Gloss

Bureau Files16 APRIL 2026

The Direction That Cannot Be Produced

Westminster Hall debates the £330 million Palantir NHS contract at 3pm. The lawful basis cited for removing every patient's opt-out is a Section 254 Legal Direction. The privacy notice mentions it. The government response mentions it. The document itself has never appeared. The Bureau files the absence.

Bureau of Lawful Basis Custody, Document Production Division7 MIN READ

DOCUMENT PRODUCTION REQUEST — STATUS REPORT

SUBJECT: Legal Direction cited at the NHS England NDIT privacy notice as the lawful basis for disapplying the National Data Opt-Out to the Federated Data Platform AUTHORITY CITED: Section 254, Health and Social Care Act 2012 DATE: 16 April 2026 STATUS: Open


The Citation

The NDIT privacy notice — the document NHS England serves to patients to explain how their confidential records are processed inside the Palantir-built Federated Data Platform — asserts, as its reason for not applying the opt-out, that NHS England is required by law under a Legal Direction to process the data for the platform's dashboards.

The Bureau of Lawful Basis Custody, Document Production Division, records the assertion in its institutional form. The assertion describes a Direction. The assertion does not name the Direction. The assertion does not date the Direction. The assertion does not link to the Direction.

The Bureau finds the arrangement elegant. The citation performs the Direction's work without requiring the Direction to exist on the page. The Bureau is not aware of a more efficient method for conserving statutory-instrument ink.

Status: the citation is located. The document is not.


The Authority

Section 254 of the Health and Social Care Act 2012 grants the Secretary of State a specific administrative power: to direct NHS England to establish information systems. A Direction issued under Section 254 is a statutory instrument — a written instruction, from a named Secretary of State, to a named body, on a named date, with a named legal effect.

The statute is on the public record. The privacy notice's assertion that a Direction exists is on the public record. The Direction itself is on neither.

The United Kingdom's General Data Protection Regulation requires that a lawful basis for processing personal data be clear, documented, and demonstrable. The Bureau acknowledges the three adjectives. The citation is the first. The citation, in isolation, is not the second. The citation cannot, by itself, perform the third.

The Bureau does not assert that the processing is unlawful. A court has not adjudicated the question. The Bureau files the gap and leaves the adjudication to the institutions empowered to deliver one.

Trust us is not, under the regulation the state itself enacted, a lawful basis.


The Petition

On 14 January 2026, a member of the public opened petition 752855, asking for a clear national opt-out from FDP and NDIT processing and a public consultation before further expansion. The petition passed the 10,000-signature threshold. The government was required to respond.

The government responded.

The response confirms that the National Data Opt-Out does not apply and cites the Legal Direction as the basis. The response does not name the Direction. The response does not date the Direction. The response does not link to the Direction.

The citation has now been reproduced across two separate institutional documents. The reproduction has not made the Direction more available. It has made the citation more available.

BUREAU NOTE: There is a distinction between the word document and the phrase description of document. A description of a document is a sentence. A document is the instrument the sentence describes. One can be cited. The other can be produced. The Bureau files both as received and notes that only one has arrived.

Status: the description is located. The document is not.


The Noting

On 10 March 2026, the House of Commons Petitions Committee met to consider petitions that had received a government response. The Committee considered petition 752855. Its full disposition, per the public record, was a single-entry minute: the response had been noted.

The Bureau has parsed the verb. Noted describes the act of receiving a response. It does not describe the act of reviewing a response. It does not describe the act of disagreeing with a response. It does not describe the act of requesting further information. It describes — precisely and only — that the response has arrived and has been filed.

The Committee's eleven members sat that day: Jamie Stone (Liberal Democrat, chair), Lewis Atkinson (Labour), Irene Campbell (Labour), Jacob Collier (Labour), Paul Davies (Labour), Ben Goldsborough (Labour), John Lamont (Conservative), Robbie Moore (Conservative), Dave Robertson (Labour), Roz Savage (Liberal Democrat), and Tony Vaughan KC (Labour).

