The National Data Resource — known across NHS Wales as the NDR — is the single biggest digital programme Digital Health and Care Wales has ever run. NDR was to be the foundation on which the NHS Wales App, integrated care records, cancer informatics, genomics research, and the entire promised "value-based healthcare" future of NHS Wales would depend.

The 2019 Programme Business Case that committed Wales to NDR set an aggressive Phase 1: the platform was to be created by December 2020 and "fully established" and "delivering significant benefit" from January 2021 onwards — essentially the same week DHCW itself was founded as a Special Health Authority. It was sold to Welsh Government on a £57 million ten-year cost envelope, a £195 million real-terms benefits envelope (£151.5 million in net-present-value terms), and a six-year payback.

DHCW today claims a 2030 horizon for the platform's ambitions — but that horizon is the current framing, not the original promise; the goalposts have moved by nearly a decade. By 2025-26, year seven, £35.7 million had been spent. No Welsh Health Board uses it in service.

And DHCW's own January 2025 Phase 4 Business Plan, disclosed on 17 May 2026, restates the ten-year programme cost to £73.6 million and the modelled benefits NPV from £151.5 million to approximately £41 million — a £16 million overspend and a £110 million benefits downgrade recorded in writing inside the document DHCW itself sent to Welsh Government, without notice to the Senedd, Welsh Government's scrutiny bodies, or the public.

In April 2025, sitting in an Audit and Assurance Committee, Digital Health and Care Wales's Executive Director of Strategy Ifan Evans — fifteen years in the Welsh Government authoring A Healthier Wales before he was seconded to DHCW to implement it, his career path traced in The Revolving Door — summarised the state of the same programme in a sentence that should have ended a career.

"We've built a really fantastic technological platform. But until there's data in it, we can't use it for much."

Seventeen words. £35.7 million in committed spend. Six years of payback period elapsed. Seven Welsh Health Boards none of which uses the platform in service. The Executive Director of Strategy of the body whose entire reason for existing is to deliver this programme conceded, on the record, that it is empty.

He did not name what was missing. He did not name who had failed to put data in. He certainly did not name the leaders who had presided over the construction of the empty platform. Eleven months later, when the same organisation went to Level 4 — Targeted Intervention, with concerns around "delivery, accountability and leadership" — those same leaders were still in post. (Evans's full record of on-record NDR statements is collected at What They Said Themselves.)

No officer of Digital Health and Care Wales has been held to account for the failure of the National Data Resource to deliver against its 2019 Programme Business Case and its 2021/22 Annual Plan commitments. No formal accountability outcome — performance management, role review, formal warning, demotion, departure — appears on the public record. In fact, the post-holder whose direct duty was to deliver the programme, Rebecca Cook, was promoted in May 2024 from NDR Programme Director (a role she had held at DHCW since June 2021) to Chief Data Officer at DHCW, a senior executive-band post. In the same window, senior technical figures who held scrutiny-adjacent positions — Welsh Government's Chief Digital Officer Mike Emery, who chaired the NDR Programme Board; DHCW's Associate Director of Architecture; DHCW's Chief DevOps Officer — left the function, were re-titled, or were moved sideways. Wales paid £35.7 million for a platform with no data. The person whose job was to fix that was promoted. The people whose job was to question it left.

This is the story of a national flagship programme its leaders cannot acknowledge has failed. Not because the failure is hidden — every load-bearing fact in this article is from a public document or a transcribed public meeting — but because the people closest to acknowledging it are structurally unable to.


What Wales was promised

The promises had two formal documents and one inaugural moment.

The inaugural moment was the founding board meeting of Digital Health and Care Wales on 1 April 2021 — DHCW's first day as a Special Health Authority and its first board meeting. The chair was Bob Hudson (Interim). The Chief Executive was Helen Thomas (Interim), who had transferred from the disgraced predecessor body, the NHS Wales Informatics Service (NWIS), where she had been Director of Information from 2017 and subsequently Interim Director and Chief Executive. The board's executive complement opened the new organisation by formally taking ownership of NWIS's existing portfolio — including the National Data Resource programme, which had been in flight since the 2019 Programme Business Case. The graph of evidence drawn from that meeting records the founding self-description: "zero outstanding issues or risks on day one."

Six months later, the new organisation set out its commitments in writing.

In October 2021, DHCW published its Annual Plan 2021/22, signed by Helen Thomas as Interim Chief Executive and Bob Hudson as Interim Chair. The plan named NDR as one of three flagship programmes (alongside Cancer Informatics and Digital Services for Patients and the Public) and committed the new organisation to "Continue collaboration with the National Data Resource Programme to build the enablers of an open, interoperable architecture from which NHS Wales can derive value and insight from the intelligent use of clinical data" (Plan reference 1.03, status: "Continuous.") The full 2021/22 Annual Plan and how each commitment has aged across five years is set out in The Five-Year Crash Against Reality. The promises were now in writing, attached to the new organisation, signed by the two people running it.

Behind the Annual Plan sat the underlying business case.

On 14 June 2019, a 64-page Programme Business Case was submitted to Welsh Government. Its cover names the version (v8.0), the date (14 June 2019), and the Senior Responsible Owner — Dr John Peters, then chair of the Welsh Information Standards Board. Wales, the document said, would build a National Data Resource — the "NDR" — and through it deliver:

  • a £57.2 million total lifetime cost over ten years (FY 2019/20 to FY 2028/29), inclusive of inflation and a 20% contingency
  • £195 million of real-terms benefits (£240 million nominal, with inflation) over the same period
  • a six-year payback on the preferred option, with a net present value of +£106.9 million
  • a "Data Promise" to Welsh citizens: "No identifiable data about you will leave health and care without either your explicit consent or legal requirement for that to be done"
  • 121 full-time roles saved through process automation
  • 8 lives a year saved through faster diagnostics by the end of the programme
  • a 1.2% uplift in staff engagement

The largest single benefit line, accounting for 59% of the modelled net present value, was £89.5 million in increased research application funding — predicated on Wales becoming attractive enough as a data jurisdiction to win Wellcome Trust and UK public research grants on the back of the NDR.

The business case named three "critical dependencies", each described as essential to the programme's benefits:

  1. The National Information Governance framework, including the Data Promise
  2. Capacity and capability of staff
  3. Data quality

"Addressing these dependencies is vital to the NDR, if they are not addressed then we will not be able to realise the full benefits the NDR will enable." — NDR Programme Business Case v8, June 2019

That, in summary, is what Wales was promised. The cost was knowable. The benefits were quantified. The dependencies were named. The Senior Responsible Owner had signed. The new Special Health Authority had taken ownership of the programme at its founding board meeting on 1 April 2021 and reaffirmed the commitments in its first Annual Plan six months later. Plan reference 1.03 made the promise "Continuous." In other words: forever.

