NHSE to republish Palantir patient data contract with fewer redactions

  • 5 March 2024
NHSE to republish Palantir patient data contract with fewer redactions

NHS England has confirmed it will republish its patient data contracts with Palantir and IQVIA with fewer redactions, following legal action by Good Law Project.

NHSE published a heavily redacted contract with Palantir to run the Federated Data Platform (FDP) just before Christmas, with 417 of its 586 pages completely blanked out. Three-quarters of biotech firm IQVIAā€™s contract with NHSE to provide ā€œPrivacy Enhancing Technologyā€ ā€“ to be used with Palantirā€™s FDP ā€“ is also hidden under entire page redactions.

In response to a legal letter sent by Good Law Project challenging the lawfulness of these redactions and how they were applied, NHSE has now confirmed it is reviewing both contracts and will aim to republish them within ā€œtwo weeksā€, but with ā€œno firm deadlineā€.

As part of this, NHSE has committed to unveil the previously blanked out section in its contract with Palantir which covers the ā€œprotection of personal dataā€.

Good Law Project will scrutinise the contracts once they are released and will be prepared to take further legal action where needed. This comes as it is preparing to launch a separate legal challenge against NHSE over how patient data is handled through the National Data Opt-Out programme and in line with General Data Protection Regulation.

Good Law Project legal manager, Ian Browne, said: ā€œā€œWith millions of sensitive patient records on the table with private companies, weā€™ve been alarmed at the lack of openness around the terms of NHS Englandā€™s contracts with Palantir and IQVIA.

ā€œAhead of the upcoming launch of the Federated Data Platform, weā€™ll continue to keep the pressure on NHSE to deliver the high standards of transparency the public deserves.

ā€œWhen the contracts are republished, the devil will be in the details. And ā€“ if necessary ā€“ weā€™ll be poised to use the law where political scrutiny and oversight has failed.ā€

NHSEā€™s responseĀ to Good Law Projectā€™sĀ pre-action protocol letterĀ criticises the legal approach that has been taken and claims it had alreadyĀ planned to issue versions of the contracts with fewer redactions.

However, until now, NHSE has failed to commit toĀ removingĀ some of theĀ redactions from the contracts. The last public update was issued in early January, when an NHSE spokespersonĀ told Digital Health News that, in relation to the Palantir contract, it would ā€œcontinue to work on final redactions and additional parts of the contract may be made available, if appropriateā€.

Good Law Project initiated legal proceedings to argue that the scale of the redactions and the way they have been applied by NHSE in both the Palantir and IQVIA contracts were unlawful.

Subscribe to our newsletter

Subscribe To Our Newsletter

Subscribe To Our Newsletter

Sign up

Related News

Norfolk and Norwich University Hospitals investigating cyber attack

Norfolk and Norwich University Hospitals investigating cyber attack

NHS Englandā€™s cyber security operations centre is investigating a cyber attack at Norfolk and Norwich University Hospitals NHS FT.
DMA must be ‘useful and usable’, says NHS England CIO

DMA must be ‘useful and usable’, says NHS England CIO

John Quinn, chief information officer at NHS England said that the digital maturity assessment (DMA) needs to be ā€œuseful and useableā€.
Norfolk and Waveney Collaborative approves Ā£88m Meditech EPR

Norfolk and Waveney Collaborative approves Ā£88m Meditech EPR

NHS Norfolk and Waveney Acute Hospital Collaborative has signed an Ā£88m contract with Meditech for an electronic patient record system.