/
Email

Email

Owned by Jonathan Telfer (Unlicensed)
Last updated: 04-02-2025 by Victoria BusseyVersion comment
2 min read

ID

S38

Version

1.0.0

Type

Standard

Status

Effective

Effective Date

Contracting Vehicle(s)

 

Introduction

Health and care systems that send and receive emails need to ensure their email service meets the secure email Standard as detailed below in the requirements section. Example secure email services are:

  • NHSmail - On Premise Exchange

  • Locally operated Solutions based variously on Microsoft Office 365 or Exchange

Where a system needs to systematically send a large volume of emails then application accounts are available via NHSmail.

Requirements

ID

Requirement

Level

E01

If an organisation uses or provides an email capability within a health and care system, the email part of the selected system must comply with the DCB 1596 Standard, covering secure email configuration.

Further guidance on the secure email Standard is available via The Authority's website.

MUST

E02

  • Organisations using NHSmail have met/meet the email system section of the accreditation requirements.

  • NHSmail have on behalf of organisations that use the service completed the organisation requirements of the Standard

MUST

E03

  • Organisations using Office 365 have met/meet the email system section of the accreditation requirements.

  • Organisations using Office 365 need to complete the organisation section of the accreditation requirements

MUST

The Implementation and Business Change function within The Authority’s run engagement sessions covering the secure email requirements via regular online WebEx sessions. To learn more please email feedback@nhs.net

Compliance, Assurance & Testing

NHSmail publishes out standard Microsoft Exchange and Skype for Business APIs. Development against these APIs should follow the guidance contained on the Developer Network and adhere to the ‘Acceptable use’ policy. There is no formal compliance process for NHSmail API development other than that described within the Developer Network guidance and caveats. It should be noted that no test environment is provisioned for external developers wishing to use the published NHSmail APIs.

Dependencies

There may be dependencies for implementing this Standard, however, there are no Interoperability Standards within the Capabilities and Standards model that are dependents.

Roadmap

Items on the Roadmap which impact or relate to this Standard