Palantir faces mounting parliamentary pressure over NHS data security concerns

Palantir Technologies has faced increasing scrutiny from MPs across multiple parties over data security concerns relating to its work with the NHS, as the US-headquartered analytics firm justifies its £300m agreement with NHS England. The dispute intensified after instructions issued to every NHS trust in England instructing them to use Palantir’s “core products” in hospitals starting this month, as reported by the British Medical Journal. Labour MP Emily Darlington has warned that engaging a foreign tech company with medical information represents a significant security threat, whilst the Liberal Democrats have declared the firm should be nowhere near our national security infrastructure. The Green Party and Conservative MPs have also demanded heightened scrutiny of the company’s information protection capabilities, as Palantir’s UK leadership insists the software poses no threat to patient information.

The controversy centred on a US technology company’s NHS position

The opposition against Palantir’s work with the NHS revolves around anxieties over entrusting a overseas tech firm with sensitive patient data. Critics maintain that relying on a American-based company for such essential health system infrastructure poses inherent security risks, especially considering the company’s historical connections to defence and intelligence activities. The timing of this dispute is important, as NHS trusts have been directed to deploy Palantir’s technology this month, raising questions about whether adequate protections and parliamentary scrutiny were in place before such large-scale rollout began across the NHS.

Palantir’s UK management has moved swiftly to tackle these issues, with executives stressing that the company has no business incentive to accessing or utilising patient data. The firm insists that its Foundry platform functions much like commonly-deployed applications like Microsoft Office, which processes NHS information without the software provider gaining access to it. Nevertheless, the scale of parliamentary resistance—covering Labour, Liberal Democrat, Green, and Conservative MPs—suggests that statements by company representatives alone may fall short to quell parliamentary concerns about information protection and data safeguarding measures.

• Labour MP Emily Darlington cautioned against “substantial security concern” from international tech involvement
• Liberal Democrats stated company “should be nowhere near our national security infrastructure”
• Green Party leader called Palantir “a defence surveillance firm”
• Conservative MP Wendy Morton demanded examination of data protection capabilities

What Palantir provides and why the NHS needs it

Palantir’s Foundry platform tackles a persistent issue that has plagued the NHS for decades: the inability of disparate hospital networks to communicate effectively with one another. Across the health service, disconnected data systems exist in silos—a patient’s GP records cannot readily connect with their hospital files, and clinic systems work in isolation from A&E departments. This fragmentation produces problems, slows clinical decision-making, and depletes essential capacity. The £300 million contract granted to Palantir at the close of 2023 is designed to solve this critical infrastructure challenge by establishing a consolidated data system.

The company’s software permits NHS trusts to access, combine and evaluate historically separate databases without requiring expensive infrastructure upgrades or renewals. By connecting these disparate systems, Palantir claims its platform offers measurable improvements: it delivers live oversight of patient queues, monitors medical inventory and assets, locates vacant capacity and surgical suites, and substantially advances care integration. These capabilities tackle real workflow challenges that clinicians and administrators encounter regularly. The technology represents a practical approach to update healthcare systems while maintaining current commitments in older platforms.

How the distributed data platform operates

Rather than requiring the NHS to consolidate or replace its current IT systems, Palantir’s federated data platform serves as a connective layer between separate systems. It allows information held in different databases—whether at general practice surgeries, hospitals or clinics—to be analysed and accessed together without transferring or consolidating the data itself. This “distributed” approach means each organization maintains control over its own information whilst allowing cross-system queries and analysis. The platform functions as a complex intermediary, enabling incompatible systems to share insights without requiring wholesale technological replacement.

Palantir executives have consistently drawn comparisons to standard workplace applications to describe the technology’s operation. Just as Microsoft Excel or Word handles NHS data without Microsoft gaining access to it, Palantir’s software combines information without the company itself viewing patient records. The data remains under NHS ownership and control throughout the process. This architectural design is at the heart of the company’s defence against security allegations, though critics question whether such guarantees are adequate given the confidential nature of healthcare information and Palantir’s previous work with defence and intelligence organisations.

Political resistance extends across the breadth

The backlash against Palantir’s NHS involvement has proven remarkably bipartisan, with politicians from all political parties voicing serious reservations. Labour MP Emily Darlington warned the BBC that entrusting a foreign technology company with sensitive patient information represents “a major security risk”, whilst Conservative MP Wendy Morton has called for increased oversight of the firm’s data protection capabilities. The Liberal Democrats have taken an stronger stance, arguing that Palantir “should be nowhere near our critical security systems”, whilst Green Party leader Zack Polanski has highlighted the company’s troubled past, labelling it “a military surveillance company”. This unusual political consensus suggests genuine concern extends beyond party politics.

Palantir’s defence and the state’s view

Palantir has mounted a strong defence against the growing criticism, with UK executive vice-chair Louis Mosley appearing on the BBC’s Politics Live to tackle concerns directly. Mosley welcomed parliamentary scrutiny, expressing confidence that the company was “delivering for” patients through its Foundry federated data platform. He emphasised that Palantir has no commercial interest in obtain patient data, comparing the arrangement to established software like Microsoft Excel or email used throughout the NHS. As Mosley explained, the company operates under strict regulatory parameters that prevent data access, making patient information security a non-concern rather than a vulnerability.

The government has primarily endorsed Palantir’s involvement, with Labour MP Alex McIntyre, serving on the Commons Health and Social Care select committee, defending the contract whilst demanding strict safeguards. McIntyre underscored that the government has established “red lines” guaranteeing data stays within the UK and under NHS ownership, with Palantir formally prevented from accessing or disclosing patient records. This position demonstrates the administration’s conviction that the contract’s benefits in integrating fragmented NHS systems outweigh security concerns, as long as robust governance frameworks continue to exist. The government’s stance suggests confidence in the contractual arrangements, though this continues to be challenged by opposition parties.

The company’s principal arguments

• Palantir has zero business motivation in obtaining or profiting from UK patient data whatsoever.
• Software integrates incompatible NHS databases without company gaining access to records.
• Arrangement mirrors how Microsoft tools function within NHS without data access concerns.

What occurs next for NHS data consolidation

The £300m Palantir agreement with NHS England, awarded at the end of 2023, is set for renewal at the beginning of next year, presenting a critical juncture for the government’s digital data strategy. Before that renewal process, Parliament will probably increase its examination of the arrangement, with select committees possibly initiating official investigations into data security protocols and accountability structures. The mounting cross-party pressure implies any contract extension will face considerable resistance unless the government can show strong protections and transparent governance structures. The coming months will be pivotal in ascertaining whether Palantir maintains its primary role in NHS technology infrastructure or whether alternative solutions gain traction.

Meanwhile, NHS trusts have been instructed to implement Palantir’s core products in healthcare facilities starting this month, based on guidance provided by NHS England. This implementation moves forward in spite of political opposition, suggesting the government remains committed to the integration project. However, the parallel parliamentary scrutiny could compel the Department of Health to undertake further independent security reviews or establish new oversight bodies before the contract renewal. The outcome will likely shape not only the NHS’s digital future but also establish precedent for how the UK government engages in partnerships connecting the health service to foreign technology companies.