We do everything we can to make sure the information you send us is secure. Our security measures cover the information while you’re sending it to us. They also cover how we store the information once we receive it.
From your web browser to us
Secure Socket Layer
Your computer links to our servers (dedicated computers that process your data) using a ‘Secure Socket Layer’, or SSL. This means your computer makes sure that it’s really our server that it’s connected to. It won’t send any information until it’s done this check. And any information that you send is encrypted. This means it’s sent in a coded form that no-one else could read.
You can check for a secure connection by looking for ‘https’ (instead of the usual ‘http’) at the beginning of the address bar at the top of your web browser. You’ll also see a small padlock symbol at the bottom right of your web browser.
To qualify for SSL, a company must be certified by an independent third party. We have been certified by VeriSign. For more details about the certificate, click on the padlock symbol at the bottom right of your browser.
Firewall
A firewall stands between your computer and our servers. A firewall is a computer program that stops people accessing a computer system without permission.
Closing your browser, or using Quit on the form
As soon as you close your browser, or select the ‘Quit’ option on the online form, any information you have entered won’t be accessible to anyone who uses the same computer after you.
A time out page
If you leave your computer alone with your information on the screen, after four hours the form will move to a time out page and delete your information. The only other way someone could see your information is by looking over your shoulder while you type.
Once your information arrives at the NPSA
Firewall
The information you send us is kept in a dedicated database. Before reaching the database, the information passes through a firewall. This is a computer program that stops unauthorised information getting on to our computer system.
Secure area
Our database is held in a secure area on the NPSA computer network. The information is encrypted. This means it’s stored in a coded form. Only people with our permission can read it.
NHS security standards
We meet all the security standards set by the NHS.
Testing our security features
All our security features have been tested by a computer security specialist who is accredited by the Government Communications Headquarters. For more information, go to www.gchq.gov.uk.