As of May 11, 2026, reports indicate that the UK's NHS has granted contractors from Palantir "unlimited access" to identifiable patient data while they work on the NDIT platform. This move allows certain non-NHS staff to assume an "admin" role, thereby accessing sensitive patient information more comprehensively than previously permitted.

The NDIT, part of the Federated Data Platform, aims to integrate various NHS datasets into a cohesive system. It has been described as a secure environment for handling data before it undergoes pseudonymization for broader sharing.

NHS England has reiterated that strict policies govern access to patient data and pointed out that external access requires government security clearance and director-level approval. However, this decision has raised eyebrows regarding public trust, particularly given Palantir's illustrious history as a defense contractor with ties to U.S. intelligence agencies.

In 2023, Palantir was awarded a £330 million ($448 million) contract to develop the NDIT, with scrutiny surrounding their involvement increasing in recent weeks. Internal briefing notes have acknowledged "considerable public interest and concern about how much access to patient data Palantir staff have."

Concerns have been voiced across the political spectrum, highlighting fears that such access could lead to data misuse. Recommendations within the briefing note proposed capping the number of external admins granted access to the NDIT, ensuring that permissions are regularly reviewed.

Palantir spokespersons have defended the company's role, asserting that as a "data processor," it can operate only under the directions of the NHS, thereby preventing unauthorized use or sharing of data. This strict legal framework aims to maintain compliance and mitigate fears of potential misuse.

As the NHS strives to modernize its data management through this partnership, the balancing act between innovation and data security remains a matter of critical public discourse.