Palantir’s shadow: nhs email access sparks ethical alarm
NHS staff are voicing deep concerns after revelations that engineers from controversial tech firm Palantir have been granted access to confidential NHS email accounts, potentially exposing sensitive patient data.
Nhs data breach fuels palantir controversy
A disturbing pattern has emerged: Palantir, a company specializing in data analytics and surveillance technology, has been provided with access to the NHS.net directory, a repository containing contact details for nearly 1.5 million NHS employees. Sources indicate that Palantir’s personnel were granted the same level of access, raising serious questions about data security and ethical oversight.
The firm is currently rolling out its Federated Data Platform (FDP) across the UK, a project backed by a £300 million contract awarded in 2023. NHS England touts the FDP as a transformative tool, promising to streamline patient record management, accelerate diagnoses, and personalize treatment – a cornerstone of the government’s “reinvent the NHS” initiative. However, this apparent ease of access for private contractors is triggering widespread alarm.
Concerns over surveillance and data control
“As a doctor, I absolutely don't want my personal email and number accessible to someone from Palantir working on the NHS,” stated Rory Gibson, a resident doctor. “The fact that their staff could potentially be working on systems used for operations, including potentially drone strikes, is profoundly unsettling.” The Guardian’s investigation confirms the existence of at least six Palantir engineers granted NHS.net accounts, highlighting the scope of the potential breach.
Palantir defends its actions, claiming it’s standard practice for government suppliers, referencing official guidance that suggests utilizing government systems enhances security. The company insists that NHS data remains under strict NHS control and is processed solely according to NHS instructions. But critics remain unconvinced, pointing to Palantir’s history with AI-powered surveillance and its involvement in defense technology – a lineage that raises serious ethical red flags.
A troubling precedent
David Rowland, director of the Centre for Health and the Public Interest, argues that while the email access itself might not constitute a formal rule violation, it’s symptomatic of a broader problem: “The involvement of Palantir raises deep ethical concerns about its values and how it makes money – values that fundamentally clash with the NHS’s founding principles.” He called for a comprehensive review of contracts awarded to private companies within the UK’s healthcare system.
Recent reports have documented virtual Microsoft Teams meetings between Palantir engineers and NHS staff, conducted using NHS email addresses—further fueling distrust. The NHSmail access policy, which permits “independent sector organisations” to utilize NHSmail accounts, allows access to staff details, including mobile numbers and location data. This seemingly innocuous provision opens the door to potential misuse, particularly considering Palantir’s origins – founded by Peter Thiel and Alex Karp, figures known for their interest in data analysis and strategic “scaring” and “killing” of adversaries. The firm’s UK operation is headed by Louis Mosley, grandson of the infamous Oswald Mosley.
The stakes are higher than just data
The potential implications extend beyond data security. Critics fear the “drag and drop” interoperability of Palantir’s systems could enable state overreach, potentially paving the way for a British version of the US Immigration and Customs Enforcement (ICE). The Reform UK party has explicitly stated its intention to create such an agency if elected. NHS staff’s justifiable outrage underscores the urgent need for robust oversight and a critical examination of the technology shaping the future of healthcare. The fact remains: the NHS is increasingly reliant on private companies with potentially conflicting priorities – a trend that demands immediate attention.