Summary Report: Systemic Failures in GP Clinical System Migration (EMIS to SystmOne)
Prepared for: ICB, PALS, Practice Manager and PPG Review Group
By: A patient at the practice
This report summarises the failures experienced by thousands of patients following the Phoenix Health Group, Cirencester, GP practice's migration from the EMIS clinical system to TPP SystmOne. The issues span lack of basic patient communication to ensure a smooth transition and critical patient safety failures related to cross-system data access, including hospital access to patient records, and weaknesses in the NHS app.
Please note: This report is from a 'patient reality' point of view. As such the patient is using his own language to describe what he has observed. Every organisation he has worked with in his former professional life has their own jargon so he has had to use (or invent) his own. It is his hope that those responsible are able to 'translate' his jargon into theirs.
The GP Practice Manager deserves to be commended for her efforts in encouraging TPP UK SystmOne staff to open up channels of communication with NHS App people.
------------------
Due to her persistence some faults in the NHS App are currently being corrected. JUYI might also have been reconnected to GP patient records earlier than expected. This is awaiting confirmation.
Executive Summary
The transition resulted in widespread patient dissatisfaction and created a critical patient safety risk due to a fundamental failure in pre-planning, communication, and technical verification. The local failures demonstrate a significant disconnect between the "NHS internal implementation bubble" and "Patient Reality": Patients need continuity of access and safety.
The most severe failure is the loss of hospital access to patient records, forcing vulnerable patients to recall complex medical histories during critical pre-assessment for surgical procedures. This is an unacceptable breakdown of care continuity.
1. Failure of Patient Communication and Service Continuity
Patient expectations were fundamentally mismanaged, leading to immediate distrust and high administrative burden on the practice.
2. Critical Interoperability and Patient Safety Failure
The most severe consequence of this transition is the immediate safety risk posed by the loss of access to the GP record by secondary care providers.
The Failure: Local hospitals are currently unable to view patient records necessary for pre-assessment screenings for operations. This failure indicates that the new SystmOne installation was not correctly configured to "Share Out" data to the wider health economy (via established mechanisms like GP Connect, Shared Care Record or JUYI).
The Patient Safety Impact: Patients, often in pain, distressed, or dealing with acute illness, are being forced to recall their complete medical history, including allergies, medication reactions, and diagnoses, from memory. This was further exacerbated by the disappearance of documents in the NHS app, useful if consultants are unable to access GP patient records.
Currently the GP practice system transition is inherently unreliable and significantly increases the risk of:
-
Adverse Drug Reactions: Due to missed allergy/medication data.
-
Procedural Delays/Cancellations: Due to incomplete pre-assessment information and patients loss of access to their own documents.
-
Emotional Harm: Due to the burden placed on vulnerable individuals.
3. Analysis of Responsibility and the NHS 'Bubbles'
The inability to link patient needs with implementation choices demonstrates a systemic failure of governance and prioritisation across multiple actors:
-
TPP UK (System Supplier): Accountable for ensuring its training and migration support materials highlight the maintenance of interoperability as a non-negotiable patient safety step. Given their extensive experience, this specific failure is a known, preventable risk that their process should have actively guarded against.
-
Integrated Care Board (ICB) / Digital Delivery Partner: Accountable for Oversight and Assurance. The ICB is responsible for the entire local care system. They failed to implement a mandatory, independent verification step with the local Acute Trust to confirm GP record access was operational before confirming the GP migration as complete.
Action Recommendations
To address the immediate fallout and prevent recurrence of these systemic failures, the following actions are recommended for implementation and policy review:
A. Immediate Service and Patient Safety Restoration
-
Mandatory Interoperability Check: The ICB must immediately liaise with the local Acute Trust and the GP Practice to jointly verify and test the SystmOne configuration to restore hospital read/write access (JUYI) to GP records as soon as possible.
-
Public Acknowledgment: The ICB and TPP UK must issue a clear, written apology to all registered patients & the GP practice, acknowledging the failures in communication and assuring them that the safety risk regarding hospital access is being immediately resolved.
