Inside the Battle Over Palantir's £330 Million NHS Data Contract

In November 2023, NHS England awarded a seven-year, £330 million contract to a consortium led by Palantir Technologies—the US data analytics firm co-founded by billionaire Peter Thiel—to build a Federated Data Platform (FDP) intended to integrate patient data across England's health system [1]. Two and a half years later, the contract has become one of the most contested government technology deals in British history, drawing opposition from Amnesty International, the British Medical Association, tens of thousands of patients, and a growing number of NHS trusts that have declined to adopt the platform [2][3].

The resistance reached a new intensity in March 2026, when Amnesty International UK and Medact published a detailed briefing urging hospitals to reject the software and demanding that NHS England cancel the contract entirely [3]. Days later, the UK government acknowledged the controversy, with Science Minister Patrick Vallance telling Parliament's Science, Innovation and Technology Committee that the government would pursue a "very different" approach to tech procurement going forward [4].

What the Contract Covers

The FDP is built on Palantir's Foundry software, a data integration platform already used by military and intelligence agencies worldwide. Its stated purpose within the NHS is to connect disparate operational datasets—hospital bed availability, waiting lists, staffing levels, medical supplies—so that individual trusts and integrated care boards can make better-informed decisions [5].

Under the contract, the Palantir-led consortium (which includes Accenture, PwC, Carnall Farrar, and NECS) provides the software infrastructure, while NHS organizations retain control over their own data. NHS England has stated that Palantir "cannot commercialise or market NHS data, even on an anonymised basis" and cannot use NHS data to develop new products or train AI models [5]. A separate contract for privacy-enhancing technology was awarded to IQVIA, a US-based health data company [6].

As of February 2026, 110 hospital trusts were live on the platform, with 167 having signed memoranda of understanding to join. However, only 79 trusts reported measurable benefits [7].

A Contested Procurement

The procurement process has faced sustained legal and political scrutiny since before the contract was signed. Critics allege that Palantir was given preliminary contracts without open competition during the COVID-19 pandemic to develop and run earlier iterations of the platform, giving it an insurmountable advantage in the subsequent formal procurement [8].

NHS England described the award as following a "comprehensive, four-stage competitive dialogue" process. Competing bidders included Oracle, IBM, and a consortium of UK companies led by Voror Health Technologies with Eclipse and Black Pear [9]. However, the Good Law Project revealed that NHS England signed the contract while 417 of 586 pages were still "subject to commercial negotiation"—meaning the deal was formalized before its terms were finalized [8].

Foxglove, a digital rights organization, launched a legal challenge arguing there was no lawful basis to create the FDP under existing legal directions governing NHS data sharing [10]. The Good Law Project separately challenged the heavy redaction of the published contract, eventually winning the release of key sections on data protection [11].

In Parliament, concerns were raised across party lines. A House of Lords debate in June 2023 questioned why a US defense contractor was preferred over UK-based healthcare technology firms, particularly given the existence of the publicly funded DARE UK (Data and Analytics Research Environments) project, which had already addressed many of the ethical and technical challenges the FDP was meant to solve [12].

Who Is Protesting and What They Want

The opposition to the Palantir contract has coalesced around several distinct but overlapping campaigns.

Healthcare workers: Medact, a UK health workers' organization, has led the "No Palantir in the NHS" campaign, with healthcare workers confronting NHS leaders at closed-door FDP implementation meetings [13]. The British Medical Association passed a resolution opposing Palantir's role in the NHS [3].

Patient campaigns: More than 47,000 patients had written to their local NHS trust boards by February 2026 objecting to FDP implementation [13]. Greater Manchester Integrated Care Board cited "specific objections" from patients and data controllers when declining the platform [3].

Civil liberties organizations: Amnesty International UK, Privacy International, the Good Law Project, Foxglove, Just Treatment, Corporate Watch, and the United Tech and Allied Workers Union have all called for contract cancellation [2].

Political figures: Green Party leader Carla Denyer joined protests against Palantir's UK contracts, and Liberal Democrat MPs have called for break clauses to be "exploited to move to UK solutions—sovereign solutions" [4][14].

Their demands converge on several points: cancel the contract at or before its February 2027 review date; investigate in-house and open-source alternatives; and establish that NHS data infrastructure should not be built on proprietary systems controlled by foreign defense contractors [3].

Source: NHS England / Democracy for Sale

Data as of Feb 12, 2026CSV

The Privacy and Surveillance Question

The privacy case against Palantir rests on both structural concerns about the platform and the company's track record elsewhere.

The CLOUD Act problem: As a US-headquartered company, Palantir is subject to the US CLOUD Act, which allows US law enforcement to compel disclosure of data held by American companies regardless of where the servers are physically located [15]. Critics argue this creates an inherent vulnerability for NHS patient data, despite NHS England's contractual restrictions on data access.

