NHS admits Palantir engineers can access identifiable patient data, apologizes for error
NHS apologises and admits Palantir have access to identifiable patient data
NHS England has apologized after admitting that Palantir and other supplier engineers can access identifiable patient data through the Federated Data Platform, contradicting its earlier privacy assessment. The National Data Guardian had sought clarity following reports, and the NHS confirmed that while access is controlled and time-limited, engineers could view identifiable data for technical support. The admission has intensified scrutiny of Palantir's role, with MPs recommending the NHS exit the contract in 2027.
This incident has shown how quickly confidence erodes if the 'no surprises' principle [of NHS data use] is not upheld when it comes to who can access people's data, and why.
- jpfromlondon
>In all cases they do not have permission to use the data for their own purposes
Oh, they don't have permission? probably fine then.
- clydethefrog
LRB had a great article about Palantir and the NHS in their latest issue. [1]
What I mostly enjoyed reading is the insight that their actual software is quite "rubbish", something I have seen people mention in discussions here, especially in the early years of Palantir before it became more notorious and well-known. I do believe the "evil company" is part of their marketing to cover up that they are your usual proprietary software with a shitty UI and expensive contract that is being sold to clueless upper management.
[1] https://www.lrb.co.uk/the-paper/v48/n13/peter-geoghegan-and-...
- qmmmur
Oh well, at least they apologised.
- alexisread
Wow this was moved fast off the frontpage! Now on page 3 after 50min. Just FYI.
- numpad0
Is Palantir obsessed with medical records? If so why?
This is worrying as there recently was a change in the Japanese PII law, relatively unceremoniously passed and enacted, that reclassify mass PII collection including medical data collection as anonymous and consent-free with the condition that anonymization is performed after collection, which, IMO, IANAL, completely nullify the PII law. I can easily "see" Palantir behind it with my tinfoil hat on, but I'm not sure why do anyone want it in the first place. I don't think they need medical data specifically to take people to the back and dispose of the body.