The promises vs the record

Every promise the 2019 Programme Business Case and 2021/22 Annual Plan made about NDR is now testable against the documentary record. The contrast, line by line:

2019 PBC / 2021 Annual Plan promise2026 reality
Phase 1 — "NDR created" — by December 2020. Phase 2 — "NDR fully established", "delivering significant benefit" — from January 2021 onwards (PBC Section 3, phase plan).The goalposts have moved by nearly a decade. DHCW's current IMTP 2025-28 frames the all-Wales clinical data repository ambition with a 2030 horizon. The platform that was meant to deliver significant benefit from January 2021 is described, in April 2025 by the Authority's own Executive Director of Strategy, as one that "can't be used for much" because there is no data in it.
£57.2M total lifetime cost over 10 years (FY 19/20 → FY 28/29), inclusive of inflation and 20% contingency.£35.7M spent by year 7 (FOI/6695830, 28 April 2026) — 63% of the 10-year envelope spent at the seven-year mark. 2025-26 single-year spend of £8.24M is the highest yet, with three years still to run. DHCW's own January 2025 Phase 4 Business Plan now records the 10-year programme cost at £73.6 million — a £16.4 million overspend acknowledged in writing, in the same document DHCW sent to Welsh Government as its formal funding ask.
£195M real-terms benefits (£240M nominal-with-inflation) over the 10-year programme.Silently restated down 73 per cent. DHCW's own January 2025 Phase 4 Business Plan §9.4 reproduces the original PBC benefits table — but with the NPV columns reduced to approximately £41 million across the visible benefit lines. The £89.5 million research-funding line (59 per cent of the original benefit case) has been quietly restated to £24 million. The £20.5 million workforce-reduction line is now £6 million. The £15.3 million commercial-research line is now £4 million. Cabinet Secretary Jeremy Miles, 12 February 2026: DHCW "remains some distance from being able to consistently quantify return on investment, articulate realised benefits across Wales or demonstrate the scale of digital investment is matched by measurable improvements for citizens and clinicians."
Net positive return of £106.9M by end of programme (NPV: −£44.7M costs offset by +£151.5M benefits, Option 5 preferred in 2019 PBC). By March 2026, full Return on Investment was supposed to have been recovered, with the programme then generating a surplus for Wales for years 7-10.No Return on Investment recovered. None. The Cabinet Secretary cannot find it. Welsh Government has placed the programme under enhanced monitoring. The Director-General has written to DHCW about transparency failures. There is no surplus. There is no payback. There is only £35.7 million in committed spend, the £16.4 million further overspend DHCW has already admitted, and an empty platform.
Six-year payback on the preferred Option 5. Year six = March 2026. Even the 2019 PBC's upper-bound +20% sensitivity scenario (Appendix 9), with an additional 20 per cent applied to every cost line, still modelled payback at year seven.Payback period elapsed March 2026. Payback has not occurred. DHCW's own February 2026 Benefits Approach Assurance presentation — initially listed as an FOI/6695830 enclosure but only delivered in a supplementary release on 17 May 2026 — records the FY 25/26 quarterly benefits register as £2,553,698 (Q1) + £1,613,192 (Q2) + £457,152 (Q3) — a declining quarterly trajectory totalling £4.6 million against the 2019 PBC's £24.4 million year-7 commitment. Approximately 19 per cent of the year-7 promise, on a falling line. DHCW is now performing below even its own 2019 worst-case modelled scenario.
£89.5M research grant uplift (59% of modelled NPV benefits) — Wales becoming attractive for Wellcome Trust and UKRI funding because of NDR.No Wellcome Trust or UK Research and Innovation grant publicly attributed to NDR capability has been identified. DHCW's own Phase 4 Plan §9.4 has silently restated this line from £89.5 million NPV to £24 million NPV — a 73 per cent downgrade of the single largest benefit in the original investment case, without consultation, without notice to Welsh Government scrutiny bodies, and without notice to the public.
Data Promise to Welsh citizens: "No identifiable data about you will leave health and care without either your explicit consent or legal requirement for that to be done."Not delivered. The 2019 PBC's Phase 1 Business Justification Case (§2.5) explicitly acknowledged the Data Promise would require legislation: "This will require the development of a new policy framework to support appropriate sharing and use of information and a national conversation with the Welsh population on the benefits of using health data." No such legislation has been brought forward. By 2026, the General Practitioners Committee Wales is refusing to share GMS data with NDR on GDPR Article 5.1 proportionality grounds (formally tabled at the 29 January 2026 Public Accountability Meeting). The Information Governance framework named as Critical Dependency #1 in 2019 was named again at PAM January 2026 — seven years later — as the proximate cause of NDR not working.
Critical dependency #1: National Information Governance framework.Not delivered. DHCW's own corporate risk register has IG risk at the highest level (Digital Governance and Standards Committee, 22 May 2025).
Critical dependency #2: Capacity and capability of staff.Internal Audit gave limited assurance on recruitment. Staff burnout, per the July 2025 DHCW staff survey, is approximately 69% (up from 65% in July 2024).
Critical dependency #3: Data quality.Not publicly assessed. DHCW's own Executive Director of Strategy, April 2025: "We've built a really fantastic technological platform. But until there's data in it, we can't use it for much."
121 full-time NHS Wales roles saved through process automation enabled by NDR (a benefit modelled across the wider NHS Wales workforce, not inside DHCW itself).The opposite of what was promised. The 2019 PBC committed £33.8 million — 64% of the entire ex-inflation £52.8M cost envelope — to an NDR Team operating inside DHCW. DHCW's own January 2025 Phase 4 Business Plan §11.8 records 81 full-time-equivalent positions structurally allocated to the NDR programme inside DHCW: 59 filled plus 22 vacancies, as at November 2024. Across the same period, no process-automation saving anywhere in the wider NHS Wales workforce has been quantified or publicly evidenced. Wales did not save 121 FTEs through NDR. DHCW structurally allocated 81 new FTEs to run a platform that has no data in it. The combined headcount swing against the original promise is in the order of 200 posts in the wrong direction.
8 lives per year saved through faster diagnostics by end of programme.Unevidenced. The eMPI master patient index — foundational to identity resolution across NHS Wales — has been on a contract cliff with IBM since late 2024.
1.2% staff engagement uplift.Burnout up; engagement down. Two whistleblowers documented; one of the most senior digital officials in Wales (the Welsh Government Chief Digital Officer Mike Emery) was sidelined and has moved to the Welsh Local Government Association.
Plan reference 1.03 (2021/22 Annual Plan, status: "Continuous"): "NDR open interoperable architecture from which NHS Wales can derive value and insight from the intelligent use of clinical data."NDR amber at all 7 Health Boards in DHCW's own alignment matrix (IMTP 2025-28). Only NWSSP — the back-office shared service — is recorded as "in use." After seven years and £35.7 million, not in operational use at any of the seven Welsh Health Boards.
Senior Responsible Owner Dr John Peters (chair, Welsh Information Standards Board) signed the 2019 PBC.Operational custody transferred to DHCW exec cadre by April 2021. The Chief Data Officer who runs the programme today has not been mentioned at any DHCW board or standing committee meeting since September 2023.

Every left-column item comes from a document Welsh Government accepted in 2019, or one DHCW's two interim leaders signed in 2021. Every right-column item comes from a document, FOI response, transcribed public meeting, or published audit released since. The detail behind each row is set out below.


What Wales got

On 28 April 2026, in response to a Freedom of Information request — FOI/6695830 — DHCW disclosed the year-by-year expenditure on the NDR programme from 2019-20 to 2025-26. The figures, in cash terms:

Financial yearTotal spend
2019-20£907,662
2020-21*£2,795,614
2021-22*£4,856,540
2022-23£6,911,061
2023-24£6,062,762
2024-25£5,888,276
2025-26£8,243,687
Total years 1–7£35,665,602

*The FOI footnote acknowledges: "All funding provided to the NDR programme for 2020-21, and for approximately the six months of 2021-22 was utilised in response to the Covid-19 pandemic." NDR money was redirected to Covid response and was not delivering NDR scope. DHCW's own January 2025 Phase 4 Business Plan (§8) puts a quantum on this: "approximately £13m of funding received to date relates to Covid" — meaning more than a third of all pre-2025 NDR spend was spent on Covid response, not on the National Data Resource.

By year seven of ten, DHCW has spent 62.6% of the £57M ten-year cost envelope. The 2025-26 single-year burn rate of £8.24 million is the highest of any year, with three years of the original programme still to run.

