Healthcare in the UK is dominated by the National Health Service (NHS), a universal healthcare system largely free to citizens at the point of access. The NHS is not a single organisation but a network of national and local organisations all operating under the NHS 'brand'. The organisation of the NHS varies between the four nations of the UK: this chapter will focus on England. While private healthcare is readily available in the UK, the vast majority of people use the NHS either for the entirety of their healthcare or as a gateway before choosing to access private healthcare at the secondary care stage.

In England, healthcare is currently provided distinctly from personal, non-medical ('social') care, with different legislative schemes in place; the NHS is governed by, among others, the National Health Service Act 2006, while social care is provided by local authorities, primarily under the Care Act 2014. This divide is increasingly being questioned by both patients and practitioners, with many attempts at improving integration at a local level, in particular to keep patients out of hospital.

Healthcare services are commissioned either at the local level by clinical commissioning groups (CCGs) made up of local general practitioners2 or, for more specialised commissioning, at a national level by the National Health Service Commissioning Board3 (known as NHS England). Funding pressures on the NHS have been political priorities and have been reflected in the latest NHS Long Term Plan, published in January 2019.4 The biggest impact of Brexit is likely to be the availability of healthcare professionals.

There is an increasing role for private healthcare provision, either directly to the NHS (i.e., by running NHS-provided services) or by providing private services directly to patients. In 2016–2017, NHS spending with private sector providers in England was 7.7 per cent of the Department of Health's revenue budget.5 While this has been politically contentious,6 it is unlikely to change in the short term and private providers are as closely regulated as the NHS.


i General

Approximately 11 per cent of the UK population has some form of private medical cover,7 although this is rarely comprehensive, and cover is not usually provided for accidents and emergencies. Some people also pay for specific private treatment, such as elective surgery or physiotherapy, where there may be a wait to receive such treatment on the NHS.

In England, NHS hospital treatment and primary care is free at the point of use to those ordinarily resident in the UK.8 It is funded through general taxation and national insurance deducted from salaries. There are fixed charges for certain items of NHS care, such as prescription medicines and dental treatment.9 Exemptions from these charges are available on the basis of age, income or certain medical conditions.

As a current member of the European Union, UK nationals have reciprocal arrangements with European Union states. These arrangements will cease in the event of a no-deal Brexit, although the government has expressed a desire to maintain the current arrangements.10

The regulations that set the legal framework for cost recovery from overseas visitors changed in 2017;11 it is now mandatory to collect payment, in advance of services, unless treatment is immediately necessary or urgent.

The role of voluntary or third-sector providers in healthcare in England is limited, given the availability of NHS care, but one particular area of charitable provision is hospice care.

ii The role of health insurance

Some UK citizens opt to have private health insurance, often as a tax-efficient employment benefit, but it is not compulsory. EU nationals living in the UK and not employed are required to have comprehensive sickness insurance,12 and those eligible for overseas visitor charges may rely on insurance. In addition, those applying for certain types of entry clearance or leave to remain in the UK must pay a surcharge of £300 to £400 a year to use NHS services.13

Private health insurance is available in a variety of forms, including access to private specialists and hospitals, or as a rebate for time spent in NHS care.

iii Funding and payment for specific services

Which services are routinely commissioned by NHS England or a CCG is substantially informed by evidence-based guidance and advice issued by the National Institute for Health and Care Excellence (NICE).

NICE has various powers to produce guidance and recommendations to NHS bodies on care pathways and technologies they are expected to provide.14 NHS bodies are legally obliged to fund treatments recommended by NICE's technology appraisal recommendations;15 however, other guidelines do not have the same level of authority.16

For example, NICE guidelines recommend that three IVF cycles should be offered to women under 40 years of age who have been trying to get pregnant naturally for two years, or who have had 12 cycles of artificial insemination. However, the final decision about who can have NHS-funded IVF in England is made by local CCGs, whose criteria may be stricter than those recommended by NICE. NICE's role is to assess the clinical and financial efficacy of the technology.17

For cancer drugs, the Cancer Drugs Fund (CDF) is another option at the end of the NICE technology appraisal process. The CDF acts as a managed access fund where more information is required to determine clinical effectiveness. A budget impact test also applies for certain technologies over the first three years of a technology's use in the NHS. If the budget impact exceeds £20 million, in any of the first three years, NHS England may engage in commercial discussions with the company to mitigate the impact on the rest of the NHS budget. The first reported example of this was Keytruda, where MSD agreed a substantial confidential discount before it was approved in 2018.

