Resource Hub

ABHI Member Spotlight: 8fold Governance on Navigating New NHS Digital Compliance Requirements

Topic : Regulation, Digital Health Type : Briefing

Drawing on insights from ABHI member 8fold Governance, this article highlights three key developments that suppliers should be aware of.

Recent guidance on the NHS Cyber Security Charter outlines a clear shift towards stronger, evidence-based assurance. Suppliers will need to demonstrate robust cyber resilience, with increased scrutiny on how risks are managed across systems and supply chains. You can read more in 8fold Governance’s overview of the cyber security requirements.

Updates to the Digital Technology Assessment Criteria (DTAC V2) aim to streamline the process while maintaining rigour. Changes include a reduction in duplication, clearer scope, and a greater focus on demonstrating how risks are actively managed. Further detail is available in 8fold Governance’s summary of what has changed in DTAC.

Alongside this, the Data (Use and Access) Act introduces legislative reforms designed to enable responsible data use while maintaining high standards of privacy and governance. The changes will be particularly relevant for companies developing data-driven technologies. 8fold Governance provides a helpful breakdown of the key provisions and implications.