NHS.net

From Wikipedia, the free encyclopedia

NHSmail is an email, diary and directory system for National Health Service (NHS) employees in England and Scotland. The system is not for patients of the NHS. Retired NHS staff do not have access.

NHSmail previously allowed faxes to be sent, however this was phased out at the end of March 2015.

NHS Scotland have announced their intention to phase-out the use of NHSmail for users in Scotland between July 2020 and September 2020, with NHS Scotland users migrating to Microsoft 365. NHS Scotland plans to adopt the nhs.scot domain.[1][2]

Background[edit]

History[edit]

NHS.net e-mail initially offered 64Mb of storage.[3] In 2006 it was improved and storage space was unlimited.[4] Storage space has since been reduced to 400MB or 1GB depending on account service level.[5] In 2013 the storage was doubled for all users in response to feedback from them.

As of 2021, all users of NHSmail receive a 4GB mailbox by default. Each NHS organisation can assign up to 10% of their users with an expanded mailbox of 50GB in size.[6] In addition, all users receive a 100GB online archive facility for long-term storage of emails.

Underlying technology[edit]

Until 2021, NHSmail used a customised version of Microsoft Exchange 2013.

In March 2020, NHS Digital deployed Microsoft Teams across the NHSmail platform.[7] Access to Microsoft Teams was provided via a nationally negotiated licence agreement known as "Microsoft 365 E3 Restricted", commonly referred to as "E3R"[8][9]

In 2021, the NHSmail service transitioned from on-premise email storage to Microsoft Exchange Online[10][11][12][13]

Client-side access[edit]

Web interface[edit]

The web interface uses Outlook Web Access. The service can be accessed via the internet from https://portal.nhs.net.

Microsoft exchange[edit]

NHSmail may be accessed from the internet by Microsoft Outlook on Windows or Microsoft Entourage on Mac OS X. Auto-configuration is available if the user's e-mail address is provided.

Mobile devices that support the Exchange ActiveSync protocol can also be linked to the service.[14] Currently the NHSmail service supports iOS and Android devices running the Microsoft Outlook app to connect.[15]

IMAP[edit]

Standards-compliant IMAP was available only from within the N3 network until around August 2018 when it was reintroduced into the Internet, however a local administrator must enable this on a per-account basis.

Access to mail was possible via imap.nhs.net. The internal SMTP server was send.nhs.net.[16]

After migration to Exchange Online, the server settings transitioned to the Microsoft default[17]

Security[edit]

NHSmail has been approved for securely exchanging patient information by non-IT groups such as the British Medical Association (BMA), the Royal College of Nursing (RCN) and the Chartered Society of Physiotherapy (CSP).[18]

Emails that may contain personally identifiable information, sensitive information, or medical information have been assessed by the UK Government's Communications-Electronics Security Group (CESG) as requiring protection to Business Impact Level 4 (B-IL 4).[19] This was assessed in reference to CESGs guidance on Technical Risk Assessment for the UK Cabinet Office published as HMG IA Standard No 1 (IA1 – Technical Risk Assessment),[20] and defined by the potential distress or embarrassment a breach of the system could cause NHS patients, as given in the Impact Level table on p. 54 of the Standard.[20]

The current NHSmail services have (with a waiver allowing access from uncontrolled end points over the internet) been assessed as providing a level of security consistent with B-IL 3.[19] The B-IL 3 rating will be maintained with the introduction of NHSmail2,[21] however this rating is not consistent with CESG's requirements for protecting personal information of this sensitivity.

The service can be used to email a range of other Government email services such as the Home Office, secure local government services, police, MoD etc.[5] Access to e-mail accounts can be provided voluntarily through a delegate option in Microsoft Outlook.

