Almost 45,000 people object to processing by Palantir's NHS Federated Data Platform

More than 44,000 individuals have formally objected to their medical records being processed by Palantir's Federated Data Platform (FDP). The campaign directed people to exercise their right to object to processing under Article 21 of the UK General Data Protection Regulation (GDPR). 

The article also cites how almost 180,000 people have signed a petition organised by 38 Degrees calling for all public contracts with Palantir to be scrapped. The level of anger towards the controversial US-based AI company concerns its involvement with the IDF in Gaza and ICE in America. The move comes ahead of an important government decision on whether to continue the £330 million FDP contract or trigger a break clause in February 2027.

Meanwhile, Prime Minister Andy Burnham's Labour government is seeking domestic alternatives (£) to the controversial software company. The move is aligned with a broader policy drive to prioritise British suppliers.

Options under review include dividing the FDP among multiple providers or granting Palantir a temporary 12-month extension to allow time to develop local alternatives. The latter may prove complicated as current contractual terms stipulate a two-year minimum extension.

At the Labour Party conference, First Secretary of State Louise Haigh stressed the need to establish sovereign AI capabilities to avoid reliance on foreign technology giants, echoing actions in France and Germany to curtail contracts with Palantir. However, Tom Bartlett, former deputy director of data engineering and integration at NHS England, cautioned that replacing Palantir represents a risky gamble, arguing no existing alternative currently matches its functional capabilities. Palantir stated it remains deeply committed to the UK.

£ - This article requires a subscription.

Training announcement: Freevacy provides comprehensive training for new and existing practitioners on the changes introduced by the DUA Act to the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA18), and the Privacy and Electronic Communications Regulations 2003 (PEC-Regulations). Our courses are always up to date and provide a forum for learning and discussing how to ensure your data protection processes remain compliant. Find out more.