In some cases, further funding is available through Individual Funding Requests (IFRs). Where NHS England's duty to provide health services18 is not met under NICE technology appraisal recommendations, individuals can request funding for treatment through an IFR. The law surrounding IFRs is discussed in the case of S v. NHS England.19

As set out above, standard charges apply to a number of NHS services.20


The UK healthcare system is heavily reliant on primary care practitioners (general practitioners, or GPs) delivering family medicine and acting as gatekeepers to secondary and tertiary care, which in the NHS is rarely directly accessible, except in emergencies.21

GP providers are normally independent businesses, providing services to the NHS under contracts with NHS England. While these are private law contracts negotiated between NHS England and the British Medical Association (acting as the representative of all GPs), many of the provisions are required under the NHS (General Medical Services Contracts) Regulations 2015 or the NHS (Personal Medical Services Agreements) Regulations 2015. Similar arrangements are in place for NHS pharmacy and dental services.

NHS hospitals and secondary services are run by local trusts or foundation trusts, which are independent of CCGs or NHS England. The relationship between them is contractual; trusts and foundation trusts are providers of services commissioned by CCGs and NHS England. Emergency services are almost exclusively available through the NHS because of the high operating costs. However, secondary or hospital care may be provided by either the NHS or private providers. Private secondary care may either take place in separate private hospitals, or private patient units in NHS hospitals. While it is not usually possible for patients using the NHS to see a medical consultant without first being referred by a GP, there is nothing to prevent this in the private sector.

It should be noted that social care is, at present, provided under an entirely separate legislative scheme by local authorities.22 However, there has been an increasing movement in recent years towards the integration both of different health services and of health and social care.23 In 2019, the government published the NHS Long Term Plan to focus on funding, staffing and the pressures of a growing and ageing population. A new service model is proposed with every patient having the right to online GP consultations. Expanded community health and social care teams are intended to create genuinely integrated teams, and new integrated care systems are to be in place nationally by 2021.

Healthcare in the UK benefits from a near universal Summary Care Record (SCR) for each patient, which contains basic information and is accessible by a range of NHS bodies. In England (and to some extent the rest of the UK), healthcare records are held at a local level by the patient's GP and the relevant hospital. Of GP practices in England, 98 per cent now use a system that automatically creates an SCR unless a patient has opted out.24 This can be accessed by professionals, and patients can see who has accessed their records.

The UK's data protection law has been significantly strengthened by the EU General Data Protection Regulation. Alongside this, NHS Digital provides a data security toolkit for organisations to measure their performance against the National Data Guardian's data security standards, which is required to be completed annually.25



There are a range of healthcare regulators, including separate regulators for healthcare operators and professionals.

Institutional healthcare providers

The key regulator for institutional health providers in England is the Care Quality Commission (CQC).26 Whether a provider requires CQC regulation is dependent on the activities they provide; carrying out a 'regulated activity' without being CQC registered is a criminal offence subject to a potentially unlimited fine or up to 12 months' imprisonment,27 as well as lesser regulatory sanctions. The regulated activities are set out in the Regulated Activities Regulations28 and include:

  1. the provision of personal care at home;
  2. residential accommodation with nursing or personal care;
  3. treatment for a disease, disorder or injury by or under the supervision of a healthcare professional;
  4. surgical procedures carried out by a healthcare professional;
  5. diagnostic and screening procedures; and
  6. medical advice or triage, over the telephone or by email.