The original envelope will be exceeded. It already has been, on DHCW's own record. DHCW's January 2025 Phase 4 Business Plan — its formal funding ask to Welsh Government, disclosed in the FOI/6695830 supplementary release of 17 May 2026 — re-states the 10-year programme cost from £57.2 million to £73.6 million. The £16.4 million overspend is acknowledged in writing inside the document DHCW itself sent to Welsh Government as the basis for further Phase 4 funding.

Phase 4 itself — covering 2025-26 and 2026-27 — asks for £9.2 million plus £9.6 million, £18.8 million in total, against the 2019 PBC's plan of £4.5 million plus £4.6 million for those same two years (£9.1 million). DHCW is asking for approximately double the original envelope for years seven and eight — the years originally scheduled to be in the programme's surplus-generation phase.

DHCW's letter accompanying the FOI states the funding position from Welsh Government in plain terms: "Welsh Government confirms budget allocation for the NDR programme annually, and at this point there is no confirmed funding. Therefore, there is no confirmed budget envelope until the end of the programme."

The 2019 PBC committed Wales to a six-year payback period on the preferred option. Year six ended in March 2026.

DHCW's own Integrated Medium Term Plan 2025-28 (released in March 2025 and disclosed to a third-party FOI requester in January 2026 as FOI/6523156) contains an alignment matrix. The matrix colour-codes which national digital services are "In Use" at each of the seven Health Boards, Velindre Cancer Centre, the Welsh Ambulance Service, Public Health Wales, Health Education and Improvement Wales, NWSSP and the NHS Wales Executive.

The line marked "National Data Resource (NDR)" reads amber — "Intended Availability" at all seven Health Boards. Only NWSSP, the back-office shared service, is recorded as "in use". Powys, Swansea Bay and Public Health Wales are recorded as "Use of platform".

After seven years and £35.7 million of public money, DHCW's own published assessment is that the National Data Resource is not in operational use at any of the seven Welsh Health Boards.

On 12 February 2026, the Cabinet Secretary for Health, Jeremy Miles, wrote to DHCW that the organisation "remains some distance from being able to consistently quantify return on investment, articulate realised benefits across Wales or demonstrate the scale of digital investment is matched by measurable improvements for citizens and clinicians." The 13 April 2026 response to ATISN 26790 — sent by Welsh Government — confirmed NDR is one of nine DHCW programmes under Level 3 enhanced monitoring.

So: the payback period has elapsed. No Health Board uses the platform. The Cabinet Secretary cannot find the return on investment. Welsh Government has placed it among nine programmes that need enhanced monitoring. And the platform itself, in the words of DHCW's Executive Director of Strategy, "can't be used for much" because it has no data. NDR's place in the wider DHCW financial-waste picture is set out in Financial Waste and The Scale of Failure.


What is NDR, actually?

Before going further, the "fantastic technological platform" framing of NDR deserves a closer look. The 2019 PBC modelled £18 million for "Data Engineering" inside an NDR Team line that absorbed £33.8 million — 64% — of the entire ex-inflation cost envelope. The pitch was that Wales would build a National Data Resource: an Authority-owned hybrid platform with academic partnership (Option 5, the preferred option, scored 3.8 in the 2019 PBC weighted evaluation against four alternatives including outsourced and managed-private-cloud).

What DHCW actually built is a different question.

The publicly documented procurement footprint of NDR's underlying technology is straightforward:

  • September 2022: A four-year reseller agreement with Computer Centre, ceiling £10 million, for Google Cloud capacity. The agreement appeared in the 29 September 2022 board's strategic procurement report. Minimal scrutiny is recorded in the transcript of that meeting. The agreement itself is absent from the published version of the same transcript. The minimal-scrutiny pattern is documented across DHCW's nine-figure procurement track record in £226 Million. 25 Minutes. No Risks to Escalate.
  • December 2023: A multi-year, dollar-denominated commitment to Google Cloud entered "just before Christmas" and described as "quite a significant commitment for the organisation" by the Chief Operating Officer at the 25 January 2024 board. The board paper containing the commitment had a VAT calculation error that was disclosed at the meeting; the disclosure was stripped from the published transcript.
  • DHCW's own IMTP 2025-28 refers to "NDR's Google Cloud platform" in the Secure Data Environment section. The Welsh Reference Data and Terminology Service is committed to "replatform to NDR" in 2026/27 with the move sitting on top of NDR's Google Cloud architecture.
  • FOI/6695830 software-licensing line: NDR software-licensing spend went from £168,377 in 2019-20 to £1,627,962 in 2025-26 — roughly tenfold growth. By comparison, hardware/infrastructure spend has stayed marginal (£24,137 in 2025-26). The growth is in subscriptions, not capital build.

The pattern is consistent: each of these procurement disclosures was stripped from or minimised in the published version of the meeting transcript in which it was discussed. The wider DHCW practice of board-minute sanitisation is documented in How They Falsify the Public Record and the standing inventory of withheld data — programme costs, contract values, salary anomalies, recruitment audit findings — is set out in What They Don't Publish.

What this financial structure describes is not a built platform but a rented one. The Authority did not build national-grade infrastructure with its £35 million; it bought Google Cloud capacity and employed a team to operate within it. The 2019 PBC's preferred Option 5 — Authority-owned hybrid — was replaced in practice by something that more closely resembles Option 2 (Managed Private Cloud, scored 2.1 in the original evaluation) or Option 4 (Outsourced, scored 1.95) — both options the PBC explicitly rejected on weighted assessment.

The 2019 PBC's longlist, set out in Appendix 3 of the Programme Business Case, considered eleven options before narrowing to the shortlist of five. The longlist included Authority-owned public cloud on AWS or Azure infrastructure (Options 2A and 2B), fully outsourced public cloud arrangements (Option 7A), and fully outsourced private cloud (Option 7B). All of the pure-public-cloud options were considered and rejected at the longlist stage in favour of the preferred Option 5, an Authority-owned hybrid mainly on-premise. The 2022 Google Cloud arrangement that DHCW ultimately implemented is closest in structure to the longlisted-but-rejected Option 2A. The category of architecture Wales now has was specifically declined at the 2019 business-case stage.

The pivot to a cloud-first architecture was named formally in DHCW's Phase 2 Business Justification Case, dated January 2021 — eighteen months before the September 2022 Computer Centre reseller agreement. The Phase 2 BJC §6.1 records the new direction in plain terms: "The NDR programme is following the IT cloud-first approach set out by Welsh Government. This BJC sets out the plan to incrementally move to a cloud-based approach and this will be accelerated in phase 2." As of January 2021, the platforms in play were an Azure NDR alpha environment and an AWS proof of concept at Swansea Bay UHB. No Google Cloud yet. The eventual Google selection happened inside Phase 2 (2021-23), per DHCW's own Phase 4 Business Plan §5.6. The decisive architectural pivot away from the 2019 PBC's Option 5 took place inside the BJC document, before the Special Health Authority that would inherit the programme was even formally established.

This matters for two reasons.

First, the "fantastic technological platform" framing is doing work it cannot bear. When the Executive Director of Strategy says "we've built a really fantastic technological platform", the load-bearing word is built. What is on the public-record procurement trail is the consumption of a Google product that thousands of organisations worldwide also consume. The build is the configuration, the team, and the integrations — much of which, as later sections of this article describe, has not produced operational data flows. A managed cloud product is not a national data resource. It is the venue in which one would have to be built.

