UK executive jam to extract clinical institution recordsdata to Palantir system without patient consent

The UK executive is jam to extract patient-identifiable recordsdata from NHS clinical institution methods and part this with its recordsdata platform based on technology from Palantir, a chase that appears to be like jam to provoke one other fair discipline.
Without consulting sufferers or giving them the assortment of opting out, NHS England and NHS Enchancment — the non-departmental executive body which runs the NHS in England — has instructed NHS Digital to bag the options for the cause of realizing and lowering the crisis in treatment ready times as a result of the COVID-19 pandemic.
In NHS Digital board assembly papers [PDF] (detect Sooner Knowledge Waft – 3.1.2 – on page 163), NHS England tells NHS Digital to “bag patient level identifiable recordsdata referring to admission, inpatient, discharge and outpatient exercise from acute care settings on a day to day basis.”
The chase is an growth of NHS England’s use of Palantir, which had been discipline to the specter of a judicial analysis in 2021. Beneath fair stress, the manager caved in and agreed no longer to expand Palantir’s contract beyond the pandemic without consulting the general public.
The judicial analysis was as soon as jam to be introduced by the news net field openDemocracy, backed by tech campaign neighborhood Foxglove.
Talking to The Register, Foxglove director Cori Crider mentioned: “We’re very concerned that this newest chase to power more patient recordsdata into Palantir has been completed with zero public input or consent. That is no longer what we were instructed would happen in our case, and we’re significantly concerned it is illegal. The executive would perchance be listening to from us rapidly.”
In the board papers, NHS England directs NHS Digital to use Foundry, a Palantir product for the assortment.
While NHS England owns the contractual relationship with Palantir, the novel instruction creates “a complex relationship” the put, by manner of data protection law, NHS Digital regularly is the options controller for the assortment but will use NHS England as a recordsdata processor and Palantir would perchance be a sub-processor, the account mentioned.
NHS England mentioned that sufferers wouldn’t be allowed to dam the switch of their recordsdata below the Nationwide Knowledge Decide-outs programme for the reason that recordsdata was as soon as resulting from be “anonymized based on the Knowledge Commissioner Office’s Anonymisation Code of Practice sooner than being launched.”
On the different hand, the the same account talks about the options being pseudonymized “to supply day to day products and services” below the notion. And there could be continually the hazard of pseudonymized records being deanonymized, and figuring out and documenting staunch folk, when extra data is introduced into the combine.
In February 2022, the country’s recordsdata watchdog, the Knowledge Commissioner’s Office (ICO), published draft steering on pseudonymization [PDF], that mentioned “…private recordsdata which salvage gone thru pseudonymization, that are attributed to a pure individual by manner of additional recordsdata must restful be regarded as to be recordsdata on an identifiable pure individual…”
The steering followed the introduction of the EU’s General Knowledge Protection Regulation, the local implementation of which (the UK GDPR) is below analysis in the UK following Brexit. The proposed replacement – the Knowledge Protection and Digital Knowledge Invoice (DPDIB) – is restful progressing thru Parliament.
- UK executive refuses public analysis sooner than launch of NHS recordsdata platform
- Choices on neatly being recordsdata sharing must restful no longer be taken by politicians, citizen juries decide up
- NHS recordsdata platform procurement delayed for a second time
- NSO claims ‘more than 5’ EU states use Pegasus spyware
In a Twitter thread explaining the disorders with NHS England’s skill Phil Booth, coordinator of campaign neighborhood medConfidential, mentioned: “In point of fact that sufferers salvage a #RightToObject to the #processing of their #PersonalData, so – while @NHSEngland could fair must omit folk’s decide-outs… and contorts itself to protest their recordsdata’s no longer ‘confidential patient recordsdata’ – the law(s) says otherwise.”
An NHS England spokesperson mentioned: “By collecting recordsdata in a more streamlined manner the NHS is better ready to location and allocate resources to maximise outcomes for sufferers, even as ensuring that recordsdata relieve an eye on remains with the NHS always. Finally, this could fair abet all NHS organizations to better perceive their ready lists and pressures in map staunch time, work as methods, and the burden of handbook reporting on personnel would perchance be very a lot diminished.”
There are for the time being a account 6.3 million sufferers anticipating treatment in the NHS in England, with 2.54 million sufferers ready more than 18 weeks. The median ready times remain “very a lot bigger” than pre-COVID ranges, NHS England mentioned, while a hidden backlog of sufferers yet to current with cases could be even bigger.
In the board papers, NHS England calls the novel Palantir recordsdata initiative the Sooner Knowledge Programme. A separate Federated Knowledge Platform is formally restful in the pipeline, even supposing the £360 million (c $406 million) procurement has been delayed by a number of months. Palantir is claimed to salvage made that competitors a “must-get”, having recruited Indra Joshi and Harjeet Dhaliwal, key figures in NHS England’s recordsdata science and AI teams.
Palantir has equipped technology inclined by the CIA and controversial US immigration agency ICE. ®