The National Programme for IT is designed to reform the way the NHS in England uses information, and hence to improve services and the quality of patient care. The Programme's aims are ambitious, and its scale and complexity make delivery more challenging than similar projects elsewhere in the world. The Programme requires substantial organisational and cultural change to be successful and it is dependent on the deployment of systems in an increasingly devolved NHS.
The Programme is managed at national level by NHS Connecting for Health, part of the Department of Health, and the Chief Executive of the NHS is the Senior Responsible Owner for the Programme. Responsibility for delivery is shared with the local NHS, with the Chief Executives of the ten Strategic Health Authorities responsible for implementation and the realisation of benefits in their part of the NHS.
Some systems are being deployed across the NHS. The Care Records Service, however, is at least four years behind schedule, with the Department's latest forecasts putting completion at 2014-15. At 31 August 2008, new care records systems had been deployed in 133 of the 380 Trusts. Trusts in the North, Midlands and East have been receiving an interim system and will have to go through a further deployment in due course to implement Lorenzo, the care records software for the North, Midlands and East, which has suffered major delays. By the end of 2008, Lorenzo had not been deployed throughout any Acute Trust and in only one Primary Care Trust.
The Programme started with four Local Service Providersthe main suppliers responsible for implementing systems at local levelcovering the whole of England, but two have left the Programme. Only two remain, both carrying the responsibility for major components of the Programme. The Programme's high dependence on just two major suppliers has implications for the Programme's capacity and capability, and for the Department's leverage.
Fujitsu's contract covering the South of England was terminated in May 2008. Negotiations to reset the contract had failed because the two sides were unable to agree on the price and commercial terms. The future arrangements for the South remain under discussion, but the Department's intention is allow those Trusts which have not yet implemented a new care records system to choose between those offered by the two remaining Local Service Providers, BT and CSC.
The estimated cost of the Programme is £12.7 billion, including £3.6 billion of local costs, although this figure remains uncertain. In the event that Trusts decide not to deploy the Programme's systems, the Department is nonetheless obliged to make payments to the suppliers concerned. While the Department can direct NHS Trusts and Primary Care Trusts to take the systems, it has no such power over Foundation Trusts.
The Programme is intended to generate substantial benefits for patients and the NHS. The aim is for the care records software to be delivered in a series of releases with increasing functionality. Delivering the clinical functionality will be key to convincing NHS staff of the benefits of the Programme because what has been provided to date has not met their expectations.
Keeping patient data secure is crucial to the reputation and success of the Programme, and the Department is confident that the mechanisms it is putting in place will provide a high level of security. Access to the Care Records Service will be controlled through Smartcards and passcodes, and access will be auditable. The security of the IT systems themselves is the responsibility of suppliers, with NHS organisations and their staff responsible for keeping secure the data they access. The Department is notified of serious security breaches, but less serious incidents are handled at local level.
The Committee first reported on the Programme in March 2007. On the basis of a further report by the Comptroller and Auditor General, we took evidence from the Department of Health and Fujitsu on the progress being made in delivering the Programme, including the termination of Fujitsu's contract as the Local Service Provider for the South.