This strategy sets out key areas for action and specific recommendations from the Health Informatics Research Advisory Group (HIRAG) on how Scotland should respond to the opportunities and challenges around the secure use of routinely collected patient data for research.