National Crime Agency: National Data Exploitation Capability

The National Crime Agency is an intelligence-led crime fighting agency that leads and co-ordinates the UK law enforcement operational response to serious and organised crime and protects the public by targeting the highest harm groups and networks. In 2018, the NCA introduced its national data exploitation capability as a five-year programme, to assist the agency’s response to SOC by analysing or “exploiting” bulk datasets.

His Majesty’s inspectorate of constabulary and fire and rescue services has finalised its 13th inspection of the NCA. The inspectorate assessed the value of the NDEC’s contribution to the NCA and the agency’s utilisation of it, whether the NDEC effectively uses the data it has access to, whether the NDEC has the technological capabilities and other resources to fulfil its role. and how efficiently and effectively NCA co-ordinates and prioritises the NDEC’s work.

It is crucial that law enforcement’s use of data and data capabilities is effective, lawful and ethical. I welcome the findings of the inspection. I have asked HMICFRS to publish the report. It will be published today and will be available online at https://hmicfrs.justiceinspectorates.gov.uk/ I will arrange for a copy to be placed in the Libraries of both Houses.

The inspectorate reported that the NDEC had a consistent approach to ethics and standards in data management. It also found that NDEC personnel were well trained and knowledgeable about the legislation that governs their work. Inspectors identified examples of good practice in safeguarding data and commended the agency for voluntarily undergoing an audit of the NDEC’s data handling process by the Information Commissioner’s Office in 2020.

However, the inspectorate found that more could still be done to strengthen NDEC’s role in the system. It highlighted the need for closer connectivity and engagement with partners. It also identified scope for improvement in establishing formal accreditation for the technical roles within NDEC. The inspectorate recommended that the agency should adopt the Government digital and data professional capacity framework in its entirety, which would align NDEC with other Government Departments and ensure there is a clear development model for staff.

Overall, the inspectorate has made nine recommendations and identified one area for improvement. These recommendations will help the NCA to improve how it stores data, undertakes bulk analysis and engages in partnership with relevant bodies. In turn, the recommendations should allow the NDEC to fulfil its potential and enhance the use of its capabilities to tackle SOC. The agency accepts the findings and steps are already being taken to address the challenges identified during the inspection. I wish to thank HMICFRS for this vital inspection. I have asked my officials to work closely with the NCA and HMICFRS to deliver the necessary changes.

[HCWS904]