Palantir faces mounting parliamentary pressure over NHS data security concerns

Palantir Technologies has faced increasing scrutiny from MPs across multiple parties over information security issues surrounding its work with the NHS, as the American-based analytics firm defends its £300m agreement with NHS England. The dispute intensified after guidance sent to every NHS trust in England directing them to use Palantir’s flagship solutions in hospitals from this month, according to the British Medical Journal. Labour MP Emily Darlington has warned that engaging a overseas technology firm with medical information constitutes a significant security threat, whilst the Liberal Democrats have declared the firm ought to be kept away from our national security infrastructure. The Green Party and Conservative MPs have also demanded heightened scrutiny of the company’s information protection capabilities, as Palantir’s UK leadership insists the software presents no risk to patient information.

The dispute involving a US technology company’s NHS involvement

The pushback against Palantir’s involvement with the NHS focuses on concerns about entrusting a non-UK technology provider with private healthcare records. Critics argue that relying on a US-headquartered firm for such essential health system infrastructure poses inherent security risks, especially considering the company’s historical connections to defence and surveillance work. The timing of the row is significant, as NHS trusts are required to implement Palantir’s systems this month, prompting queries regarding whether adequate protections and parliamentary oversight were in place before such extensive implementation started across the health service.

Palantir’s UK management has acted quickly to address these concerns, with executives stressing that the company has no business incentive to access or use patient data. The firm insists that its Foundry platform functions much like commonly-deployed applications like Microsoft Office, which handles NHS information without the software provider accessing it. Nevertheless, the breadth of political opposition—covering Labour, Liberal Democrat, Green, and Conservative MPs—suggests that statements by company representatives alone may prove insufficient to address parliamentary worries about data sovereignty and security protocols.

• Labour MP Emily Darlington raised concerns about “major security risk” from foreign tech involvement
• Liberal Democrats declared organisation “should be completely removed from our national security infrastructure”
• Green Party leader described Palantir “a military surveillance company”
• Conservative MP Wendy Morton called for scrutiny of information safeguarding abilities

What Palantir does and why it’s essential for the NHS

Palantir’s Foundry platform resolves a persistent issue that has plagued the NHS for many years: the inability of disparate hospital networks to communicate effectively with one another. Across the NHS, separate databases exist in silos—a patient’s GP records cannot easily speak to their hospital files, and clinic systems function separately from A&E departments. This fragmentation produces problems, delays treatment decisions, and squanders critical funding. The £300 million contract awarded to Palantir at the end of 2023 is intended to solve this essential systems problem by building a unified, integrated data environment.

The company’s software allows NHS trusts to access, integrate and analyse historically separate databases without requiring expensive infrastructure upgrades or renewals. By linking these separate infrastructures, Palantir claims its platform provides concrete advantages: it delivers live oversight of appointment backlogs, manages stock and resources, locates vacant capacity and operating theatres, and ultimately improves patient care coordination. These capabilities address genuine practical difficulties that medical staff and managers face on a day-to-day basis. The technology constitutes a realistic effort to update healthcare systems while maintaining existing investments in legacy systems.

How the distributed data platform works

Rather than requiring the NHS to consolidate or replace its current IT infrastructure, Palantir’s federated data platform serves as a connecting layer between separate systems. It allows information held in different databases—whether at general practice surgeries, hospitals or clinics—to be accessed and analysed together without physically moving or consolidating the data itself. This “distributed” approach means each organisation keeps control of its own information whilst facilitating queries across systems and analysis. The platform essentially acts as a complex intermediary, permitting incompatible systems to communicate insights without requiring wholesale technological replacement.

Palantir executives have repeatedly made comparisons to standard workplace applications to explain the technology’s operation. Just as Microsoft Excel or Word processes NHS data without Microsoft gaining access to it, Palantir’s software combines information without the company itself accessing patient records. The data stays under NHS ownership and control throughout the process. This architectural design is at the heart of the company’s response to security allegations, though critics challenge whether such guarantees are adequate given the sensitivity of healthcare information and Palantir’s prior involvement with defence and intelligence organisations.

Political resistance covers the spectrum

The backlash against Palantir’s NHS involvement has proven remarkably bipartisan, with politicians across the political spectrum voicing significant concerns. Labour MP Emily Darlington warned the BBC that entrusting a foreign technology company with confidential patient data represents “a major security risk”, whilst Conservative MP Wendy Morton has called for increased oversight of the firm’s data protection capabilities. The Liberal Democrats have taken an even harder line, arguing that Palantir “should be nowhere near our national security infrastructure”, whilst Green Party leader Zack Polanski has highlighted the company’s troubled past, labelling it “a defence monitoring company”. This unusual political consensus suggests genuine concern extends beyond partisan positioning.

Palantir’s defence and the state’s stance

Palantir has mounted a strong defence against the growing criticism, with UK senior executive Louis Mosley speaking to the BBC’s Politics Live to address concerns directly. Mosley embraced parliamentary scrutiny, voicing confidence that the company was “serving” patients through its Foundry data-sharing platform. He stressed that Palantir has no financial incentive to obtain patient data, comparing the arrangement to established software like Microsoft Excel or email deployed across the NHS. As Mosley explained, the company operates under strict regulatory parameters that prevent data access, making patient information protection a non-concern rather than a vulnerability.

The government has primarily endorsed Palantir’s involvement, with Labour MP Alex McIntyre, sitting on the Commons Health and Social Care select committee, defending the contract whilst emphasising strict safeguards. McIntyre underscored that the government has set “red lines” ensuring data stays within the UK and under NHS ownership, with Palantir formally prevented from accessing or disclosing patient records. This position demonstrates the administration’s view that the contract’s advantages in consolidating fragmented NHS systems exceed security concerns, provided robust governance frameworks remain in place. The government’s stance indicates confidence in the contractual arrangements, though this is disputed by opposition parties.

The organisation’s key arguments

• Palantir has zero business motivation in obtaining or profiting from UK patient data whatsoever.
• Software connects incompatible NHS databases without company gaining access to records.
• Arrangement aligns with how Microsoft tools operate within NHS with no data access concerns.

What occurs next for NHS data consolidation

The £300m Palantir contract with NHS England, awarded at the end of 2023, is set for renewal at the beginning of next year, establishing a key turning point for the government’s data consolidation approach. Before that contract renewal, Parliament will probably increase its examination of the contract, with oversight committees potentially launching formal reviews into data protection measures and oversight mechanisms. The growing multi-party pressure implies any contract extension will meet substantial resistance unless the government can provide evidence of comprehensive safeguards and transparent accountability structures. The months ahead will be pivotal in ascertaining whether Palantir preserves its key position in NHS technology infrastructure or whether alternative solutions gain ground.

Meanwhile, NHS trusts have been required to introduce Palantir’s primary systems in hospitals from this month onwards, as per guidance issued by NHS England. This rollout proceeds in spite of political opposition, suggesting the government remains committed to the integration project. However, the simultaneous parliamentary pressure could require the Department of Health to perform further independent security reviews or set up new supervisory bodies prior to contract renewal. The conclusion will probably determine not only the NHS’s digital future but also set precedent for how the UK government approaches partnerships connecting the health service to international technology providers.