# GP IT operating model update: practice servers to move to cloud

> Version 6.02 of the GP digital services operating model says remaining practice servers should move to secure cloud services by 31 March 2027.

- Published: 25 Sep 2026
- Type: News
- Topic: Digital and cyber
- For: Practice managers, PCN leads
- Applies to: England
- Deadline: 31 Mar 2027
- Review: Reviewed by the Abtrace team
- Web page: https://ontherecord.abtrace.com/posts/gp-it-operating-model-servers-to-cloud/

## What's changed

- NHS England updated the GP digital services operating model to version 6.02 on 25 Sept 2026.
- Any servers still based in practice premises should move to secure cloud services by 31 March 2027. ICBs must also agree plans to move local data and application hosting to secure cloud, and to move to the NHS.Net (Microsoft 365) tenant for directory services, by the same date.
- New guidance sets out what the annual practice IT review with your ICB should cover, from devices and wi-fi to business continuity and sub-contractors.

## Who it affects

GP practices in England, their ICBs and GP IT delivery partners. PCNs may want to coordinate where practices share kit or premises.

## What to do

- List any servers kept on site, including those used for practice business systems, and raise them with your ICB.
- Ask your ICB when your annual practice IT review is due, and prepare a list of devices, services and sub-contractors you use.
- Review your business continuity plan before the review so you can discuss gaps.
- Confirm the practice has a named partner or senior employee responsible for data and cyber security.

## Deadline

Remaining practice-based servers should be moved to secure cloud services by 31 March 2027.

## Sources

- [NHS England: Securing excellence in primary care (GP) digital services: the primary care (GP) digital services operating model](https://www.england.nhs.uk/long-read/securing-excellence-primary-care-gp-digital-services/)

Published by Abtrace on On the Record (https://ontherecord.abtrace.com/). Summaries only; always check the linked source.