To be registered, a new provider must register with CQC,29 which will assess the suitability of the applicant. All registered providers must have a registered manager responsible for the overall management of the service, who also must be fit for the role.30 Among others, the following documents may be required:

  1. safeguarding policy and procedures document;
  2. buildings regulations document;
  3. registered manager's supporting evidence; and
  4. governance document.

CQC anticipates that it will provide a decision within 10 weeks of an application. Registration can be either unconditional or with conditions. Appeals against a decision on registration are made to the First Tier Tribunal.31 When assessing an application, CQC will focus on:

  1. compliance with the fundamental standards, including person-centred care, dignity and respect, consent, and safe care and treatment;
  2. management and safeguarding; and
  3. whether the provider's directors are of good character and have the necessary competence and qualifications.

Once registered, providers are required to share information with CQC and notify it of changes in registered details or certain adverse incidents. CQC also operates a regime of both announced and unannounced inspections of providers. CQC has wide-ranging enforcement powers to place conditions on registration or to suspend or even cancel registration where there have been breaches of its requirements.32

As a result of a financial failure in 2011 of Southern Cross, one of the largest care providers in England at the time, CQC also has limited market oversight powers in relation to the largest care providers.33

Healthcare professionals

Healthcare professionals in England are usually required to be registered with one of the eight different regulators, including the General Medical Council34 and the General Dental Council.35 Some regulators operate on a UK-wide basis, while others only operate in certain nations. A new profession of nursing associates has been regulated in England only since early 2019.36 These regulators are overseen by the Professional Standards Authority for Health and Social Care (PSA).37 The PSA also accredits voluntary registers for health and care professionals (such as psychotherapists or complementary healthcare practitioners) where there is no legal requirement for registration. Not all individuals involved in front-line care are regulated, including 'healthcare assistants', who may provide a wide range of services to patients under the direction of a registered healthcare professional.

Where a profession is regulated by a statutory regulator, registration is compulsory under the applicable legislation. Each regulator details its requirements for initial registration (i.e., qualifications, experience and good character), continued registration (i.e., standards and continuing professional development) and disciplinary procedures to address serious concerns about a registrant. The requirements for registration typically vary according to whether an applicant is coming from the UK, the EU or overseas. As regulators are typically involved in setting the requirements of UK qualifications leading to registration, an overseas applicant will normally need to demonstrate how their qualifications and training meet the requirements of a UK qualification. This may be done either by their overseas registration, qualification or further training being recognised by the UK regulator, by the applicant undergoing testing, or by a period of supervised practice in the UK following a Law Commission review.38 There was a consultation in late 201739 about reform of professional regulation in the UK. The government responded on 9 July 2019 proposing some amendments and further consultations. The government announced on 18 July 2019 that the General Medical Council will become the regulator for physician associates and anaesthesia associates.


i Overview

As a result of the UK's implementation of Directive 2011/24/EC on the application of patients' rights in cross-border healthcare, all the professional regulators require registrants to have indemnity or insurance arrangements providing appropriate cover for their practice.40 This will usually be provided by their employer. In medical negligence claims the primary defendant will be the NHS trust or the private corporate provider, rather than the individual practitioner. The practitioner's employer (or hospital with whom they have a relationship) would usually be deemed to have vicarious liability for any negligence, subject to the nature of the relationship between the practitioner and the institution and the connection between the wrongdoing and the relationship. This is currently the subject of legal (and political) debate.

The cornerstone of medical negligence case law in the UK is the concept of consent – patients are required to be fully informed of the risks of treatment before continuing. As a result, patients are normally required to sign consent forms setting out the risks of treatment before any but the most common procedures are carried out.

ii Notable cases

The most significant recent case is the Supreme Court decision in Montgomery v. Lanarkshire Health Board,41 which revisited a patient's right to information about the risks of a procedure in light of societal changes in the doctor–patient relationship. The judgment noted that patients are 'now widely regarded as persons holding rights, rather than as the passive recipients of the care of the medical profession' (Paragraph 75) as the duty of doctors is 'to take reasonable care to ensure that a patient is aware of material risks of injury that are inherent in treatment . . . a duty of care to avoid exposing a person to a risk of injury which she would otherwise have avoided'.42

