# NHS Warns of Data Risks Following Silicon Practice Vendor Collapse GP practices face service disruption and potential data loss after website provider enters administration. - **Source:** [www.theregister.com - Articles](https://www.theregister.com) - **Published:** 2026-10-30 - **Topic:** [Business](https://brifing.si/c/business) - **Original article:** - **On Brifing:** https://brifing.si/s/602b1933-e31c-4374-b076-aa74f120915e ## Vendor Insolvency Triggers Crisis Silicon Practice Digital Health Solutions, owned by Schappit Ltd, recently entered administration, causing widespread disruption for hundreds of UK GP practices. Many websites went offline, forcing NHS England to issue urgent guidance. This collapse highlights the vulnerability of independent medical practices relying on third-party digital providers for essential patient communication and service continuity. ## NHS England Issues Directives CTO Kevin Humphries sent a formal letter to practices and NHS organizations outlining critical mitigation priorities. The guidance focuses on preserving historical patient information not yet integrated into clinical systems. Practices must manage existing consultation backlogs while simultaneously establishing temporary communication channels to ensure patients maintain access to necessary health services. ## Data Governance and Compliance Practices are now evaluating legal obligations regarding the Information Commissioner's Office. If the availability, integrity, confidentiality, or recoverability of personal data is compromised, reporting may be mandatory. This situation forces local managers to assess their specific data security posture and determine if the vendor failure constitutes a reportable breach of patient records. ## Integrated Care Boards Responsibility Integrated Care Boards hold the mandate for GP IT service arrangements, including clinical safety and cyber security. Humphries emphasized that these boards must lead recovery plans and support impacted practices. They are tasked with revisiting existing disaster recovery frameworks to ensure the supply chain remains resilient against future failures of small-scale technology vendors. ## Due Diligence Under Scrutiny Questions are emerging regarding the vetting process for Schappit Ltd before its inclusion in a government framework this July. While the immediate focus remains on service restoration, future inquiries will likely examine the due diligence standards applied to small suppliers. The incident raises concerns about the systemic risks posed by centralized procurement of critical healthcare software. ## Open Source Recovery Options Tech campaigner Marcus Baw has introduced a free, open-source website template to assist affected practices. This solution allows clinics to bring their web presence in-house, bypassing reliance on external vendors. The template adheres to standard NHS web design guidelines, enabling practices to regain control of their digital infrastructure quickly using modern deployment tools. ## Operational Challenges for Practices Practice managers are struggling to balance increased workloads with the urgent need to deploy alternative communication systems. The shift away from the failed digital platform requires rapid technical adaptation. Without direct control over the defunct provider's servers, staff face significant hurdles in retrieving data and maintaining the continuity of patient-facing digital services. ## Long-term Resilience Implications This collapse serves as a stark reminder of the fragility inherent in the GP IT supply chain. Moving forward, the NHS must balance the efficiency of digital transformation with robust contingency planning. Ensuring that patient data remains accessible and secure during vendor insolvency is now a top priority for health management bodies nationwide. ## Sources covering this story - https://www.theregister.com/public-sector/2026/10/30/nhs-quango-warns-of-risk-to-gp-patient-data-after-website-vendor-collapse/5306647 — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._