Second, the lifetime cost calculus changes. The 2019 PBC modelled £57 million over ten years assuming a build that becomes an asset. A rented platform never becomes an asset; the subscriptions continue past year ten, in perpetuity, at whatever rate the supplier sets. The £35.7 million spent to year seven includes years of subscription costs that will continue indefinitely. If software licensing continues at £1.63 million per year, the Authority will pay another £16 million on the subscription alone in years 8-17. The 2019 NPV calculation does not survive contact with this reality.

The Welsh public has paid £35.7 million. The Authority has not, on the available evidence, built anything. It has bought Google Cloud capacity, hired staff to point at it, and called the result the National Data Resource. The questions that follow — about empty data, absent leadership, and the structural reason no one can acknowledge any of this — are easier to understand once the "fantastic technological platform" framing is set aside.


The platform that holds no national data

The 2019 PBC named, as critical dependency number one, a "National Information Governance framework" including the Data Promise. By 2026, this dependency has materialised as the most-cited reason for NDR not working.

At the 22 May 2025 Digital Governance and Standards Committee, DHCW's Information Governance lead Darren Lloyd warned that the corporate information governance risk had been raised to the highest level on the risk register: "It is at the highest level within our corporate risk register and is there for a reason." He went on to explain that citizen trust risk had increased "as a result of us moving quite quickly now into that program space and getting achievements from it, but not actually getting over the line because we haven't got the data."

Two months later, at a Portfolio Delivery Committee Extraordinary Board Meeting on 10 July 2025, Ifan Evans disclosed that NDR required all NHS Wales organisations to enter a joint data controller agreement under the Wales Accord on the Sharing of Personal Information (WASPI) before data could flow. Some Health Boards, he conceded, "have a different view on the legal basis of the duty of confidentiality and the balance between data controllership and data processor status." His confidence in delivery was, in his own words, "reasonable confidence end of July rather than high."

In the same meeting, Evans disclosed a figure with no easy parallel in any other UK digital programme:

"There are almost a thousand documented data flows for different use cases into the NDR into the DHCW environment... Managing almost a thousand documented privacy notices and data flows is an onerous overhead."

Almost a thousand documented data flows. An onerous overhead. A programme designed in 2019 to simplify national data movement is, by 2025, managing nearly a thousand parallel privacy notices because the underlying framework it was supposed to enable was never built.

By 16 March 2026, the public framing had narrowed further. At a Portfolio Delivery Committee Extraordinary Board Meeting that month, the Independent Member David Selway and Andrew Hill questioned Evans about an AI forecasting dashboard built with Aneurin Bevan University Health Board.

"Given the vast amount of taxpayers' money," Hill said, "I'm surprised it remains a choice."

Evans replied that government direction may be needed. "That isn't within the gift of DHCW and it's very hard to measure DHCW on it."

Three years earlier, at the board of 30 March 2023, the same Ifan Evans had told the same board:

"There's not going to be a test against those benefits as to whether to turn off the NDR or not. You know, the NDR will be mainlined into everything."

That statement was deleted from the published version of the transcript. Public-record viewers were told the meeting did not produce that line. The full transcript, recovered from the unedited recording, shows that DHCW's Executive Director of Strategy described his flagship as irreversibly embedded in 2023 — and by 2026, the same Director conceded that he could not deploy it without ministerial fiat.

A programme that is, by its own architect's account, simultaneously too embedded to switch off and too optional to deploy. That is the public record. The reader can decide what kind of programme that describes.


The benefits DHCW quietly deleted

The 2019 Programme Business Case sold Welsh Government an investment thesis. It was specific, monetised, and load-bearing. The £57 million ten-year cost envelope was approved on the strength of a £195 million benefits envelope (£151.5 million in NPV terms). The benefits had names, owners, and quantitative targets. They were:

Benefit line (2019 PBC, Option 5)NPV £m
Research application funding increase89.5 (59% of the entire benefit case)
Workforce cost reduction20.5
Commercial / private research funding15.3
Other benefit lines (variation reduction, A&E response, paper usage, value-based care, etc.)~26
2019 PBC total NPV benefits, Option 5~151.5

Plus, on the non-monetised side: 121 full-time-equivalent NHS Wales posts saved through process automation; 8 lives a year saved by the end of the programme through faster diagnostics; a 1.2 per cent uplift in staff engagement.

Wales becoming attractive enough as a data jurisdiction to win Wellcome Trust and UK Research and Innovation funding because of NDR was, by NPV weight, the entire investment case. The other monetised lines were ballast.

Six years on, this thesis is testable. None of the 2019 PBC's monetised benefits have been delivered. No Wellcome Trust or UKRI grant publicly attributable to NDR capability has been identified. No NHS Wales workforce reduction through NDR-enabled automation has been quantified. No commercial / private research income line has been reported. The Cabinet Secretary, in writing in February 2026, confirmed DHCW "remains some distance from being able to consistently quantify return on investment."

What DHCW has done instead, on the public record, is replace the investment thesis.

The Phase 4 Plan silently restated the benefits NPV from £151.5M to ~£41M

DHCW's January 2025 Phase 4 Business Plan, in §9.4, reproduces the original PBC's benefits table. But the NPV columns have been rewritten. The headline lines now read:

Benefit line2019 PBC NPV £mPhase 4 Plan §9.4 NPV £mChange
Research application funding increase89.524−73%
Workforce cost reduction20.56−71%
Commercial / private research funding15.34−74%

The other benefit lines in §9.4 — reductions in A&E response time, unnecessary testing, A&E admissions, paper usage, unwarranted variation, emergency planning — sum to approximately £7 million NPV. Value-based healthcare is listed as "£TBC".

The visible total NPV benefits in the Phase 4 Plan's restated table is approximately £41 million — against the 2019 PBC's £151.5 million.

This is a £110 million downgrade of the modelled NPV benefits of NHS Wales's largest digital programme, recorded in writing inside DHCW's own document — without consultation, without notice to Welsh Government scrutiny bodies, without notice to the Senedd, and without notice to the public.

The restatement does not appear in any DHCW board meeting transcript CareNHS has reviewed. It does not appear in any standing committee paper. It does not appear in the published Integrated Medium Term Plan. It does not appear in the Cabinet Secretary's correspondence. It does not appear in any public document at all — other than the Phase 4 Business Plan itself, which was disclosed only on 17 May 2026 in the FOI/6695830 supplementary release.

The original investment case Welsh Government approved in 2019 has been silently replaced. The new figures are 27 per cent of the original.

The February 2026 Benefits deck stopped measuring the 2019 categories altogether

The Phase 4 Business Plan retains the 2019 PBC's benefit categories with reduced NPV figures. The February 2026 Benefits Approach Assurance presentation goes further: it stops measuring those categories at all. Of the 2019 PBC's monetised benefit lines — research grants, workforce reduction, lives saved, commercial research income, A&E response, unwarranted variation, paper reduction, value-based care — none appears as a measured category in the February 2026 benefits register.

What the February 2026 deck measures instead is internal cost-avoidance:

2019 PBC benefit categoryFebruary 2026 deck equivalent
Research application funding increase (£89.5M NPV)Not measured.
Workforce cost reduction (£20.5M NPV)Not measured.
Commercial / private research funding (£15.3M NPV)Not measured.
8 lives a year saved by year 10Not measured.
121 FTEs saved through process automationNot measured.
1.2% staff engagement upliftNot measured.
Reducing unnecessary testingNot measured.
Reducing A&E admissionsNot measured.
Reducing unwarranted variationNot measured.
(no equivalent in 2019 PBC)Care Data Repository validated-dataset re-use — one-off £4.0M + recurring £1.3M
(no equivalent in 2019 PBC)NDAP partner-onboarding cost avoidance — one-off £0.5M + recurring £0.2M
(no equivalent in 2019 PBC)Analytics Learning Programme training cost avoidance — one-off £0.5M + recurring £0.5M
(no equivalent in 2019 PBC)GitHub GIG Cymru code re-use — £8K to £32K per project, three tiers

Every one of the new categories is internal cost-avoidance — bookkeeping savings DHCW makes when one part of the organisation re-uses something another part has already built. None of them is outward-facing. None of them improves a citizen outcome. None of them captures research grants Wales would not otherwise have won. None of them avoids a death.

