NHS simulation · About 10 minutes
Data breach: 72 hours
A data breach, and the clock is ticking to tell the regulator.
- Your role:
- Executive director and Senior Information Risk Owner (SIRO)
- Setting:
- Northvale Health NHS Foundation Trust (fictional)
All characters and the trust are fictional. Your answers are private.

Eleanor Shaw, your facilitator
Edvance Technologies
Can’t listen? Read Eleanor’s introduction as text
Hello, and welcome. I'm Eleanor Shaw, and I'll be your facilitator for the next ten minutes or so. This is a short simulation from Edvance Technologies, created by Vince James, the founder of Edvance Technologies, who designs simulations that help NHS leaders adopt AI and digital technology safely and responsibly. It is about what happens when an AI tool sends patient information to the wrong place, and the clock starts ticking. You'll play the executive director who is the trust's Senior Information Risk Owner at Northvale Health NHS Foundation Trust, a fictional trust. An AI tool that sends discharge letters to patients' GPs has been sending some of them to the wrong practice. You have seventy-two hours to decide whether to tell the regulator. You'll read what has landed in your inbox, then make three decisions. You can speak or type each answer. When you've finished, leave your details, and I'll give you private feedback on each of your decisions. There are no trick questions. Just answer as you would in real life. When you're ready, click Next.
How it works
- Read or listen to what lands in your inbox.
- Make 3 decisions. Speak or type.
- Leave your details, then hear Eleanor’s feedback.
- Finish with three key lessons.
