Health Bill (Fourteenth sitting)

Joe Robertson Excerpts

Committee stage
Thursday 9th July 2026 Public Bill Committees

[Gregory Stafford (Farnham and Bordon) (Con)]

It is a pleasure to serve under your chairmanship again, Dr Huq.

New clause 6 raises an important question on how we govern health data, which one of the greatest assets of the NHS. The development of the single patient record platform and database, and the wider use of the linked NHS data, present enormous opportunities.

When used responsibly, healthcare data can support much more personalised care, improve NHS planning, accelerate medical research, enable earlier diagnoses and help develop new medicines and treatments. It can also improve efficiency and strengthen the evidence base for healthcare decisions. However, those benefits can be realised only if the public have the confidence that their data will be used safely, ethically and transparently. Public trust must be the foundation of any successful health data policy.

NHS health data is currently overseen by NHS England, following the merger of NHS Digital into that organisation. With the Government proceeding with the abolition of NHS England and the transfer of its functions elsewhere, it is right that we consider future governance arrangements. In principle, I agree that an independent body may be needed to ensure and maintain the security, integrity and responsible stewardship of NHS data. There is definitely scope for an independent body to oversee the management and regulation of the public’s health data. That proposal places patient privacy at its heart, and would strengthen safeguards against misuse, give patients greater control over how their information is used, and provide meaningful mechanisms to opt out of certain forms of data sharing. It also promotes the use of anonymisation and trusted research environments, allowing valuable research to take place while reducing the risk of inappropriate disclosure. We have discussed inappropriate disclosure by a malign actor, or even inadvertent disclosure, during debate on other clauses.

The Liberal Democrat new clause also seeks to address a concern that has attracted significant public attention: where commercial organisations derive substantial value from NHS data, the NHS itself should share in that benefit. Although we did not support a number of Liberal Democrat proposals because of the inadvertent implications of their drafting, I still have sympathy with the overall thrust of what they were trying to achieve. There is a strong argument that the value generated from the data contributed by NHS patients should help to support future patient care and research.

Transparency is another important feature. Publishing data-sharing agreements, increasing openness around decision making and consulting the public on significant new data initiatives would help to strengthen public confidence. The proposed trust would bring those principles together by overseeing data use, monitoring compliance with governance standards, ensuring transparency and, where necessary, suspending access for organisations that misuse their data.

Of course, any new governance framework must avoid creating unnecessary bureaucracy or delaying important research. To reassure the Committee that the framework would not create a block or dampener, or insert inertia into the system, will the hon. Member for North Shropshire tell us what evidence she found when drafting the new clause? If we are going to do something like this, the oversight should be proportionate, and it should complement, rather than duplicate or frustrate, any existing regulatory responsibilities.

Ultimately, the new clause has potential benefits. It would establish a clear social contract for NHS health data, which would hopefully protect privacy, support research and innovation, maintain public trust and ensure that patients and the NHS share in the benefits arising from the responsible use of a very valuable national asset. In terms of what it could be used for, that data is probably second to none in the world, but I am concerned about adding extra bureaucracy and inertia to the system, when we want a vibrant life-sciences industry that is able to use the data for the benefit of British citizens and patients. What does the hon. Member for North Shropshire think would happen in that case?

[Joe Robertson (Isle of Wight East) (Con)]

It is a pleasure to serve with you in the Chair, Dr Huq.

My hon. Friend the Member for Farnham and Bordon has set out the arguments clearly; I will just add some of my own views. As he stated, the single patient record provides a unique and special opportunity to improve efficiency across the whole health and social care space and to empower patients, but it faces significant challenges. As I said in an earlier sitting, perhaps one of the biggest challenges is ensuring that it means something in practice. In a previous debate, the Minister helpfully clarified that the data currently held on a great variety of databases and electronic record-keeping systems in the NHS will remain on those wide and disparate recording systems. It seems that the advantages will be realised only if those systems are able to speak together and are fully interoperable.

I know from a previous time in my career that, in reality, many such systems are not interoperable or are only part-interoperable, and that, even where they do speak to one another, the data is collected and recorded in different ways. Simple things—someone’s name, their age or the principal field of the issue for which they are presenting to a clinician—are recorded, but because the systems are not standardised, that data cannot be transferred between them easily.

The advantages of the single patient record will be realised only when all those systems are unified in some form, but the Bill does not address that directly. I am not necessarily suggesting that it should, but I do not see the Government acknowledging anywhere that systems are contracted and provided by private providers through procurement processes at a local level, and asking, “How do we knit that all together?” It seems that somebody somewhere will have to produce some gateway software or system to allow the single patient record to be accessed. If every other existing system needs to be able to feed into that, the public sector will have a huge role, and the private sector will sit behind it to try to deliver that. It seems a huge project that could be fraught with difficulty, it could take many years before the single patient record is established, regardless of when the Bill is passed—although I am sure it will be passed fairly soon.

