📰 Full Story
NHS England has approved a change to its Federated Data Platform (FDP) that creates an “admin” role allowing non-NHS staff from companies including Palantir broad access to identifiable patient records held in the National Data Integration Tenant (NDIT) before data are pseudonymised.
Palantir, which won a £330 million contract in 2023 to help build the FDP, and other contractors had previously requested individual permissions for datasets; the briefing seen by the Financial Times says the new approach removes that step for a small number of external engineers.
The internal note warned of “considerable public interest and concern” and recommended capping or time-limiting external admin rights and regular reviews.
NHS England says external users must have government security clearance, director-level approval and are monitored through audits; Palantir says it acts as a data processor bound by customer instructions.
MPs, patient groups and campaigners have criticised the move as a threat to privacy and public trust and urged tighter controls and transparency, while officials argue the change addresses practical access bottlenecks in integrating disparate health datasets.






💬 Commentary