Digital Economy Act Accredited Processing Environments
Under the Research framework in the Digital Economy Act 2017, before data can be shared for research purposes, it must be processed by an accredited processor so that the data is ‘de-identified’.
When the data has been de-identified it can be made available to an accredited researcher in a secure environment, and the processor will ensure that any data (or any analysis based on the data) retained by the researcher, or are published, are ‘disclosure controlled’ to minimise the risk of data subjects being re-identified or other misuses of the data.
As the statutory accrediting body, the UK Statistics Authority has established a Research Accreditation Panel to oversee the independent accreditation of processors, researchers and research projects.
The overall accreditation approach for potential data processors, as well as those for researchers and research projects, is set out in the statutory Research Code of Practice and Accreditation Criteria. This sets out that a processor must:
i. Meet appropriate cross-government standards for the secure holding of sensitive data (personal information);
ii. Make use of appropriate technical infrastructure;
iii. Agree to publish and maintain appropriate data policies;
iv. Have appropriate skills and experience; and
v. The processor must agree to its inclusion on a public register
Apply for Digital Economy Act Processor Accreditation
The UK Statistics Authority has developed an accreditation process which assesses potential processors against the security controls required for the security standard of ISO 27001. In addition, potential processors will be routinely assessed against data capability controls and will be expected to demonstrate a level of maturity based on practices they have implemented. Potential data processors will need to complete evidence-based compliance assessments to ensure they can demonstrate sufficient security and technical controls, data capability controls, their staff have the appropriate skills and experience to be accredited as a data processor under the Digital Economy Act, and they are willing to be included on a public register. These assessments are reviewed by the relevant UK Statistics Authority teams who will also undertake a site visit. For further information or to apply to become an accredited processor, please email Research.Accreditation@statistics.gov.uk.
In September 2022, the Research Accreditation Panel approved a revised framework for the data capability accreditation of data processors under the Digital Economy Act 2017. As a result of this change, guidance and application forms are separated for data capability and security. We suggest that the DEA processor guidance is referred to first to offer an overview of accreditation process. The data capability guidance will assist you in navigating the new data capability frameworks which set out the expectations of how each data capability control should be applied, evidenced and assessed using the relevant documents and forms.
Documents for Download
Digital Economy Act Processor Accreditation Guidance (PDF, 306KB]
Data Security accreditation
Digital Economy Act Processor Accreditation Data Security Application Form (xlsx, 79KB)
Data Capability accreditation
Digital Economy Act Processor Accreditation Data Capability Guidance (PDF, 629 KB)
Digital Economy Act Processor Accreditation Data Capability Application Form (xlsx, 114KB)
Digital Economy Act Processor Accreditation Data Capability Evidence Pack Guidance (PDF, 413KB)
Digital Economy Act Processor Accreditation Data Capability Evidence Folder structure (zip, 23KB)
List of Digital Economy Act Accredited Processing Environments
Digital Economy Act (DEA) 2017 accredited processors are accredited for the functions of:
- linking, matching, curating and de-identifying of data (preparation); and/or
- storing and provision of access to de-identified data (provision).
If your organisation is interested in becoming accredited under the Digital Economy Act 2017, please email Research.Accreditation@statistics.gov.uk.
Digital Health and Care Wales
Processor: Digital Health and Care Wales (DHCW)
Accredited for: Preparation of Data
Accredited from: 9 February 2022
Accreditation valid until: 28 February 2027
Outcome of latest review: Capable for Security and Capable for Capability (2025)
Next review due: annual review in September 2026
Website: Digital Health and Care Wales
Edinburgh Parallel Computing Centre
Processor: Edinburgh Parallel Computing Centre (EPCC)
Accredited for: Preparation of Data
Accredited from: 16 March 2020
Accreditation valid until: 31 December 2026 (extended from 31 March 2025, approved by the Research Accreditation Panel)
Outcome of latest review: Capable for Security and Capable for Capability (2025)
Next review due: full re-accreditation review in December 2026
Website: Edinburgh Parallel Computing Centre
Partnerships: EPCC works in partnership with the electronic Data Research and Innovation Service (eDRIS) and the National Records of Scotland (NRS) in the delivery of the Scottish National Safe Haven.
Electronic Data Research and Innovation Service
Processor: Electronic Data Research and Innovation Service (eDRIS)
Accredited for: Provision of Data
Accredited from: 7 December 2020
Accreditation valid until: 31 December 2026 (extended from 31 December 2025, approved by the Research Accreditation Panel
Outcome of latest review: Capable for Security and Maturing for Capability (2025)
Next review due: full re-accreditation review in December 2026
Website: Electronic Data Research and Innovation Service (eDRIS)
Partnerships: eDRIS works in partnership with the Edinburgh Parallel Computing Centre (EPCC) and the National Records of Scotland (NRS) in the delivery of the Scottish National Safe Haven.
