Source · HSSIB Patient Safety Investigation
Healthcare provision in prisons: data sharing and IT
Published 24 July 2025
Published
Emergency care
Communication and decision making
Continuity of care
This is the third of a series of HSSIB reports on the theme of healthcare provision in prisons. The first report explored emergency care response, the second explored continuity of care and a further report will explore patient safety concerns and common themes found across all areas of healthcare provision in prisons. These investigations were launched after discussions with 26 …
Summary
4 recommendations
4 of 4 responded
Safety Recommendations
R/2025/067
NHS England/Department of Health and Social Care
HSSIB recommends that NHS England/Department of Health and Social Care ensures that the General Medical Services registration process, for patients in prison, is designed using informed consent principles, providing patients sufficient time, advice and support to understand what registration means for them. This is to ensure patients are making informed decisions about their healthcare provision, therefore improving patient safety.
NHS England/DHSC agrees to ensure informed consent in prison GMS registration. Plans include a scoping review by mid-2026, updated guidance and staff training by late 2026/27, and evaluation by 2028.
Response received 20 October 2025
We agree with this recommendation. NHS England and DHSC recognise the importance of supporting patients in prison to make fully informed choices about their healthcare registration. Following a review of current policy options and operational dependencies, we propose the following actions and indicative timeframes. Actions planned to deliver safety recommendation: Initial scoping review completed, with engagement of healthcare providers, clinicians, and patient representatives to understand current challenges, by Mid 2026. Resources in place: Existing policy and commissioning teams including NECS and support from prison healthcare providers. Other dependencies identified: Coordination with DHSC, HMPPS, and digital registration systems. Additional comments: This review will inform future policy development and operational changes. Updated guidance issued, supported by the development of staff training resources on informed consent, by late 2026/27. Resources in place: Policy and clinical teams. NECS and collaboration with DHSC and HMPPS. Other dependencies identified: Dependent on completion of scoping review and stakeholder input. Additional comments: Guidance will reflect best practice and legal standards. Evaluation of implementation and patient feedback to ensure consistency across the estate, by 2028. Resources in place: Policy and commissioning teams. Other dependencies identified: Requires integration with future policy cycles and operational planning. Additional comments: Findings will inform future updates to guidance and training. Our long-term aspiration is to establish a fully consistent, patient- centered registration process in every prison, ensuring that informed consent is embedded as a principle of care. Response received on 20 October 2025.
R/2025/068
NHS England/Department of Health and Social Care
HSSIB recommends that NHS England/Department of Health and Social Care, working with healthcare service providers and their healthcare teams at prisons which hold remand prisoners, reviews and amends the process for GMS registration of patients on remand.
This is to ensure a consistent approach to GMS registration across the prison estate, which acknowledges the potential negative impact short-term changes in care provision may have on the continuity of care for patients who have been remanded in custody.
NHS England/DHSC agrees to review and amend GMS registration for remand prisoners. Actions include a targeted review by early 2026, exploring digital record access, and consulting on the Scottish model by end 2026.
Response received 20 October 2025
We agree with this recommendation. We recognise the unique challenges associated with the remand population, where frequent transfers and shorter stays often disrupt continuity of care. We recognise the need for a consistent and patient-centred approach to registration for remand prisoners. Actions planned to deliver safety recommendation: Conduct targeted review of GMS registration processes for remand populations in collaboration with healthcare providers and patient representatives, by early 2026. Resources in place: Policy and commissioning teams. Legal team Input from remand-holding establishments. Other dependencies identified: Coordination with DHSC, HMPPS, and prison healthcare teams. Additional comments: Review will focus on unique needs and challenges of remand populations. Explore the best way to enable functionality that would provide access to the full Electronic Patient Record through technical changes or access to other digital products, by 2026/27. Resources in place: GPIT programme teams; collaboration with digital teams and prison healthcare providers. Other dependencies identified: Dependent on digital infrastructure, interoperability standards, and stakeholder engagement HMPPS – sentencing review. Additional comments: Aims to improve continuity of care and reduce administrative burden for short-term prisoners. Undertake a consultation process with professional bodies, prison healthcare teams, and patient representatives to explore the Scottish model of mandatory registration after six months, by end 2026. Resources in place: Policy and commissioning teams. Legal oversight support from DHSC and external stakeholders. Other dependencies identified: Regulatory implications; technical enablers; alignment with existing NHS registration frameworks. Additional comments: Primary Care team to assist with coordination and stakeholder engagement. Continue development of a digital pathway for pre-release registration to support continuity of care post-release, by end 2026. Resources in place: Online Registration Team, NHS England (Primary Care to assist). Other dependencies identified: Digital development teams; collaboration with prison healthcare and commissioning teams. Additional comments: Integration with prison release planning systems and NHS registration platforms. Consider the technical requirements and possibilities for temporary care information following release to be held in the National Data Repository, by end 2026. Resources in place: Digital architecture and data governance teams; support from Primary Care. Other dependencies identified: Dependent on national data strategy, IG compliance, and system capabilities. Additional comments: Exploration will inform future data integration and continuity of care improvements. The long-term ambition is to reduce disruption to patient care and ensure that GMS registration processes for remand prisoners are consistent, equitable, and support seamless continuity of treatment. Response received on 20 October 2025.
