UK government faces criticism over use of Palantir data analytics firm

Palantir Technologies’ NHS Contract Under Scrutiny Amid Data Concerns

A contract between Palantir Technologies, a US-based defence and intelligence software firm, and the UK’s National Health Service (NHS), has raised concerns about data protection. The six-year agreement, worth nearly £400 million, was established in 2020 to provide the NHS with a data platform.

Critics have questioned whether Palantir is adhering to its obligations under the contract, which prohibits exploiting patient data. Duncan McCann, technology and data lead at the Good Law Project, stated that Palantir’s manifesto posted on its X account recently highlighted concerns about the company’s values aligning with those of a healthcare organization.

The NHS has allowed Palantir employees unlimited access to patient data, according to an internal briefing note. This has sparked debate about the governance of the contract. Palantir’s origins are rooted in defence, and its civilian solution, Foundry, underpins the NHS’s Federated Data Platform (FDP).

A 2020 review by Privacy International and No Tech For Tyrants found that the two systems share a common architecture, raising concerns about data protection. Palantir has stated that it acts exclusively as a data processor under the instruction of the NHS, but critics argue that this may not be sufficient.

Audits have been conducted to verify compliance with industry standards for protecting data against unauthorized access and breach. However, experts have questioned the effectiveness of these audits in ensuring data protection. Eerke Boiten, a professor in cybersecurity, noted that tech companies like Palantir are so large and complex that it is difficult to determine whether they are complying with rules.

The UK government has considered a 2027 break point for the contract, citing concerns about governance. The NHS England has stated that Palantir will only operate under the instruction of the NHS when processing data on the platform, but critics argue that this may not be enough to ensure data protection.

Source: Al Jazeera