A September Guardian report describes a coordinated campaign objecting to processing through the Federated Data Platform. NHS England’s own documents explain the controller and processor roles under which the platform operates.
Palantir NHS data objections are reported requests
The Guardian reported more than 44,000 objections citing Article 21 of the UK GDPR and concerns about trust in Palantir’s involvement. The reported count describes that campaign at that time, rather than all patients or a court decision. Filing an objection is distinct from evidence that each request has been accepted or that a court has ruled the whole platform unlawful.
https://www.theguardian.com/technology/2026/sep/30/legal-objections-palantir-nhs-platform-handling-data
Controller and processor roles
NHS England’s FAQ identifies it as controller for the national instance, while NHS trusts and integrated care boards control their own instances. The privacy notice describes Palantir and IQVIA as processors providing specified services under written instructions. Calling Palantir a processor therefore does not mean the same controller governs every instance or that contractual role alone proves compliance in every operation.
https://www.england.nhs.uk/digitaltechnology/nhs-federated-data-platform/security-privacy/nhs-fdp-privacy-notice/
https://www.england.nhs.uk/digitaltechnology/nhs-federated-data-platform/fdp-faqs/
Read the notice for the actual processing
The privacy notice says contractors may process personal data where necessary to operate and maintain the platform under the relevant organisation’s instructions, and are not allowed to use patient data for their own purposes. It describes legal and contractual restrictions; these should not be turned into a verified claim that misuse is technically impossible. Rights and any applicable opt-outs need to be read in the context of the product and processing described.
https://www.england.nhs.uk/digitaltechnology/nhs-federated-data-platform/security-privacy/nhs-fdp-privacy-notice/
Sources and further reading
https://www.theguardian.com/technology/2026/sep/30/legal-objections-palantir-nhs-platform-handling-data
https://www.england.nhs.uk/digitaltechnology/nhs-federated-data-platform/security-privacy/nhs-fdp-privacy-notice/
https://www.england.nhs.uk/digitaltechnology/nhs-federated-data-platform/fdp-faqs/