Blueprint Digital NHS WalesWho Guards the Guardians?
The Blueprint

Who Guards the Guardians?

A design principle for distributed oversight. Welsh Government cannot be the sole guardian — it materially contributed to the failure conditions. No single actor is trusted with the whole transition; capture of any one channel does not neutralise accountability entirely.

There is a genuine contradiction at the heart of this blueprint. The analysis argues that Welsh Government oversight of DHCW has been weak, intermittent, and partly captured. The interventions proposed above require competent oversight of the transition. If the oversight body itself is part of the problem, who oversees the reform?

The honest answer: no single actor can be fully trusted. Welsh Government cannot be the sole guardian, because Welsh Government materially contributed to the failure conditions — pressured RAG ratings, mid-cycle DPIF cuts, capital funding refusals while milestones were retained, programme compression, recruitment freezes via remit letter. The design must distribute oversight across multiple actors with overlapping jurisdiction so that capture of any one channel does not neutralise accountability entirely. And the design must include reform of the Welsh Government function itself, alongside DHCW reform, via Intervention 6: Reform the Funder.

Actors who can operate independently of Welsh Government executive capacity:

  • Senedd Public Accounts Committee – can mandate hearings, require testimony, commission Audit Wales investigations. A credible oversight actor but a part-time one; realistic role is periodic political accountability, not day-to-day transition management.
  • Audit Wales – has statutory powers to access documents and examine accounts. Would need to commission specialist digital expertise for technical delivery assessment, which is feasible but not its current capability.
  • Statutory publication requirements – legislation requiring DHCW to publish specific data categories on a fixed schedule removes the need for ongoing enforcement. Non-compliance becomes a legal matter, not a governance negotiation. This is the highest-leverage structural mitigation because it operates automatically once enacted.
  • Employment Tribunal proceedings – operate entirely outside DHCW and Welsh Government control. Tribunal judgments are public; disclosure orders have compulsory force. May surface evidence that forces accountability regardless of political appetite.
  • Information Commissioner’s Office – has enforcement powers over FOI compliance. Repeated FOI obstruction (documented at L10: The Information Fortress) is appealable to the ICO; sustained non-compliance attracts enforcement notices.
  • Misconduct in Public Office – the Attorney General’s Reference (No 3 of 2003) test is “wilful misconduct serious enough to amount to an abuse of the public’s trust.” The L11 finding documents the threshold being met by named individuals; criminal investigation is not within Welsh Government’s gift to grant or refuse.
  • NHS Counter Fraud Authority and Action Fraud – procurement irregularities, sole-bidder anomalies, and undisclosed contract values fall within their remit independently of DHCW or Welsh Government oversight.

The design principle: route oversight through multiple independent channels rather than a single supervisory body. More complex than routing everything through Welsh Government, but more robust against the specific failure mode this analysis has identified – capture of the accountability mechanism by the people it is meant to hold accountable.

The Board That Replaces the Captured One

Distributed oversight at the regulatory level only matters if the board it oversees is structurally capable of receiving and acting on the signal. The diagnosis documents a board that approved without scrutiny on 51 occasions, with three sub-committees that produced zero corrective actions across eighteen consecutive months and were blind to imminent escalation. Reform of the regulatory architecture above DHCW is necessary but not sufficient.

Intervention 1 accordingly includes a non-executive board reset: NED competence audit against published criteria; sub-committee reform with technical NEDs; structural protection of the kinds of governance challenge Rowan Gardner, Simon Jones, and Ruth Glazzard offered before they departed. Replacing the executive without reforming the non-executive cohort reproduces the same dynamic — a board that nods through what an executive presents.

The clearest evidence that the current board cannot self-reform sits in a single meeting. On 25 July 2024 the board approved a Compassionate Leadership Pledge in under fifteen seconds, with no substantive discussion, at the same meeting where the staff survey reported 65% of staff burnt out and the CEO thanked the operations directorate — the directorate carrying the worst burnout indicators — for “many, many weeks, months of out of hours weekend working.” No board member connected the three facts. Twelve months later, burnout was 68.9% and compassionate leadership was recorded as a survey “strength.” The full analysis sits at Psychological Safety — the structural inverse of the prerequisite the digital-delivery research literature identifies. For the purposes of governance design it is one finding: the board that approved the Pledge cannot remediate the conditions it produced. The non-executive reset is structural, not optional.

The EPMA Gap

A second structural finding: DHCW is held accountable for milestones it does not control. EPMA is the clearest example — the national programme is a coordinating function, but local organisations are the accountable delivery body (Evans, on the record at PDC May 2025). DHCW is measured; the actors who can deliver are not. Welsh Government is the only body that can resolve this triangle, and the resolution belongs in Intervention 6: Reform the Funder rather than in distributed-oversight design — because no oversight architecture can correct accountability that has been written incoherently in the first place.