Much controversy was generated by the case of Dr Hadiza Bawa-Garba, a trainee paediatrician who was found guilty of gross negligence manslaughter in November 2015, following the death of a child after delays in diagnosing septic shock. Dr Bawa-Garba had recently returned to practice following an extended period of maternity leave and the incident occurred towards the end of a 12-hour shift.43 The case has also sparked a review into such cases and further changes to the law of manslaughter as it applies to healthcare are being considered.


As discussed above, the Regulated Activities Regulations require directors of registered providers to comply with a range of requirements. These include that the directors:44

  1. are of good character;
  2. have the qualifications, competence, skills and experience necessary;
  3. have not been responsible for or contributed to any serious misconduct or mismanagement while carrying out a regulated activity; and
  4. have not been convicted of an offence or erased from a register of health professionals.

There is no prohibition on international or non-national businesses being CQC-registered; however, they must have registered premises in the UK from which the service is provided.

Between April 2012 and April 2014, the Competition and Markets Authority concluded that features of the privately funded healthcare market in the UK prevented, restricted or distorted competition, resulting in the Private Healthcare Markets Investigation Order (2014).45 Among wider prohibitions, the Order restricts the circumstances where a clinician can refer a patient to a private hospital where that clinician has a financial interest in:

  1. that hospital;
  2. the hospital operator or owner; or
  3. the equipment used at that hospital.

To avoid sanction, the referring clinician must comply with certain conditions, including a 5 per cent limit on shares in the private hospital and various prohibitions on referral incentives.

At present, the UK government is keen to welcome new investment in the UK healthcare space, which is particularly evident in 2017's Life Sciences: Industrial Strategy.46


Since the reforms of the Health and Social Care Act 2012, provision of NHS services has been on a provider–commissioner basis. Services are commissioned by either NHS England or CCGs, depending on the nature of the service and how commonly it is required (routine services are commissioned on a local basis by the CCG, whereas complex, rare procedures are commissioned by NHS England). The services are commissioned from NHS providers or by private companies by means of the NHS Standard Contract,47 the terms of which are mandated each year by NHS England. The exact services to be commissioned will be based on recommendations by NICE and the available funding.

Procurement of services by NHS bodies is subject to transparent competitive tendering under the 'light-touch regime' in the Public Contracts Regulations 2015 (PCR 2015). In addition, procurement of healthcare services by CCGs and NHS England is subject to a specific procurement regime under the National Health Service (Procurement, Patient Choice and Competition) (No. 2) Regulations 2013, which is overseen by NHS Improvement. Regimes may overlap in some instances.

For the procurement of supplies (rather than services), competitive tendering under the PCR 2015 is normally required. There is a general trend for NHS procurement of supplies (from sophisticated medical equipment to non-medical supplies) to be aggregated into larger 'hubs' to secure economies of scale. There is also a move towards greater clinical and price standardisation of medical supplies across the NHS and centralised contracting for some higher-value products. Patented pharmaceuticals are generally procured directly from the originating manufacturer. Prices of drugs are (indirectly) controlled through a voluntary scheme agreed between the Department of Health and Social Care and the Association of British Pharmaceutical Industries (ABPI).48


The presence of the NHS limits the role of marketing in UK healthcare, and the NHS logo is a widely recognised symbol. Private healthcare services can be marketed and promoted, provided this is in accordance with the codes provided by the regulator, the Advertising Standards Authority (ASA).49

The professional regulators also provide guidance on the marketing of services, obliging professionals to ensure advertising, promotional material or other information is accurate and not misleading and does not exploit patients' vulnerability or lack of knowledge. All CQC-registered services are required to display on each of their premises and websites the rating given at the most recent CQC inspection.50

