Bran (Brandon) Myers
Public-Interest Investigation · The Close · June 2026

The Joined-Up State: What It All Adds Up To

Part eight — the close. Seven investigations, two tools, ten countries, three master analyses. Here is what it all adds up to, what has actually been ruled, and what you can do about any of it.

The whole thing, in one paragraph

The modern state joins up the separate records it holds on you into a single, person-level picture — and it does so in two layers. The first is Splink: free, open-source, built by the UK Ministry of Justice, used by statisticians to link health, tax, justice, benefits and census records at population scale. It is lawful, technically excellent, and — because the legal basis is statutory “public task,” not consent — invisible to you, with no notification and no opt-out. The second layer is Palantir: proprietary, US-owned, operational. It sits in the same departments, over the same data, and unlike Splink it acts on identifiable individuals in real time. Splink counts you; Palantir acts on you. The two are not wired together — and they don’t need to be. They are co-located in one government, over one population, and the public was asked about neither.

What has actually been adjudicated

The discipline of this whole series was to tier every finding by what can be proven — because the one overstatement is the line that discredits the rest. Here is the honest ledger:

Ruled unlawfulThree court rulings. The DPA 2018 immigration exemption was struck down three times (UK Court of Appeal 2021 & 2023, High Court 2023). Germany’s Constitutional Court ruled the Palantir-run police analysis unconstitutional in 2023 — and named Palantir in the judgment.
Regulator concernFindings short of enforcement. The ICO found Royal Free–DeepMind unlawful under DPA 1998 (remedied by undertaking, no fine); warned the Cabinet Office over National Fraud Initiative matching; the EU’s EDPS issued a Europol erase-order; Canada’s Ethics Commissioner faulted Palantir Canada’s president.
Not adjudicatedThe systems themselves. No court or regulator has ruled Splink, Data First, ONS IDS, ADR UK, or the NHS Federated Data Platform unlawful. They operate within the law — which is exactly the point.
What has actually been adjudicated across the whole investigation, tiered honestly. The strongest rulings are adjacent to the named systems, not on them.

The pattern in that ledger is the finding: the genuine rulings of unlawfulness sit adjacent to the named systems, not on them. “The same shortcut has been struck down next door” is true and undismissable. “Data First is illegal” is not — and never gets written here.

The line held all the way through

Across eight pieces, the temptation was always to draw one more arrow than the evidence supports — that Splink is Palantir, that the NHS feeds the police, that the census powers deportations. Every one of those was searched, and excluded. There is no documented Splink↔Palantir pipeline anywhere on Earth. There is no UK immigration-enforcement Palantir contract. The point never needed them. The point is quieter and harder: population-scale, person-level record linkage and operational integration, lawful by design, foreign-owned at the operational end, and disclosed to almost no one.

What to do about it

This was never an argument that the maths is wrong or that someone broke the law. It is an argument that the prior question — should this happen without your knowledge, and without a right to object? — was never put to the people it is done to. So put it on the record:

If you’re a citizen

  • Ask your MP, in writing: which of my records has the government linked, under what legal basis, and is there any way for me to opt out?
  • Submit a Subject Access Request to the bodies that hold your data — and note whether the immigration exemption is invoked to refuse it.

If you’re a journalist

  • FOI the unredacted NHS Federated Data Platform contract and the MoJ “Core Person Record” / North Essex PNC→police pilot scope.
  • Ask each department to confirm, on the record, whether linked output ever feeds an operational (non-statistical) decision about a named person.
  • Press the Cabinet Office on whether it completed the DPIA the ICO demanded for National Fraud Initiative matching in 2021.

If you’re a regulator or legislator

  • The safeguards (Five Safes, de-identification, DPIAs) were built for statistics. Who governs the operational layer — the real-time, identifiable, often foreign-owned use?
  • Should population-scale linkage and integration require an individual right to know, and to object — not just a lawful basis?

Read the whole investigation

1. How Splink Works — the machine in one picture.

2. The Quiet Joining-Up — the original investigation + evidence locker.

3. Statistics or Operations? — the line they drew, and stepped over.

4. Who Actually Uses Splink — the global footprint, tiered.

5. Ruled Unlawful Next Door — the legal exposure.

6. The Operational Twin — Palantir in the UK state.

7. The Operational Twin Goes Global — Palantir across every Splink country.

Everything — the three master analyses, every contract value, every citation, and ~94 archived source screenshots preserved against takedown — is in the public repository. Built entirely from public documents; every claim sourced and adversarially fact-checked; nothing accessed that was not already public.

← All Writing