FCA Faces Scrutiny Over Palantir's Access to Sensitive Financial Crime Data

March 23, 2026
FCA Faces Scrutiny Over Palantir's Access to Sensitive Financial Crime Data
  • There are significant concerns within the FCA about Palantir’s access to sensitive detection insights and whether the company would handle that information responsibly, prompting questions about governance and confidentiality.

  • Experts emphasize the need for robust confidentiality protocols as Palantir is designated as a data processor with the FCA retaining control of encryption keys, data hosted in the UK, and data destruction after the contract ends.

  • Much of the surrounding content comprises sponsor mentions and links rather than a standalone article, with the core story focused on the Palantir-FCA engagement.

  • Palantir already has substantial UK public sector engagements, including with the NHS, MOD and police, which has drawn political scrutiny from MPs and party leaders.

  • Historically, Palantir’s UK involvement in public sector work has sparked ethical and human rights concerns over data handling in other jurisdictions.

  • The initiative is part of a broader government effort to leverage digital tools across about 42,000 FCA-supervised firms to detect crime faster and allocate resources more effectively.

  • The FCA awarded Palantir a three-month contract to analyze its internal data lake for financial crime, with costs exceeding £30,000 per week.

  • The Guardian reports that the FCA will trial Palantir by giving access to the FCA data lake to aid in detecting white-collar crime, including money laundering, over a three-month period.

  • Palantir, a US-based AI company, has been contracted to access and analyze the FCA data lake for a three-month trial at a weekly rate above £30,000.

  • FCA describes Palantir as a data processor under strict controls: data remains under FCA control, encryption keys are FCA’s, data hosted in the UK, and data destruction after the contract; no data will be used to train Palantir’s products.

  • Palantir is required to act under the FCA’s instructions as a data processor, with the FCA ensuring strict data protections and that the data will not be used for Palantir training.

  • The FCA reiterates that Palantir will destroy data after the contract ends and that Palantir will not become a data controller; encryption keys stay with the FCA and data is hosted in the UK.

Summary based on 5 sources


Get a daily email with more World News stories

More Stories