Question to the Department of Health and Social Care:

To ask Her Majesty's Government how they intend to ensure that all personal data provided to Palantir Technologies UK (1) is, and (2) continues to be, anonymised; and what assessment they have made of research by Imperial College London and others that suggests that such data cannot be effectively anonymised.

Data is de-identified by National Health Service staff before it is inputted into the NHS Data Store.

NHS England is the data controller for data processed in the NHS Data Store. Palantir Technology UK is engaged by NHS England under contract as a data processor. As a data processor, the organisation does have access to the data but can only process it under instruction from NHS England.