Summary
- The National Data Guardian has advised ministers on the future of the NHS Federated Data Platform.
- Its recommendations address supplier assessment, transparent evidence and public trust.
- Interoperability, open standards, vendor lock-in and data sovereignty feature prominently.
England's National Data Guardian has urged ministers to give substantial weight to public and professional trust when deciding the future of the NHS Federated Data Platform, drawing attention to supplier assessment, evidence of benefits and the long-term ability to move information between systems. The advice was published on 12 October in correspondence to the minister for health innovation.
Dr Nicola Byrne's letter does not recommend a particular contract outcome. Instead, it addresses how decisions involving sensitive health information should be assessed, explained and challenged. That distinction matters in a programme where technology choices, operational arrangements and public confidence are closely connected, but cannot be collapsed into a simple endorsement or objection to one software provider.
The Federated Data Platform is intended to bring together operational information that helps NHS organisations plan and coordinate care and resources. Digital platforms of this kind can improve visibility across otherwise fragmented systems, although the benefits depend on how information is connected, governed and used by staff. A platform can collect useful data without automatically improving a patient's experience or shortening a waiting list.
The National Data Guardian identifies three areas for attention. Supplier decisions should take account of public and professional trust; evidence about benefits and limitations should be clear and objectively assessed; and policy should respond to concerns about interoperability, vendor lock-in and data sovereignty. Together these recommendations place procurement and information governance alongside technical delivery.
Interoperability is more than a supplier's willingness to export a spreadsheet. It depends on shared definitions, usable interfaces, reliable data quality and arrangements for transferring complex workflows without disrupting clinical operations. An open standard can make switching easier, but only if the implementation genuinely follows the standard and the NHS retains access to the technical documentation and expertise needed to use it.
Vendor lock-in has financial and operational dimensions. Once multiple hospitals have trained staff, connected systems and built local workflows around one platform, changing providers can require substantial time and money even when the underlying data remains accessible. Procurement teams therefore need to understand exit arrangements, ongoing integration charges and the cost of maintaining specialist support before these dependencies become entrenched.
Data sovereignty adds another layer. The location of stored information is relevant but does not, by itself, settle questions about contractual control, access to sensitive records, subcontracting or the legal powers that apply to service providers. Patients and professionals may reasonably want to know which organisations can interact with their information, for what purposes and with what oversight.
Transparency also presents a measurement problem. A case study may demonstrate improved logistics at one trust while saying little about whether the same approach can be repeated elsewhere. Evidence should distinguish service-level metrics, changes plausibly attributable to the platform and improvements created through additional staffing or local process changes. Publication of limitations is part of a credible assessment, not evidence that a digital programme has failed.
The correspondence is based on research, public and professional views and independent scrutiny, according to the Guardian's office. Its recommendations therefore address the legitimacy of future decisions as well as their technical content. Trust cannot be guaranteed by software design alone, but decisions made without comprehensible evidence may undermine adoption even where the product performs its stated function.
The advice gives ministers a framework for assessing a consequential NHS technology programme without prescribing a winner. The next test is whether procurement, assurance and public reporting show how those principles affected decisions and what safeguards will persist throughout the platform's lifetime.
A further issue is the distinction between the platform's technology provider and the organisations deciding how information will be used. Even a system with robust technical controls can lose trust if patients cannot understand the legal basis for sharing or how decisions affect services. Clear accountability arrangements are therefore as important as encryption or access permissions, and they should remain understandable when additional data sources or applications are introduced.
Contractual exit provisions matter because national-scale digital services may remain in operation for many years. It is possible to preserve ownership of data while depending heavily on proprietary workflows and implementation expertise. Health organisations should be able to test an exit plan before it is urgently required, including the time needed to recreate integrations and maintain continuity for clinical users.
The Guardian's advice should not be presented as evidence that the FDP has produced no benefits, nor that its present supplier must be replaced. It calls for those benefits to be assessed transparently alongside limitations and alternatives. The public value of such an assessment comes from showing how evidence changes decisions, especially where the technology is politically contentious.
