Judgment Approved by the court for handing down
R (Bridges) v CCSWP and SSHD
deployments that were undertaken in 2017 and 2018, around 500,000 faces
may have been scanned (albeit not necessarily 500,000 different individuals).
AFR Locate is currently set to detect up to five faces in a given frame and may
capture 10 frames per second. The overwhelming majority of persons whose
biometrics are captured and processed by SWP using AFR Locate are not
suspected of any wrongdoing.
Data retention
37.
If no match (false or positive) is made – as in the overwhelming majority of
cases – then AFR Locate does not retain the facial biometrics or image of
persons whose faces are scanned. They are immediately and automatically
deleted. That data is not available to the system operator or any other police
officer. The CCTV feed is retained for 31 days in accordance with the standard
CCTV retention period. Data associated with a match is retained within AFR
Locate for up to 24 hours. In the event of no match, the data is immediately
deleted.
38.
SWP’s Standard Operating Procedures8 and Data Protection Impact
Assessment provide for data retention periods. These are kept under review.
The current data retention periods are in summary:
(1) CCTV feed to AFR Locate deployments: retained for 31 days with
automatic deletion as part of the “Milestone” software.
(2) Facial images that are not matched against: immediately deleted.
(3) Biometric template (regardless whether match made): immediately
deleted.
(4) Facial images alerted against: images either deleted immediately
following the deployment, or at the latest, within 24 hours following
the deployment.
(5) Match report to include personal information (name of individual
alerted against): retained for 31 days.
(6) Watchlist images and related biometric template: deleted immediately
following the deployment, or at the latest within 24 hours following the
deployment.
Public awareness when AFR Locate is used
39.
When AFR is deployed, SWP take steps to inform members of the public
about AFR and as to its use at the event or in the area which they may be
attending or present. These steps are set out in the statement of Inspector
Lloyd of the Digital Services Department of SWP. They include as follows:
8
Published in November 2018