NHS England admits Palantir staff can access patient records after data protection error

NHS England confirmed that staff from US data‑analytics firm Palantir Technologies can view identifiable patient information within the NHS Federated Data Platform, a detail that was omitted in an earlier Data Protection Impact Assessment. The National Data Guardian highlighted the mistake, noting it could not independently verify the justification for the access. Palantir, which secured a £330 million contract in 2023 after receiving £60 million in COVID‑era awards, says the access is technically necessary for platform maintenance. The revelation has sparked public concern over data privacy and transparency in the NHS’s digital integration programme.

The NHS has pledged to correct the documentation error and work closely with the National Data Guardian, the Information Commissioner's Office and its internal governance groups to ensure clearer communication on supplier data access.