Data privacy raised as MPs debate NHS’ single patient record plan

Proposals are intended to cut A&E visits and save millions

Plans to create a single digital patient record across England's NHS have been debated by MPs for the first time, with ministers claiming the reform could reduce pressure on hospitals.

The proposals form a central part of the NHS Modernisation Bill, which was discussed in Parliament on Monday.

The legislation would require NHS organisations, including GP practices, hospitals and social care providers, to share patient data through a unified system designed to give clinicians a complete view of an individual's medical history.

That’s a stark change from the current system, where each institution holds its own records and sharing them is a lengthy process.

The government claims the changes could prevent up to 20,000 visits to accident and emergency departments each year and reduce hospital admissions by around 6,000 annually.

Officials also estimate the reforms could save taxpayers more than £20 million a year by reducing unnecessary prescribing and improving medication management.

Under the plans, healthcare professionals would be able to securely access information such as medicines, allergies and previous treatments in a single centralised system, regardless of where a patient receives care.

Ministers argue this would improve safety and reduce the need for patients to repeatedly explain their medical history to different services.

The government estimates doctors could save around 500,000 working hours a year by spending less time searching for records and entering information.

Improved access to shared records is expected to begin as early as 2027 in areas including maternity services and frailty care.

Privacy concerns

However, medical professionals and unions have raised concerns about privacy and data governance.

Dr David Wrigley, deputy chair of the British Medical Association's GP Committee for England, said GPs needed assurances that longstanding protections around patient confidentiality would remain in place.

"GPs have protected patients' confidential records since the inception of the NHS in 1948," he said.

"We need clarity that this important GP oversight will not be taken away, otherwise it will raise serious questions about who is safeguarding patients' data."

Public services union Unison backed the principle of a single patient record but stressed that public confidence would depend on how the system is implemented.

Helga Pile, the union's head of health, said NHS staff could see clear benefits from better information sharing but warned that patients remain concerned about who could gain access to sensitive medical data.

"It's really important that it's done in the right way so that matters about who is involved and how it is done," she added.

Speaking to BBC Breakfast, Health and Social Care Secretary James Murray said the government will ensure that only approved healthcare professionals are able to view the data, with records kept of who accessed it and when.

"There will be strong cyber security protections for it as well. We will protect this data like we do all of our health data today."

Scrutiny of NHS technology contracts

The debate comes amid wider scrutiny of NHS technology contracts. Some campaigners have pointed to concerns surrounding the federated data platform, a separate system used to help manage waiting lists and patient care.

The contract was awarded to US technology company Palantir, a firm whose founders have links to US President Donald Trump.

Murray said the Palantir agreement would be reviewed before a scheduled break point next year but stressed that the proposed patient record system would operate under a different model, involving multiple providers rather than a single contractor.

Asked whether Palantir could bid for future work connected to the project, he said no procurement decisions had yet been made.

Computing says:

One of my early roles was a stint pulling patient records in a busy hospital. Far too often, an entire folder would be missing with no indication of where it might be. Digital records help to solve this issue, but a centralised system is still sorely needed to boot the NHS into the 21^st century.

That said, there are real concerns around the vulnerability of a single trove of health data. Not only would it be an extremely tempting target for criminals, but controversial companies like Palantir will already be rubbing their hands at the thought of accessing it.

The government will have a fight on its hand to convince healthcare professionals and the public that their data will be safe – Tom.