NHS England Gave Palantir 'Unlimited Access' to 50 Million Patient Records.

A leaked May 2026 briefing confirmed Palantir staff have unlimited admin access to identifiable NHS patient data, before pseudonymisation. The Section 254 direction overriding the National Data Opt-Out has never been published. Send a UK GDPR complaint to NHS England, an ask to the National Data Guardian, and a personalised letter to your MP — in one click.

Live tally

emails sent in this campaign · and counting

Support us. Each personalised letter costs us money to deliver. Help us keep Palantir under regulatory pressure at the 2027 break clause.

Donate

Send to NHS England, the National Data Guardian & your MP

Enter your details below — including your UK postcode so we can auto-lookup your MP — and we'll send a personalised letter to all three recipients. Each is tailored: a formal UK GDPR complaint to NHS England's DPO, a Caldicott-Principles-grounded ask to Dr Nicola Byrne at the National Data Guardian's office, and a constituency letter to your own MP demanding the Section 254 direction is published, the unlimited-access admin role is revoked, and the contract is not renewed at the spring 2027 break clause.

Your details

Review & send

Done

How this works

Enter your details below
Verify your email with a one-time code
We send the email on your behalf — done!

Have a NewsCord account? Sign in to autofill

First Name *

Last Name *

Email Address *

Postcode (optional, fill to also email your MP)

Address (optional — added to signature)

Letters being sent (3)

🏥

NHS England — Data Protection Officer

[email protected] · [email protected]

🛡️

National Data Guardian (Dr Nicola Byrne)

[email protected]

🏛️

Your MP (auto-looked-up)

From your UK postcode

One letter per recipient — each tailored to the recipient's role.

Email me if they respond, and about future NewsCord campaigns

Skip the review and send my complaint straight awayThis is ticked, so we file your complaint as soon as you verify your email. Untick it if you would rather read the finished wording and change anything first, before it goes out in your name.

We'll send a 6-digit code to verify your email before proceeding.

About this campaign

On 11 May 2026 a leaked NHS England internal briefing — first reported by the Financial Times and confirmed by Digital Health, The Register and HT World — revealed that staff of Palantir Technologies and external consultants have been granted an ‘admin’ role with unlimited access to identifiable patient data in the National Data Integration Tenant, before pseudonymisation. The justification offered by NHS England was that the existing approval process for each dataset was “operationally inconvenient”.

The contract is the £330m Federated Data Platform, signed in November 2023. It covers up to 240 NHS trusts and integrated care boards and records on more than 50 million patients. 417 of the contract’s 586 pages were redacted at publication. The Good Law Project is litigating that secrecy.

The National Data Opt-Out does not apply to the Federated Data Platform. The legal mechanism is a direction issued under Section 254 of the Health and Social Care Act 2012 — a direction that has never been published, named, or laid before Parliament. A secret legal instrument is being used to override the only consent mechanism patients have. The Foxglove legal action argues no lawful basis exists for the FDP at all.