NHS England has apologised after acknowledging that employees of Palantir and other technology suppliers can access identifiable patient information through the Federated Data Platform (FDP), contradicting an earlier statement in the programme’s Data Protection Impact Assessment (DPIA). The DPIA has claimed that only NHS England employees could access directly identifiable information, but the organisation has now accepted that some authorised supplier personnel also have controlled access. The NHS also hastens to point out that it did correctly state on its website that access to identifiable patient data could and would be granted to suppliers on a limited and as required basis.
The latest clarification relates specifically to the FDP’s National Data Integration Tenant. Three Palantir engineers currently have administrative-level access to this environment, while a further 33 engineers from a range of suppliers have more limited, project-specific permissions. NHS England has said that this access is granted according to operational need, is time-limited and may only be used to support the development, maintenance and safe operation of the platform. It has also stressed that suppliers cannot use the information for their own purposes and that identifiable data is not accessed routinely.
Go deeper with GlobalData
Access deeper industry intelligence
Experience unmatched clarity with a single platform that combines unique data, AI, and human expertise.
These controls are important and the disclosure does not, in itself, demonstrate that patient information has been misused. Large and complex data platforms frequently require tightly governed access by supplier engineers for maintenance, troubleshooting and product development. The more significant issue is that the NHS’s principal transparency document did not describe those arrangements accurately.
The incident arrives during a broader debate over the public sector’s reliance on a small number of multinational technology companies. Over the last few months, Palantir has come under increasing scrutiny over its involvement in the NHS’ FDP. Recently, statistics used to demonstrate the impact of the FDP on NHS operational efficiency were re-qualified as not causally linked to the FDP, after they had been widely toted as evidence of efficacy of the FDP.
The NHS, as a result, has also seen recurring calls for it to utilise a contract break clause in the FDP due in February 2027. A precedent for similar action was set when the French domestic intelligence service cut ties with Palantir in favour of a domestic equivalent citing “strategic dependency” as a concern. While not in the healthcare vertical, but the similarly sensitive defence sector, it does at least validate the potential threat to Palantir that public opinion and pressure can still hold.
NHS England must now ensure that its wider FDP documentation consistently reflects supplier access arrangements, including the division of responsibilities between the NHS, Palantir and other delivery partners. For suppliers participating in national health infrastructure programmes, the episode is also a reminder that data protection assessments, access models and public-facing transparency materials should be treated as importantly as delivery of the project itself.
Although these requirements are within the capacity of government, the NHS must compete within a wider fiscal and political environment. It faces substantial competition from defence, economic growth and other public services for both attention and funding.
