Accountability as Alibi

The room: £226 million in 25 minutes

On 16 April 2026, a board met for 25 minutes and approved £226 million.

The body was the Extraordinary Board of Digital Health and Care Wales (DHCW) — the all-Wales NHS digital monopoly, and the direct continuation of the nationally disgraced NHS Wales Informatics Service (NWIS) it replaced, carrying forward the same leadership and the same culture of non-delivery under a new name. The decision was a Microsoft Enterprise Agreement: £189,082,310 excluding VAT (£226,898,772 including VAT). It was a direct award via Trustmarque contract P159.07 under a Crown Commercial Services framework — no competitive tender. It had been pre-approved by the Acting Director of Finance. It bundled 3,100 mandatory Copilot AI licences. It was the largest single spend commitment in the organisation's five-year record.

Four fields on the paper illustrate the problem. Risk: "No risks to escalate." Corporate Risk: N/A. Quality Impact Assessment: N/A. Duration: 25 minutes. (DHCW SHA Extraordinary Board, 16 April 2026.) And one fact from the room itself: the Chief Executive was not in it. The meeting opened by recording apologies from Helen Thomas, DHCW's CEO; the £226 million was presented by the Acting Director of Finance and approved in her absence.

Hold one further fact alongside those four. For four years from its establishment in April 2021, DHCW operated at escalation Level 1 — routine monitoring. On 11 March 2025 it jumped straight to Level 3 — Enhanced Monitoring, skipping Level 2, the intermediate "Area of Concern" tier, entirely. And on 8 April 2026, DHCW's own committee papers record the next step: "On the 8 April 2026 Welsh Government confirmed DHCW's escalation status had increased to Level 4 — Targeted Intervention, with concerns around delivery, accountability and leadership." (DHCW Portfolio Delivery Committee papers, 30 April 2026, Item 5.1, §3.5.) Only one tier sits above Level 4: Level 5, Special Measures — direct ministerial intervention, up to the suspension or replacement of board members.

Now hold the two dates together. 8 April. 16 April. A body whose own papers record it had just been placed under the most intensive tier of oversight the Welsh Government had imposed on it to date approved the largest single commitment in its history eight days later, in 25 minutes, and recorded no risks to escalate.

The governance theatre was complete. A board convened. Papers were circulated. A vote was taken and minuted. What was absent was scrutiny: a board that signs £189 million in 25 minutes under no risks to escalate is ratifying a decision already made, not interrogating one.

This is the keyhole view into the prevailing reality of accountability theatre at Digital Health and Care Wales. What it shows is not a failure of accountability but accountability working as designed — the form present, the substance absent. Every instrument that follows answers a single question: how this meeting was possible.

Principle collision: Goodall 4.7 (Transparency — no competitive basis disclosed); Goodall 4.8 (Governance — a 25-minute sign-off against his own standard of decisions embedded in governance structures).

The doctrine the room was bound by

Before the aperture widens, fix the standard the 25-minute room — and every instrument after it — is bound by.

The floor is Nolan. Every holder of public office in the United Kingdom is bound by the seven Principles of Public Life, codified by the Committee on Standards in Public Life, without anything to sign. The principle of accountability states it plainly:

"Holders of public office are accountable to the public for their decisions and actions and must submit themselves to the scrutiny necessary to ensure this."

(The Seven Principles of Public Life, Committee on Standards in Public Life.)

That is the procedural floor under everyone named here. The ceiling is one that Andrew Goodall set for himself. In a signed witness statement to the UK COVID-19 Inquiry — INQ000396878, filed 8 January 2024, verified by a Statement of Truth under Rule 9 of the Inquiry Rules 2006 — Goodall, as Permanent Secretary and Principal Accounting Officer of the Welsh Government, set out eight principles that he claimed had guided his pandemic leadership. A knowing falsehood in a document verified by Statement of Truth is an offence under section 35 of the Inquiries Act 2005, carrying up to two years' imprisonment.

Two of the eight are load-bearing here, and are quoted verbatim:

4.7. Transparency; clear and transparent communications, and an honest conversation with the population of Wales was essential to building and maintaining public confidence and understanding.

4.8. Governance; while decisions needed to be made urgently and at pace, both within the Welsh Government and by and for NHS Wales, I was always conscious of the need to embed our decision making in our governance structures and processes, and clear in the governance requirements I set for the system.

