I don't really get this. The NHS contracts out the disposal of the machines to a private contractor, who then royally screws up, and it's the fault of the NHS?
Surely the responsibility lies with the contractor?
“Should they [the contractor] be accountable? Definitely not, because NHS Surrey have been entrusted with the welfare of their patients. Should the contractor be responsible? Absolutely, yes,” Jones added.
This seems to me an argument that the NHS cannot outsource or subcontract anything.
What is NHS Surrey supposed to do in this scenario? Use in-house people to analyse the machines to make sure there is no data remaining before disposing of them?
Or just keep data-disposal services in-house? Personally, I think this would be a great idea, but it goes against the dogmatic 'privatise absolutely everything possible' trend in the UK.
“We should not have to tell organisations to think twice, before outsourcing vital services to companies who offer to work for free.”
Except they didn't work for free: they worked for the salvage value. I can't really see how the low value of the contract proves fault.