HMICFRS Inspection report: National Crime Agency’s National Data Exploitation Capability
The National Crime Agency (NCA) is an intelligence led crime fighting agency that leads and coordinates the UK law enforcement operational response to serious and organised crime (SOC) and protects the public by targeting the highest harm groups and networks. In 2018, the NCA introduced its National Data Exploitation Capability (NDEC), as a five-year programme, to assist the Agency’s response to SOC by analysing or ‘exploiting’ bulk datasets.
His Majesty’s Inspectorate for Constabulary and Fire & Rescue Services (HMICFRS) has finalised its thirteenth inspection of the NCA. The Inspectorate assessed the value of the NDEC’s contribution to the NCA and the Agency’s utilisation of it, whether the NDEC effectively uses the data it has access to, whether the NDEC has the technological capabilities and other resources to fulfil its role and how efficiently and effectively NCA coordinate and prioritise the NDEC’s work.
It is crucial that law enforcement’s use of data and data capabilities is effective, lawful and ethical. I welcome the findings of the inspection. I have asked HMICFRS to publish the report. It will be published today and will be available online at https://hmicfrs.justiceinspectorates.gov.uk/. I will arrange for a copy to be placed in the Libraries of both Houses.
The Inspectorate reported that the NDEC had a consistent approach to ethics and standards in data management. It also found that NDEC personnel were well trained and knowledgeable about the legislation that governs their work. Inspectors identified examples of good practice in safeguarding data and commended the Agency for voluntarily undergoing an audit of the NDEC’s data handling process by the Information Commissioners Office (ICO) in 2020.
However, the Inspectorate found that more could still be done to strengthen NDEC’s role in the system. It highlighted the need for closer connectivity and engagement with partners. It also identified scope for improvement in establishing formal accreditation for the technical roles within NDEC. The Inspectorate recommended that the Agency should adopt the Government Digital and Data Professional Capacity Framework in its entirety, which would align NDEC with other government departments and ensure there is a clear development model for staff.
Overall, the inspectorate has made nine recommendations and identified one area for improvement. These recommendations will help the NCA to improve how it stores data, undertakes bulk analysis and engages in partnership with relevant bodies. In turn, the recommendations should allow the NDEC to fulfil its potential and enhance the use of its capabilities to tackle SOC. The Agency accepts the findings and steps are already being taken to address the challenges identified during the inspection. I wish to thank HMICFRS for this vital inspection. I have asked my officials to work closely with the NCA and HMICFRS to deliver the necessary changes.