Why this report matters to council procurement, not just Whitehall
HC 61 is nominally about central government's digital transformation programme — the new Government Digital Service, digital ID, DSIT. But three of its four "barriers to effective digital transformation" — legacy systems, vendor lock-in, and sovereignty — are exactly the terrain UK council Procurement Officers and s151 Officers operate in every day: managing supplier relationships, running competitive tenders under the Procurement Act 2023, and holding budget accountability for technology spend. The Committee's own evidence sessions included direct local government witnesses, so its findings aren't purely a central-government story.
Module 1 — Vendor lock-in: the core procurement lesson
The Committee's headline case study is Palantir and the NHS Federated Data Platform (£330m over up to seven years, signed 2023, with a February 2027 break clause). As Medconfidential put it to the Committee, suppliers can end up "attempting to burrow so deep" into an institution that they "cannot be migrated away from and can name their fee." The Committee's counter-principle: vendor lock-in "should not be viewed as inevitable."
Practical takeaways: build exit and break clauses into every significant technology contract from the outset. Watch for the AWS/HMRC pattern — a ten-year, £472m contract where AWS was the sole bidder — since single-bidder outcomes on long contracts are a lock-in red flag worth escalating. Adapt the Committee's diversification mindset locally, tracking supplier concentration across the contract book even without a central mandate.
Module 2 — Legacy systems as a procurement risk, not just an IT problem
Central government doesn't even know the scale of its legacy IT estate — 153 systems across 16 departments flagged in 2023, with 15% of respondents unable to estimate their own legacy footprint. Maintaining legacy systems runs three to four times more expensive than modern alternatives. The reframe for procurement teams: ask, at the point of any new contract, what it's replacing and what the total cost of not replacing it is — turning legacy remediation into a budget conversation, not an IT backlog item.
Module 3 — Sovereignty and the SME/open-source angle
The report recommends government use its promised Procurement Act 2023 update to require public bodies to prioritise open-source tools over proprietary offerings where practicable, plus a defined minimum share of technology budgets ring-fenced for UK-based SMEs. Neither is binding yet, but officers who build this into tenders now will be ahead of the policy curve — and it gives s151 Officers a concrete metric to start tracking locally.
Module 4 — Money: the accountability discipline
Only one in five public sector leaders felt current funding models "enabled effective investment" in digital services. Capital funding is easier to secure than resource funding, which the report says drives "inefficient buying behaviours such as end of year purchasing decisions." Target: 75% of digital/tech spend from resource budgets by the end of the current Spending Review period, up from 43–46% in 2021 — a capital-versus-resource question that sits directly inside s151 duties under LGFA 1988 s114.
Module 5 — Data security and public trust
A 2023 Information Security Review, whose existence only came to light after Committee pressure, found three recurring failure patterns: insufficient controls over ad-hoc data downloads; information sent to the wrong recipients; and hidden personal data embedded in published spreadsheets. The UK Biobank case — genetic and health data for 500,000 participants found advertised on a Chinese e-commerce platform — shows why contractual data protection has to be paired with technical controls.
Open with the Palantir/NHS case as the lock-in hook. Use the four building blocks (money, people, data security, delivery) as a diagnostic checklist. Use the four barriers (hype, legacy, lock-in, sovereignty) as a procurement due-diligence red-flag list. Run an exercise applying the break-clause/exit-plan logic to a live or hypothetical council contract. Close with the statutory hook: connect capital-versus-resource funding directly to LGFA 1988 s114 duties.
Notable figures for slides or pull-quotes
£26bn/year UK public sector digital spend. £45bn/year claimed savings from digitisation, which the Committee calls "worryingly optimistic." 55% of digital spend went to contractors rather than permanent staff in 2023, at roughly 3x the annual cost. £330m NHS Federated Data Platform (break clause Feb 2027). £472m AWS/HMRC ten-year contract, sole bidder. £240m MoD/Palantir contract awarded without competitive tender. 60–80% of the UK cloud infrastructure market held by AWS and Microsoft combined.