This is the measuring rod. Every instrument below is tested against it: Goodall's 4.7 and 4.8, and Nolan's accountability, openness and honesty. The standard was set by the man who chairs the bodies that govern the people who run DHCW — and it was set under penalty of statute.

The sentence that does not finish

The body that signed in 25 minutes is under the most intensive oversight the Welsh Government had imposed on it to date. The document that should explain how it got there stops at a colon.

In the Governance Statement of DHCW's 2024-25 Annual Report, the sentence recording why the Welsh Government placed DHCW under Enhanced Monitoring reads in full:

"The rationale for the decision to increase the escalation status was the ongoing challenges with pace and delivery on key national priorities, including:"

Nothing follows. The next rendered line begins a new subject. In a 206-page governance document, the colon is unresolved. (DHCW Annual Report 2024-25, Governance Statement.)

The rationale that is missing is the rationale for the very intervention that became Level 3 in March 2025 and then Level 4 in April 2026 — the chain that begins this article. The document that is supposed to record why the most serious regulatory action in DHCW's history was taken records the word "including" and then says nothing.

The oversight system's own conduct compounds it. Level 2 — designated "Area of Concern" — exists precisely to give early, structured warning. It was skipped after four years at Level 1. The apparatus did not escalate at its first designed warning point; when it finally moved, it moved past the warning tier altogether.

It will be said the blank is a PDF conversion artefact. It may be. But the blank is the image; the pattern is the argument, and the pattern is documented below.

Principle collision: Goodall 4.8 (Governance); Nolan: accountability.

The public account that never mentions the intervention

The omission is not confined to one unfinished sentence. Consider how DHCW speaks about itself to the outside world while under intervention.

In January 2026, ten months into Level 3 Enhanced Monitoring, Helen Thomas — DHCW's Chief Executive, previously Director of Information at NWIS in 2017 and then its Interim Director, the predecessor body she omits entirely from her own public record — published her voluntary public quarterly update to stakeholders. It opened:

"As we welcome in the new year, the pace of digital transformation across NHS Wales continues. We have ambitious plans for digital and data services over the coming 12 months which will bring benefits to patients, clinicians and the wider health system."

The update does not mention Level 3. It does not mention Enhanced Monitoring. It does not mention the nine programme failures named in the Welsh Government's own Escalation Framework. It does not reference the Remit Letter of 14 March 2025, which imposed over 100 new deliverables on DHCW outside its Integrated Medium Term Plan. WICIS — paused pending independent review — does not appear. Digital Maternity Cymru — closed — does not appear. The National Eye Care Programme — paused by the Welsh Government — does not appear. The Welsh Nursing Care Record and Paediatrics — descoped from build to design only — do not appear.

What the update does report is a number: "71% of the plan has been delivered, with 75% of DHCW owned actions being completed." (DHCW Quarterly Update, January 2026.) The plan in question is the action plan arising from an independent review that found only 13.3% of stakeholders rated DHCW highly. No external verification accompanies the self-reported figure. The remedial context does not appear in the document that reports the remedial progress.

This is not a historical omission. It is present practice, in the CEO's own voluntary public communication, still on the record.

Principle collision: Goodall 4.7 (Transparency); Nolan: openness, honesty, accountability.

The compliance document silent on the thing it certifies

From the CEO's public voice to the formal compliance record behind it: the document the annual report cites to prove compliance is silent on the very intervention it is supposed to reflect.

The Annual Quality Report 2025 — the formal compliance document for the year Level 3 was imposed — contains zero references to Level 3, to Enhanced Monitoring, or to any of the nine programme failures named in the Welsh Government's Escalation Framework of May 2025.

The loop is self-sealing. The Annual Report 2024-25 cites the Annual Quality Report as evidence that compliance obligations were met. The cited document is silent on the intervention it is cited to prove.

The same clustering shows in internal audit. The published annual report records one finding as Limited Assurance — "These include four allocated Reasonable assurance and one Limited assurance" — with the subject of that single Limited Assurance finding never named.

Principle collision: Goodall 4.7 and 4.8; Nolan: accountability, openness.

The pledge approved in fifteen seconds

The same reflex that approved £226 million in 25 minutes operated two years earlier, in the same board, on a different instrument.