R/2025/069
HM Prison and Probation Service
HSSIB recommends that HM Prison and Probation Service ensures that the development of the Digital Prison Services system includes interoperability with healthcare IT systems. This will ensure that information which does not impinge on the confidentiality requirements of either system, relevant to the safety and wellbeing of staff, patients and other prisoners, is available at the point of need.
HMPPS acknowledges the importance of interoperability and has an API designed for secure data sharing, potentially supporting two-way exchange. They plan initial engagement by Q4 2025 and discovery work by Q1 2026, subject to funding.
Response received 22 October 2025
HM Prison and Probation Service (HMPPS) is grateful for this feedback on the Healthcare provision in prisons: data sharing and IT report. Thank you for the recommendation regarding the integration of healthcare information systems with the Digital Prison Services system. We fully recognise the importance of ensuring that relevant information, where appropriate and lawful, is available at the point of need to support the safety and wellbeing of those in custody. HMPPS has already developed and deployed the External Integration Application Programming Interface (API), a strategic digital service that enables secure, real-time data sharing with third parties to access prison data. This aligns with our standard practice of de-coupled integration, where each organisation retains responsibility for its own systems and data flows. The ongoing development of this platform is being designed with interoperability in mind and could, in future, support two-way data exchange, subject to appropriate governance and safeguards. A bid for funding in the current spending review to continue development of the API was made. However, allocation decisions are yet to be confirmed. To fully realise the benefits of integration with NHS systems, NHSE will need to develop and maintain the necessary infrastructure to support integration. Further development of the HMPPS API may also be required to support specific integration needs, which would be subject to SR funding allocations. This approach ensures that both partners contribute to a sustainable and secure integration model. We are committed to working with NHSE to deliver digital interoperability. While the technical, governance and financial implications of interoperability are being explored we are working with NHSE and their providers to maximise the benefits of the DPS system roll out, for example we are supporting establishments to exploit the functionality for healthcare appointment booking and attendance monitoring to drive improvements in prisoner attendance at healthcare activities. We remain committed to improving interoperability and welcome continued collaboration to ensure shared goals around safety and wellbeing are met. Actions planned to carry out safety recommendation: Facilitate initial engagement with health partners, by Q4 2025. Resources in place: Limited internal capacity. Other dependencies identified: Dependent on funding and delivery capacity. Additional comments: HMPPS is committed to ongoing discussions with NHSE to explore integration possibilities and mutual capabilities. Initiate discovery work for two-way data sharing, by Q1 2026. Resources in place: Limited internal capacity. Other dependencies identified: Early scoping only; dependent on funding and delivery capacity. Additional comments: Explore technical and governance requirements to allow data exchange between the systems (NHSE and HMPPS). Explore alternative approaches to data sharing, Q2 2026. Resources in place: Limited internal capacity. Other dependencies identified: Dependent on HMPPS delivery capacity and NHSE integration Infrastructure. Additional comments: Enable access to relevant existing data to support safety and wellbeing, within legal and governance frameworks. Response received on 22 October 2025.
R/2025/070
NHS England/Department of Health and Social Care
HSSIB recommends that NHS England/Department of Health and Social Care includes within its healthcare IT procurement system specification the need to support interoperability between the operational prison IT systems and any future prison healthcare IT system. This will ensure that information which does not impinge on the confidentiality requirements of either system, relevant to the safety and wellbeing of staff, patients and other prisoners, is available at the point of need.
NHS England/DHSC agrees, stating interoperability requirements are already in its IT procurement roadmap. By end-2026, they will align with HMPPS, engage suppliers, and embed interoperability as a contractual requirement.
View full response
We agree with this recommendation. Work to embed interoperability requirements has already been completed and is included within the healthcare IT procurement roadmap. Actions planned to deliver safety recommendation: Work in partnership with HMPPS to align priorities for interoperability with the Digital Prison System, by end 2026. Resources in place: Joint working groups; digital strategy and infrastructure teams from NHS England and HMPPS. Other dependencies identified: Dependent on HMPPS digital roadmap and NHS system capabilities. Additional comments: Alignment will support seamless data sharing and continuity of care. Engage suppliers (if new supplier procured) and design system specifications that reflect interoperability requirements as standard, by end 2026. Resources in place: Procurement and digital architecture teams; supplier engagement processes. Other dependencies identified: Dependent on procurement outcomes and alignment with NHS and HMPPS digital strategies. Additional comments: Specification will embed interoperability as a core requirement to support continuity of care. Incorporate interoperability as a contractual requirement in any future system procurement, by end 2026. Resources in place: Procurement frameworks; legal and technical advisory support. Other dependencies identified: Dependent on procurement timelines and supplier engagement outcomes. Additional comments: Will ensure interoperability is embedded from the outset to support continuity of care and data sharing. Deliver a modern, integrated digital system across the detained estate. Resources in place: National digital infrastructure programmes; collaboration with HMPPS and NHS stakeholders. Other dependencies identified: Dependent on funding, procurement, and interoperability alignment. Additional comments: System will support continuity of care, data sharing, and patient safety across the estate. The long-term aspiration is to reduce duplication, improve data quality, and strengthen both operational and clinical decision-making through modern, connected digital systems. Response received on 20 October 2026.