Health Informatics Centre
Processor: Health Informatics Centre (HIC)
Accredited for: Preparation and Provision of Data
Accredited from: 30 March 2026
Accreditation valid until: 31 March 2031
Outcome of latest review: Capable for Security and Capable for Capability (2026)
Next review due: annual review in March 2027
Website: Health Informatics Centre (HIC) | University of Dundee, UK
Integrated Data Service
Processor: Integrated Data Service (IDS)
Accredited for: Provision of Data
Accredited from: 14 September 2023
Accreditation valid until: 30 September 2028
Outcome of latest review: Capable for Security and Capable for Capability (2025)
Next review due: annual review in September 2026
Website: Integrated Data Service
National Records of Scotland
Processor: National Records of Scotland (NRS)
Accredited for: Preparation of Data
Accredited from: 28 October 2021
Accreditation valid until: 31 December 2026
Outcome of latest review: Capable for Security (2025) and Maturing for Capability (2024)
Next review due: full re-accreditation review in December 2026
Website: NRS Indexing – National Records of Scotland (NRS)
Partnerships: NRS works in partnership with the Edinburgh Parallel Computing Centre (EPCC) and the electronic Data Research and Innovation Service (eDRIS) in the delivery of the Scottish National Safe Haven.
Northern Ireland Statistics and Research Agency Census Office
Processor: Northern Ireland Statistics and Research Agency – Census Office (NISRA CENSUS)
Accredited for: Preparation of Data
First Accredited: 16 March 2020
Latest Accreditation from: 25 June 2025
Accreditation valid until: 28 June 2030
Outcome of latest review (full reaccreditation): Capable for Security and Capable for Capability (2025)
Next review due: annual review in June 2027
Website: NISRA Trusted Third Party | Northern Ireland Statistics and Research Agency
Northern Ireland Statistics and Research Agency Research Support Unit
Processor: Northern Ireland Statistics and Research Agency – Research Support Unit (NISRA RSU)
Accredited for: Preparation and Provision of data
First Accredited: 24 May 2019
Latest Accreditation from: 28 June 2024
Accreditation valid until: 30 June 2029.
Outcome of latest review: Capable for Security and Capable for Capability (2025)
Next review due: annual review in June 2027
Website: Research Support | Northern Ireland Statistics and Research Agency
Office for National Statistics: Secure Research Service
Processor: Office for National Statistics – Secure Research Service (ONS SRS)
Accredited for: Provision of Data
First Accredited: 24 May 2019
Latest Accreditation from: 28 June 2024
Accreditation valid until: 30 June 2029
Outcome of latest review: Capable for Security and Capable for Capability (2025)
Next review due: annual review in September 2026
Website: Secure Research Service – Office for National Statistics
Office for National Statistics: Data Access Platform
Processor: Office for National Statistics – Data Access Platform
Accredited for: Preparation of Data
Accredited from: 31 March 2025
Accreditation valid until: 31 March 2030
Outcome of latest review (full reaccreditation): Capable for Security and Maturing for Capability (2025)
Next review due: annual review in June 2027
Website: Office for National Statistics (ONS) – Office for National Statistics
Secure Anonymised Information Linkage Databank
Processor: Secure Anonymised Information Linkage Databank (SAIL)
Accredited for: Preparation and Provision of Data
First Accredited: 17 January 2020
Latest Accreditation from: 22 September 2025
Accreditation valid until: 30 September 2030
Outcome of latest review: Capable for Security and Maturing for Capability (2025)
Next review due: annual review in September 2026 (Security) and September 2027 (Capability)
Website: SAIL Databank
UK Data Archive
Processor: UK Data Archive (UKDA)
Accredited for: Preparation and Provision of Data
First Accredited: 16 March 2020
Latest Accreditation from: 31 March 2025
Accreditation valid until: 31 March 2030
Outcome of latest review (full reaccreditation): Capable for Security and Capable for Capability (2025)
Next review due: annual review in March 2027
Website: UK Data Archive
UK Longitudinal Linkage Collaboration
Processor: UK Longitudinal Linkage Collaboration (UK LLC)
Accredited for: Provision and Preparation of Data
Accredited from: 17 March 2023
Accreditation valid until: 31 March 2028
Outcome of latest review: Capable for Security and Maturing for Capability
Next review due: annual review in March 2027