On 25 July 2024, the Chief Executive brought a Compassionate Leadership Pledge to the board for signing. She did not write it — the compassionate-leadership framework is a national HEIW product — but she sponsored its adoption at DHCW personally, describing it, in her own words, as "a cause close to my heart, as I know you all appreciate." (DHCW Board, 25 July 2024, CEO report, Item 4.2.) Thomas — who ran information at NWIS before the rebrand, a predecessor body notorious for a culture of bullying and opacity that the Senedd's Public Accounts Committee branded the "antithesis of open" — championed it personally.

The board approved it in under fifteen seconds. No member asked what the pledge committed the organisation to, how it would be measured, or how it squared with the state of the workforce. The minute records the outcome in a single line: "The Board APPROVED the Compassionate Leadership Pledge."

Later in the same meeting, the staff survey was presented. Eighty per cent engagement was celebrated and tied, explicitly, to the pledge just signed — evidence, the board was told, that DHCW was "a compassionate leadership organisation, as we discussed earlier." Buried in the same figures: "the frustrated and burnt out 65%," and 58% reporting excessive workload pressure. The operations directorate — thanked, in the same meeting, for the "out of hours weekend working" that had just delivered a data-centre migration — was the worst affected. The recorded response was "no surprises."

The pledge is the form. A workforce two-thirds frustrated and burnt out, recorded in the same papers, is the substance.

Principle collision: Nolan: leadership; and the organisation's own compassionate-leadership doctrine, invoked by the CEO as a personal cause in the very meeting its workforce reported 65% burnout.

The spend on the wrong line

The performance the board endorses and the spend it signs sit in the same accounts.

Until 2023-24, DHCW classified software maintenance and licences — its largest recurring operational spend — under "Premises." In 2022-23, approximately £43,789,000 sat beneath that line. External accounting-standard pressure — not a DHCW initiative — forced a 2023-24 reclassification to a named line: "Computer software licences and maintenance contracts (DHCW only)" at £45,326,000. In 2024-25 it stands at £48,231,000 — approximately 27% of DHCW's total operating expenditure. (DHCW Annual Report 2024-25.)

DHCW did not volunteer the reclassification; the minimum accounting standard was eventually met. The substance it was designed to produce — who holds the contracts, on what terms, at what cost — remains withheld. The suppliers behind 27% of the organisation's operating expenditure are never named in the published accounts. Nor is the line it was moved off any clearer: on the "Premises" heading that remains, DHCW does not disclose the actual cost of leasing any of the premises it occupies.

Principle collision: Goodall 4.7 (Transparency); Nolan: openness.

Three executives, three nil declarations, three titles

The reclassification forced by an external standard is the financial expression of the same minimum-met reflex that governs the declarations register.

The University of Wales Trinity Saint David does not appear in DHCW's audited Related Party Transactions — Note 30 — across four consecutive audited years. Cardiff University and Bangor University appear. UWTSD does not. (DHCW Annual Report 2024-25, Note 30.)

Helen Thomas — CEO of DHCW and, before it, Director of Information at its disgraced predecessor NWIS — holds a UWTSD Professor of Practice title, conferred 9 December 2020 at the same event where she signed the WIDI Memorandum of Understanding. WIDI — the Wales Institute for Digital Information — is a strategic partnership between UWTSD, the University of South Wales and DHCW (then NWIS), formed to develop the digital workforce of NHS Wales through degree, MSc and continuing-professional-development programmes. Thomas is herself a Director of WIDI. Through it, DHCW — a public body — sustains a continuing commercial relationship with the partner universities, which deliver paid education and training to its own staff. The chief executive therefore sits on both sides of that relationship at once: a Director of the institute, the head of its public-sector partner, and the holder of a professorship from the university that runs it. In her signed witness statement to the UK COVID-19 Inquiry, verified by a Statement of Truth under Rule 9 — INQ000226462 — she describes herself as "a Professor of Practice at University of Wales Trinity St David." The title appears in a statutory inquiry record. It does not appear on the DHCW declarations register. Her last entry, dated 2 April 2024, records Nil. No 2025-26 filing exists at all. Under intervention, the CEO of a roughly £600 million body has no current declaration of interest on file.