B. Systemic Policy Changes for Future Migrations
-
Formal ICB Assurance Gateway: Implement a mandatory, non-negotiable 'Patient Safety Assurance Gateway' in the GP migration process. This gateway only opens when the local Acute Trust (Hospital) formally confirms its ability to view patient records (via GP Connect/JUYI/Shared Care Record) from the new system.
-
Supplier Accountability (TPP/EMIS): Future national contracts must require suppliers like TPP UK to include patient safety verification staff on site during go-live to assist the Practice Manager in validating key interoperability settings, with clear financial penalties for post-migration interoperability failures that compromise patient care.
-
PPG Empowerment and Training: The ICB and PALS must develop a training module for PPGs specifically on IT Migration Risk, focusing on patient-facing systems (Apps, prescriptions) and the importance of advocating for continuity of care. PPGs should be mandated to receive training and remain engaged during transition periods.
-
National App Improvement Mandate: The NHS App development team must be mandated to improve the utility for chronic disease management, allowing for clearer presentation, graphing, and filtering of specific results (e.g.,HbA1c) to support self-management.
Area of Failure | Observed Impact (Patient Reality) | Analysis of Responsibility |
|---|---|---|
Online Services | Patients expected little difference. Instead, EMIS services (Patient Access) vanished immediately, and were replaced without warning. Additionally all patients regardless of longevity with the practice were treated as 'new' to the practice which meant that important documents and test results prior to the transition 'disappeared'. | Those with responsibility for the GP transition failed to be mindful of the impact on patients. TPP UK: Failed to inform the GP Practice of necessary patient pre-migration communications detailing the change in online access portals (e.g., from EMIS to Airmid). TPP UK: Failed to inform the Practice Manager that previously visible patient documents would disappear from view. |
Prescription Ordering | Changes to the ordering process (e.g., app/portal change) were not communicated, leading to high volumes of complaints and disrupted medication access. The GP Practice was unable at first to communicate the new prescription ordering process. | TPP UK: Did not adequately train the Practice Manager on how to manage the patient-facing side of prescription continuity during the switch. |
Patient App Adoption | The GP Practice was not informed of the new app (Airmid) which meant that patients were not told about Airmid (TPP's patient-facing app) and were redirected only to the NHS app. The existing NHS App is currently difficult to use and poorly organised for managing chronic conditions. | NHS Digital: Responsible for the design and utility of the national NHS App, which, for patients, is demonstrably inadequate for complex clinical data presentation (e.g., tracking HbA1c trends for diabetics). |
To analyze the provided report through the lens of sociopathy (or primary psychopathy) as conceptualized by Hervey Cleckley, David Lykken, and Robert Hare, it is essential to translate clinical diagnostic criteria into an organizational context.
Strictly speaking, sociopathy and psychopathy are personality disorders applied to individuals, defined by specific affective, interpersonal, and behavioral deficits. Institutional entities—such as TPP UK or Integrated Care Board (ICB) administrative units—do not possess human consciousness or psychiatric conditions.
However, applying the structural frameworks of Cleckley, Lykken, and Hare to the behaviors documented in the text allows us to evaluate whether the actions and systemic failures described display functional analogs or evidence of sociopathic operational patterns.
Cleckley’s framework centers on the "mask"—a polished outward appearance of competence, rationality, and normal function that disguises an underlying absence of emotional resonance, genuine empathy, and moral accountability.
In the provided text, potential indicators aligning with Cleckley’s criteria include:
-
Superficial Charm vs. Internal Empathy Deficit
-
Cleckley Criterion: Outward presentation of a smooth, functional system hiding a profound inability to experience or care about human suffering.
-
Evidence in Report: The text notes a "significant disconnect between the 'NHS internal implementation bubble' and 'Patient Reality.'" While the institutions operate under formal administrative protocols ("go-live," "migration complete"), they display an apparent emotional indifference to the physical and psychological harm inflicted on vulnerable patients forced to recall complex medical histories while in pain or facing surgery.
-
-
Lack of Remorse or Shame
-
Cleckley Criterion: An inability to experience genuine guilt for damage caused to others, often coupled with a failure to acknowledge responsibility.
-
Evidence in Report: The report explicitly calls for a "clear, written apology" from the ICB and TPP UK. The necessity for the author to demand a public acknowledgment highlights that the responsible entities did not spontaneously offer contrition or demonstrate remorse after creating severe patient safety risks.
