MBA Training Data

UK GDPR Article 21: 44,000 objections hit NHS Palantir

MBA Training Data

Show Notes

What happens when a data platform is legally defensible, operationally embedded and publicly distrusted at the same time? More than 44,000 people have filed Article 21 objections under UK GDPR against NHS England's Palantir-powered Federated Data Platform, live in 142 trusts, weeks before a February 2027 contract break clause comes into reach. The position here: objection handling is a throughput problem, not a policy document.

You come away able to pressure-test your own platform. Check the published benefits claims, 117,000 extra operations, a 14.3% cut in discharge delays, against Foxglove FOI data showing 13 of 41 trusts doing fewer operations, and name the owner and service level for mass objections before someone else does.

0:00 44,000 Article 21 objections to NHS data 1:40 What the Federated Data Platform runs 2:31 Palantir politics versus legal mechanism 3:01 Why patients cannot opt out of FDP 4:09 Testing Palantir's NHS benefit claims 7:28 What transfers to any CDO

More from MBA Training Data

Oct 20, 2026

Who pays when a fund's NAV is wrong and the manager never saw the error? Under CSSF Circular 24/856 the investment fund manager corrects and compensates, even when the administrator calculated the price. The episode argues that managers should own one position and pricing record, backed by a written pricing policy, rather than inheriting whatever the administrator used.

Oct 13, 2026

How did hackers send a ransom note through the real Asos app? Reporting points to a conned employee and, per researcher Kevin Beaumont, Simon AI, a composable customer data platform owned by Monetate that reads straight from Snowflake with MFA optional and off by default. That route is unconfirmed. The episode argues the real failure is ownership: marketing bought it, data engineering wired it to the warehouse, and nobody owned the login.

Oct 13, 2026

Agents dominated dbt Summit, but does smart orchestration or a context layer make data agent-ready on its own? The episode argues no. Fanatics Betting and Gaming saw about 0.2% model reuse from dbt State until it declared source freshness and model-level SLAs, which raised reuse to roughly 15%. The same pattern runs through Fivetran's Context Layer, AI audit trails and token costs.

Oct 9, 2026

How did an attacker using ARTEX, an open-source agentic AI penetration-testing tool, take data on more than 67,000 customers from seven South Korean firms, including Shinhan, KB Kookmin and Hana, without touching core banking? The episode argues the failure was data access design. Broker portals and employee apps returned income, loan limits and resident registration numbers to callers who did not need them, despite nearly 124 billion won in security spending.

Oct 6, 2026

dbt State went generally available in September 2026, so rebuilding every model on a cron schedule is now a choice rather than a default. The position here: the tool cannot tell you how stale each model is allowed to be, and the lag_tolerance config most teams set once and globally is a business decision about decision cadence, not an engineering setting.

See all episodes →