NHS data centres to receive increased protection from IT blackouts
secure digital

The government has classed UK data centres – the buildings which store much of the data generated in the UK – as ‘Critical National Infrastructure’ (CNI).

It means the data housed and processed in UK data centres - from photos taken on smartphones to patients’ NHS records and sensitive financial investment information - is less likely to be compromised during outages, cyber attacks, and adverse weather events.

Putting data centres on an equal footing as water, energy and emergency services systems will mean the sector can now expect greater government support in recovering from and anticipating critical incidents, giving the industry greater reassurance when setting up business in UK and helping generate economic growth.

Technology secretary Peter Kyle said: "Data centres are the engines of modern life, they power the digital economy and keep our most personal information safe.

"Bringing data centres into the Critical National Infrastructure regime will allow better coordination and cooperation with the government against cyber criminals and unexpected events.

"The huge £3.75 billion private investment announced today in Hertfordshire is a vote of confidence in those plans and a clear example of my determination to ensure technological advancements are helping to grow our economy and create wealth across the country."

The Crowd Strike incident earlier this summer, affecting 60 per cent of GP practices with disruption to software holding patients’ appointment details, prescriptions, and health records showed the catastrophic impact of IT and cyber threats on people’s lives.

CNI designation will, for example, see the setting up of a dedicated CNI data infrastructure team of senior government officials who will monitor and anticipate potential threats, provide prioritised access to security agencies including the National Cyber Security Centre, and coordinate access to emergency services should an incident occur.

It comes as the government welcomes a proposed £3.75 billion investment in Europe’s largest data centre, as plans have been submitted to Hertsmere Borough Council for construction in Hertfordshire by data company DC01UK which will directly create over 700 local jobs and support 13,740 data and tech jobs across the country.

CNI status will also deter cyber criminals from targeting data centres that may house vital health and financial data, minimising disruption to people’s lives, the NHS and the economy.

In the event of an attack on a data centre hosting critical NHS patients’ data, for example, the government would intervene to ensure contingencies are in place to mitigate the risk of damage or to essential services, including on patients’ appointments or operations.

The new protections will also boost business confidence in investing in data centres in the country, an industry which already generates an estimated £4.6 billion in revenues a year.