NDIS Participant Data May Have Flowed Into Palantir's Platform Through Australia's Fraud Taskforce

Personal data belonging to participants in Australia's National Disability Insurance Scheme (NDIS) may have ended up inside Palantir's analytics software through a sprawling multi-agency fraud investigation, according to Guardian Australia.

The National Disability Insurance Agency (NDIA), which runs the scheme, denied last month that it uses Palantir directly. That denial came after a freedom of information request turned up evidence the agency met with Palantir representatives back in 2023.

But Guardian Australia reports that NDIA data is shared with the Australian Criminal Intelligence Commission (ACIC) as part of the Fraud Fusion Taskforce, a group of 25 government agencies established in 2022 to investigate fraud. The taskforce is led jointly by the NDIA and Services Australia.

How the data moves

ACIC runs the Fraud Fusion Centre, which according to documents released under freedom of information law pulls in "large volumes of information, data and intelligence" that agencies flag as relevant to fraud investigations.

ACIC has told the public it uses "a range of specialist tools" for "advanced data analysis" and to "identify behavioural patterns and financial activity." Guardian Australia reports ACIC has paid Palantir millions of dollars in contracts in recent years for software that maps connections between people, and that FOI documents point to bulk data analytics and data-matching capabilities across the databases of participating agencies.

An NDIA spokesperson confirmed to Guardian Australia that participant information is shared with Fraud Fusion Taskforce partners but said this happens "only on a restricted basis where potential criminal conduct is suspected" and is meant to protect participants.

The FOI trail

Gabrielle Josling, a data scientist and researcher, filed multiple freedom of information requests to agencies inside the taskforce trying to establish whether Fraud Fusion Centre data is fed directly into Palantir's software.

An FOI officer responding to one of her requests in late August said the agency was reluctant to process it. In the officer's words, "the process for ingesting one FFC dataset into Palantir generates an amount of documents that ... would likely not be manageable." That response itself confirms Palantir ingestion is happening at some scale, even without full disclosure of what data or how much.

Why Palantir is controversial

Calls to ban Palantir from Australian government contracts have circulated since May, after the company co-founded by Trump-aligned billionaire Peter Thiel published a manifesto that implied some cultures are inferior to others. One UK Member of Parliament described the document as "the ramblings of a supervillain," according to Guardian Australia.

That controversy centers on the company's public statements, not on how its software functions or any documented misuse of NDIS data specifically. No investigation into misuse of NDIS participant data through Palantir has been announced, and no charges or findings against any agency have been reported.

The case for the current setup

The strongest case is straightforward. The NDIS has faced years of documented fraud pressure on a program that pays out billions of taxpayer dollars annually, and a dedicated, multi-agency taskforce using advanced data-matching tools is a defensible response to that problem. Fraud investigators routinely need to cross-reference records across agencies to catch organized schemes that a single department could never spot on its own. Palantir's software is used by government agencies across the Western world for legitimate law enforcement and fraud-detection work, and ACIC says the data it holds is handled under restrictions agreed with the agencies that supplied it.

The concern raised by critics like Josling differs. It's that participants in a disability support scheme may have personal data flowing into a foreign-owned analytics platform run by a company embroiled in an unrelated ideological controversy, without clear public disclosure of what specific data goes in, how long it's retained, or who can access it. Guardian Australia's reporting shows the FOI process itself is currently the main obstacle to answering those questions, with one agency citing document volume as a reason not to fully respond.

Neither Guardian Australia's report nor the NDIA's statement establishes exactly how many NDIS participants' data has passed through Palantir's platform, or what specific safeguards apply once it's there. ACIC has not published a breakdown of what taskforce data is ingested into Palantir versus other tools it says it uses. Josling's FOI requests remain the primary avenue for getting that answer, and the agency's own admission that processing them is unwieldy suggests the scale of data involved is substantial.