Connect system and the due diligence/mitigation efforts

Freedom of information request reference no: 01.FOI.23.033936

I note you seek access to the following information:

A report from Mopac’s MPS oversight board published 19 July 2022 noted the initial roll out of the Connect system would go ahead in November, despite “issues of concern” being highlighted with “search functionality, audit capability and right of access.”

These issues include:
• Connect’s search functionality being inferior to that on CRIMINT.
• Connect creating challenges around data deletion as it “removes files from being searchable and retrievable but doesn’t technically delete them.”
• That the combined search functionality of the Connect and the Integrated Intelligence Platform “will be less sophisticated than current systems allow,” and that “some search functionality will be lost altogether.”
• Connect’s audit capabilities not “fully replicat[ing] the audit capability of Legacy Systems,” to the point where it is operating in contravention of the UK Data Protection Act 2018’s logging requirements around the collection and alteration of data.

The report further noted these issues will negatively impact the forces ability to respond to SARs in a timely manner; and that the “Connect roll-out has knock on impacts for Command and Control and potentially creates contractual issues.”
It also said that none of “these issues were not flagged to MOPAC at the time of approval. We cannot say whether they were known inside the MPS,” and that the “MPS have suggested, as part of the government consultation on data protection law, that this section of the DPA 2018 is revised.”

1. How were these issues resolved before the November 2022 roll out?
2. Did the MPS formally consult with the ICO on its processing activities in Connect?
3. Does Connect now have the capability to fully delete data?

Decision

I have today decided to disclose the located information to you in full.

Please find below information pursuant to your request above.

Q1 - How were these issues resolved before the November 2022 roll out?

The identified issues were managed on a case-by-case basis:

• Search capability did not impact the November 2022 roll out as users with an advanced search requirement did not begin to use the solution until Drop 2, planned for deployment in 2024.
• CONNECT has the ability to put records beyond use. The ability to delete from the CONNECT back-end will be deployed to forces via a national CR due in 2024, albeit forces can delete with supplier support on a case-by-case basis now.
• The MPS has made an investment in a tool – “Thoughtspot” to close any search gaps within CONNECT.
• The decision to accept CONNECT audit functionality at Drop 1 was taken internally, and approved by all impacted parties. The CONNECT programme has since made an investment in the product to improve its capability ahead of Drop 2 Go-Live.

Q2 - Did the MPS formally consult with the ICO on its processing activities in Connect?

The MPS formally notified the ICO on the processing activities of CONNECT before Drop 1 Go-Live. No additional information is held.

Q3 - Does Connect now have the capability to fully delete data?

No, CONNECT has the ability to put data in the front end beyond use (logical deletion).

The ability for the CONNECT product to fully delete from tables is contained within a national Change Request that will be delivered to all relevant forces in 2024.