In late July, hospital executives across the United States received a slide deck from the Consumer Product Safety Commission. Two words sat bolded and underlined on one slide, "required" and "hospitals". The message was blunt. Participation in a new injury surveillance system, built to route emergency room records through a private contractor before reaching the regulator, was not optional.

Weeks later, the agency's acting chairman told reporters something rather different. There was no new mandate. The programme, he said, had always been voluntary and would remain so. The retreat came only after hospital groups and privacy experts had spent weeks contesting what "minimum necessary" data actually meant, once a contractor called KONZA Health was given the job of screening millions of records for names, addresses, dates of birth and diagnosis codes reaching well beyond the agency's own jurisdiction, including codes for vaccines and intentional self-harm.

It is a small regulatory story from a foreign health system, and Whitehall has no obligation to notice it. Yet the mechanics on display are not unfamiliar to anyone who has watched NHS data policy over the past decade. An agency leans on existing legal authority rather than seeking fresh patient consent. A contractor is entrusted with the technical work of filtering sensitive information, while public messaging overstates the obligation to participate until political pressure forces a correction.

Britain's own version of this argument is working its way through Parliament in the opposite direction. The NHS Modernisation Bill, which had its second reading earlier this year, establishes the Single Patient Record through explicit statute rather than implied authority. Hospitals, GP practices and other providers will be required by law to share patient data so it can be assembled into one national record, with ministers promising safeguards and audit trails. The government's own fact sheet leans heavily on the language of patient control even as the underlying duty to share is compulsory.

That inversion is worth sitting with. The CPSC implied a mandate it could not clearly justify and then walked it back under scrutiny. The Health Bill is building a genuine mandate into law while reassuring the public with the vocabulary of choice. The two systems differ sharply in scale and statutory basis, but they rest on a similar wager, that patients will accept large-scale data consolidation provided the technical safeguards sound credible enough.

Care.data collapsed in 2014 for reasons that map closely onto this wager. The programme's legal basis was defensible on paper, but the public had not been told plainly what was happening to their records or who would see them. Extraction from GP systems was suspended within months and never fully recovered.

The Federated Data Platform has spent three years absorbing lessons from that failure, with mixed results. Palantir's continued role in the platform's infrastructure remains a source of persistent public unease, even as NHS England, before its own abolition into the Department of Health and Social Care, insisted that governance sat with clinicians and commissioners rather than the contractor. The Single Patient Record inherits that governance question at a larger scale, and inherits it at a moment when public trust in how government handles personal data has not obviously recovered since care.data.

What the CPSC's stumble offers is a warning about sequencing. Technical minimisation promises, filtering rules, retention limits, access tiers by job role, only reassure a public that already believes it has been told the truth about whether sharing is compulsory. Assert authority before explaining it, or dress up a legal duty in the language of choice, and the safeguards themselves begin to look like evidence of something being concealed rather than protected.

For NHS leaders steering the Single Patient Record through implementation, and for ministers who will eventually have to defend it before a sceptical public, the American episode is a reminder that data architecture is the easier half of the problem. The harder half is candour, delivered early enough that nobody has to walk anything back.