Rhidian Hurle filed a Nil Declaration on 1 April 2025: "Rwy'n cadarnhau nad oes gennyf ddim byd i'w ddatgan / Nil Declaration." His own DHCW board biography states a UWTSD Professor of Practice title; DHCW's own publications date it inconsistently — the biography says 2023, the documented CATALYSE conferral ceremony was March 2024. Either way, the declaration omits the title, and the discrepancy is itself a record-keeping failure on the published register.

Ifan Evans declares three private directorships but not his UWTSD Professor of Practice title from the March 2024 CATALYSE ceremony. Evans joined DHCW on secondment from the Welsh Government, where he held the role of Director, Technology, Digital and Transformation (Goodall witness statement INQ000396878, para 183). Whether a Welsh Government director who shaped digital strategy now carries a declarable interest in the body executing it has not been addressed in any published declaration.

All three titles were administered through the UWTSD Institute of Management and Health, whose Dean — Wendy Dearing, a former NWIS Head of Workforce and DHCW colleague of Thomas — sits across the same network. The question is what a parliamentarian, a patient, or an auditor would expect to see disclosed when the institution holds a Memorandum of Understanding with DHCW underpinning an undisclosed commercial relationship and has conferred Professor of Practice titles on three current board members — and whether its absence from Note 30 across four audited years has ever been explained. The question is not whether UWTSD is a related party; it is why the document designed to answer that question has never engaged it.

Principle collision: Goodall 4.8 (Governance); Nolan: integrity, openness.

The portal that advertises its own closure

The pipeline that produces these executives has its own transparency instrument. It is a notice announcing it will not open.

The NHS Wales Culture, Leadership and Succession (CLS) Board — chaired by Andrew Goodall, overseeing the executive talent pipeline — maintains a public-facing portal on the HEIW (Health Education and Improvement Wales) NHS Wales Leadership Portal. Its public page carries a plain-text notice:

"The documents available are only accessible to NHS Wales staff."

(NHS Wales Culture, Leadership and Succession Board portal, HEIW NHS Wales Leadership Portal, captured 19 April 2026.)

Five board agendas (July 2023 to November 2024), five HEIW Quarterly Leadership Updates, and a Terms of Reference are listed. Every document links to staff-only SharePoint. The page was last updated 10 January 2025 — a sixteen-month gap at the date of this article. The transparency instrument exists. It is a notice saying the transparency instrument will not function.

Goodall chairs this board. He also chaired the body that advised on which executives would ever reach the positions now under scrutiny.

Principle collision: Goodall 4.7 (Transparency); Nolan: openness, leadership.

The machine behind the room

Now the 25-minute meeting can be explained. It sits inside three interlocking loops.

A pattern this consistent, across this range of instruments, over this period, admits two readings — incompetence, or design. Each instrument meets its minimum and none produces what it was designed to produce. The accountability structures are not absent; they are operating, exactly as the preceding documents show. What follows is the engineering diagram of the machine that made the 25-minute room possible. A loop is closed when the body meant to constrain an organisation shares membership with the organisation it constrains — so no correcting signal can enter from outside.

The patronage loop. Andrew Goodall chaired the National Talent Management Board that advised on senior NHS Wales executive appointments. A January 2021 post on the HEIW NHS Wales Leadership Portal recorded its establishment:

"The national Talent Management Board will be established in February, chaired by Dr Andrew Goodall, with Alex Howells as Vice Chair. This national Board will advise on the inclusive and transparent NHS Wales operating model required to develop and support existing and aspiring executive talent."

(HEIW NHS Wales Leadership Portal, January 2021.)

Goodall also chairs the Culture, Leadership and Succession Board — the body that controls what is disclosed about that same talent pipeline. The body that advises on who reaches NHS Wales leadership and the body that controls disclosure about the pipeline are chaired by the same person. This is a structural feature that has not been the subject of any publicly recorded scrutiny.

The credential loop. Three current DHCW board members hold UWTSD Professor of Practice titles — a designation absent from UWTSD's own Ordinances and carrying no formal appointment policy in the Academic Quality Handbook 2023-24. The Dean who administered them is a former NWIS Head of Workforce and DHCW colleague of Thomas. The conferring institution does not appear in four years of audited Related Party Transactions. The loop is self-contained: the network that places executives confers the titles used to credential them, and the audit that should disclose the relationship does not.

