Alarm bells ought to have rung when it emerged last month that Palantir engineers could gain “unlimited access” to identifiable NHS patient data. Such sensitive medical information was only supposed to be available either to someone involved in a patient’s care or with the patient’s informed consent. NHS England’s new position appears to have changed that, extending access to private companies because it may make data processing easier. Convenience is not a basis for undermining medical confidentiality.
Nicola Byrne, the government’s national data guardian, clearly thought the NHS had broken its promise that its £330m deal with Palantir would see “identifiable patient information … limited to NHS staff with a legitimate need”. Patients tell doctors things they may tell no one else. If they think that sensitive details can be disclosed to US tech corporations, trust will suffer – and patients will say less when the truth matters most.
