The NHS Single Patient Record, announced 15 May 2026, will eventually give clinicians in England a single view of your medical history.

NHS Single Patient Record 2026 Explained: What Changes, When and How to Opt Out

You arrive at A&E with chest pain. The team treating you needs your full cardiology history, but the notes are split between your GP surgery and another hospital you were seen at last year. So you retell it all, in pain, hoping you remember the right medication doses. That fragmented handover is the problem the NHS keeps saying it wants to fix. On 15 May 2026, Health Secretary Wes Streeting announced the NHS Single Patient Record under the new NHS Modernisation Bill. It sits inside a wider 10 billion pound digitisation push, announced the same day as the abolition of NHS England.

The pitch is straightforward: one joined-up record of your health that any authorised clinician in England can see when they are looking after you. The announcement has also triggered familiar questions. Who can see the data. Whether you can opt out. Whether this is care.data with a new logo. And which company, perhaps Palantir, will end up running it. This explainer walks through what the SPR actually is, the rollout timeline, the legal basis, the BMA concerns and the practical things you can do in 2026.

What the NHS Single Patient Record actually is

The NHS Single Patient Record is a planned, England-wide electronic record. The point is to bring your GP record, hospital notes, urgent care visits, community services information and key test results into one view. Any authorised clinician involved in your direct care will be able to see that view.

At the moment, each NHS provider keeps its own separate record. Some data already moves between systems through tools like the Summary Care Record and GP Connect, but the sharing is patchy and not mandatory. The SPR changes that. It makes data sharing for direct care a standard, required practice for NHS organisations in England.

Worth being clear about what the SPR is not. It is not a separate copy of your records sitting in a Government database for research or service planning. It is not a single login system for clinicians yet, though that may follow later. It is not a system that lets your employer or insurer near your health data. The SPR covers England only. Scotland, Wales and Northern Ireland are running their own integrated record programmes on different timelines.

The Government has pointed to the 2014 collapse of care.data as a lesson, saying the SPR has been designed with stronger legal safeguards, audit trails and clinical-purpose protections.

The 2026 to 2028 rollout timeline

The rollout is phased. In 2026 the project is in design and prototype mode. NHS England and the Department of Health and Social Care are working with clinicians, the public and technology suppliers to design the core system and, importantly, the audit-trail features. Some limited public consultation is expected during 2026. Some patients can already see new GP record entries inside the NHS App, but that is the existing GP online access service. It is not the Single Patient Record.

The first clinical use of the SPR is scheduled for 2027, starting in two specific areas: maternity care and frailty care. For maternity, teams across community midwifery, hospital obstetrics and neonatal services will work from a shared view. For frailty, the SPR will help coordinate care for complex older patients moving between their GP, community geriatrics and a hospital trust.

The patient-facing rollout, where you can see your own SPR via the NHS App, is planned for 2028. That includes audit trails showing who has accessed your record and when. Wider clinical rollout to other specialties will follow. Given that NHS digital programmes have a history of slipping, treat the dates as a direction of travel rather than a hard promise. In 2026 itself, nothing on your NHS App changes because of the SPR.

What data is shared and who can access it

The SPR pulls together several data sources. That includes your GP records, so medications, allergies, long-term conditions and consultation notes. It also includes hospital admission and outpatient letters, A&E attendance notes, community service records, mental health records, maternity and child health notes, immunisation history, key test results and care plans.

Access is role-based and tied to direct care. A hospital doctor treating you can see your GP record when they need it. Your GP can see relevant hospital letters and test results. Community pharmacy access is limited. Social care access is being scoped separately. Not every NHS employee will see your full record. Receptionists, finance clerks and managers will not have routine access. An audit trail records who looked at your record and for what clinical reason.

Use of your data for research and planning sits in a separate framework, covered by the existing National Data Opt-Out. The Government has stated the SPR itself will not be for commercial sale and will not be sold to insurers or marketers. Critics, though, have asked for that promise to be written into the Bill itself rather than left as ministerial assurance.

The legal basis and your GDPR rights

Your health information is special category data under UK GDPR Article 9. Processing it needs both a lawful basis under Article 6 and a special-category condition under Article 9. The mandatory data sharing for the SPR is being set up through primary legislation, the NHS Modernisation Bill, which is the strongest possible legal basis. The Common Law Duty of Confidentiality applies on top of that, which is why the Bill includes provisions for statutory consent and audit.

Your data protection rights under UK GDPR are unchanged. You have the right to see your data (a subject access request, free of charge), the right to have inaccurate data corrected, and the right to ask for processing to be restricted in certain cases. The right to erasure does not apply to clinical records that providers are legally required to keep.

The Information Commissioner’s Office regulates the data protection side. The Care Quality Commission regulates the clinical side. If you are unhappy with how your data has been used, you complain in writing to the NHS provider involved, then escalate to the ICO if you are not satisfied.

BMA, Palantir and the trust question

The British Medical Association has raised significant concerns. The BMA GP Committee for England has said it was not properly consulted on the form of the SPR, who can access it, what it is for or which supplier will operate it. Dr Mark Coley, the GPC England IT lead, has argued that GPs should remain the data controller for the GP record portion of the SPR, rather than control moving to the DHSC.

