Palantir faces mounting parliamentary pressure over NHS data security concerns

Palantir Technologies has encountered increasing scrutiny from MPs across multiple parties over information security issues relating to its work with the NHS, as the American-based analytics firm justifies its £300m agreement with NHS England. The dispute escalated following instructions issued to every NHS trust in England instructing them to use Palantir’s “core products” in hospitals starting this month, as reported by the British Medical Journal. Labour MP Emily Darlington has warned that engaging a foreign tech company with patient data represents a major security risk, whilst the Liberal Democrats have declared the firm should be kept away from our national security infrastructure. The Green Party and Conservative MPs have also called for increased oversight of the company’s data protection capabilities, as Palantir’s UK leadership insists the software presents no risk to patient information.

The debate involving a US technology company’s NHS position

The opposition against Palantir’s partnership with the NHS focuses on worries regarding entrusting a non-UK technology provider with private healthcare records. Critics contend that relying on a US-headquartered firm for such essential health system infrastructure poses fundamental security threats, particularly given the company’s historical connections to defence and intelligence activities. The timing of this dispute is important, as NHS trusts have been instructed to implement Palantir’s systems this month, raising questions about whether sufficient safeguards and parliamentary oversight were in place before such extensive implementation began across the health service.

Palantir’s UK management has moved swiftly to tackle these issues, with executives stressing that the company has no business incentive to access or use patient data. The firm insists that its Foundry platform functions much like commonly-deployed applications like Microsoft Office, which processes NHS information without the software provider obtaining it. Nevertheless, the breadth of political opposition—spanning Labour, Liberal Democrat, Green, and Conservative MPs—suggests that statements by company representatives alone may fall short to address parliamentary worries about information protection and data safeguarding measures.

• Labour MP Emily Darlington raised concerns about “major security risk” from overseas technology participation
• Liberal Democrats declared company “should be completely removed from our critical security systems”
• Green Party leader characterised Palantir “a military surveillance company”
• Conservative MP Wendy Morton called for examination of information safeguarding abilities

What Palantir offers and the reasons the NHS requires it

Palantir’s Foundry platform addresses a long-standing challenge that has affected the NHS for decades: the inability of different hospital systems to interact seamlessly with one another. Across the health service, disconnected data systems exist in isolation—a patient’s GP records cannot smoothly integrate with their hospital files, and clinic systems operate independently from A&E departments. This division generates delays, impedes timely care, and squanders critical funding. The £300 million contract granted to Palantir at the close of 2023 is intended to solve this essential systems problem by establishing a single integrated platform.

The company’s software allows NHS trusts to access, combine and evaluate formerly isolated databases whilst avoiding expensive infrastructure upgrades or renewals. By connecting these fragmented platforms, Palantir claims its platform delivers tangible benefits: it delivers live oversight of appointment backlogs, tracks hospital supplies and equipment, pinpoints free spaces and surgical suites, and substantially advances care integration. These capabilities address genuine practical difficulties that healthcare professionals and leadership face on a day-to-day basis. The technology constitutes a realistic effort to update healthcare systems without abandoning existing investments in legacy systems.

How the federated information system operates

Rather than forcing the NHS to consolidate or replace its current IT infrastructure, Palantir’s data platform with federated architecture functions as a connective layer between distinct systems. It permits information kept in different databases—whether at GP surgeries, hospitals or clinics—to be analysed and accessed together without moving or consolidating the data itself. This “distributed” approach means each organisation keeps control of its own information whilst allowing queries across systems and analysis. The platform functions as a sophisticated translator, permitting incompatible systems to communicate insights without requiring wholesale technological replacement.

Palantir executives have consistently drawn comparisons to common office software to describe the technology’s operation. Just as Microsoft Excel or Word handles NHS data without Microsoft gaining access to it, Palantir’s software integrates information without the company itself accessing patient records. The data remains under NHS control and ownership throughout the process. This structural approach is central to the company’s defence against security allegations, though critics challenge whether such guarantees are adequate given the sensitivity of healthcare information and Palantir’s prior involvement with defence and intelligence organisations.

Political dissent spans the breadth

The backlash against Palantir’s NHS involvement has proven notably bipartisan, with politicians from all political parties voicing serious reservations. Labour MP Emily Darlington warned the BBC that entrusting a foreign technology company with confidential patient data represents “a major security risk”, whilst Conservative MP Wendy Morton has called for greater scrutiny of the firm’s information security capabilities. The Liberal Democrats have taken an even harder line, arguing that Palantir “should be nowhere near our national security infrastructure”, whilst Green Party leader Zack Polanski has highlighted the company’s controversial history, labelling it “a military surveillance company”. This rare cross-party agreement suggests authentic worry extends beyond partisan positioning.

Palantir’s defence and the government’s stance

Palantir has mounted a strong defence against the mounting criticism, with UK senior executive Louis Mosley speaking to the BBC’s Politics Live to tackle concerns head-on. Mosley embraced parliamentary scrutiny, expressing confidence that the company was “serving” patients through its Foundry data-sharing platform. He emphasised that Palantir has no financial incentive to obtain patient data, likening the arrangement to standard software like Microsoft Excel or email used throughout the NHS. In Mosley’s view, the company operates under clear legal parameters that prevent data access, making patient information protection a non-issue rather than a vulnerability.

The government has primarily endorsed Palantir’s involvement, with Labour MP Alex McIntyre, sitting on the Commons Health and Social Care select committee, defending the contract whilst emphasising strict safeguards. McIntyre highlighted that the government has set “red lines” ensuring data stays within the UK and under NHS ownership, with Palantir strictly banned from accessing or disclosing patient records. This position demonstrates the administration’s view that the contract’s benefits in integrating fragmented NHS systems exceed security concerns, as long as robust governance frameworks continue to exist. The government’s stance indicates confidence in the contractual arrangements, though this continues to be challenged by opposition parties.

The company’s key arguments

• Palantir has zero business motivation in obtaining or profiting from UK patient data whatsoever.
• Software integrates incompatible NHS databases without company gaining access to records.
• Arrangement reflects how Microsoft tools function within NHS without concerns about data access.

What happens next for NHS information integration

The £300m Palantir deal with NHS England, awarded at the end of 2023, is due for renewal at the beginning of next year, creating a critical juncture for the government’s digital data strategy. Before that renewal decision, Parliament will likely intensify its oversight of the arrangement, with oversight committees possibly initiating formal inquiries into data security protocols and oversight mechanisms. The growing multi-party pressure indicates any contract extension will face considerable resistance unless the government can show robust safeguards and clear governance frameworks. The coming months will be crucial in establishing whether Palantir retains its primary role in NHS data systems or whether other options gain momentum.

Meanwhile, NHS trusts have been directed to deploy Palantir’s primary systems in healthcare facilities starting this month, according to guidance sent by NHS England. This rollout proceeds notwithstanding the political backlash, suggesting the government remains committed to the integration project. However, the simultaneous parliamentary pressure could require the Department of Health to perform further independent security reviews or set up new supervisory bodies before the contract renewal. The conclusion will probably determine not only the NHS’s technological future but also create precedent for how the UK government conducts partnerships connecting the health service to overseas technology firms.