The NHS has had data leaks in the past and their IT is supposedly fairly outdated (if our tabloid press is to be believed) so perhaps they genuinely believe that a specialised company would be able to do a better job?