NHS England Plans to Grant External Contractors Unchecked Access to Patient Data

Reports have emerged that NHS England is considering granting leading tech firm Palantir, along with other external contractors, an “admin” role that would grant them unlimited access to identifiable patient data. The proposal, which has raised significant concerns among patient advocacy groups and data protection experts, would bypass existing safeguards and potentially put sensitive information at risk.

According to sources close to the matter, the planned role change would give external contractors access to the NHS’s National Data Opt-out system, allowing them to view and modify data relating to individual patients. This access would be unregulated, meaning that Palantir and other contractors would not be subject to the same strict data protection protocols as NHS staff.

The move is part of a wider effort to streamline and simplify the way in which data is accessed and shared within the NHS. However, critics argue that the proposed changes do not do enough to ensure the safe and secure handling of patient data. “This is a reckless decision that puts the confidentiality and trust of millions of patients at risk,” said a spokesperson for the patient advocacy group, Patient Concern. “We urge NHS England to reconsider this proposal and prioritize the safety and security of patient data above all else.”

Palantir, the data analytics firm at the center of the controversy, has been involved in various high-profile data sharing agreements with governments and healthcare organizations in recent years. While the company has maintained that it takes patient data protection seriously, its track record on data security has raised concerns among some experts.

In response to the proposed changes, an NHS spokesperson said that the health service was committed to ensuring the safe and secure handling of patient data. “The NHS is working closely with partners to review its data governance arrangements and ensure that they meet the highest standards,” they said. However, the spokesperson declined to comment on the specifics of the Palantir contract or the extent to which the firm’s access to patient data would be regulated.

As the debate over the proposed changes continues, patient advocacy groups and data protection experts are calling for greater transparency and accountability in the way in which patient data is accessed and shared. “The NHS has a duty to protect the confidentiality and trust of patients,” said a spokesperson for the data protection charity, Information Commissioner’s Office. “We urge NHS England to rethink this proposal and prioritize the safety and security of patient data above all else.”

The proposed changes to the NHS’s data governance arrangements will be subject to a review by the Information Commissioner’s Office, which is set to begin in the coming weeks. The outcome of this review will be closely watched by patient advocacy groups and data protection experts, who will be waiting to see whether NHS England has addressed their concerns and prioritized the safety and security of patient data.