Access Control Framework (ACF)

Access to clinical information stored in the NHS Care Records Service (held by the Personal Spine Information Service) is controlled by the ACF which registers and authenticates all users.

The ACF provides a single log-in and a record of each healthcare professional accessing a patient's NHS Care Record. All information is provided on a need-to-know basis governed by the user's role and 'legitimate relationship' with the patient.

It stores details of those relationships between healthcare professionals and patients, as well as patient preferences on information sharing (for example, whether certain sensitive information is restricted from routine sharing).