
TL;DR
NHS England has apologized for misleading claims about patient data access, admitting that Palantir employees can view identifiable patient information through the Federated Data Platform.
✦ Why It Matters
Review your data access policies to ensure compliance and transparency in handling sensitive patient information.
Key Takeaways
Full Summary
NHS England acknowledged that its Data Protection Impact Assessment (DPIA) incorrectly stated that only NHS staff could access identifiable patient data. Following scrutiny from Dr.
Nicola Byrne, the National Data Guardian, the NHS clarified that authorized users from suppliers, including Palantir, do have controlled access to this sensitive information. Currently, three Palantir engineers have administrative access, while 33 others have limited access for specific tasks.
The NHS emphasized that this access is strictly for technical support and not for personal use of the data. The incident highlights the importance of transparency in data handling, especially given public concerns about Palantir's involvement in the NHS.
Dr. Byrne noted that maintaining public trust requires accurate communication about who can access patient data.
Related