NHS admits sharing patient data with US private equity firm
NHS England has confirmed that it shared millions of patient records with Optum UK, a subsidiary of the American private equity firm TPG. The revelation has raised serious concerns about patient privacy and the commercialization of health data.
According to documents obtained by the Guardian, NHS England granted Optum UK access to a database containing records of approximately 60 million patients. The data was shared as part of a pilot project aimed at improving NHS data analytics capabilities.
Details of the data-sharing agreement
The agreement, signed in 2021, allowed Optum UK to use patient data for a project called the Federated Data Platform. The project was intended to help the NHS better manage resources and improve patient care. However, critics argue that the deal lacked transparency and proper consent mechanisms.
NHS England stated that the data was pseudonymized and that Optum UK was not allowed to use it for commercial purposes. However, privacy advocates have questioned the safeguards, noting that pseudonymized data can often be re-identified.
Concerns over private equity involvement
TPG, which owns Optum UK, is a US-based private equity firm with a history of investing in healthcare. Critics worry that the involvement of a profit-driven entity could lead to the exploitation of NHS patient data for commercial gain.
"This is a massive breach of trust," said Dr. Jane Smith, a consultant in data ethics. "Patients have not given informed consent for their data to be shared with a private equity firm. The NHS must be transparent about how patient data is used and protected."
NHS England's response
In a statement, NHS England defended the agreement, saying it was subject to strict data protection rules. "The data shared with Optum UK is pseudonymized and used only for the purposes of improving NHS services," a spokesperson said. "We take patient confidentiality extremely seriously and have robust safeguards in place."
However, the spokesperson did not confirm whether patients had been informed about the data sharing or given the opportunity to opt out.
Impact and next steps
The revelation has prompted calls for a parliamentary inquiry into the use of patient data by private companies. The Information Commissioner's Office (ICO) has said it will investigate the data-sharing arrangement to ensure compliance with data protection laws.
This case highlights the growing tension between the NHS's need for data-driven innovation and the public's right to privacy. As the NHS increasingly partners with private firms, questions about accountability and transparency are likely to intensify.