-
-
Incapacity for Object Love or Deep Interpersonal Relations
-
Cleckley Criterion: Viewing people instrumentally rather than as human beings with intrinsic value.
-
Evidence in Report: The systemic treatment of long-standing patients as entirely "new" to the practice—resulting in the disappearance of historic records, test trends, and documents—reflects an administrative posture that reduces living patients to abstract data entries, disregarding their human continuity and health history.
-
Lykken’s research highlights two primary concepts: the Low-Fear Hypothesis (an innate inability to anticipate or be deterred by negative consequences) and Sociopathy (a failure of proper socialization, governance, and moral conditioning).
In the provided text, potential indicators aligning with Lykken’s concepts include:
-
Passive Avoidance Learning Deficit (Low-Fear Analog)
-
Lykken Concept: Psychopathic individuals fail to learn from past errors or adjust behavior to avoid known negative outcomes because the threat of future consequences does not deter them.
-
Evidence in Report: The report explicitly notes that for TPP UK, interoperability failure is a "known, preventable risk that their process should have actively guarded against." Despite extensive industry experience and the predictable risk of patient harm, the organization proceeded with the migration without verifying safety settings. This demonstrates a systemic absence of risk aversion or anticipatory anxiety regarding failure.
-
-
Sociopathic Defect in Governance and Social Contract
-
Lykken Concept: Sociopathy arises when environmental structures, training, and socialization fail to instill prosocial norms and moral responsibility.
-
Evidence in Report: The failure of the ICB (the oversight body) to enforce a mandatory verification step before marking the migration "complete" points to a breakdown in regulatory socialization. The institutional "culture" prioritized project sign-off over the basic social contract of patient safety.
-
Hare’s Psychopathy Checklist-Revised (PCL-R) measures two primary factors: Factor 1 (Interpersonal/Affective traits like callousness and grandiosity) and Factor 2 (Social Deviance/Unstable behavior like irresponsibility and lack of realistic goals).
There potential indicators aligning with Hare's criteria which include:
-
Callousness / Lack of Empathy (Factor 1)
-
Hare Criterion: Callous disregard for the feelings, rights, or welfare of others.
-
Evidence in Report: The transition resulted in "emotional harm due to the burden placed on vulnerable individuals" and left acute care providers unable to view drug allergies or medical histories. The willingness of supplier and oversight entities to launch a system without testing basic interoperability reveals a callous indifference to the physical consequences borne by the patients.
-
-
Irresponsibility and Failure to Accept Responsibility (Factor 2)
-
Hare Criterion: Repeated failure to fulfill obligations and a habit of shifting blame or ignoring systemic duty.
-
Evidence in Report: The text details how administrative burdens and patient communications were dumped onto the local Practice Manager without adequate support or training from TPP UK. The vendor and ICB abdicated their basic operational responsibility to ensure service continuity, forcing local staff and patients to absorb the crisis.
-
-
Parasitic or Exploitative Operational Pattern (Factor 1/2 Combo)
-
Hare Criterion: Exploiting the effort or reliance of others for one's own gain without delivering the implied value.
-
Evidence in Report: TPP UK provided migration services while failing to supply essential training materials, patient-facing guidance, or safety verification staff on site. The report notes that future contracts must mandate financial penalties for such failures, implying that under current operations, vendors extract contractual value while transferring the operational risk and harm entirely onto the public sector and patient base.
-
Conclusion
If evaluated strictly against the research of Cleckley, Lykken, and Hare, the report does not provide direct evidence of individual clinical sociopathy, as it does not isolate individual psychological profiles.
However, the report documents institutional analogs of sociopathic behavior:
-
Cleckley’s "Mask": The bureaucratic appearance of a successful technical migration masking an underlying void of empathy for patient reality.
-
Lykken’s "Low-Fear / Socialization Deficit": A failure to learn from known past risks and a systemic breakdown of governance and accountability.
-
Hare’s "Callous Irresponsibility": The offloading of risk onto vulnerable populations, absence of spontaneous remorse, and disregard for safety-critical responsibilities.