Palantir is building a future in which our most intimate information becomes a tool of power. Who is watching the watchers?
The US data company has secured a £330m NHS contract and works with military and government agencies. The question is no longer simply what its software can do, but who should be trusted to control the information on which our lives depend.
Every time we visit a hospital, apply for a public service or interact with the state, we leave behind information about ourselves. Our medical histories, personal circumstances and everyday decisions form an increasingly detailed picture of who we are. The question is who gets to connect those fragments, analyse them and use what they reveal.
That question has become increasingly urgent as Palantir, the American data analytics company co-founded by billionaire Peter Thiel, expands its role in British public services. The company is at the centre of a growing controversy over a £330m contract with the NHS to provide its Federated Data Platform (FDP), software designed to help health services bring together information from different systems and make operational decisions.
In July 2026, MPs on the health and social care select committee urged the government to prepare an alternative, citing serious public mistrust, questions about the platform’s effectiveness and concerns over patient privacy. A separate parliamentary committee had already called for the government to consider ending the arrangement.
The government is reviewing the contract ahead of a break clause in February 2027. The decision will have implications far beyond the procurement of a piece of software. It will help determine how much control the public retains over the information entrusted to its institutions

A company with extraordinary access
Founded in 2003, Palantir grew out of the world of intelligence and national security. Its early funding included investment from In-Q-Tel, the investment organisation associated with the CIA. Its business has since expanded across government, healthcare, defence and commercial industries.
Thiel, a prominent supporter of Donald Trump, is one of the company’s co-founders. Trump himself did not found Palantir, but the company’s political associations have become part of a wider debate about the growing influence of powerful technology firms over public institutions.
Palantir’s software is designed to integrate data held in separate systems, allowing authorised users to identify connections and patterns that might otherwise remain hidden. That can be useful in complex organisations, where information is often fragmented and decisions need to be made quickly. But the same capability raises difficult questions. When information collected for one purpose can be analysed alongside information collected for another, the picture that emerges can be far more revealing than any individual record.
The concern is not simply that a company might possess a database containing everyone’s personal information. Palantir’s NHS platform is intended to connect existing systems rather than copy all their data into one central repository. The company says its software processes information according to the instructions and controls of the organisations using it. Nevertheless, the ability to connect, organise and analyse sensitive information can itself confer considerable power. A system does not need to own every record to influence how those records are interpreted and acted upon.
The NHS holds some of the most sensitive information imaginable: diagnoses, treatments, prescriptions, mental health records and details of deeply personal circumstances. Used responsibly, this information can improve care, reduce delays and help hospitals plan their services. Better coordination between departments can mean fewer missed appointments, more efficient use of operating theatres and patients receiving treatment sooner. Palantir and NHS officials have pointed to claimed improvements associated with the platform, including additional operations and reduced discharge delays. These benefits deserve serious consideration, just as claims about performance should be independently scrutinised.
But efficiency cannot be the only measure of success. Patients share information with doctors because they expect it to be used to treat them, not because they have knowingly agreed to every future use of their data by every technology provider involved in running the health service. There is a fundamental difference between allowing a hospital to access information needed for treatment and accepting an expanding infrastructure that makes it easier to combine and analyse information across an entire health system.vThat difference matters even when access is legally authorised and safeguards are in place. The public must be able to understand what information is being processed, who can access it, what decisions it informs and what happens if the system is misused.
In July, up to 117 NHS data and technology workers called for the contract to be abandoned, warning that inadequate privacy protections and declining public trust could undermine the completeness of health data. Their concern points to a serious practical risk: if people become reluctant to share information with the NHS because they do not trust the systems handling it, the consequences could affect healthcare itself. Palantir’s work extends beyond the NHS. The company has contracts and relationships involving defence, law enforcement and government agencies, including work associated with the US immigration authorities and the Israeli military. These uses are not identical, and the existence of a contract does not establish that every application of the software is abusive. But they demonstrate why the company’s technology cannot be evaluated solely as a neutral administrative tool.
Software that helps a hospital coordinate care may also help a government agency connect information, identify individuals and inform enforcement decisions. The consequences depend on the data involved, the authority using the system, the purpose of the analysis and the safeguards governing the result. That is precisely why democratic scrutiny matters.
When a company supplies technology to public institutions, its influence can extend beyond the terms of an individual contract. Public bodies may become dependent on its expertise, technical infrastructure and proprietary systems. Replacing a platform can then become expensive and complicated, even if public confidence deteriorates. This creates a question that should concern every government: how do we prevent essential public services from becoming dependent on private companies whose systems are difficult to inspect, challenge or replace?
Who controls the information?
Palantir says its software operates under the control of the organisations that use it, with data processed according to their instructions. That assurance is important. It is also not the end of the debate. Formal ownership and legal control do not automatically answer every question about practical power. Who determines which connections the software makes? Who can audit its operation? Can public authorities independently verify how information is handled? What happens when a contract ends? And can the public obtain meaningful explanations when an automated or data-driven process affects them?
These are questions for Parliament, regulators, the NHS and the company itself. They also require clarity about the limits of the technology. Data analysis can identify patterns, but patterns are not always explanations. Information may be incomplete, inconsistent or shaped by historical inequalities. Decisions made using flawed information can reproduce those problems at scale.
The more consequential the decision, the greater the need for accountability, independent scrutiny and a meaningful route to challenge mistakes.The debate over Palantir is not an argument against technology, nor is it a claim that every private contractor presents the same risks. Digital tools can improve public services, and refusing to modernise systems carries costs of its own. But public institutions have obligations that private companies do not share in quite the same way. The NHS exists to serve patients, not to maximise shareholder returns. Its legitimacy depends not only on the quality of the care it provides, but also on the confidence people have that their information will be handled responsibly.
If a technology provider can offer genuine improvements, those benefits should be demonstrated with transparent evidence. If equivalent alternatives exist, they should be assessed fairly, including options developed in-house or supplied by UK-based organisations. Cost, performance, security, long-term dependence and public trust should all form part of the calculation. The £330m contract should therefore be judged on more than whether the software works. It should be judged on whether the NHS can retain meaningful control over its digital infrastructure, whether patients can trust the protections around their information and whether the public interest is adequately safeguarded.
Palantir did not invent the collection of personal information, and it does not literally take every piece of information about every person. The deeper concern is the expanding capacity of powerful systems to bring separate records together and turn them into actionable intelligence.That capacity is increasingly valuable to governments, hospitals, police forces and military organisations. It can help solve real problems. It can also concentrate power in ways that ordinary citizens struggle to see, understand or contest. The British government now faces a choice about how it wants this technology to operate within the public realm. The question is not whether data can be useful. It plainly can. The question is what limits should govern its use, who enforces those limits and what happens when public confidence is lost. Our information tells the story of our lives. It should not become a resource over which citizens have little visibility or influence simply because the technology to analyse it has become available.
A modern public service needs effective digital systems. It also needs public consent, independent oversight and the ability to change course.
Without those protections, the promise of efficiency risks overshadowing a more fundamental principle: the information people entrust to the state must remain subject to democratic accountability.


