In January 2023, Police Scotland launched a pilot of its Digital Evidence Sharing Capability (DESC) despite major unresolved data protection issues identified by its oversight body, the Scottish Police Authority (SPA), underscoring potential vulnerabilities regarding user data.
The SPA's DPIA specifically highlighted concerns around data transfers to the US and contractual issues with Microsoft, indicating a lack of compliance with law enforcement-specific data protection rules, raising alarms about data security.
Despite assurances from other policing bodies about data protection through encryption methods, the SPA DPIA noted that Axon holds the encryption keys, allowing them potential access to the data under US authority compulsion.
As of November 2024, Axon still possesses the encryption keys for DESC, raising significant concerns about data control and oversight, particularly with respect to law enforcement data transfers.
Collection
[
|
...
]