Ah, but the Palantir man on the radio said that the NHS remains the legal data controller, so everything is fine and we can ignore the fact that all this means is that if Palantir do anything illegal with the data it’ll be the NHS that’s liable for letting them see it, so they can do what they want and if there’s any backlash, it’ll be the taxpayer who pays compensation.