NHS Improvement (now NHS England and NHS Improvement until they get a new name) provide support around information governance: https://www.england.nhs.uk/ig/
NHS Digital provide support about data security and governance: https://digital.nhs.uk/data-and-information/looking-after-in...
Every health organisation has to have a Caldicott Guardian - this is a senior manager with responsibility for keeping data confidential: https://www.gov.uk/government/groups/uk-caldicott-guardian-c...
All trusts should have non-executive directors, and part of their role is to hold the trust to account around information governance. In a Foundation Trust the NEDs will be jointly and corporately responsible for those decisions.
NHS Staff who want to become leaders can get leadership training with the NHS Leadership academy. That will include information governance as part of an NHS board. https://www.leadershipacademy.nhs.uk/wp-content/uploads/2012...
The Professional Standards Organisation's "standards for members of NHS boards and clinical commissioning group governing bodies in England" mentions confidentiality, albeit only briefly: https://www.professionalstandards.org.uk/docs/default-source...
> Respecting patients’ rights to consent, privacy and confidentiality, and access to information, while enabling the legitimate sharing of information between care teams and professionals for the purposes of a patient’s direct care
What I would be worried about is how on earth anyone could actually evaluate the actual privacy of multiple competing suppliers - of course they will all claim that privacy is important.
And what about emergencies - where even if you have private healthcare you will be taken to an NHS hospital.