The ASA's advertising codes prohibit misleading, harmful or offensive advertising and require that advertising must be legal, decent, truthful, deal fairly with consumers and not be misleading or offensive. The ASA may make public rulings and impose sanctions. The advertising of medicinal products is regulated by Part 14 of the Human Medicines Regulations 2012. It is an offence to advertise a medicinal product unless it has a UK or EU marketing authorisation and there are separate requirements for marketing to the public and prescribers. Prescription-only medicines cannot be advertised. Therefore, the promotion of services that specify a treatment with a product that is not authorised in the UK or by the EU, or for a use that is not on label or that is a prescription-only medicine will breach these strictly enforced laws. Commercial practices are also regulated by the Competition and Markets Authority and local trading standards offices, who enforce the Consumer Protection from Unfair Trading Regulations 2008 and the Business Protection from Misleading Advertisements 2008, both of which prohibit misleading, unfair and aggressive commercial practices.

The Association of British Healthcare Industries and the ABPI also publish codes of practice that regulate the medical devices and the pharmaceutical industries' interactions with healthcare professionals, including all marketing and training activities. The codes are binding only on the corporate members of those associations, but are widely considered to reflect industry best practice; compliance with them (as well as NHS policies and codes) is often required contractually.

The Bribery Act 2010 applies to all market participants. It establishes general bribery offences, which apply to individuals who offer or receive an advantage with the intention to induce or reward improper performance of any function or activity. Improper performance is performance in breach of an expectation of good faith, impartiality or trust associated with that function or activity. There are also corporate offences of failure to prevent bribery and bribing a foreign public official. A body corporate may be prosecuted for failure to prevent bribery anywhere in the world.


Since 2008 there has been continuous pressure on NHS budgets, leading to innovation to drive cost efficiencies. This has led to a greater role for localism in the NHS, with the introduction of vanguard sites to pilot new ways of providing services, and sustainability and transformation plans. The NHS Long Term Plan sets out a number of priorities for the NHS, including cancer, mental health and healthy ageing. There is also a clearly articulated and funded programme to upgrade technology and digitally enabled care across the NHS. This builds on universal SCRs and care plans supported by artificial intelligence and access to genomic data.

An increasing number of online services are being promoted, many of which have been welcomed for speed of access, increased access for those in remote areas and potentially lower-cost services. These are mainly private services, although some partner with NHS organisations. However, there is concern to ensure patient safety, with the CQC subjecting the relevant service providers to close inspection and guidance from bodies such as the professional regulators and the Royal College of General Practitioners for patients.51 New apps can be included in the NHS Apps Library with an online tool now available for self-assessment.52

The Department of Health has a number of major inquiries ongoing: into the use of infected blood;53 following the conviction of surgeon Ian Paterson for unlawful wounding during unnecessary breast surgery;54 and into concerns about specific hospitals or providers. Each of these could generate recommendations on the delivery of services and the role of various NHS bodies.

The UK continues to lead the world in its genomics work. The Department of Health set up Genomics England in 2013, which sequenced its 100,000th genome in December 201855 from NHS patients with rare diseases and common cancers, creating a unique platform for research and delivery of personalised care. The NHS offers genetic screening of new cancer patients to provide personalised treatment, and full genome analysis for children with rare diseases from 2020. In addition, 2018 saw the first licences to allow mitochondrial donation in embryos that will be transferred for pregnancies.

The potential impact of Brexit has yet to be fully realised, but issues such as workforce mobility, EU requirements for healthcare practitioners to have indemnity cover, marketing authorisations for new drugs and devices and procurement rules, are all likely to be under scrutiny in the negotiations.


English healthcare is delivered in an environment dominated by the NHS. However, there are opportunities for new providers to enter the marketplace to deliver services for or alongside the NHS. Innovation and new approaches are being driven by the need for cost efficiencies and a desire for greater integration of care, in an environment that wants to embrace new technology.


1 Holly Bontoft is an associate and Sarah Ellson is a partner at Fieldfisher LLP. Our thanks go to our colleagues Alison Dennis, Sonal Patel and Nicholas Pimlott.

