Federal Agents Build Protest Surveillance Files in Palantir System

A Database Emerges from Sealed Court Files

A partially unsealed class action filing has brought to light the existence of detailed profiles on individuals who observed or demonstrated near immigration enforcement operations. The records, which surfaced on 3 October following a legal challenge tied to a January operation in Maine, describe the use of a Palantir-built platform called Investigative Case Management to store photographs, vehicle registration details, and identifying information about civilians present during Department of Homeland Security actions.

The filings indicate that agents labelled certain individuals with designations such as "Threat to Law Enforcement, Professional Protestor." In at least one instance documented in the complaint, an agent telephoned a plaintiff and warned that her spouse risked placement on a domestic terrorism watchlist if similar observation activity continued. Legal counsel for the plaintiffs argues that such record-keeping creates a deterrent effect on constitutionally protected expression.

A DHS representative has characterised the lawsuit as without merit and disputes the assertion that the agency maintains a database designed to catalogue domestic terrorism suspects.

Palantir's Role in Federal Case Management

Investigative Case Management is part of Palantir's suite of data integration products used across multiple federal agencies. The platform consolidates investigative records, enabling agents to cross-reference identities, locations, and affiliations. While Palantir software has long been deployed in counterterrorism and border enforcement contexts, its application to civilian observers of law enforcement operations marks a notable expansion in scope.

At Opentechwire, we have tracked Palantir's growth in the government sector for years. The company's contracts with US agencies have climbed past two billion dollars over the past decade, with recurring revenue anchored in Immigration and Customs Enforcement and Customs and Border Protection deployments. The firm's technology is designed for speed and linkage, attributes that make it effective for tracking cross-border networks but that also raise civil liberties concerns when applied to domestic activity.

The unsealed filing does not specify how many profiles exist in the system or how long records are retained. Nor does it detail what triggers the creation of a dossier, whether mere presence near an enforcement action suffices, or whether other criteria apply.

The Legal and Constitutional Tension

The plaintiffs' legal team contends that compiling files on individuals engaged in observation or peaceful demonstration infringes on First Amendment protections. The argument rests on precedent that government surveillance of lawful political activity can suppress future participation, a principle courts have recognised in cases involving protest monitoring by municipal police departments.

The January operation in Maine serves as the factual anchor for the complaint. According to the filing, agents not only documented observers but in some cases conducted drive-by visits to their residences. One plaintiff alleges she was contacted directly and told her partner's actions could result in watchlist designation. Such contact, the lawyers argue, transforms passive record-keeping into active intimidation.

DHS officials have denied operating a database that labels individuals as domestic terrorists. The agency's statement does not address whether Investigative Case Management contains profiles of protest observers or whether such profiles carry threat designations. The distinction between a "database of domestic terrorists" and a "database containing threat labels" may be semantic, but it shapes the legal and public relations terrain.

Implications for Oversight and Transparency

The disclosure arrives amid broader debates over the scope of federal surveillance authority and the accountability mechanisms that govern data collection on US persons. Unlike foreign intelligence activities, which operate under the Foreign Intelligence Surveillance Act framework, domestic law enforcement data systems face fewer statutory constraints. The Privacy Act of 1974 imposes record-keeping requirements, but enforcement is uneven, and exemptions for law enforcement are broad.

Palantir's software architecture is optimised for federated search, meaning an entry in Investigative Case Management can link to records in other systems, from state motor vehicle databases to social media archives. This interconnectivity amplifies the risk that an initial threat label, whether warranted or not, propagates across agencies and persists over time.

Civil liberties organisations have long warned that surveillance of protest activity has a self-reinforcing quality: the existence of files justifies further monitoring, and further monitoring generates additional files. The Maine case offers a concrete example of that dynamic, with agents not only observing observers but also creating durable digital records of their presence.

What Comes Next

The class action lawsuit will proceed through discovery, a phase that may compel DHS to disclose the full scope of the Investigative Case Management database and the criteria governing its use. Plaintiffs are likely to seek data on how many individuals have been profiled, what information is collected, and how long records are retained.

For Palantir, the case adds another chapter to its contentious relationship with advocacy groups. The company has faced employee resignations, shareholder pressure, and campus protests over its immigration enforcement contracts. Executives have consistently defended the work as lawful and necessary, arguing that the alternative is less capable, more fragmented systems that offer even less transparency.

The tension between effective law enforcement and constitutional boundaries is not new, but the scale and sophistication of modern data platforms make the stakes higher. A dossier that once required a filing cabinet and manual cross-referencing can now be assembled in seconds, shared across agencies, and queried by hundreds of users. Whether existing legal safeguards are adequate to that reality remains an open question, one that courts, legislators, and technology providers will continue to navigate in the months ahead.