Data relating to Project Alpha

Freedom of information request reference no: 01.FOI.23.033977

I note you seek access to the following information:

Request 1
In a May 2022 FOI request (01.FOI.22.023773) and then a Mayor’s Question Time on 7 July 2022 (2022/1852), it was respectively reported that Project Alpha was updating their DPIA review (and would be happy to share a version of it when complete) and then that they had updated it.

Could you share the most up to date version of the DPIA review? Additionally, if the EIA has also been updated to match any changes, could you share its most recent version?

Request 2
In regards to the processing and creation of records, does Project Alpha use automated processing of any kind, including automated decision-making, automated data-collection, or automated threatassessment assistance? If so, very broadly, which of these are used?

Or alternatively is all work done totally manually by the Project Alpha team?

Given the MPS’s history of Data Protection Act contraventions with regards to the usage of social media as a source of intelligence (as per the ICO Enforcement Notice of violations regarding the operation of the Gangs Matrix), has Project Alpha, and particularly if it does use automated processing, been audited or formally reviewed by the ICO or any other external body?

Request 3
Once a record associated with a subject has been added to the Project Alpha database, is individual subject data shared in any way with internal or external partners?

Specifically, although requests for video takedowns are sent to social media platforms, presumably individual subject data is not relevant nor necessary for that process. In the broadest sense, is subject data used for other policing activities?

In a December 2019 Independent article, Detective Superintendent Mike West said of Project Alpha, “we are stopping serious offending happening, serious violence, firearmsrelated crime, knife-related crime, knife sales, drug dealing on Snapchat and Instagram at scale.”
Does Project Alpha collect information en masse that is then shared internally throughout the MPS, or is it much more narrowly scoped towards the removal of harmful online content?

Request 4
In a December 2022 ICO Decision Notice (IC-171071-N1D3) to a FOI complaint, it was reported that a new case referral system for Project Alpha includes the date of birth of subjects. Accordingly, what is the age of the youngest and the oldest person on record?

The same document reported that there were then nearly 7,000 records across Project Alpha’s database, which, according to a January 2023 FOI request (01.FOI.22.027836), encompassed the old and the new referral systems and which did not each correspond to a unique individual.

What is the current number of records on the old and the new system?

How many total unique individuals are on record? If the information is readily available, has Project Alpha ever removed a record from either database?

If the information is readily available, how many records have Project Alpha removed from either the old or the new databases?

Decision

I have today decided to disclose the located information to you in full.

Please find below information pursuant to your request above.

Request 1
In a May 2022 FOI request (01.FOI.22.023773) and then a Mayor’s Question Time on 7 July 2022 (2022/1852), it was respectively reported that Project Alpha was updating their DPIA review (and would be happy to share a version of it when complete) and then that they had updated it.

Q1 - Could you share the most up to date version of the DPIA review? Additionally, if the EIA has also been updated to match any changes, could you share its most recent version?

The most up to date version of the DPIA is at the below link:
DPIA relating to MPS Project Alpha - Online Harm Referral Team (met.police.uk)
The revised DPIA was released in 2023 at the link above, however this version is undergoing a review currently and an updated version will be available once complete, this is likely to be April 2024.
The EIA is currently undergoing revisions and consultation and will be available once complete, this is likely to be April 2024.

Request 2
Q1 - In regards to the processing and creation of records, does Project Alpha use automated processing of any kind, including automated decision-making, automated data-collection, or automated threat assessment assistance? If so, very broadly, which of these are used?

Q2 - Or alternatively is all work done totally manually by the Project Alpha team?

There is no automated processing used within Project Alpha, the majority of the work is completed manually with general computer software assistance.

Q3 - Given the MPS’s history of Data Protection Act contraventions with regards to the usage of social media as a source of intelligence (as per the ICO Enforcement Notice of violations regarding the operation of the Gangs Matrix), has Project Alpha, and particularly if it does use automated processing, been audited or formally reviewed by the ICO or any other external body?

The ICO have not conducted a formal audit of Project Alpha but a number of the unit’s data processes have been subject to review by the ICO following appeals in relation to requests made under the Freedom of Information Act.

Request 3
Q1 - Once a record associated with a subject has been added to the Project Alpha database, is individual subject data shared in any way with internal or external partners?

Yes, individual subject data may be shared with UK law enforcement agencies for the purposes of the prevention or detection of crime.

Q2 - Specifically, although requests for video takedowns are sent to social media platforms, presumably individual subject data is not relevant nor necessary for that process. In the broadest sense, is subject data used for other policing activities?

Yes, individual subject data may be shared with UK law enforcement agencies for the purposes of the prevention or detection of crime.

In a December 2019 Independent article, Detective Superintendent Mike West said of Project Alpha, “we are stopping serious offending happening, serious violence, firearms related crime, knife-related crime, knife sales, drug dealing on Snapchat and Instagram at scale.”

Q3 - Does Project Alpha collect information en masse that is then shared internally throughout the MPS, or is it much more narrowly scoped towards the removal of harmful online content?

Project Alpha does not collect information en masse, targeted data is collected for the purposes of the prevention and detection of crime.

Request 4
Q1 - In a December 2022 ICO Decision Notice (IC-171071-N1D3) to a FOI complaint, it was reported that a new case referral system for Project Alpha includes the date of birth of subjects. 1. Accordingly, what is the age of the youngest and the oldest person on record?

The date of birth is not a mandatory field as this information may not always be available but in relation to the records with a date of birth recorded the oldest age recorded is 70 and the youngest is 11. This information is based on the age at the time the details were recorded rather than current age at the time of this request.

Q2 - The same document reported that there were then nearly 7,000 records across Project Alpha’s database, which, according to a January 2023 FOI request (01.FOI.22.027836), encompassed the old and the new referral systems and which did not each correspond to a unique individual.
What is the current number of records on the old and the new system?

10,579

Q3 - How many total unique individuals are on record?

This information is not held.

Q4 - If the information is readily available, has Project Alpha ever removed a record from either database?

Yes.

Q5 - If the information is readily available, how many records have Project Alpha removed from either the old or the new databases?

This information is not held.