In the quiet machinery of government data-sharing, the personal lives of Australia's most vulnerable citizens have found their way into one of the world's most controversial surveillance platforms — not through deliberate policy, but through the compounding logic of bureaucratic interconnection. The National Disability Insurance Agency did not lie when it said it wasn't using Palantir; it simply omitted the path by which its participants' data arrived there anyway, routed through a 25-agency fraud taskforce and into the Australian Criminal Intelligence Commission's Palantir contracts. What eme
NDIS data shared with Palantir via fraud taskforce, Guardian reveals
Having it funnelled into Palantir is a deep betrayal
So the NDIA said it wasn't using Palantir. What changed?
They weren't running it directly. But they share data with the Australian Criminal Intelligence Commission, which does use Palantir as part of a 25-agency fraud taskforce. The data flows through.
How certain are we that NDIS data actually ends up in Palantir? The FOI response suggests it does, but it's not a direct statement.
An FOI officer said processing even one dataset from the fraud centre into Palantir generates so many documents it's "likely not manageable" to fulfill. That's a pretty strong signal about volume and process.
Why does this matter for disability participants specifically?
They're being treated as potential fraud suspects. Their personal information—financial, medical, behavioral—is being fed into surveillance software designed to identify patterns and connections.
The NDIA says data is only shared "where potential criminal conduct is suspected." That's a restriction. We don't know how often that threshold is actually met.
True. But the disability advocates' point is broader: even if it's restricted, subjecting a vulnerable population to this kind of algorithmic assessment is dehumanizing.
What's the Palantir controversy about?
The company released a manifesto in May suggesting some cultures are inferior. A UK MP called it "ramblings of a supervillain." Since then there have been calls to ban it from Australian government contracts.
And Coles just dropped them. That's significant—corporate clients voting with their feet.
So what happens now?
That's unclear. The FOI requests revealed the scale of data ingestion, but there's no indication the government is reconsidering the arrangement.
And we still don't have a complete picture of what restrictions actually apply or how they're enforced.
El Pulso
- NDIS participants' private data is flowing into Palantir's analytics platform without their knowledge or explicit consent, despite the agency's initial denial of any direct relationship with the company.
- A freedom of information request revealed the scale of data ingestion is so vast that even processing records for a single dataset would be 'likely not manageable' — a bureaucratic admission that speaks volumes about the operation's reach.
- Palantir has been under mounting pressure in Australia since May, when its manifesto implying cultural hierarchy prompted calls for a government ban, making its quiet entrenchment inside disability services all the more alarming to advocates.
- Digital rights groups and Greens senators are framing the arrangement as a betrayal of trust — people with disabilities, already subject to systemic indignities, are now being processed through surveillance infrastructure designed for criminal intelligence.
- Corporate skepticism is growing: Coles recently declined to renew its Palantir contract, signaling that the reputational and ethical costs of association with the company are beginning to register beyond activist circles.
In the quiet machinery of government data-sharing, the personal lives of Australia's most vulnerable citizens have found their way into one of the world's most controversial surveillance platforms — not through deliberate policy, but through the compounding logic of bureaucratic interconnection. The National Disability Insurance Agency did not lie when it said it wasn't using Palantir; it simply omitted the path by which its participants' data arrived there anyway, routed through a 25-agency fraud taskforce and into the Australian Criminal Intelligence Commission's Palantir contracts. What emerges is a familiar modern parable: the architecture of protection quietly becoming the architecture of surveillance, with those who depend most on the state left least able to consent to its gaze.
The National Disability Insurance Agency told Guardian Australia last month that it was not using Palantir. The statement was technically accurate and substantively misleading. The agency wasn't running the software itself — but its participants' data was reaching Palantir's systems regardless, carried there through the Fraud Fusion Taskforce, a 25-agency operation established in 2022 to investigate fraud across government programs. The Australian Criminal Intelligence Commission, which anchors the taskforce, holds multi-million dollar Palantir contracts. When taskforce data is processed through the ACIC, it enters Palantir's platform — a system built to map relationships between people, trace financial patterns, and cross-reference records across agencies.
The indirect path was uncovered by data scientist and researcher Gabrielle Josling through freedom of information requests. When she asked the ACIC for records showing how fraud taskforce data moved into Palantir, an FOI officer's response was itself revealing: processing even a single dataset generated so many documents the request would be effectively unmanageable. The NDIA confirmed data-sharing with the taskforce but insisted it was restricted to cases where criminal conduct was suspected. The ACIC echoed that framing. Neither explanation addressed the fact that those restrictions still permitted data to flow into Palantir's analytics engine.
