Question to the Department of Health and Social Care:
To ask the Secretary of State for Health and Social Care, whether his Department undertook data protection impact assessments before entering into NHS data-sharing contracts with (a) Faculty, (b) Palantir and (c) other companies.
The Department and NHS England and NHS Improvement are compliant with the General Data Protection Regulation, and always undertake an appropriate Data Protection Impact Assessment (DPIA) for all new products, systems and processing activities.
The DPIA would identify the requirement for any data processing or data sharing agreement, and they would be put in place accordingly.