Australia's Fraud Taskforce Built a Data Pipeline to Palantir — and the Agencies Feeding It Don't Even Know

At least 10 federal agencies share sensitive personal data with the ACIC's fraud fusion centre, which ingests it into Palantir software. The agencies providing the data weren't told. The ethics framework was downgraded to a 'guide' because it was 'too difficult.'

The Australian Criminal Intelligence Commission runs a fraud fusion centre that pulls sensitive personal data from at least 10 federal agencies — Centrelink, the ATO, the NDIA, the AFP, ASIC, and others — and feeds it into analytical tools that include Palantir's surveillance software. The agencies supplying the data were not informed it was being ingested into Palantir. Neither the ATO nor Centrelink knew.

The scope of data authorised for collection is extraordinary. Services Australia approved the ACIC to obtain names, dates of birth, proof-of-ID details, addresses, phone numbers, Centrelink claims, itemised income and asset details, employer information, bank account numbers, and 'surveillance material.' The ATO made 758 disclosures between November 2022 and July 2026, including 376 to the NDIA and 42 to the ACIC. Tax file numbers were excluded by law — everything else was fair game. The institutional architecture is designed to obscure accountability. Each agency points to the next when asked about Palantir. The ATO says software choices are 'a question for that agency.' The education department 'refused to comment on detailed operational information-sharing arrangements' and directed questions to the ACIC. The ACIC describes Palantir as 'part of a suite of analytical tools' and did not answer whether partner agencies were informed their data was going into it. This is not a system with a single accountable decision-maker — it is a chain of handoffs where responsibility evaporates at each link. The governance story is worse than the data story. The original 2024 memorandum of understanding required the taskforce to develop an ethics and human oversight framework, with defined assessments and a risk register. By September 2025, the taskforce determined this was 'too difficult to implement.' The framework was downgraded to an 'ethics guide' — no mandatory reviews, no performance evaluation framework, no mechanism for learning from data-quality problems or unproductive referrals. As researcher Gabrielle Josling noted in her submission to the Australian National Audit Office, the new model abandoned every structural safeguard. Palantir itself is not a neutral vendor. The company was co-founded by Peter Thiel, counts the Israeli military and US ICE among its clients, and in April published a 22-point manifesto on X that implied some cultures were inferior to others — described by a UK MP as 'the ramblings of a supervillain.' The Australian government has spent nearly $80 million on Palantir contracts since May. Coles and Westpac have reportedly declined to renew their contracts. The UK government faces pressure to drop its NHS contract. The structural problem is not that a fraud taskforce exists — it is that data from welfare recipients, taxpayers, childcare workers, and NDIS participants flows into a surveillance platform operated by a company with this track record, through a governance regime that abandoned its own ethics requirements because compliance was inconvenient. The ACIC is not subject to the Privacy Act. Its self-described standard is to act in accordance with Australian privacy principles 'wherever reasonably consistent with the effective performance of its statutory functions' — a qualifier that swallows the rule. Greens leader David Shoebridge has called for a ban on Palantir contracts with the Australian government. The question is whether any institution in the chain has the authority, the will, or even the visibility to enforce meaningful limits on how this data is used once it enters the fusion centre.