The Hidden Cost of Legacy Data Systems in UK Public Services

What the parliamentary record,government data and two decades of delivery experience reveal about the realprice of standing still when it comes to legacy IT and data systems.

Why legacy data systems are now a public sector priority

Legacy technology is no longer a background concern for UK public sector organisations. In June 2026, the House of Commons Science, Innovation and Technology Committee concluded that legacy systems represent 'huge efficiency, cost and security risks'. The State of Digital Government Review found that 28% of central government IT is classified as legacy.

For organisations managing national-scale, citizen or mission-critical data, this is not an abstract policy problem. It shapes how services are delivered today, how securely data is held, and how much of the investment now flowing into AI and cloud platforms will actually deliver value.

Key findings

What the whitepaper covers

The whitepaper draws on primary sources, including the UK Government's Roadmap for Modern Digital Government, the Committee's Rewiring the State report, the State of Digital Government Review and McKinsey research on technical debt.

It sets out the departmental commitments now in the roadmap, from DWP's benefits modernisation to the Home Office's move from the Police National Computer to the Law Enforcement Data Service. It explains the four ways delay compounds cost: the cost spiral, the security risk, the knowledge concentration risk and the blocked opportunity cost.

It also compares legacy dependency across central government, policing, health and local government. It covers security, compliance and vendor lock-in, the seven principles of good migration, and the realities of migrating common platforms such as SAS 9.x, SAP, Oracle and legacy ETL. It closes with three framings that help make the internal case for investment.

Who it is for

Data leaders, transformation teams and technology decision-makers in the public sector and critical data organisations across the UK.

Frequently asked questions

How much of UK government IT is legacy?

The State of Digital Government Review (January 2025) found that on average 28% of central government IT estates are classified as legacy, up from 26% in 2023. Legacy estates range from 10% to 70% across police forces and 10% to 50% across NHS trusts. Around 15% of organisations cannot estimate their legacy estate at all.

How much more does legacy IT cost to maintain?

Maintaining legacy systems typically costs three to four times more than maintaining modern alternatives, according to evidence gathered by the House of Commons Science, Innovation and Technology Committee. McKinsey estimates that CIOs put technical debt at 20–40% of the total value of their technology estate.

Why does delaying legacy migration make it more expensive?

Delay compounds cost in four ways. Maintenance costs rise and legacy risk accumulates faster. Unsupported platforms carry known vulnerabilities that cannot be patched. The staff who understand how systems really work retire or move on. And data trapped in legacy formats blocks AI, data sharing and joined-up services.

What is the knowledge concentration risk in legacy migration?

In many public sector organisations, the operational knowledge of a critical platform, including its undocumented logic, workarounds and integration quirks, sits with two or three people who have worked with it for a decade or more. The window in which they can support a structured migration is finite, and every year of delay narrows it.

Where should a legacy migration project start?

The right starting point is a structured discovery engagement, not a migration project. Discovery maps applications, data stores and dependencies, assesses data quality, compliance and security risk, and engages the people who carry undocumented knowledge. It produces the evidence base for a credible migration business case.

How can public sector organisations procure legacy migration support?

Butterfly Data's legacy migration services are available through G-Cloud 15 (Lot 3), other GCA frameworks and the Home Office ACE project. Public sector organisations can procure directly through these routes without a full competitive tender process, which reduces procurement overhead and time-to-engagement.