2nd reading
Monday 1st June 2026

(1 week, 2 days ago)

Commons Chamber
Read Full debate Health Bill 2026-27 View all Health Bill 2026-27 Debates Read Hansard Text Read Debate Ministerial Extracts
James Murray Portrait James Murray
- Hansard - - - Excerpts

I am going to make some progress.

The single patient record will mean that wherever a patient is being treated, even if they are not at their local GP or are in a hospital they have never been to before, those caring for them will have access to all the accurate, relevant, up-to-date information they need. Through this new approach, we will bring together people’s health and social care records digitally, securely and conveniently, and make them available to patients on the NHS app.

A number of Members have raised questions about data privacy, so let me be very clear on that point. Patients rightly expect their highly personal and sensitive medical details to be protected, and they will be. Under our plans, strict safeguards, strong cyber-security and clear controls on who can read information will be backed by an audit trail of who has accessed what. The single patient record will also be subject to existing forms of scrutiny and oversight in the NHS, from data protection officers to legislative safeguards. Where the single patient record is being used for research or planning, it will be treated the same as all other sensitive health data, subject to the same legal protections, ethical approvals and governance.

Luke Evans Portrait Dr Luke Evans (Hinckley and Bosworth) (Con)
- Hansard - -

The Secretary of State is making himself the data controller of all the data that will be in place. What impact does that have on the sections he has just talked about?

James Murray Portrait James Murray
- Hansard - - - Excerpts

When the data is held by a GP surgery or an NHS hospital trust, for instance, the relevant bodies will remain the information controllers. Where that information is then shared through the single patient record, the Department of Health and the Secretary of State will take on a role as data controller as well. That will all be governed in the way that data protection currently applies across the NHS, through existing forms of data security. Fundamentally, it will reorientate the NHS to be a service that revolves around patients, rather than patients having to revolve around the NHS.