Cross-government interoperability: Medact's briefing warned that Palantir's Foundry platform is designed for interoperability across government departments—and that UK police forces, including Bedfordshire Police, already use Palantir software that combines criminal records with "financial information, trade union membership, sexual orientation, health information and race" [3]. The concern is that a current or future government could exploit FDP's architecture to share health data with the Home Office or law enforcement.

The US precedent: In January 2026, the Electronic Frontier Foundation reported that US Immigration and Customs Enforcement (ICE) was using a Palantir-built tool called ELITE that ingests Medicaid data to generate "leads" on people targeted for deportation [16]. ICE and the Centers for Medicare and Medicaid Services had signed a data-sharing agreement covering nearly 80 million Medicaid patients [17]. Palantir was separately awarded $30 million to build "ImmigrationOS," a platform for tracking, targeting, and deporting immigrants [18].

For NHS critics, the US case is not an abstract parallel. It demonstrates that health data held on Palantir infrastructure can be repurposed for immigration enforcement—exactly the scenario they fear could unfold in the UK, where the Home Office has previously accessed NHS data for immigration purposes.

Palantir's response: The company has published blog posts disputing specific media reports, including a rebuttal to a January 2026 EFF report on the ELITE tool [19]. NHS England maintains that the FDP includes encryption at rest and in transit, firewalls and intrusion detection, purpose-based access controls, full audit logging, regular penetration testing, and oversight by the National Cyber Security Centre [6]. An independent check-and-challenge group including the National Data Guardian and Patients Association provides external oversight [6].

The Human Rights Dimension

A second strand of opposition focuses not on what Palantir might do with NHS data, but on what the company does elsewhere.

In January 2024, Palantir announced a partnership with the Israeli Ministry of Defence to deploy its technology in support of "war-related missions" [3]. Amnesty International and UN Special Rapporteur Francesca Albanese have identified the company as likely complicit in operations linked to Israel's military actions in Gaza [3][20]. Norwegian investor Storebrand divested from Palantir over allegations related to AI-based systems targeting Palestinians [3].

Palantir CEO Alex Karp has been publicly explicit about the company's military orientation. In 2025, he stated: "Palantir is here to disrupt…and, when it's necessary, to scare our enemies and, on occasion, kill them" [3].

For organizations like Amnesty, the argument is straightforward: a company accused of contributing to serious human rights violations should not be embedded within England's public health system, regardless of data safeguards. NHS England has not publicly responded to these specific human rights concerns.

The Case for the FDP

Proponents of the platform argue that the NHS urgently needs integrated data infrastructure and that opposition risks leaving the health service stuck with fragmented, outdated systems.

NHS England has stated the FDP enables trusts to manage waiting lists more effectively, optimize bed allocation, and coordinate care across organizational boundaries [5]. The government characterized Palantir's £250 million Ministry of Defence deal as "a vote of confidence in the UK" [21], and some trusts have reported operational improvements since going live.

Supporters also note that the data remains under NHS control, that Palantir cannot access it without explicit permission, and that the contractual restrictions on commercial use are among the strictest in any government technology deal [5].

However, even this case has weaknesses. During initial pilots, only eight of 36 trusts—less than a quarter—reported benefits [10]. The NHS Chief Data and Analytical Officer Network concluded in February 2025 that existing tools at some trusts "presently exceed the capability" of what FDP offers [3]. Leeds Teaching Hospitals NHS Trust stated that adopting FDP would actually reduce its functionality [22].

What Comes Next

The contract includes a review point in February 2027, and several forces are converging on that date.

The UK government is signaling a shift. Lord Vallance told Parliament: "We are not continuing. We are doing something very different," referring to future procurement strategy, though he declined to comment specifically on the NHS contract [4]. The Labour government's plan to merge NHS England into the Department of Health and Social Care by April 2027 adds further uncertainty, as HM Treasury is currently reviewing DHSC digital investment plans [4].

Campaign groups are urging trusts not to wait. Medact recommends that hospitals decline FDP implementation now and investigate in-house or open-source alternatives, pointing to the DARE UK project as a UK-funded platform that addresses many of the same technical challenges [3][12].

If the contract is not renewed, the NHS would face a significant transition. Building equivalent analytical capability in-house or with alternative vendors would take years and require substantial investment. Some trusts that have integrated FDP into their operations would need migration plans. But opponents argue the cost of continued dependence on Palantir—in terms of vendor lock-in, sovereignty risks, and institutional credibility—is higher than the cost of transition.

The February 2027 review will be a defining moment. With over 47,000 patient complaints on record, a BMA resolution against the contract, MoD officials warning of national security risks from Palantir dependency, and the government itself promising change, the political ground has shifted substantially since the contract was signed in 2023. Whether that shift translates into contract cancellation—or merely revised terms and continued reliance—remains the central question.

Source: GDELT Project

Data as of Mar 21, 2026CSV