Abstract
The National Programme for IT in England doesn't have a one-document strategy for its information security of the Care Records Service, which is the national EHR system. This paper provides a comprehensive understanding of the information security strategy of England's EHR system by presenting its different information security issues such as consent mechanisms, access control, sharing level, and related legal and regulations documents.