There has always been widespread support for the principles for data sharing. As a result of concerns about how patient information and security were handled within the NHS, the principles were created as further support for NHS organisations prior to data protection legislation being the focus for guidance.
Following evidence received during the Information: 'To Share or not to share? The Information Governance Review in 2016', it was recognised that the need for some updating was required and the inclusion of an additional principle was introduced.
In December 2020, following a public consultation, an eighth Caldicott Principle was introduced.
The 8 principles therefore read:
These principles should underpin information governance across the health and social care services.
Following the release of the report the Welsh Government issued a Welsh Health Circular 'WHC (2015) 013 - Seventh Caldicott principle: “Duty to Share” and people’s access to their electronic care records'