NHSmail personal user accounts will now be deactivated after 30 days of inactivity,

If you have a nhs.net user account, please ensure you are using it regularly.  If you do not use it for a period of 30 days, it will be deactivated.

NHS Digital have implemented this change as unused accounts present a security risk to the NHSmail platform.

  • Disabled accounts will also be classified as inactive whilst in a disabled state, they will remain on the platform for 18 months with no additional activity required.
  • New user accounts that have been set up but have not accepted the Acceptable Use Policy (AUP) or set security questions will be moved to inactive within 30 days from creation.

User accounts will not be permanently deleted on the 1st of December as part of this change, based on their current activity status they will move from:

  • Active to deleted if 60+ days of no activity
  • Active to inactive if 30-60 days of no activity
  • Inactive to deleted if 30+ days in inactive state
  • Accounts that move to deleted state will then have 30 days to be restored, if required

What do I need to do?
  • To ensure you keep your account active please log into the NHSmail portal at least every 30 days and send an email from your account.


Any questions?
  • If you want to speak to our Data Protection team about secure email, NHSmail, Data Security and Protection Toolkit (DSPT) or any other matter concerning Information Governance, please get in touch: DataProtection@HCPA.co.uk / 01707 708 018