Other church or 'religious' police forces

[Fedster + 1,307]

But force argues value of bypassing data-gatherers can not be 'underestimated'.

Bypass: The technology allows police to sidestep encryption on personal devices

Date - 8th April 2019
By - Nick Hudson - Police Oracle

1 Comment

 

A national force is being told to take a step back from rolling out technology allowing data gathering from digital devices without using a password over concerns the approach is “harmful” to its reputation and could seriously impact victims, witnesses or suspects.

MSPs have taken Police Scotland to task on trials by frontline officers, claiming they have been conducted without any human rights or equality, community impact, data protection and security assessments.

Last year, the force purchased 41 cyber kiosks – laptop-sized machines able to bypass encryption on devices such as mobile phones so personal data can be read quickly.

It was intended the machines would start being deployed to police stations across Scotland from autumn last year.

But so far the force has been unable to use them due to a lack of clarity about the legal basis for them, and MSPs are now calling for a further delay.

Police Scotland argues the “value” of cyber kiosks in helping protect the most vulnerable in society, while at the same time tackling the highly-sophisticated criminality, “cannot be underestimated”.

The Justice Sub-Committee on Policing at the Scottish Parliament, which has been scrutinising the proposed use of the devices since last May, published a report on Monday recommending the scheme should be paused until greater clarity on the legal framework for their use is provided.

The report was also critical of both Police Scotland for not following best-practice prior to using the devices on a trial basis before deciding to roll out their use across the country and the Scottish Police Authority for a lack of effective scrutiny and oversight.

The committee found that during trials, police in Edinburgh and Stirling searched the mobile phones of suspects, witnesses and victims without undertaking the required governance, scrutiny and impact assessments.

Members of the public whose phones were seized and searched were also not made aware their phones were to be searched using cyber kiosks as part of a trial.

They were also not told about the implications of the search and were not provided with the option of giving their consent.

Justice Sub-Committee convener John Finnie said: “The sub-committee fully supports Police Scotland’s ambition to transform to effectively tackle digital crime.

“However, prior to the introduction of any new technology to be used for policing purposes, an assessment of both the benefits and the risks should have been carried out.

“It appears that, in relation to the introduction of cyber kiosks, only the benefits were presented by Police Scotland to the SPA, with the known risks not provided.

“The SPA, for its part, seems to have accepted the information provided with very little critical assessment.

“Even the most fundamental questions, such as the legal basis for using this technology, appear to have been totally overlooked.

“This sub-standard process has resulted in over half a million pounds worth of equipment sitting gathering dust.

“Clearly, this is not an acceptable situation. The sub-committee wants to work with the Scottish government and the stakeholder groups belatedly assembled to consider the implications of introducing cyber-kiosks to find a solution which would provide the necessary safeguards for the use of this new technology.”

Mr Finnie added any future trials on the use of the machines must be greatly improved.

He said: “While the events related to the trials are in the past, the sub-committee remains concerned that this technology was used by frontline officers without any human rights, equality or community impact assessments, data protection or security assessments, and in the absence of any public information campaign.

“That approach is harmful to the reputation of Scotland’s police service and potentially very serious for any victim, witness or suspect impacted by this.

“Any future trials must be carried out to a far higher standard, with more due diligence and forethought.”

In reply, Police Scotland Assistant Chief Constable Steve Johnson said: “Like the Justice Sub-Committee on Policing, we have received written confirmation from the Crown Office and Procurator Fiscal Service about the clear legal basis, and robust statutory regime, for the use of this much-needed technology.

“The rigorous scrutiny of this process has added significant value to the development of Police Scotland’s assurance and governance processes for the use of this necessary equipment.

“As the chief constable has already made clear, there is a policing imperative for deploying the equipment to protect vulnerable victims and bring offenders to justice.

“However, he has also stated that he must be satisfied that privacy and human rights considerations have been transparently and satisfactorily addressed.”

He added: “The value of cyber kiosks in helping protect the most vulnerable people in society while tackling the most highly-sophisticated criminality cannot be underestimated.”

SPA chairman Professor Susan Deacon said: “The committee’s consideration of this issue has been informative and the SPA will consider the report carefully and respond in due course.

“The SPA has already strengthened our arrangements for the oversight of policing policy and practice and will continue to do so.”

She said the SPA recognised that the proposed rollout has raised concerns regarding privacy, human rights and other legal and ethical matters.

She has asked the chief constable to provide a further report to the SPA Board regarding his proposed plans for the rollout in light of the concerns raised.

A Scottish government spokeswoman said: “The recommendations in this report are principally for Police Scotland and the Scottish Police Authority to action, but the Scottish government will give the report due consideration in the coming weeks.

“The Policing 2026 strategy emphasised Police Scotland’s commitment to improving its cyber-capability and we welcome their ongoing commitment to further consultation with stakeholders as part of this process.”

View On Police Oracle