NHS apologises and admits Palantir have access to identifiable patient data

核心亮点：英国国家医疗服务体系（NHS）终于低头认错，承认美国科技公司Palantir的员工能接触到患者的实名隐私数据，之前说的“只有NHS内部人员能看”是骗人的。通俗解读：简单说，NHS用了一套叫“联邦数据平台”的系统来管理病人信息，之前官方文件里打包票说只有医院自己人能看。结果被媒体曝光，负责搭建这套系统的Palantir公司员工其实也有权限查看。相当于你家装了个智能门锁，厂家宣传说只有你有钥匙，结果发现安装工也偷偷留了一把。NHS这次道歉，等于承认自己之前没说实话，也说明商业公司在处理公共医疗数据时，界限并不像承诺的那么清晰。实际影响：这事跟每个在英国看病的人息息相关。你的病历、用药记录、手术史都可能被外包公司的员工看到，而他们并不受医院保密协议的严格约束。虽然目前没说数据被滥用，但隐私泄露的风险实实在在增加了。更重要的是，它提醒大家：科技公司参与公共医疗时，数据授权必须透明，不能“说一套做一套”。普通人也该多留心自己健康数据的去向，别稀里糊涂就签了同意书。

The central health service body has acknowledged the inaccuracy of claims previously made in a transparency document which indicated that only NHS staff were able to see such sensitive information NHS England has issued an apology after admitting that employees from Palantir and other suppliers can access identifiable information related to individual patients via the Federated Data Platform. In its previously published Data Protection Impact Assessment (DPIA) – a transparency document that is a statutory requirement for many public services engaged in the processing of citizens’ sensitive personal data – the NHS had claimed only health-service staff could access identifiable individual info via the FDP. Recent reports, however, have claimed that representatives from the platform’s core supplier, Palantir, can also access this sensitive data. Following the emergence of these stories, independent adviser and scrutiniser Dr Nicola Byrne – who holds the post of National Data Guardian – wrote to the NHS requesting clarity on whether or not external contractors and supplier staff could see patient info.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