Private Equity Puts NHS Patient Records System in TPG Hands

The NHS presents patient records as protected public infrastructure, but the company behind records used by more than half of GP practices in England is now owned by US private equity.

That is the tension at the center of TPG’s purchase of Optum UK, in a deal worth about $400m (£300m), according to Guardian World. The fight over NHS patient records is not only about whether a new owner can directly see patient data. The deeper issue is who owns the digital systems that English primary care depends on every day.

TPG’s £300m Optum UK deal turns NHS GP records into a private equity test case

The expected story would be routine healthtech consolidation. A corporate owner sells a software business. A new investor promises continuity. Contracts and regulation stay in place.

The reality is sharper. Reports around the sale have focused on the electronic patient record infrastructure used by most GP practices in England, including EMIS systems. That makes the buyer’s incentives a public-interest issue, not a standard back-office transaction.

Doctors, campaigners, MPs and human rights groups have raised concerns that the transfer happened with too little public scrutiny, despite the company’s connection to systems handling millions of NHS patient records.

The central dispute is not simple. Ownership does not automatically mean access to identifiable data. But ownership can shape investment priorities, product roadmaps, resale decisions and the leverage a supplier has over the public sector.

That is where the alarm sits.

The Optum UK sale shows why NHS patient records are now a trophy infrastructure asset

The reported price, about $400m (£300m), signals the strategic value of software embedded inside public healthcare. The asset is not just code. It is position.

EMIS software is used by more than half of GP practices in England. That gives the systems around it a major role in managing electronic health records for millions of patients, according to the Guardian’s reporting. In practical terms, this makes the company one of the NHS’s most significant primary care technology providers.

XOOMAR analysis: that embedded role is why this deal has drawn a reaction far beyond normal M&A coverage. A supplier that touches everyday primary care workflows carries a different kind of value from a generic software vendor. The NHS needs digital systems to function. GP practices need continuity. Patients rarely get a meaningful choice over which corporate structure sits behind their records.

The business logic is clear, even if the source material does not disclose TPG’s investment plan. A platform already used across a large share of English general practice is hard to treat as optional. The more operationally critical it becomes, the more sensitive questions become around pricing, upgrades, service quality and future ownership.

A simple before-and-after view captures the shift:

• Before: Public concern around the ownership of GP records software was less visible.
• After: TPG owns Optum UK, according to the Guardian’s reporting.
• Constant: NHS patient data remains governed by existing UK data protection and NHS oversight frameworks.
• Changed: Public concern now centers on private equity incentives, future resale risk and whether scrutiny arrived too late.

Doctors, MPs and TPG are reading the same transaction in opposite ways

The critics see a governance failure. Their concern is that sensitive NHS data systems can move through corporate transactions without enough visible public debate or patient-facing explanation.

That criticism links this deal to a broader political discomfort around NHS data and foreign technology suppliers. The Palantir controversy is the obvious reference point. A separate report covered by The Daily Perspective said medical groups and privacy campaigners warned that Palantir’s £330m NHS Federated Data Platform contract, awarded in 2023, could create risks around sensitive patient information, while Palantir and NHS officials said safeguards apply.

Supporters of these arrangements argue that ownership changes do not automatically weaken legal protections or data controls. The public concern is institutional. Patients do not negotiate these arrangements. They do not choose their GP software provider. If they want normal NHS care, their data is likely to pass through systems selected by institutions, not individuals.

That is why consent feels abstract here.

Britain’s NHS data fights keep following the same script

The pattern is now familiar. Officials and vendors emphasize better systems, contractual limits and operational safeguards. Campaigners warn about mission creep, private incentives and data architecture that could outlast the current political promise.

This TPG deal differs from the Palantir dispute in one key way. The concern is not primarily a single national data platform. It is the ownership of a company connected to software already sitting inside general practice at scale.

XOOMAR analysis: that makes this controversy harder to contain. A new platform can be delayed, narrowed or rejected by local bodies. An incumbent system used by more than half of GP practices is already woven into the service. Scrutiny after the transaction feels late because the operational dependency already exists.

For readers tracking how data-access disputes are spreading across sectors, XOOMAR has also covered Big Tech Blocks Digital Services Act Data Access in EU Test and health AI claims in OpenAI Claims ChatGPT Health Can Outreason Clinicians. The contexts differ, but the pressure point is similar: sensitive systems become political once private actors control key layers of access, analysis or infrastructure.

Private equity control raises questions that ordinary software contracts do not answer

Even if a private equity owner does not directly access or use identifiable NHS patient records, that does not close the governance file.

The questions now sit elsewhere:

• Access controls: Who can audit who touches data, when, and why?
• Subcontractors: Which third parties may support systems connected to NHS records?
• Cyber resilience: What security duties apply after ownership changes?
• Future sale: What happens if TPG later sells the asset?
• Product direction: Who decides which upgrades, integrations or analytics features get prioritized?

None of those questions require assuming misuse. They arise because infrastructure power is not the same as data theft. A firm can influence a public service through pricing, service levels, technical dependencies and roadmap decisions without ever improperly viewing identifiable patient records.

That is the gap critics are pointing at.

The strongest pro-deal argument is that UK law, NHS contracts and operational controls still govern the data. The strongest version of the critics’ argument is that contractual safeguards can be too narrow when a private owner controls software that clinicians rely on daily.

The government is the actor being asked to explain the public-interest safeguards.

Regulators must decide whether GP records software is critical infrastructure

Any corporate or national-security review process would not, on its own, end the policy question.

If NHS patient records infrastructure is treated as another software market, ownership changes can proceed mainly through corporate and national security review. If it is treated as critical health infrastructure, the bar should be higher.

Stronger safeguards could include public transparency reports, binding limits on data access, clearer audit rights, resilience obligations, restrictions or approval triggers on onward sale, and penalties that matter. Those are policy options, not confirmed features of this deal.

XOOMAR’s view: routine clauses are not enough when a vendor sits inside everyday NHS care at national scale. The issue is not whether private companies can serve the NHS. They already do. The issue is whether patients, clinicians and Parliament can see enough to trust the arrangement.

The next fight will be about resale risk and who captures the upside

The immediate question is whether ministers will explain the safeguards around TPG’s ownership of Optum UK. The next one may be harder: what happens when ownership changes again.

Private equity ownership often ends in a later transaction, and one likely concern is what happens to the systems and safeguards if TPG later sells the asset. That is the flashpoint to watch. Confirmation of the thesis would come if MPs push for a stronger public-interest test on major NHS technology ownership changes, or if regulators demand more disclosure around access, audits and resale conditions.

The thesis weakens if the government, EMIS and TPG provide detailed, enforceable safeguards that satisfy clinicians and patient groups, not just corporate counsel.

Until then, the NHS digitisation agenda faces a trust problem of its own making. Patients are being asked to accept private control over critical health software without much visibility into the bargain. That may be legally defensible. Politically, it is a fragile settlement.

Impact Analysis

• The deal puts core NHS GP record systems under US private equity ownership, raising questions about public control of health infrastructure.
• Even without direct access to identifiable patient data, ownership can influence investment, pricing, product strategy and future resale decisions.
• The sale has intensified calls for greater scrutiny of private control over digital systems used across NHS primary care.