Each NHSMail organisation has at least one local administrator with the ability to manage accounts, including the resetting of passwords and setting delegate access.[22]

Tag lines[edit]

Mail sent through NHS.net may have a 15-line tag essay appended to the end of the message.[23]

NHSmail 2[edit]

In 2013 the owning organisation (then NHS Connecting for Health) announced that they wished to replace the existing NHSmail service as the contract was due to come to an end. In January 2014 the Health and Social Care Information Centre (HSCIC) confirmed that a business case for replacing the service had been approved by The Department of Health and Treasury. The previous service ran until a new contract was in place, with handover due in 2016.[24]


In 2016, the NHSMail contract was transferred to Accenture,[25] taking over from previous operator Vodafone.[26]

A new user portal was launched, allowing for users to access support and guidance, as well as enabling additional functionality for local administrators to manage accounts. As part of this upgrade process, the service transitioned to Microsoft Exchange 2013.

See also[edit]

References[edit]

  1. ^ "NHSGGC : NHS Mail Migration". www.nhsggc.org.uk. NHS Greater Glasgow & Clyde. Retrieved 24 July 2020.
  2. ^ "NHS.net CLOSURE" (PDF). NHS Greater Glasgow & Clyde.
  3. ^ "Computers in Psychiatry Extra – Chapter 11, Electronic Mail". Royal College of Psychiatrists. 1 June 2012. Archived from the original on 2 January 2014. Retrieved 14 March 2022.
  4. ^ Katie Fletcher. Contact—More than just another e-mail address? BMJ Careers 1 July 2006
  5. ^ a b "NHSmail myth buster". NHS Connecting for Health. Archived from the original on 2 January 2014. Retrieved 14 March 2022.
  6. ^ "Managing Mailbox Quota – NHSmail Support". Retrieved 22 August 2021.
  7. ^ "Millions of NHSmail accounts relocated to Microsoft Exchange Online". Digital Health. 2 February 2021. Retrieved 22 August 2021.
  8. ^ "Microsoft Office 365 for the NHS". NHS Digital. Retrieved 22 August 2021.
  9. ^ "NHS moves millions of mailboxes to Microsoft's Azure cloud, giving staff access to the latest digital tools and services that support modern ways of working". Microsoft News Centre UK. 2 February 2021. Retrieved 22 August 2021.
  10. ^ "Millions of NHSmail accounts relocated to Microsoft Exchange Online". Digital Health. 2 February 2021. Retrieved 22 August 2021.
  11. ^ "Millions of NHSmail accounts moved to Microsoft Azure cloud". Healthcare IT News. 3 February 2021. Retrieved 22 August 2021.
  12. ^ "NHS Digital completes NHSmail migration to the cloud". ComputerWeekly.com. Retrieved 22 August 2021.
  13. ^ Hughes, Owen (5 February 2021). "Microsoft just completed the world's largest email migration, shifting 2.1 million mailboxes for the NHS". TechRepublic. Retrieved 22 August 2021.
  14. ^ "Mobile Configuration Guide – NHSmail Support". Retrieved 22 August 2021.
  15. ^ "Mobile Device Support Guide – NHSmail Support". Retrieved 22 August 2021.
  16. ^ "Linux for the NHS GP: Configuring Thunderbird for NHS net". Linux for the NHS GP. 12 August 2009. Archived from the original on 2 January 2014. Retrieved 14 March 2022.
  17. ^ "POP, IMAP & SMTP Legacy Hostname Removal". NHSmail Support. Retrieved 22 August 2021.
  18. ^ "NHSmail Endorsements", HSCIC. Accessed on 10 April 2014.
  19. ^ a b "NHSmail2 Requirements v1.9 – Section 3.4.4 Security Levels (Page 34)". Accessed on 10 April 2014.
  20. ^ a b "HMG IA Standard No 1 (IA1 – Technical Risk Assessment)" Archived 26 May 2012 at the Wayback Machine. Accessed on 10 April 2014.
  21. ^ "NHSmail Future Service Overview (Jan 2014)". Accessed on 10 April 2014.
  22. ^ "Finding a Local Administrator – NHSmail Support". Retrieved 22 August 2021.
  23. ^ "GP-UK Archives". JISCMail. 7 March 2009. Retrieved 14 March 2022.
  24. ^ "Home".
  25. ^ "Accenture wins NHSmail as crash reported". Digital Health. 30 June 2015. Retrieved 22 August 2021.
  26. ^ "NHSmail 2 migration triggers spike in help desk calls". Digital Health. 26 October 2016. Retrieved 22 August 2021.