The BMA has also raised concerns about the possible involvement of Palantir, given the company’s existing 330 million pound contract to run the NHS Federated Data Platform and prior privacy debates. Palantir publicly responded by accusing the BMA of choosing ideology over patient interest.

The underlying issue here is public trust. The 2014 care.data scheme failed mostly because the public did not understand the data flows and lost trust. Privacy International, MedConfidential and the Doctors Association UK warn the SPR could repeat that pattern if there is no clear working opt-out for direct-care sharing, no public-facing audit trail and no published code of access before launch. The Government says these features will be in place by the 2028 patient rollout. As of May 2026 the detail is not yet decided.

How to opt out, and what the opt-outs actually do

There are currently two opt-out mechanisms, with a third under discussion. The first is the National Data Opt-Out, set at your-data-matters.service.nhs.uk. This opts you out of your confidential patient information being used for research and planning. It does not stop your data being used for your own direct care, so on its own it will not stop your data flowing into the SPR.

The second is the Type 1 opt-out, applied at GP practice level. It instructs your GP not to share your identifiable GP record outside the practice for purposes other than your direct care. You set it by writing to your practice. The Type 1 opt-out is currently under Government review.

A possible future opt-out specifically for direct-care sharing in the SPR is being discussed but is not guaranteed in the Bill as drafted. Worth understanding the trade-off here. Opting out of direct-care data sharing carries a real clinical risk. If you have a medical emergency away from your usual GP, the treating team may not have access to your medication list, allergies or recent test results.

What this means for you in 2026

For the rest of 2026, the practical impact on your day-to-day NHS experience is minimal. Your existing NHS App services, so viewing your GP record, ordering prescriptions and booking appointments, all keep working as they do now. The SPR itself is in a design phase with no patient-visible changes this year.

The practical actions for an informed patient this year are straightforward. Review your National Data Opt-Out preference once a year on the NHS website. If you have strong privacy concerns, ask your GP practice about the process for setting a Type 1 opt-out. Keep the NHS App up to date and your contact details correct. Respond to any public consultation on the SPR when it opens. And do not feel pressured to opt out without understanding the trade-offs.

The SPR is designed to make your direct care safer and more efficient. Opting out of that sharing has real consequences for your clinical safety.

Frequently Asked Questions

When does the NHS Single Patient Record actually launch?

The Single Patient Record was legislated for on 15 May 2026 in the NHS Modernisation Bill, but it does not go live in 2026. The design and prototype phase runs through 2026. First clinical access for maternity and frailty care begins in 2027. Patient-facing access via the NHS App is planned for 2028, with wider rollout to follow. NHS digital programmes have a habit of slipping, so the dates may move.

Can I opt out of the Single Patient Record?

As of May 2026 there is no specific SPR opt-out written into the Bill. The existing National Data Opt-Out blocks the use of your data for research and planning only, not direct care, so it will not stop your data being used in the SPR. The Type 1 opt-out at your GP practice limits identifiable GP-record sharing outside the practice for non-direct-care purposes. Watch the Bills passage for any new SPR-specific opt-out route.

Will my employer or insurer see my SPR data?

No. The SPR is for direct NHS care only. DHSC has stated the SPR will not be sold to insurers, marketers or employers. The Information Commissioners Office regulates how the data is used and you would have legal grounds to complain if your data was disclosed outside direct care. Critics including MedConfidential want this written into the Bill rather than left as ministerial promise, but the policy intent is clear.

How is the SPR different from care.data?

Care.data, launched in 2014, was a centralised research dataset that collapsed because the public did not understand what it was. The SPR is being framed as a direct-care tool, not a research dataset. It carries primary legislation, an audit-trail requirement and statutory access controls. Critics including the BMA argue the SPR could still erode trust if those features are not properly built. The lesson from 2014 is that detail and transparency matter more than slogans.

Will Palantir run the Single Patient Record?

No formal SPR operator has been confirmed in May 2026. Palantir already runs the NHS Federated Data Platform under a 330 million pound contract, which has fuelled concerns that Palantir will also be involved in the SPR. The BMA has said Palantir is incompatible with its values. DHSC has not announced the SPR supplier yet. The procurement is expected during 2026-2027.

Will my mental health record be in the SPR?

Yes, but with stronger access controls. Mental health records are widely recognised as needing extra protection. The SPR design includes restricted access for sensitive records such as mental health, gender identity, sexual health and safeguarding notes, meaning only clinicians involved in your direct care can see them. Detail is still being worked out in 2026. The British Association for Counselling and Psychotherapy and Mind have asked for clarity in the Bills code of practice.

What about Scotland, Wales and Northern Ireland?

The Single Patient Record under the NHS Modernisation Bill applies to NHS England only. Scotland is rolling out a Digital Front Door and integrated record on its own timeline through NHS Scotland. Wales has its Welsh Clinical Portal expanding. Northern Ireland uses Encompass. The four UK nations exchange limited data through the Spine and the NHS App. Patients in the devolved nations should follow their own NHS authoritys updates.

This article is informational only and does not replace personalised advice from your GP, pharmacist, or another qualified healthcare professional.