2 Section 1I, National Health Service Act 2006.

3 Section 1H, National Health Service Act 2006.

8 Regulation 3(1), National Health Service (Charges to Overseas Visitors) Regulations 2015/328.

9 Section 172, National Health Service Act 2006, National Health Service (Dental Charges) Regulations 2005 and National Health Service (Charges for Drugs and Appliances) Regulations 2015.

11 The National Health Service (Charges to Overseas Visitors) Regulations 2015 as amended.

12 Immigration (European Economic Area) Regulations 2016.

13 The Immigration (Health Charge) Order 2015/792.

14 See, in particular, Regulations 5 and 7 of the National Institute for Health and Care Excellence (Constitution and Functions) and the Health and Social Care Information Centre (Functions) Regulations 2013.

15 Regulation 7(6) National Institute for Health and Care Excellence (Constitution and Functions) and the Health and Social Care Information Centre (Functions) Regulations 2013.

16 The obligations to comply with different types of NICE guidance, guidelines and recommendations were most recently explored in R (Rose) v. Thanet CCG [2014] EWHC 1182 (Admin), which confirmed that, although CCGs and other health bodies are required to comply with technology appraisal recommendations, other forms of NICE guidance should be seen as 'relevant considerations' (paragraphs 22 to 27).

18 Section 1H(3) of the 2006 Act.

19 S v. NHS England [2016] EWHC 1395 (Admin).

20 National Health Service (Charges for Drugs and Appliances) Regulations 2015 and the National Health Service (Dental Charges) Regulations 2005 (as amended).

21 This position is slowly beginning to change, with the recent introduction in some areas of allowing patients to self-refer to NHS physiotherapy services or mental health services in certain situations.

22 See generally the Care Act 2014 and specifically Section 18(1) of the Act.

23 Both the Secretary of State for Health and Social Care and local authorities have a duty to promote integration of health and social care services under Section 13N of the National Health Service Act 2006 and Section 3 of the Care Act 2014 respectively.

26 Section 1, Health and Social Care Act 2008.

27 Section 10(1) and (4), Health and Social Care Act 2008.

28 Schedule 1, Health and Social Care Act 2008 (Regulated Activities) Regulations 2014.

29 Section 11, Health and Social Care Act 2008.

30 Known as the 'Fit and Proper Person Test', this has recently been subject to an independent review by Tom Kark QC and implementation of the recommendations is awaited.

31 Section 32, Health and Social Care Act 2008.

32 Sections 17 and 18, Health and Social Care Act 2008 and the Care Quality Commission (Registration) Regulations 2009.

33 Sections 54 to 56, Care Act 2014 and the Care and Support (Market Oversight Criteria) Regulations 2015.

34 Medical Act 1983.

35 Dentists Act 1984.

36 Article 2A, Nursing and Midwifery Order 2001.

37 National Health Service Reform and Health Care Professions Act 2002.

38 www.lawcom.gov.uk/project/regulation-of-health-and-social-care-professionals/ Law Com No. 345 / Scot Law Com No. 237 / NILC 18 (2014).

40 For example, Section 44C, Medical Act 1983 and Article 12A, Nursing and Midwifery Order 2001.

41 (Scotland) [2015] UKSC 11.

42 Montgomery v. Lanarkshire Health Board (Scotland) [2015] UKSC 11, paragraph 82.

43 In addition to her criminal conviction, Dr Bawa-Garba was suspended from the GMC's register of medical practitioners for one year; however, the GMC appealed this and the High Court instead erased her name from the register. This decision was then overturned by the Court of Appeal, which reinstated the original one-year suspension. Sentencing guidelines increased sentences for gross negligence manslaughter from 1 November 2018.

44 Regulation 5, The Health and Social Care Act 2008 (Regulated Activities) Regulations 2014.

45 Amended by the Private Healthcare Market Investigation (Variation and Commencement) Order 2017.

50 Regulation 20A, Health and Social Care Act 2008 (Regulated Activities) Regulations 2014.