Health Data Research Service: how the UK plans to enable secure, large-scale health data research

The UK’s £600 million Health Data Research Service (HDRS) has been established to address long-standing fragmentation in access to health and care data by creating a secure, trusted national service for research. A newly published blueprint sets out how the service should be designed and governed to deliver patient benefit, support the NHS, and strengthen the UK’s position in life sciences research and innovation. 

Announced as a flagship commitment in the UK Government’s Life Sciences Sector Plan, HDRS reflects a growing view that health data is critical national infrastructure. The UK holds some of the world’s most valuable health datasets, but they remain difficult to use at scale. Data are dispersed across organizations, systems, and jurisdictions, with inconsistent technical standards and approval processes. For researchers, this has meant slow access, duplicated governance steps, and persistent barriers to UK-wide and longitudinal studies. Backed by £500 million in public funding and £100 million from Wellcome, HDRS aims to address these challenges by creating a secure, AI-ready platform that links genomic, diagnostic, and clinical data at population scale. The program is intended to strengthen the UK’s attractiveness for clinical trials and AI-driven health innovation. 

Earlier national initiatives, including Care.data and the General Practice Data for Planning and Research (GPDPR) programme, struggled to secure sustained public and professional trust, leaving a legacy of caution around large-scale data programs. HDRS has been established in response to these lessons, with an explicit focus on governance, transparency, and demonstrable public value rather than simply creating another data platform. 

Purpose and operating model of HDRS 

HDRS is designed as a national access service for approved health data research, serving academic, NHS, and commercial users. Its core purpose is to simplify how researchers request and use health and care data, while maintaining rigorous standards for privacy, security, and ethical oversight. The service will be based at the Wellcome Genome Campus in Cambridgeshire and is intended to operate across all four UK nations, with Scotland, Wales, and Northern Ireland having agreed in principle to the UK-wide ambition. 

In practice, HDRS is intended to operate as a coordination and access layer rather than a central data repository. It will not replace existing data custodians or trusted research environments, but instead provide a consistent entry point for approved researchers to discover datasets, request access, and analyze data within secure settings. The government has positioned HDRS as a single access point to national-scale health data, intended to reduce duplication, administrative burden, and variation in access processes. As HDRS Chief Executive Officer Melanie Ivarsson explained at the time of her appointment:  

“HDRS brings access to data for medical research into one secure and easy-to-use location, meaning a researcher does not have to navigate different systems or make multiple applications for information for the same project.” 

By bringing together processes that are currently distributed across multiple organizations, including dataset discovery, access approvals, contractual arrangements, and oversight of permitted data use, the service aims to improve the timeliness and predictability of research access. This is expected to support faster discovery science, more efficient clinical trials, and stronger generation of real-world evidence (RWE). Dr Ivarsson has also emphasized that improved access must be matched by safeguards, stating that “patient confidentiality will continue to be held to a gold standard,” supported by anonymization and secure analysis environments. 

HDRS blueprint publication and intent 

The independent report ‘Building the future of UK health data: a blueprint for the Health Data Research Service’, authored by Dr Saira Ghafur, Lord O’Shaughnessy, and Professor the Lord Darzi with contributions from a wider multidisciplinary team, was published to inform how HDRS should be implemented in practice. 

Rather than restating policy intent, the blueprint focuses on operational design, governance, and delivery risk. It describes HDRS as a “once-in-a-generation opportunity” to integrate and scale the UK’s health data infrastructure, while acknowledging that England’s health-data landscape has been marked by “fragmentation and missed opportunities.” Without careful design, the authors warn, HDRS could repeat the shortcomings of earlier initiatives that struggled to maintain public trust or deliver sustained value. 

To avoid this, the blueprint sets out three linked objectives to guide delivery:  

1. Streamlining data access and governance while preserving safeguards 
2. Enabling effective collaboration across researchers, the NHS, industry, and policymakers 
3. Supporting innovation without compromising privacy, security, or ethical standards

A central recommendation is that HDRS be built around real-world use cases, with early and explicit prioritization of user needs across academia, industry, clinical practice, public health, and policy. The authors argue that clarity on data depth, analytical capabilities, access models, governance, and pricing will be essential to adoption and long-term sustainability. 

Public trust is treated not as a communications issue but as a core design requirement. The authors state that: 

“Public trust between the NHS and citizens forms the foundation of a successful health-data strategy,” 

warning that failure to demonstrate clear public benefit will predictably undermine support. To address this, the blueprint calls for patient and public involvement to be embedded throughout HDRS development and operation, including ring-fenced engagement budgets, federated engagement models linking local and national teams, and governance structures that include patient and advocacy group representation. 

Service architecture, integration strategy, and primary care data 

The blueprint highlights a critical strategic choice for HDRS: whether to operate mainly as a marketplace directing users to existing data services, or to evolve into a more integrated platform providing access to unified datasets. While an initial service-wrapper approach may be needed to deliver early capability, the authors argue that HDRS should set out a clear roadmap for deeper integration where demand and feasibility justify it. This decision, they note, “will determine user experience, governance models, pricing structures, and technical infrastructure,” with implications for the service’s long-term sustainability. 

The report is explicit that HDRS should not seek to centralize all data. Instead, it states that:  

“A single monolithic data stack should not be pursued,”  

recommending a phased, federated approach built on shared standards and application programming interfaces. Under this approach, data would remain under the control of existing custodians but be accessed through interoperable services and secure environments. This model is presented as technically realistic, particularly for large-scale genomics and imaging data, and important for maintaining trust while avoiding disruption to systems that already work. Given variation in the maturity of secure data environments, the blueprint calls for selectively scaling effective models rather than pursuing uniform consolidation. 

Primary care data are identified as essential to HDRS’s success but also among its most challenging components. As the authors note:  

“Primary care data represents the most comprehensive longitudinal health record for the UK,”  

supporting population health management, prevention, and early diagnosis. Yet this data remains underused for national-scale research. Legal liability and governance concerns are highlighted as key barriers, particularly GP uncertainty around data-controller responsibilities and downstream risk. To address this, the blueprint calls for clearer legal frameworks and risk allocation, citing international models such as Finland’s Findata as potential reference points. 

Sustained engagement from primary care, the report argues, will also depend on fair compensation and demonstrable reciprocal value. This includes providing practices with tools, feedback, and insights that directly support patient care, rather than treating data contribution as a one-way obligation. 

Sustainability, value, and accountability 

The blueprint frames sustainability as a core requirement rather than an afterthought. HDRS is expected to demonstrate value across health outcomes, economic impact, and financial performance. As the authors note:  

“Success must involve the creation of substantial value for patients, clinicians, taxpayers and the economy.”  

While prioritizing patient benefit, the report recommends tiered licensing fees for commercial users, subsidized access for academic research, and transparent reinvestment of revenues into NHS infrastructure and public-benefit research. 

Measurement and accountability are presented as essential to legitimacy. The authors call for baseline metrics at inception, phased milestones aligned with implementation stages, and continuous evaluation covering research output, system performance, economic impact, public trust, and, ultimately, health outcomes. 

Taken together, HDRS and its accompanying blueprint position the service as a system-level intervention rather than a standalone technical platform. The blueprint makes clear that success will depend not on funding scale or policy ambition alone, but on HDRS’s ability to deliver secure, consistent access to health data that produces measurable benefit for patients and the NHS, while sustaining public confidence and enabling responsible innovation at national scale. As the authors conclude:  

“When done responsibly, health-data integration can deliver a triple dividend: improving care for patients, strengthening the NHS and driving sustainable economic growth across the UK.”