Question to the Department of Health and Social Care:

To ask the Secretary of State for Health and Social Care, what steps his Department is taking to ensure that NHS systems used by (a) GPs and (b) pharmacies are protected against IT outages in Surrey Heath constituency.

Business continuity is a shared responsibility between IT service providers, general practices, and pharmacies. The Frimley Integrated Care Board collaborates with general practices to enhance their resilience planning, which includes reviewing current arrangements, adopting best practices, and preparing for worst-case scenarios. This approach ensures practices are well-equipped to manage any IT disruptions effectively.

For example, the Patient System, which is a patient record system used by general practices, can operate in business as usual mode when offline so that local functionality can continue if web services are interrupted. Many sites are prepared for Main Network, Health and Social Care Network, outages so that they can continue to access and share information. Sites are equipped with laptops featuring Virtual Private Network capabilities, which can connect to mobile hotspots if the primary network internet connection is unavailable.

All National Health Service community pharmacy owners are required to have a business continuity plan in place to address temporary service suspensions under their terms of service. All registered community pharmacy premises are regulated by the General Pharmaceutical Council, which sets expectations regarding business continuity planning and IT resilience. Pharmacies are expected to develop robust plans that incorporate proactive risk assessments, preparedness measures, and comprehensive response and recovery strategies. These plans must ensure that essential services, such as medication dispensing and patient care, can continue during disruptions, including power outages, network failures, or physical security breaches.