I was talking about this same idea with a friend recently. We have orgs like GCHQ and there’s plenty of cybersecurity and data talent in the UK. The government could make our own actual, secure systems. Provide setup and support for non-gov entities in the UK if they want to have government-approved security for a fee if we need the funding.

Plenty of options for the details in terms of finances, open-sourcing, letting (vetted) private healthcare users connect, etc.

There’s no need to always put things out for private companies to make.