Connected Medical Devices - CAN survey

Closed 3 Jan 2020

Opened 30 Nov 2019


NHS Digital is keen to get a better understanding of the number, type and level of security applied to medical devices connected to local organisation’s networks.

This initial, short survey will start that process and give us some initial data.

For the purpose of this survey we will be focussing on medical devices which are connected to a network.

The data will be vital in helping us inform the objective and reliable identification of the most appropriate interventions to aid medical device security.

When referring to ‘medical devices’ we refer to the Medical Devices Directive (MDD) definition, cited by the Medicines and Healthcare products Regulatory Agency:

A medical device is described as any instrument, apparatus, appliance, software, material or other article used alone or combined for humans to:

  • diagnose, prevent, monitor, treat or alleviate disease
  • diagnose, monitor, treat, alleviate or compensate for an injury or handicap
  • investigate, replace or modify the anatomy or a physiological process
  • control conception


What data do we ask for and why?

We also ask you to volunteer some identifiable data (ODS, organisation name and your role in the organisation).  This is to help us understand the level of response, type of Trust and responsibility level of individuals within the organisation responding to the survey.  We also ask you to offer your direct contact details in case we want to explore your responses further.  This is entirely optional.

What happens to my data?

By filling out this survey you agree that we will process your data in line with the research purposes agreed above and NHS Digital's privacy policy. We respect your trust and protect your privacy and therefore will never sell or share this data with third parties. Your data will be treated confidentially and only used by NHS Digital for the research purposes specified. We will store any personal data for a period of 12 months. After that point, all personal elements will be deleted. If you have any questions, please contact


  • All Areas


  • All Users


  • Information Security