The concern is not only procedural. Since May, Palantir has faced calls for removal from Australian government contracts after publishing a manifesto that critics — including a UK MP — described as implying cultural superiority. The company, co-founded by Trump-aligned billionaire Peter Thiel, has a long history of supplying surveillance infrastructure to law enforcement and intelligence agencies worldwide. Tom Sulston of Digital Rights Watch described the use of Palantir to assess NDIS fraud as 'fundamentally de-humanising,' warning that people with disabilities — already subject to systemic indignity — deserve to access services without being treated as suspects.
Greens senator David Shoebridge called it a deep betrayal of the trust participants place in the agency when they share their most personal information. Palantir offered a brief corporate statement about helping organisations solve complex problems, declining to address either the disability data concerns or the manifesto controversy. In the private sector, Coles announced it would not renew its Palantir contract beyond 2027 — a quiet signal that the calculus around the company's tools is shifting, even as its reach inside Australian government infrastructure remains largely invisible to those most affected by it.
The National Disability Insurance Agency said it wasn't using Palantir. That statement, made last month after questions from Guardian Australia, turned out to be incomplete. The agency wasn't running the software itself. But its data was flowing into Palantir's systems anyway, routed through a sprawling government operation designed to catch fraud.
The path was indirect but clear. The NDIA shares participant information with the Australian Criminal Intelligence Commission as part of the Fraud Fusion Taskforce, a 25-agency operation established in 2022 to investigate fraud across government programs. The ACIC, which oversees the Fraud Fusion Centre, has spent millions on Palantir contracts over recent years. The software is designed to map connections between people, identify patterns in financial activity, and cross-reference data across multiple agency databases. When the ACIC processes data from the taskforce, some of it goes into Palantir's platform.
The revelation emerged through freedom of information requests filed by Gabrielle Josling, a data scientist and researcher. When she asked the ACIC for records showing how fraud taskforce data moved into Palantir's system, an FOI officer responded in late August with a striking admission: processing even a single dataset from the fraud centre into Palantir generates so many documents that the request would be "likely not manageable" to fulfill. The sheer volume of data being ingested suggested the scale of what was happening.
The NDIA confirmed it was sharing participant information with the taskforce, but framed the practice narrowly. "NDIS participant information is only shared with Fraud Fusion Taskforce partners on a restricted basis where potential criminal conduct is suspected to protect participants from fraud," a spokesperson said. The ACIC similarly emphasized that data was handled according to restrictions set by the agencies providing it. But the restrictions, whatever they were, apparently allowed the information to flow into Palantir's analytics engine.
This matters because Palantir is not an ordinary software company. Since May, there have been calls to ban the firm from Australian government contracts after it released a manifesto implying some cultures are inferior to others—language a UK MP described as the "ramblings of a supervillain." The company is co-founded by Peter Thiel, a Trump-aligned billionaire. Its software has been used by law enforcement and intelligence agencies worldwide, often in ways that disability rights advocates and privacy researchers say amount to mass surveillance.
Tom Sulston, head of policy at Digital Rights Watch, called it "very concerning" that Palantir was being used to assess potential fraud in the NDIS. "People using NDIS deserve the dignity of not being treated like criminals simply for accessing the services that they need to live a full life," he said. The creation of massive aggregated datasets fed into surveillance technology is "fundamentally de-humanising," he added, "particularly awful when targeted at people living with disabilities, who are already regularly subjected to regular dehumanisation and indignities."
Greens senator David Shoebridge, the party's digital rights and AI spokesperson, saw it as a breach of trust. "NDIS participants give their data to the agency believing it will be protected and only used to assist in their claims," he said. "Having it funnelled into Palantir under the guise of fraud prevention is a deep betrayal." He also noted the scale of what Palantir ingests: having the company inside any single government agency means millions of data points flow into what he called "this global surveillance vampire."
Palantir's response was brief and corporate. The company said it "builds software that helps organisations use their data to make better decisions and solve their most complex problems" and is "committed to supporting Australian government agencies in tackling complex challenges, including serious financial crime and fraud." The statement did not address the specific concerns about disability data or the manifesto controversy. Meanwhile, Coles, the supermarket giant, announced last week it would not renew its Palantir contract beyond 2027, suggesting growing hesitation even in the private sector about the company's tools and practices.
Citas Notables
NDIS participant information is only shared with Fraud Fusion Taskforce partners on a restricted basis where potential criminal conduct is suspected to protect participants from fraud— NDIA spokesperson
People using NDIS deserve the dignity of not being treated like criminals simply for accessing the services that they need to live a full life— Tom Sulston, Digital Rights Watch