The categories the 2019 PBC sold to Welsh Government are gone. The categories that have replaced them are not benefits in the sense the original business case used the word; they are internal efficiency lines.

The headline cost-avoidance number is £150,000 across five years

The Phase 4 Plan §10.8 records the cumulative claimed cost-avoidance from the GitHub GIG Cymru collaboration platform — one of the four new benefit categories — across the first five years of the programme: approximately £150,000.

That is 0.42 per cent of the £35.7 million in committed spend through year seven. 42 pence saved per £100 spent.

In a programme costing £30 million, that number would be an embarrassing footnote. In a programme that has restated its £73.6 million cost / £41 million NPV benefits position in writing, and that has been escalated to Welsh Government's Level 4 — Targeted Intervention — on grounds that explicitly include "delivery", it is the headline.

Q1 £2.55M, Q2 £1.61M, Q3 £0.46M — the direction of travel

The February 2026 Benefits Approach Assurance presentation also publishes DHCW's own quarterly benefits register for FY 2025-26. The actual reported numbers across the first three quarters of year seven:

QuarterTotal claimed benefit
FY 2025-26 Q1£2,553,698
FY 2025-26 Q2£1,613,192
FY 2025-26 Q3£457,152
Three-quarter total£4,624,042

The trajectory is declining, not ramping up. Quarter on quarter, total claimed benefit falls. The deck itself notes — in a caveat the reader has to find — that "FY2526 Q1 is the most recent internally-published quarter". In other words, the Q2 and Q3 figures had not yet been internally published in DHCW's own systems at the time the NDR Programme Board saw them.

The Programme Board was shown, in February 2026, a benefits register whose two most recent quarterly entries had not been finalised internally — and which, even on those provisional figures, showed approximately £4.6 million of cost-avoidance delivered in the year the 2019 PBC had promised £24.4 million of transformational benefit.

That is the year-seven payback the Welsh public has bought for £35.7 million.


The architecture of absence

In late 2024 — after the £18 million of NDR Team data-engineering spend in the 2019 PBC had been substantially drawn down; after the platform had been built; after Google Cloud commitments had been entered — DHCW reached the point in its own narrative at which the public was told NDR was "live."

That was the moment to ask: where is the Chief Data Officer of DHCW, and what is she saying about her platform?

The transcript record across 37 board meetings and 24 standing committees of DHCW — Public Delivery Committee, Audit and Assurance, Digital Governance and Standards, and the various Extraordinary Board Meetings convened during escalation — answers this question with a clarity that requires no insider testimony.

The Chief Data Officer is, since September 2023, structurally absent.

A traversal of the public transcript record shows that the Chief Data Officer — Rebecca Cook, who was appointed NDR Programme Director at DHCW in June 2021 and was promoted to Chief Data Officer in May 2024 — was named or quoted on six occasions between November 2021 and September 2023. After September 2023, the transcript record contains no further mention of her at any board or committee meeting we hold.

DHCW's own published Declarations of Interest register lagged both transitions by more than a year. Cook's first declaration as "NDR Programme Director" is dated 4 August 2022 — fourteen months after she took up the role. Her first declaration as "Chief Data Officer (8a)" is dated 28 October 2025 — seventeen months after the promotion took effect. In the version of the register published as of May 2025, more than a year after the CDO promotion, Cook was still listed publicly as "NDR Programme Director — Nil Declaration — Ongoing." The discrepancy between the working role and the public declaration — fourteen months at the first transition, seventeen months at the second — is itself a governance question for DHCW.

The analysis of the DHCW board of 2 February 2026, conducted as part of CareNHS's standing review of every board meeting since DHCW's founding, recorded:

"CDO/Rebecca Cook — not mentioned at all."

The analysis of the board of 26 March 2026 — a meeting that ran for five hours, that discussed Level 4 escalation status, the financial plan for 2026-27, the Audit Plus contract crisis, GPC Wales's refusal to share GMS data, and which approved a £205 million annual financial plan — recorded as its thirteenth finding:

"Rebecca Cook Not Mentioned Once — CDO absent from 5-hour discussion. NDR (£57M envelope, £35.7M spent by year 7 per FOI/6695830) not discussed."

The 29 January 2026 Public Accountability Meeting — chaired by Welsh Government, at which Cabinet Secretary attention was specifically drawn to digital investment delivery — was analysed for speaking patterns. The Chief Data Officer was "notably absent from speaking."

A Chief Data Officer of a Special Health Authority does not speak at the accountability venue convened by her sponsor government. She is not asked about the data programme that her organisation has spent £35.7 million on. She is not visible to the board that retains her. She does not appear at the Director-General's intervention sessions. Her line manager, the Chief Executive, does not name her.

There is more than one way to fail to deliver. One way is to fail loudly, in the room, and be removed. Another is to not be in the room at all. The Chief Data Officer of DHCW has been in the second category for two and a half years and counting.

The Independent Member who, at the founding-era boards of 30 September 2021 and 31 March 2022, warned that NDR carried "more risk than is compatible with the risk framework and the board assurance framework" — Rowan Gardner — was acknowledged at the time and the warning filed "under IMTP process." She left the DHCW board at the meeting of 26 March 2026, her warnings having persisted through the entire programme to escalation.

The Welsh Government Chief Digital Officer who, by January 2024, the board itself had named as "the budget holder inside Welsh Government" for the funding that NDR depended on — Mike Emery — was, by August 2024, formally proposed as Chair of NDR Programme Oversight at a Portfolio Delivery Committee meeting, with the proposing officer acknowledging "a potential conflict of interest um but that will be managed." The Independent Member Ruth Glazzard responded:

"I'd be very keen for us to understand how that conflict is going to be managed. It is one of the critical programmes. That doesn't feel to me like the right answer."

By mid-2025 the same Mike Emery had been re-described by Evans, on the record, as a "digital policy director." The role title was a downgrade. The Chief Digital Officer who should have been the Welsh Government-side counterpart to NDR delivery was, in DHCW's own framing, no longer a Chief Digital Officer. He has subsequently moved out of Welsh Government altogether — to the Welsh Local Government Association as Strategic Adviser, Digital in Social Care. A role designed to be the external check on a Special Health Authority's £57 million flagship programme was vacated for a lateral advisory role in a different sector.

In May 2024 — during the same period in which Emery's authority over NDR oversight was being challenged inside DHCW — Cook was promoted to Chief Data Officer at DHCW. The structural effect of the two changes is that the data-and-digital function at the centre of NDR moved decisively inside DHCW, and the external Welsh Government-side check was hollowed out. The new internal Chief Data Officer did not speak at any of the venues in which the platform was scrutinised.

This is the architecture of absence. It is not the absence of work; the £35.7 million was spent. It is not the absence of activity; the transcripts run to hundreds of pages. It is the absence of the person who is supposed to answer for the platform. The Chief Executive does not name her. The Independent Members who do not name her are not corrected. The public does not see her. The Cabinet Secretary, when he writes that DHCW "remains some distance from being able to consistently quantify return on investment," writes to an organisation whose Chief Data Officer he has not heard from on the matter. The wider Toxic Triangle pattern at DHCW — destructive leaders, susceptible followers, conducive environments — into which the architecture of absence fits, is set out in Leadership Analysis.

