This policy outlines a practical, risk-based framework for the responsible use of synthetic healthcare data. It is designed to support research, education and innovation by improving access to useful data assets, while ensuring that patient privacy remains protected. The framework distinguishes between different types of synthetic data and sets out the governance, approvals and safeguards needed for their generation and release.​