(a) A policing database is an electronic or paper database controlled by a government agency that contains information resulting from, or used as a basis for engaging in, any of the policing functions identified in § 1.01. (b) A policing database should be created only if necessary to facilitate a legitimate policing objective. (c) Any…

(a) Agencies should destroy or render inaccessible any information that is irrelevant to the designated purpose of a database. (b) Programs implementing subsection (a) should include policies requiring that policing databases be purged: (1) after a finite period specified in the authorization creating the database, which may be extended only if the agency can show…

(a) Policing databases should be as accurate, complete, and current as reasonably possible. (b) A policing database should not be considered to have met this standard unless, at a minimum, the agency controlling it requires: (1) standardized procedures for entering data; (2) training of and supervision over those who enter data; and (3) periodic determinations,…

Policing databases should be secure and protected from unauthorized access. At a minimum, this requires: (a) protection against access by non-police personnel, unless authorized by law; (b) identification of an officer who is responsible for security; (c) storage of the data on closed-network systems, when feasible; (d) continuous monitoring of the database for security breaches;…

(a) Agency personnel should be permitted to access a policing database only for legitimate policing objectives, which should be specified in a written policy governing the use of the database that meets the requirements of § 6.01(c). (b) The policy should make clear: (1) the predicate level of cause that must be present to justify…

(a) Policing agencies should maintain an unalterable record of every instance in which policing databases have been accessed. The record should include: (1) when the access occurred; (2) the purpose of the access and the type of data accessed; (3) who accessed the data; and (4) the method of access (in particular whether an algorithm…