Palantir is turning the NHS into a tool for mass surveillance

The United Kingdom is currently under scrutiny as it reviews its multi-million-pound contract with the American tech firm Palantir, which has been managing the National Health Service's Federated Data Platform (FDP). This review comes amid growing political and public concern over the implications of allowing a private company—particularly one with close ties to the U.S. military—to handle vast amounts of sensitive personal health data. A cross-party parliamentary committee has called on the government to disclose the full extent of Palantir’s access to patient data, including whether it collects identifiable or anonymized information, and on what legal grounds such access is permitted.

The controversy surrounding the contract dates back to 2023, when Palantir secured a £330 million deal to oversee the FDP, a centralized digital infrastructure designed to integrate disparate NHS systems. The goal of the initiative was to streamline operations and enhance data-sharing capabilities across the health service. However, critics have raised alarms about the potential misuse of such a powerful data repository, especially given Palantir’s history of working with U.S. immigration enforcement agencies. These concerns have intensified as the contract nears its third anniversary, yet the government has not provided comprehensive transparency regarding the scope of Palantir’s involvement or the specific data it processes.

MPs from both major parties have increasingly voiced their unease, urging the government to invoke a "break clause" in the contract, which would allow them to terminate the agreement by 2027. They argue that this period should be used to explore alternative solutions within the UK rather than relying on a foreign corporation. The push for greater accountability follows a report from the Science, Innovation and Technology Committee, which emphasized the need for the government to clarify the legal framework authorizing Palantir’s access to patient data and to detail the conditions under which such access is granted.

Critics of the partnership highlight the broader implications of entrusting a single entity with such critical infrastructure. Experts warn that even if Palantir were removed from the equation, the damage caused by its integration into the NHS may persist. Technologists who have worked on the FDP suggest that the system itself may create long-term vulnerabilities, regardless of the vendor. For instance, the platform enables the aggregation of data from multiple sources, potentially creating a centralized database that could be exploited for purposes beyond healthcare, such as immigration control or social monitoring.

The opposition to Palantir extends beyond the NHS. Several local governments and public institutions have resisted adopting Palantir’s technologies. London’s mayor rejected a proposed £50 million contract with the Metropolitan Police, citing improper procurement procedures. Similarly, the Ministry of Housing, Communities and Local Government opted to replace a Palantir system used to connect British hosts with Ukrainian refugees with an in-house solution. In Coventry, local officials and unions are challenging the renewal of a smaller Palantir contract related to children’s services. Meanwhile, employees at the Financial Conduct Authority are mobilizing against a trial contract that could expose financial data to U.S. law enforcement.

Despite these objections, some stakeholders continue to defend the FDP, emphasizing its potential benefits for improving healthcare delivery. A spokesperson for the Metropolitan Police stated that the pilot program with Palantir allows the force to consolidate data it legally possesses, enabling more efficient identification of welfare or cultural concerns. This approach, they claim, supports fairer policing practices by identifying issues early and providing necessary support or addressing misconduct promptly.

As the debate continues, the focus remains on balancing innovation with privacy and security. With the break clause looming, the government faces mounting pressure to decide whether to continue the contract or seek domestic alternatives. Regardless of the outcome, the discussion underscores the complex interplay between technological advancement, data governance, and public trust in the management of sensitive personal information.