Cook is not the only senior DHCW figure who is structurally hard to see. The wider pattern — directors with no public profile, a salary line that ceased to appear in the published accounts, 23 off-payroll workers no one can name — is set out in Ghost Directors and the Shadow Workforce.


The most basic test of any public-sector accountability regime is this: when a flagship £35 million programme fails to deliver against its written promises, the post-holder whose direct duty was to deliver it is held to account.

The post-holder, in this case, has a name. Rebecca Cook was appointed "NDR Programme Director" at Digital Health and Care Wales in June 2021 — three months after DHCW itself was founded as a Special Health Authority. The post was created to deliver the National Data Resource. Cook held it for three years, until her promotion to Chief Data Officer in May 2024. Throughout that period, she was the senior officer at DHCW whose entire role was to bring NDR into operational use across NHS Wales. Her first declaration of interest in the post does not appear on DHCW's published Declarations of Interest register until 4 August 2022 — fourteen months after she took it up.

During Cook's tenure as NDR Programme Director:

  • The six-year payback period elapsed (March 2026), with no Return on Investment quantified — by Welsh Government's own Cabinet Secretary writing in February 2026
  • NDR remained amber at all seven Health Boards in DHCW's own alignment matrix
  • The platform was conceded, by DHCW's own Executive Director of Strategy in April 2025, to be one that "can't be used for much" because it has no data in it
  • The Joint Data Controller Agreement that NDR data flows depended on was still being resisted by Health Boards in July 2025, with the responsible director admitting only "reasonable confidence end of July rather than high"
  • An internal audit identified a programme-funding instability and personal-data-restriction issue significant enough to require formal disclosure in the April 2025 Audit and Assurance Committee
  • The platform's underlying procurement footprint — a Google Cloud rental dressed in "built a fantastic platform" language — never converted into a defensible benefits realisation

The expected accountability outcome of this delivery record, in any functioning organisation, would have been some combination of role review, performance management, formal warning, demotion, or departure.

What happened instead was the opposite.

In May 2024 — the same period during which the failures above were already visible inside the Authority — Rebecca Cook was promoted from NDR Programme Director to Chief Data Officer at DHCW. The promotion came at a moment when, by every public metric, the programme she had been running was failing. The Authority's own published Declarations of Interest register did not reflect the promotion until 28 October 2025 — seventeen months after the role transition took effect. The May 2025 register, more than a year on, still listed her under her former NDR Programme Director title.

Two further questions arise from the way the post was scoped and disclosed — the Band 9 advertised pay grade on NHS Wales's Trac recruitment portal against an 8a recorded in the Declarations of Interest register for the seventeen months since the promotion took effect, and the job description's named responsibility to "drive initiatives to leverage artificial intelligence (AI) and machine learning for predictive analytics" against the single AI demonstration on the public-record transcript trail. Both are addressed in the Questions & Answers section below.

The promotion came at a cost to others.

In the same period, several senior figures who held scrutiny-adjacent positions on NDR or in DHCW's data and architecture function left the organisation, were re-titled, or were moved out of the function altogether. The publicly documented departures and changes include:

  • Mike Emery, Chief Digital Officer of Welsh Government — the official whose statutory role was to provide external oversight of DHCW's digital delivery, who chaired the NDR Programme Board for several months in 2023, and who was named at DHCW's own January 2024 board as "the budget holder inside Welsh Government" for DPIF programme funding. Ifan Evans subsequently re-titled him on the record, in DHCW's own framing, as "digital policy director" — a downgrade. Emery has since moved out of Welsh Government altogether, to the Welsh Local Government Association as Strategic Adviser, Digital in Social Care. The most senior external digital oversight role over DHCW was vacated, by its holder, for a lateral advisory role in a different sector.
  • The August 2024 Portfolio Delivery Committee proposal to install Emery as Chair of NDR Programme Oversight while "managing" his conflict of interest as the funder — a structural neutralisation of the external check. Two Independent Members, Ruth Glazzard and Simon Jones, objected on the record. Glazzard: "that doesn't feel to me like the right answer." Jones demanded written assurance on conflict-of-interest management, not verbal.
  • DHCW's Associate Director of Architecture and DHCW's Chief DevOps Officer — two senior technical posts that, on the available record, ceased to be held by the postholders who occupied them during NDR's formative years. The Principal Architect role was named at the July 2022 board as having lost its holder, with a "gap at the lead level there in that area of architecture". No replacement appointment of equivalent seniority appears in subsequent board records for either function. Whether each individual departure was voluntary or otherwise is not for this article to assert — but the pattern of senior architectural and platform-engineering leadership leaving the function in the same window in which the post-holder responsible for NDR was promoted is, at minimum, a question Welsh Government and the DHCW Board are owed an answer to.

These are the publicly verifiable changes. The pattern is consistent and visible from the documentary record: people who occupied positions from which the National Data Resource programme might have been scrutinised, or from which decisions about it could have been challenged, left or were moved sideways. The person whose direct duty was to deliver the programme — and against whose delivery the programme failed every public metric — was promoted into a more senior post and given oversight of a wider data function.

The question this article puts directly to Digital Health and Care Wales, to its Board, and to Welsh Government is:

Who has been held to account for the £35.7 million?

CareNHS has not, on a thorough review of every published DHCW board minute, every standing committee paper, every Public Accountability Meeting transcript, every published Audit Wales output, and every disclosed FOI response, identified any officer, director or Board member of Digital Health and Care Wales who has been formally held to account for the failure of the National Data Resource to deliver against its 2019 Programme Business Case and its 2021/22 Annual Plan commitments. We invite Welsh Government, the Senedd Public Accounts and Public Administration Committee, and DHCW itself, to identify any such accountability outcome we may have missed. If one exists, we will publish it in full.


The originator's stake

To understand why no one in DHCW's senior leadership can publicly acknowledge that NDR has failed, it is necessary to understand the structural position of the Chief Executive.

Helen Thomas became Interim Chief Executive of Digital Health and Care Wales on 1 April 2021, the day DHCW was formally established as a Special Health Authority. The organisation she took over was the successor body to the NHS Wales Informatics Service — NWIS — where she had been Director of Information from 2017 and later Interim Director and Chief Executive. The 2019 NDR Programme Business Case — the foundational commitment document for the National Data Resource — was developed inside NWIS during the same period in which Thomas held the most senior information-leadership posts there. She was confirmed in post as substantive Chief Executive of DHCW shortly after the April 2021 transition.

The 2019 Programme Business Case for NDR was, by the time Thomas became CEO of DHCW, already eighteen months old — and it was already attached to her organisation. Plan reference 1.03 of the 2021/22 Annual Plan, the founding document she co-signed with Bob Hudson, committed her new organisation to "Continue collaboration with the National Data Resource Programme to build the enablers of an open, interoperable architecture." NDR was named as one of three flagships of DHCW's existence on day one.

Thomas's external credentialling in this same window — a December 2020 Honorary "Professor of Practice" appointment at UWTSD through the NHS Wales–university Wales Institute of Digital Information partnership, a BCS Fellowship, a FedIP Leading Practitioner registration, and a "Digital CEO of the Year" award at the inaugural Digital Health Awards in October 2021 — is set out in The Credential Sprint. The credentials accumulated during the same eighteen months in which DHCW was founded, the founding Annual Plan committed her organisation to NDR delivery, and the 2019 PBC operational custody transferred into her executive cadre.