New clause 6 seeks to address another significant issue with the single patient record: security and the control of data. The single patient record, if fully realised, will make it easier for data to be accessed and shared. Its very purpose is to ensure that systems and services are more integrated and data flows more freely, to avoid the ridiculous situations in which a GP fills out a patient note but cannot share it with a secondary care provider, so must print it out for the patient, or attach a PDF to an email, so that somebody at the other end can input it to their database.

One issue with making it easier to share data—including personal data of the most intimate kind—is that once it has been accessed by bad-faith operators, it is easier for them to run riot and cause an awful lot of damage. It is also much easier for wider access to be shared accidentally, because the whole system is lubricated by the single patient record. I therefore understand the reason for the health data charter as a cure for potential ills.

New clause 6(3)(b) states that the charter must

“include the primary goal of protecting people’s privacy and their data from exploitation”.

That is a fantastic goal that we all support, but I do not necessarily agree that the measure will achieve that. It is an added layer of bureaucracy. My hon. Friend the Member for Farnham and Bordon asked a rhetorical question about the bureaucracy and effectiveness. I endorse that question and hope that the hon. Member for North Shropshire will answer it.

I am minded not to support the proposal, though I agree with what it tries to achieve. If the Minister does not support the new clause, will she explain how its aim of protecting people’s privacy will be delivered by the Bill? There seems to be great scope for the undermining and abuse of privacy, not just deliberately by bad faith actors, but inadvertently.

A second issue aim of the charter is the balance between the security of personal data and the recognition of the value of anonymised data gathered by the NHS for research and development. Fully anonymised data that cannot be unpicked through reverse engineering is of huge value, both commercially and for the public good. Commercial value and the public good are not necessarily opposed to each other; in fact, they often come together. The NHS should be able to exploit the value of that anonymised data—“exploit” is probably seen as a negative word—for the public good. How do we balance that with people’s right to privacy?

Again, there is the possibility of inadvertently using for a wider public good data that was intended to be anonymised but in which people can be identified. The charter tries to get to the heart of that issue as well, which I welcome. Indeed, new clause 6(4)(a) states that the sovereign health data trust will

“hold continuous oversight of all health data and oversee the trusted research environment”.

The Minister may not agree with the new clause, but how will the Government’s proposals balance the security of an individual’s personal data while exploiting, for the public good, the value of the huge depth of anonymised data that the NHS holds and will hold? It could be used to drive so much innovative research and development, for the benefit of health delivery not only in this country, but across the world. Such a valuable commodity has commercial value that could deliver financial benefit to the NHS. I think we all agree that we have not yet exploited that area to the fullest. There is an opportunity to do so with the single patient record—if it is done properly, with all the necessary safeguards.

--- Later in debate ---

[Dr Johnson]

My hon. Friend is, as ever, correct. I would be interested in whether the hon. Member for North Shropshire has made any estimates of personnel time or cost that the proposal would entail.

In summary, the new clause would create an unelected committee removing democratic control. Essentially, it is asking a committee of unelected individuals to write and implement policy, which is the job of the Minister. That should be under ministerial control.

[Joe Robertson]

Does my hon. Friend agree that there is an overarching issue here of public confidence in the safety of their data? That is not about one company or another; it is about ensuring that robust safeguards are in place for everyone and for every provider of a data and record-keeping system. If the public do not have confidence, they will understandably withdraw consent for their data being held. That will undermine the single patient record and the whole way in which health can be delivered efficiently in the best interests of patients.

[Dr Johnson]

I agree. I am sure that the purpose behind the new clause is to ensure that data is safe, but it removes democratic accountability from the process of developing the policy, which may reduce the public’s confidence in it. I agree with its underlying principles, but much of it is cumbersome and, as yet, undefined, so it is important that we get more detail and specificity.

--- Later in debate ---

[Gregory Stafford]

I am grateful to the hon. Member; she makes an interesting point. She talks about irony, and I respond in the same manner as that which she intervened on me with a gentle response, which is to ask why, if everything was going so swimmingly well, she and the rest of her colleagues got rid of the Prime Minister?

[Joe Robertson]

I am grateful to my hon. Friend for giving me an opportunity not to chunter from a sedentary position and to remark that this tedious rhetoric about the last 14 years—when all the public want to do is hear about plans for the future and how they will work—is the reason why we are in the state that we are. Will my hon. Friend continue and address the points that the public want, which he had already begun to do?

[Gregory Stafford]

My hon. Friend is absolutely right. The public do not want to hear about the last 14 years or the rhetoric around them.