code
- DAPB3051 Amd 59/2025
- Publication date
- 23 December 2025
- Publication version
- 3.1.0
- Status
- Active
Show definitions of statuses
Active. Active standards are stable, maintained and have been approved, assured or endorsed for use by qualified bodies.
Deprecated Deprecated standards are available for use and are maintained, but are being phased out, so new functionality will not be added.
Retired standards Retired standards are not being maintained or supported and should not be used.
- Standard type
- Information standards
Show definitions of standard types
Collections. A Collection is a systematic gathering of a specified selection of data or information for a particular stated purpose from existing records held within health and care systems and electronic devices.
Extractions. An extraction is a type of collection that is pulled from an operational system by the data controller and transmitted to the receiver without additional processing or transcription by the sender.
Information standards. Information standards are agreed ways of doing something, written down as a set of precise criteria so they can be used as rules, guidelines, or definitions.
Technical Standards and specifications. Technical standards and specifications specify how to make information available technically including how the data is structured and transported.
- Contact point
england.nhslogin@nhs.net
Using this standard
- Associated medias
- Applies to
- Any NHS or non-NHS provider, organisation, company, or authority that provides individuals with access to digital, data,
- analytics and technologies for health or care services.
- Impacts on
- Systems suppliers providing systems to the above providers; suppliers should work with their customers to determine necessary changes.
- Effective from
- 23 December 2025
Topics and care settings
- Topic
- Access to records
- Authentication
- Demographics
- Information codes of practice
- Information governance
- Patient communication
- Security, Safety and Privacy
- Care setting
- Community health
- Hospital
- Maternity
- Mental health
- Pharmacy
- Social care
- Urgent and Emergency Care
Review Information
- Scope
- Health Services; NHS Services; Adult Social Care
- Approval date
- 2 December 2025
- Technical Committee
Data Assurance Board (DAB)
Legal basis
- Link to Information Standards Notice (ISN)
- View the information standards notice
Information Standards Notices (ISNs) are published to announce new or changes to information standards published under section 250 of the Health and Social Care Act 2012
- Legal authority
Section 250 of the Health and Social Care Act 2012
This information standard, published under section 250 of the Health and Social Care Act 2012, has been amended, and persons subject to this information standard must continue to have due regard to the information standard where it is relevant.
More information
This information standard provides the basis to ensure that all approved digital, data, analytics and technologies are secure and have a controlled standard access protocol. This means all services and apps, which offer patients, service users, those involved in your direct care, commissioning and/or analysis of these services, a more secure, auditable access, while reducing the burden of multiple logins.
Page last updated: 04 February 2026