The Senior Responsible Owner of the 2019 PBC, formally, was Dr John Peters. But by April 2021, the operational custody of the programme — its team, its funding stream, its WG relationship — had transferred from NWIS / Welsh Government structures into Digital Health and Care Wales and into Helen Thomas's executive cadre. Five years on, the SRO of the 2019 PBC is not the public face of NDR delivery. Helen Thomas is.

This matters because of the most basic principle of programme governance: the person who originates or sponsors a strategic programme should not also be the person evaluating its delivery. The originator has a personal stake in the programme's perceived success; the evaluator must be able to call its failure. If the same person holds both roles, the structure cannot generate honest assessment. This is one of six structural failure patterns set out in Six Frameworks, One Diagnosis: Why DHCW Cannot Self-Correct — the article explaining why DHCW, by its own design, cannot mark its own homework.

In November 2021, at DHCW's seventh-month board meeting, the Director of ICT Carwyn Lloyd-Jones warned the board about something he called "the capacity illusion". Project-funded staff on programmes like NDR and Cancer Informatics, he said, made the teams look larger than the core organisation's funded capacity. When the project funding contracted, the staff would disappear but the delivery expectations would not. It was, in his telling, a structural risk to the entire delivery model of the new Special Health Authority.

That warning is in the public transcript of 25 November 2021. It is named in CareNHS's analysis of that board meeting as Finding 35. The Chief Executive at the time, Helen Thomas, was the recipient of the warning. The Independent Members did not press the question. The Chair did not request a follow-up paper. The minute records no action.

By 2024, the capacity illusion was the operating reality: the Chief Data Officer who was managing NDR was already managing a function whose presence in DHCW's accountability venues had begun its long fade.

The board meeting of 1 April 2021 — DHCW's first day as a Special Health Authority — opens, in the public transcript, with Helen Thomas's Chief Executive Report. The graph of evidence drawn from that meeting records the founding theme: "Optimism Bias — zero risks claimed at founding." The Chief Executive of a brand-new public body inheriting £18 million of data-engineering commitments, an unfinished IG framework, the NWIS-era technical debt of two decades, and a programme whose benefits required Wales to outperform every other UK nation in research grant capture — declared there were no outstanding risks on day one.

She is still CEO. The programme is still her organisation's flagship. The Chief Data Officer who runs it does not speak in her accountability venues. And the £35.7 million is in the column marked "spent."


What the six-year payback has returned

Six years from the launch of the preferred option, the 2019 PBC promised, the programme would have generated enough benefit to repay its costs. Section "The benefits DHCW quietly deleted" above sets out what the February 2026 Benefits Approach Assurance presentation actually shows DHCW now claims it has delivered, what the Phase 4 Business Plan §9.4 silently restates the benefits NPV to, and how the benefit categories themselves have been switched. This section sets out what the 2019 PBC's other named promises have produced on the operational record, six years on.

  • Operational use: Zero. DHCW's own alignment matrix records NDR as not in use at any Health Board. Even Aneurin Bevan University Health Board — the Health Board that hosted the August 2024 Gemini AI demonstration on NDR's Google Cloud platform — had only "signalled its intention to replatform" to NDAP as of DHCW's January 2025 Phase 4 Business Plan (§10.1). Intent, not adoption.
  • Research funding uplift: The 2019 PBC modelled £89.5 million of net present value benefits coming from increased research application funding into Wales on the back of the NDR. CareNHS has been unable to find a single Wellcome Trust or UK Research and Innovation grant publicly attributed to NDR capability. The §9.4 restatement to £24 million NPV is set out in the section above.
  • Data Promise to citizens: Not delivered. The General Practitioners Committee Wales is refusing to share GMS data with the platform on GDPR Article 5.1 proportionality grounds, an issue formally tabled at the Public Accountability Meeting of 29 January 2026.
  • Lives saved per year through faster diagnostics: The 2019 PBC committed to eight lives a year by the end of the programme. The eMPI (master patient index) system that underpins identity resolution across NHS Wales was approaching the end of its existing contract by late 2024 with no in-house replacement in sight.
  • 121 FTEs saved through process automation: Unevidenced. DHCW's own Phase 4 Business Plan §11.8 records 81 positions structurally allocated to the NDR programme inside DHCW (59 filled plus 22 vacancies, November 2024).

What the six-year payback period has returned, on the public record:

  • The first-ever Welsh Government Director-General written rebuke of DHCW, on 6 January 2026, from Jacqueline Totterdell
  • The first-ever Cabinet Secretary statement that DHCW cannot consistently quantify return on investment, on 12 February 2026, from Jeremy Miles
  • DHCW's escalation to Level 3 — Enhanced Monitoring — on 11 March 2025, with NDR named as one of nine programmes under enhanced monitoring (ATISN 26790)
  • DHCW's escalation to Level 4 — Targeted Intervention — on 8 April 2026, with concerns around "delivery, accountability and leadership" — the first time leadership has been named as a ground for escalation in DHCW's history
  • A "Joint Data Controller Agreement" that took until late 2025 to sign and that DHCW's own Executive Director of Strategy described, in its run-up, with only "reasonable confidence end of July rather than high"
  • 984 documented data flows that, in DHCW's own framing, constitute an "onerous overhead"
  • A board meeting in March 2026, lasting five hours, in which the £35 million programme was not discussed and the Chief Data Officer was not mentioned

This is what £35.7 million has bought Wales: a platform without data, a Cabinet Secretary without confidence, a Director-General writing to point out failures of "delivery, accountability and leadership," and a Chief Data Officer who does not appear in her own accountability venues.


The questions Wales should be asking

The Senedd has the right to put questions to Welsh Ministers about the conduct of Welsh public bodies. The Public Accounts and Public Administration Committee, when it convenes in the new Senedd term, has every statutory ground to call DHCW's leadership in person to answer. The Health and Social Care Committee has every reason to look at the data programme that underpins every other NHS Wales digital flagship.

The questions Wales should be asking are not difficult to formulate. They follow directly from the public record:

  1. Where did the £35.7 million go? DHCW's FOI/6695830 disclosed expenditure by year and category. The bulk of it — over £18.7 million by year seven — is in staff costs and federated budgets passed to other NHS Wales bodies. What did those staff produce? What did those federated budgets buy?

  2. Who authorised the silent restatement of the NDR benefits framework? DHCW's January 2025 Phase 4 Business Plan §9.4 silently restates the NPV benefits of the programme from £151.5 million to approximately £41 million — a £110 million downgrade of the single largest investment case ever signed off by Welsh Government for digital infrastructure in Wales. The Research-funding line — £89.5 million in the 2019 PBC, 59 per cent of the original benefit case — has been quietly restated to £24 million. The Workforce-reduction line is now £6 million, down from £20.5 million. The Commercial / private research funding line is now £4 million, down from £15.3 million. DHCW's February 2026 Benefits Approach Assurance presentation goes further: it stops measuring the 2019 PBC's transformational benefit categories altogether, replacing them with internal cost-avoidance lines (data-engineering re-use, partner-onboarding cost avoidance, training cost avoidance, code re-use). Who inside DHCW authorised this restatement? When was the NDR Programme Board notified? When was Welsh Government notified? Why was the public not notified? And on what basis can the 2019 PBC investment case — which Welsh Government signed and which DHCW inherited — be unilaterally replaced by an internal cost-avoidance framework with a different envelope and different categories?

