BPD Suspicious Activity Reporting privacy policy released to ACLU of Massachusetts through FOIABy Kade Crockford
As part of our Sunlight on Surveillance campaign here at the ACLU of Massachusetts, we have submitted numerous Freedom of Information Act requests and public records requests to federal, state and local law enforcement agencies about government surveillance activities. As we receive documents back from the government, we will highlight some of them here, and post all of them at our Spy Files site. We recently received a document entitled
“ISE-SAR Privacy, Civil Rights and Civil Liberties Protection Policy,” from the Boston Regional Intelligence Center (BRIC), a
fusion center run by the Boston Police Department out of their headquarters in Roxbury.
The document essentially sets out the privacy policy that governs BRIC officials when they create “Suspicious Activity Reports” and send them to the federally-run “Shared Spaces” server, accessible to thousands of law enforcement personnel at all levels nationwide. The SAR program is troubling in itself because of the broad definition of what constitutes a “Suspicious Activity.” (For a thorough analysis of the SAR program, I encourage you to read Political Research Associate’s latest report,
“Platform for Prejudice”.)
While it attempts to set out guidelines for the protection and validation of personal information in its systems, the privacy policy falls far short of realizing that goal. There are many problems with the BRIC privacy policy, among them: the lack of independent oversight, the absence of clear authority to discipline officers who misuse the data systems, and the fact that information about individuals need not be acknowledged, disclosed to the subjects or even corrected if demonstrated to be inaccurate or obsolete.
But the most disturbing issue with BRIC’s policy is that it fails to guard against false information submitted by other agencies. And this is a real and current threat: as the
national ACLU reports today, the FBI has admitted that
half of the arrest record information kept in the National Crime Information Center (NCIC) is inaccurate or outdated.
The FBI’s irresponsible handling of information in the NCIC affects Massachusetts residents in multiple ways. The federal/state/local Information Sharing Exchange - Suspicious Activity Reporting (ISE-SAR) program incorporates NCIC data, as well as data from hundreds of federal, state and law enforcement agencies, allowing for Commonwealth residents to be wrongly suspected or targeted by the federal government
and state and local police.
NCIC’s participation in ISE-SAR undermines the legitimacy of the data BRIC consumes from the system, since BRIC explicitly states that it is the responsibility of the contributing agency to validate information, taking their word “based on a good faith” belief that the information is accurate and was acquired lawfully.
If you are wrongly surveilled or targeted as a result of incorrect data, you most likely will never have the right to view the evidence against you or correct the erroneous information. The BRIC privacy policy states that subjects of investigations or SARs may request to view the information held about them, but that the agency has the right to deny any request. Further, the agency need not change information contested as incorrect, nor must they even disclose the existence of a SARs file to the subject in question.
The problems with the privacy policy mirror the problems with the overarching ISE-SAR program. Oversight of information entered into or obtained from the Shared Space by BRIC personnel rests with law enforcement agencies. The fox is guarding the chicken coop. As the NCIC data-accuracy crisis shows, a lack of independent oversight leads to system-wide corruption. Inaccurate data can lead to false arrests and illegal surveillance.
Compounding matters, since the ISE-SAR Shared Space is accessible to thousands of law enforcement officers nationwide, incorrect information entered about you in California could result in a wrongful arrest in Kansas.
Given that the FBI has such a poor track record of maintaining accurate records, should BRIC and Boston Police trust Shared Space SARs information in “good faith”?
We don’t think so, but without strict mechanisms to guard against allowing incorrect information into the system, the BRIC’s privacy policy leaves the door open for myriad abuses. We in Massachusetts, the cradle of liberty, deserve better. Public safety and individual liberty demand it.
If you suspect incorrect law enforcement information has been or is being used against you, please get in touch with us. We’d like to know about it. Thanks!