Unfit for the future? Revisiting the national cross sectional study of digital clinical safety in England’s NHS to identify drivers of low compliance and implications for the 10 Year Health Plan (BMJ, 18 August 2026)

Summary

Digital transformation is a foundational shift in the NHS 10 Year Plan, but compliance with statutory digital clinical safety standards (DCB0129/0160) is not monitored or enforced. A national cross sectional study found that 70.1% of digital health technology deployments across NHS England organisations lacked documented assurance.

Through analysis of previously unpublished Clinical Safety Officer (CSO) workforce data and secondary analysis of freedom of information (FoI) responses, this study sought to identify drivers of low compliance to inform safety improvements.

239 NHS trusts and integrated care boards were surveyed by FOI request. CSO capacity (whole time equivalent, WTE) data were analysed. Qualitative data (unprompted free text commentaries) were analysed independently by two researchers applying a mixed approach: deductive content analysis (exemptions claimed) and abductive thematic analysis (volunteered explanations).

Results found that 211 organisations responded. Mean CSO capacity was 1.1 WTE. NHS trusts reported higher capacity (mean 1.3 WTE) than integrated care boards (mean 0.4 WTE). Qualitative responses suggested the values overstated actual capacity, with CSO duties typically performed alongside clinical roles. Thematic analysis identified four mutually reinforcing drivers of non-compliance: lack of understanding of the standards, immature governance infrastructure and oversight, ineffective assurance processes and workforce fragmentation and role dilution.

The 10 Year Health Plan risks propagating patient harm at an unprecedented scale; the NHS lacks the safety architecture to support the digital transformation envisaged. The authors propose a new model incorporating Care Quality Commission regulatory enforcement, National Quality Board defined quality standards and workforce professionalisation, and a hybrid framework combining centralised safety assessment with local risk management.