  3. Why is the Chief Data Officer absent from the accountability venues for the programme she runs? The promotion of Rebecca Cook to Chief Data Officer at DHCW — operative from May 2024, and reflected in DHCW's published Declarations of Interest register only by the 28 October 2025 declaration, seventeen months later — was a decision the Welsh Government's framework for Special Health Authority executive structure required to be approved. Was it competed openly? How many candidates were shortlisted? What was the predecessor post? The Chief Data Officer post is publicly advertised on NHS Wales's Trac recruitment portal as Band 9 (£101,390 to £116,673), yet the DoI register records the post-holder's grade as 8a — a band below. Which figure is correct, and how can both have appeared in DHCW's public-facing records simultaneously for seventeen months? What did Welsh Government see and approve? And against the job description's named responsibility to "drive initiatives to leverage artificial intelligence (AI) and machine learning for predictive analytics," what AI or machine-learning initiative has the post-holder delivered into operational use across NHS Wales since taking the role in May 2024?

  4. What is the Chief Executive's structural answer to the originator's dilemma? Helen Thomas became CEO of DHCW with the NDR programme already inside her organisation. The programme is now in its eighth year of her tenure. The Chief Executive cannot evaluate her own legacy programme. Who in the Welsh Government governance architecture is supposed to perform that evaluation, and have they been doing so?

  5. Why did Welsh Government's Chief Digital Officer Mike Emery — the budget-holder for NDR funding by DHCW's own admission — end up sidelined, re-titled, and then moved out of Welsh Government altogether? The Chief Digital Officer of Welsh Government should be the strongest external check on a Special Health Authority's digital delivery. The August 2024 PDC proposal to make him Chair of NDR oversight, while "managing" his conflict of interest as the funder, would have neutralised that check. He was withdrawn from that role. He was re-titled by Evans as "digital policy director." He has subsequently moved to the Welsh Local Government Association as Strategic Adviser, Digital in Social Care. The Welsh Government Chief Digital Officer post that was supposed to oversee DHCW's digital delivery is no longer held by the official who had been engaging with NDR delivery. Why?

  6. What does the Computer Centre / Google Cloud reseller arrangement look like in detail? In September 2022, DHCW signed a four-year reseller agreement with Computer Centre, ceiling £10 million, for Google Cloud capacity on which the NDR platform runs. By 2024, DHCW had entered a further multi-year, dollar-denominated commitment. The board paper containing the commitment had a VAT calculation error, disclosed in the meeting and stripped from the published transcript. How much has Welsh public money paid Google Cloud, against committed capacity, against actual production usage?

  7. Why is NDR's largest modelled benefit — £89.5 million in research grant uplift — not visible in the Welsh research grant record? The 2019 PBC's investment thesis rested on Wales becoming a more attractive jurisdiction for Wellcome Trust and UK Research and Innovation funding because of NDR. Seven years in, this thesis is testable. Has it succeeded? If not, what does that mean for the £33.8 million of NDR Team staff costs the PBC approved on its strength?

These are not rhetorical questions. They are FOI-able, transcript-citable and Senedd-actionable. CareNHS will be pursuing each. We invite Members of the Senedd, the new Welsh Government, and the public bodies whose oversight functions have so far failed to engage at the level the £35.7 million demands, to do likewise.


Right of Reply

CareNHS invites responses from the named individuals and bodies in this article:

  • Helen Thomas, Chief Executive, Digital Health and Care Wales — on the question of the originator-evaluator structure; on the content of the February 2026 Benefits Approach Assurance presentation, the silent £110 million benefits-NPV restatement recorded in DHCW's January 2025 Phase 4 Business Plan, and the basis on which the 2019 PBC investment case her organisation inherited has been replaced by an internal cost-avoidance framework with a different envelope and different categories; on the Chief Data Officer's absence from public accountability venues
  • Rebecca Cook, Chief Data Officer, Digital Health and Care Wales — on her absence from public accountability venues since September 2023; on the operational status of the National Data Resource at the end of year seven; on the silent restatement, recorded in DHCW's own January 2025 Phase 4 Business Plan §9.4, of the modelled benefits NPV from £151.5 million to approximately £41 million
  • Chris Habberley, Digital Health and Care Wales — on the authorship and methodology of the February 2026 Benefits Approach Assurance presentation; on whether the benefits-framework restatement (from the 2019 PBC's transformational categories to internal cost-avoidance categories) was formally authorised by the NDR Programme Board, by the DHCW Board, and by Welsh Government; on the basis for the £4.0 million one-off + £1.3 million recurring CDR validated-dataset benefit claim
  • Ifan Evans, Executive Director of Strategy, Digital Health and Care Wales — on the reconciliation of his March 2023 statement that NDR was "mainlined into everything" and his March 2026 acknowledgement that Health Boards block deployment through "local choice"; on the cost-benefit position of the four-year £10 million Google Cloud reseller agreement; on the relationship between the 2019 PBC's preferred Option 5 (Authority-owned hybrid mainly on-premise) and the 2022 Google Cloud arrangement that more closely resembles the longlisted-but-rejected Option 2A
  • Jeremy Miles, former Cabinet Secretary for Health (until May 2026), Welsh Government — on his February 2026 letter and what it means for the £35.7 million spend
  • The new Welsh Government Cabinet Secretary for Health under the Plaid-led administration formed after the 7 May 2026 Senedd election — on whether NDR will continue to be funded at its current trajectory; on whether the silent £110 million benefits-NPV restatement in DHCW's Phase 4 Business Plan was disclosed to Welsh Government as funder
  • Welsh Government Director-General for Health and Social Care, Jacqueline Totterdell — on the relationship between her 6 January 2026 letter to DHCW and the substantive delivery position of NDR
  • The Wales Audit Office — on whether the £73.6 million cost / £41 million benefits NPV position DHCW itself records in its January 2025 Phase 4 Business Plan now requires a Value-for-Money study to be commissioned, given the programme has already passed its written payback date with approximately 19 per cent of the year-7 commitment delivered

If responses are received, we will publish them in full.

This article was researched and written by CareNHS, drawing on Freedom of Information disclosures (notably FOI/6695830 of 28 April 2026 and its supplementary release of 17 May 2026, FOI/6523156 of 13 January 2026 and ATISN 26790 of 13 April 2026), the 2019 NDR Programme Business Case v8.0 and its Appendices, the four NDR phase Business Justification Cases (Phase 1 June 2019, Phase 2 January 2021, Phase 3 2023, Phase 4 January 2025 Business Plan), the February 2026 NDR Benefits Approach Assurance presentation, DHCW's 2021/22 Annual Plan, the Integrated Medium Term Plan 2025-28, the Welsh Government 12 February 2026 ministerial letter, the 6 January 2026 Director-General letter, public transcripts of 37 DHCW board meetings and 24 standing committee meetings from April 2021 to April 2026, and CareNHS's published article series at carenhs.org.

Correspondence may be addressed to: Rose Davies CareNHS — Campaign for Responsible Leadership in NHS Wales carenhs@carenhs.org


Companion reading: The Five-Year Crash Against Reality places NDR in the wider 2021/22 founding-promises ledger. Nine Programmes, Zero Results sets out the other eight Level 3 programmes. Level 4 covers DHCW's April 2026 escalation. The Buried Review explains why the Atos stakeholder review with its 13.3% positive-view finding was never published. Dear First Minister: You Inherit a Crisis is the open letter to the new Welsh Government that places NDR in the inheritance context. How They Falsify the Public Record documents the board-minute sanitisation pattern that stripped each of NDR's major procurement disclosures from the published transcripts. The Revolving Door is the biography of Ifan Evans — the Executive Director of Strategy whose three quoted statements anchor this article.

The original FOI request and DHCW's disclosed response (including the four phase Business Justification Cases, the PBC Appendices and the February 2026 Benefits Approach Assurance presentation) are public on WhatDoTheyKnow's Digital Health and Care Wales authority page.

Last reviewed: