The original idea around the NHS spine was that people would have a legitimate relationship with the customers data. So a doctor treating them but not someone r

The original idea around the NHS spine was that people would have a legitimate relationship with the customers data. So a doctor treating them but not someone random they had no intreaction with. The key was keeping an audit of all the access and updates so at the very least you could determine after the fact if a breach had occurred. Patients don't have access to their spine data however so its impossible for them to administrate it and ensure only those they want to see things do. It doesn't ensure its owned by you only controlled with trust in the NHS spine but still it could have been a lot better than it has been if the project had continued.