The compliance loop. Every disclosed item meets the minimum standard while withholding the information the minimum standard was designed to produce. The Annual Quality Report exists; it does not mention Level 3. The declarations register exists; three Professor of Practice relationships are not declared. The quarterly update is published; it omits ten months of Enhanced Monitoring. The governance statement is filed; the rationale for Level 3 is a grammatically open clause. The extraordinary board met; it approved £226 million in 25 minutes with no risks to escalate and no chief executive present.

The body that built this architecture has now conceded, in the Cabinet Secretary's own words, that NHS accountability arrangements are "complex, data-heavy, burdensome for NHS organisations, lacks transparency and does not drive improvement." (Welsh Government written statement, 23 March 2026.)

What DHCW would say, and what the record shows

Each of these instruments has a defence. Each defence shares the architecture of the instrument it defends: the minimum met, the substance withheld.

"The £189 million Microsoft Enterprise Agreement is a legitimate direct award via a Crown Commercial Services framework."

The legality of the framework is not challenged. The absence from the board paper of the framework basis, the alternatives considered, and a quality-impact assessment is. A board approving £189 million in 25 minutes with no risks to escalate is approving a process, not scrutinising one.

"The blank governance-statement rationale is a PDF conversion artefact."

Plausible, and acknowledged. But the Level 3-free Quality Report is not an artefact, and the unnamed Limited Assurance subject is not an artefact. The blank is the image. The pattern is the argument.

"DHCW's accounts comply with NHS Wales accounting standards and are audited by Audit Wales."

Compliance is not transparency. NHS England bodies must publish per-supplier spend above £25,000 and full unredacted board papers. The Welsh equivalent does not require it.

"Internal audit reports go to the Audit and Risk Assurance Committee, the proper governance venue."

ARAC disclosure is not public disclosure. Audit Wales names subjects publicly as standard. The decision not to disclose is the point.

"UWTSD does not meet the NHS accounting-standard definition of a related party."

The definition turns on influence. The question is what a parliamentarian, a patient, or an auditor would expect to see disclosed, and whether the four-year Note 30 absence has ever been explained. Thomas has no 2025-26 filing on the published register; Hurle's own board biography states the Professor of Practice title his declaration omits. The question is not whether the filings comply with the minimum framework — it is what the minimum framework does not require them to record.

"Andrew Goodall's oversight of DHCW is indirect — structural distance."

Structural distance is not absence of accountability. He chaired the body that advised on NHS Wales executive appointments. He chairs the CLS Board that controls pipeline disclosure. In a witness statement verified by a Statement of Truth under Rule 9, he set out the governance standard for the system. That system was subsequently placed at Level 3 — skipping Level 2 — and then at Level 4. The structural-distance argument and the published governance principles do not coexist without scrutiny.

The renewal decision

The body that built the architecture has conceded, in the Cabinet Secretary's words, that it does not drive improvement. What it has not conceded is that the failure is not a defect of the framework but its function. A system that produces the form of accountability without its substance is not broken. It is doing what it was built to do.

The article opened on a single 25-minute sign-off. It ends on a single renewal decision. Andrew Goodall's contract as Permanent Secretary expires in October 2026 — confirmed by a parliamentary answer of 19 May 2025 (HL6915). It is the first major NHS governance decision of the new Senedd, under First Minister Rhun ap Iorwerth.

The choice before the incoming First Minister is not whether to remove one executive from one organisation. It is whether to dismantle the architecture — the Talent Management Board, the Culture, Leadership and Succession Board, the credential network, the compliance loops that produce the form of accountability without its substance — or to reappoint the architect and continue.

A body whose own papers record it had been placed under Targeted Intervention approved £226 million in 25 minutes and recorded no risks to escalate. The question is whether anyone with the power to scrutinise that ever will.

October 2026.

CareNHS welcomes a response from DHCW and the Welsh Government to the matters raised in this article. No response has been received to date.

Related: £226 Million. 25 Minutes. No Risks to Escalate — the same sign-off, dissected on its own | Delivery, Accountability and Leadership — the alibi in real time: told the truth in writing, laundered it back through Copilot | The Credential Sprint — the professorships behind the declarations | Two Whistleblowers — what happens when someone challenges the alibi | Congratulations. Now Clean the Stables. — the incoming government's choice