Independent commentary
The Dispatch Room
Politics
Commentary

Your Medical Records Deserve More Than a Promise From Big Tech

The Palantir–NHS dispute calls for enforceable safeguards and measurable results, not blind trust or unsupported accusations.

Engraved illustration of a locked medical-record folder and stethoscope in front of server cabinets.
The Dispatch Room illustration
The big picture

The Palantir–NHS dispute calls for enforceable safeguards and measurable results, not blind trust or unsupported accusations.

Conservatives should not have to join a left-wing protest march to ask who can reach their medical records. Skepticism about concentrated power ought to survive the moment a technology company becomes fashionable on the right.

The dispute over Palantir's role in England's NHS is a useful test. Amnesty International UK said its October 1 day of action involved more than 40 demonstrations against the company's relationship with the health service. The campaign has political and foreign-policy objections as well as questions about the contract. Those arguments should not be confused with proof that patient information has been misused.

NHS England's own explanation is important. It describes the Federated Data Platform as NHS-controlled and says Palantir processes information under NHS direction. Its contract rules prohibit the company from commercializing NHS data or using it to train its own AI models. NHS England also describes audited access, UK-based processing and restrictions intended to prevent dependence on a single supplier.

Those are meaningful commitments. An honest critique cannot pretend the company has been openly handed ownership of everyone's medical history. The issue is whether patients and taxpayers can see convincing evidence that the safeguards and promised benefits hold up in practice.

A contract clause is the beginning of oversight. The public should be able to understand who checks access, how improper access would be detected, what happens after a violation and whether officials can change suppliers without disrupting care. None of those questions requires assuming that misconduct has occurred.

Patient choice also deserves a clearer explanation than competing slogans provide. NHS England's privacy notice says the national data opt-out does not currently apply to the platform's products, explaining that confidential patient information in local products is used for direct care. It also notes that local opt-out arrangements may apply. That is more complicated than either claiming every patient has an unrestricted veto or insisting that patients have no rights at all.

People should not need to become information-governance specialists to understand what happens to the intimate details they disclose during treatment. A plain-language account of each use, each safeguard and each available choice should be part of delivering the service, not an optional public-relations exercise.

There is a strong argument for better health-service software. Fragmented information can frustrate staff and patients, and refusing every outside supplier is not a serious modernization policy. Private expertise can help public institutions do their jobs. But a claim of efficiency should be supported by measurable results, not treated as an answer to every question about cost or control.

Americans should recognize the principle even though this fight concerns England. Supporting innovation does not mean treating technology contractors as beyond scrutiny, any more than distrusting bureaucracy means ignoring what happens when bureaucracy hires a vendor.

The proper demand is neither blind trust nor automatic cancellation. It is enforceable limits, visible results and a credible ability to walk away. A patient's confidence is too important to rest on the political reputation of whichever company wins the contract.

Discussion

Loading discussion…