Seven of the eleven sit with the governing Labour Party. The decision under challenge was a decision of the governing Labour Party. The mechanism for backbench scrutiny of government decisions — a majority of whose members sit with the government whose decision was under challenge — noted the response.

The petition organiser was not notified.

The Bureau considers this an exemplary disposition. No MP had to examine the Direction. No MP had to request it. No MP had to ask what the word noted does not name. The Committee's workflow remains uninterrupted. The cabinet labelled "Petitions Disposed Of Without Reference To The Authority They Describe" is open and accepting filings.

Status: the review is located. The debate it did not produce is not.


The Afternoon

Today, 16 April 2026, at 3pm, Liberal Democrat Martin Wrigley MP has secured a Westminster Hall debate on Palantir and the NHS. A minister will respond on the record. It is the first time the £330 million Federated Data Platform contract will be formally debated in any chamber of Parliament since the Secretary of State's contract-award statement of 21 November 2023.

The debate was secured through a parliamentary mechanism separate from the petitions process. The petitions process closed the question in March with a minute. The Westminster Hall process has opened the question in April with an afternoon.

Three days before that afternoon, on 13 April 2026, The BMJ published an investigation of the flagship evidence base for the FDP — the Chelsea and Westminster pilot (BMJ 2026;393:s680). The paper reports that the pilot's theatre-use evaluation selected a baseline period ending December 2021, at the peak of the Omicron wave, and attributed the recovery from the trough to the Federated Data Platform. London-wide comparator trusts, including those not running the platform, improved at equivalent rates during the same period. The 28 percent waiting-list reduction cited at board level was filed without specialty or date specifications.

The baseline was the trough. The recovery from the trough became the effect. The effect became the evidence base. The evidence base became the rollout. The Bureau notes, for the institutional record, that the selection of a baseline period is an editorial decision.

Chelsea and Westminster, per the paper, did not respond to The BMJ's request for comment. NHS England did not directly respond to the findings. The trust that provided the evidence and the body that cited the evidence declined, at the relevant moment, to restate the evidence.

The person who chaired Chelsea and Westminster — and the other three acute NHS trusts in north-west London — from April 2022 is a former Deputy Chief Executive of NHS England, who left the NHS in July 2019, joined the advisory firm co-founded by Peter Mandelson, and chaired Palantir's health advisory committee. He has since stepped down and has said he acted within the applicable guidelines at each stage. The Bureau files the sequence as public record. The Bureau offers no adjective.

Status: the pilot is located. The comparator was not asked.


The Filing

The Bureau compiles the afternoon.

The debate is located. The government response is located. The Committee's disposition is located. The privacy notice is located. The BMJ paper is located. The Section 254 authority is located. The contract value is located.

The Section 254 Legal Direction itself — the named, dated, full text of the statutory instrument cited by the NDIT privacy notice as the reason every NHS patient in England lost the ability to opt out of their confidential health data being processed by the Federated Data Platform — has not been located.

The citation has been located in three separate departments. The document has been located in none.

The petition currently has approximately 25,000 signatures. It closes on 14 July 2026. It needs 100,000 for a parliamentary debate to be formally considered. It is still open.

BUREAU NOTE: The Bureau of Lawful Basis Custody, Document Production Division, is a sub-department of the Bureau of Public Agreement™. The reader has reached the end of this filing. The reader has also — in the act of reading, and in the act of having a general practitioner, and in the act of living in England — been processed through the architecture this filing describes. The opt-out the reader may once have registered does not apply here. The lawful basis for that disapplication is a Direction the Bureau has not been able to produce. The Bureau will continue to request the Direction. The published record will continue to return the description. The citation is the document. The reader's afternoon contained a debate. The reader's afternoon did not contain the Direction. The filing is the afternoon.

Narrative Delivery Service

We’ll Tell You What to Think.
You Just Supply the Address.

Bureau dispatches delivered directly to your inbox. Pre-framed, pre-approved, ready to absorb. No effort required on your part — your opinions will arrive fully formed, as usual.

No spam. The Bureau considers unsolicited email beneath its editorial standards. You will receive only what you were going to believe anyway. Unsubscribe anytime.*
*Your opinions will continue to be manufactured through other channels.