Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

A police technology supplier does not become responsible for the lawfulness of policing simply because it runs a data platform. The chief constable (or the force identified as controller) remains accountable for how personal information is collected, combined, analysed, shared and retained. A resident can therefore ask the force who its suppliers are, what the contract permits, whether a data-protection impact assessment (DPIA) was completed, where information is handled, and whether an automated output affected them.

There is no single UK-wide police-platform contract, retention schedule or disclosure rule. The answer depends on the particular force, project and legal purpose. Use the force’s data-protection officer or information-rights team, choosing a subject-access or law-enforcement access request for your own personal data and freedom of information (FOI) for organisational records.

What a “police data-platform contract” can mean

The phrase is broader than one software licence. A force may have several linked agreements governing the same platform and data flows:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • a procurement contract for implementation, hosting or managed services;
  • a software licence, support and maintenance agreement;
  • a data-processing contract defining controller and processor duties;
  • a data-sharing agreement with another public body or policing organisation;
  • hosting, cloud or subprocessor terms; and
  • an interface agreement for connecting a supplier platform to systems such as the Police National Computer (PNC), the Law Enforcement Data Service (LEDS), force records or intelligence systems.

College of Policing guidance says an organisation processing PNC or LEDS data should be party to a data-processing contract or another appropriate written agreement. An interface, download or extract is therefore a governance issue, not merely a technical connection.

#1 Best Overall
Sale
Compressed Air Duster,130000RPM Super Power Cordless Air Duster,Rechargeable Brushless Blower,3 Gear Adjustable Blower with LED Light,Dust Remover for Computer/House/Outdoor/Car
  • Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
  • With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
  • Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
  • Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
  • Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.

Who is legally accountable for your information?

Start by identifying the controller. College ethics guidance identifies chief constables as the legal controllers of police data. A vendor can operate infrastructure or process information on the force’s instructions, but outsourcing does not outsource the force’s accountability.

Ask the force to name, for this specific platform:

  • the controller and the business unit making decisions about the processing;
  • any processor acting on the controller’s instructions;
  • any joint controller sharing responsibility for a purpose; and
  • every material subprocessor, including hosting, analytics, support and remote-access providers.

The force should also explain the lawful purpose and legal basis for each major processing activity, rather than relying on a general statement that the platform supports policing. Police processing must comply with data-protection, human-rights and equality law. Different uses—such as investigation, safeguarding, intelligence development or operational planning—may require different justifications and safeguards.

What should the contract and related records contain?

Contract wording is often only one part of the evidence. Ask for the contract or a disclosable contract summary together with the documents that show how it is governed. The most useful provisions and records cover the following.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Area Questions to ask Evidence that may exist
Roles and instructions Who is controller, processor or joint controller? Can the supplier use data for its own purposes? Data-processing clauses, controller instructions and responsibility schedules
Data in the platform Which personal and special-category data is ingested, from which systems, and in what formats? Data-flow diagrams, data dictionaries and interface specifications
Purpose and lawfulness What policing purpose and legal power authorise each feed, search, match or alert? Records of processing activities, policy and legal assessments
Access and security Which roles can view, export or alter records? Are access logs reviewed? What testing is required? Role matrices, audit logs, penetration-test summaries and security schedules
Retention and deletion How long is each data type kept? What triggers deletion, review, legal hold or anonymisation? Retention schedule, deletion certificates and review procedures
Incidents How quickly must the supplier notify the force of a breach, loss or unauthorised access? Incident-response plan, notification deadlines and escalation contacts
Location and remote access Where is data hosted, backed up or accessed by support staff? Are international transfers involved? Hosting locations, transfer safeguards and subprocessor list
Individual rights How are access, correction, restriction and challenge requests handled? Assistance clauses, request workflow and correction records
Audit and exit Can the force inspect the supplier, export data and terminate without losing records? Audit rights, portability format, exit plan and deletion confirmation

ICO contract guidance treats data-subject rights and controller-processor liabilities as matters that should be allocated in the agreement. A refusal to disclose sensitive operational detail does not remove the force’s duty to explain, at an appropriate level, who controls the processing and how your rights can be exercised.

Rank #2
EVEO® Screen Cleaner Spray Kit (Streak-Free) TV Screen Cleaner for Smart TV, Lcd, LEd, Oled | Computer Screen Cleaner Spray and Wipe Microfiber Cloth - TV, Monitor, Laptop, iPad, Car - 6.7oz 1 Pack
  • Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
  • Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
  • Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
  • Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
  • Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth

DPIAs: the project’s risk test

UK data-protection rules require a DPIA where processing is likely to result in a high risk to people’s rights and freedoms. College guidance also describes DPIAs as good practice for major personal-data projects. They should sit alongside the procurement contract, business case, purchasing strategy and landscape review—not be treated as paperwork added after deployment.

Questions about the assessment

  1. Was a DPIA completed before the platform or each major data feed went live?
  2. Who approved it, and what expertise was involved?
  3. Was it updated when new sources, analytics, suppliers, pilot extensions or uses were added?
  4. Is a public summary available, even if sensitive technical annexes are withheld?
  5. Which residual risks were accepted, by whom, and with what review date?
  6. What mitigations were implemented—such as access restrictions, testing, accuracy checks or deletion controls—and how are they verified?

An old DPIA may not answer questions about a materially changed system. Ask for the version history or a written explanation of what changed and why a new assessment was, or was not, required.

What data is being combined, and how is accuracy controlled?

Platforms can make separate records searchable together. That convenience can also magnify an error: a mistaken identity, stale allegation, duplicate record or incorrect association may be surfaced in more contexts and appear authoritative because it is displayed in a modern interface.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Ask the force to describe:

  • the source systems and categories of personal or special-category data;
  • matching rules used to link people, vehicles, addresses, devices or events;
  • who checks source reliability and record accuracy;
  • how conflicting or outdated entries are flagged;
  • how corrections propagate to copies, exports, alerts and supplier-held backups; and
  • whether staff are warned when an output is incomplete, probabilistic or unverified.

Requesting correction is not limited to obvious spelling mistakes. If information about you is inaccurate, misleading, out of date or wrongly attributed, ask the controller to record the dispute, investigate the source and tell you what was corrected or why it was retained.

Rank #3
Sale
BladeHawks RGB Gaming Mouse Pad Extra Large Extended 31.5x12 Inch-Black | LED mouse pad with 14 lighting modes, covers keyboard & mouse, anti-slip rubber base, waterproof surface, USB powered
  • 【Large size】:Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
  • 【LED backlight mouse pad】:Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
  • 【Anti-slip rubber base】:Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
  • 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
  • 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.

Can an algorithm make a decision about you?

Ask whether the platform merely presents information to an officer or whether a score, match, ranking, alert or recommendation materially influences an action about an identifiable person. The distinction between advisory and determinative use matters.

Under Part 3 of the Data Protection Act 2018 and Article 22 of the UK GDPR, people generally have a right not to be subject to a decision based solely on automated processing when it has a legal or similarly significant effect, unless statutory conditions are met. The exact regime depends on the processing context and any applicable legal exception.

Questions to put to the force

  • Is any output determinative, or must an officer make an independent decision?
  • What meaningful human review occurs before an adverse action?
  • Can the reviewer see the underlying records and limitations rather than only a score?
  • How are false matches, bias and performance across different groups tested?
  • What explanation can be given for an alert or recommendation?
  • How can you challenge the result, supply evidence and obtain a correction?

A statement that “an officer remains in the loop” is not enough if the officer routinely accepts an opaque output without checking the underlying evidence. Ask what the reviewer is required and empowered to do.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How to request information from a force

1. Identify the right force and project

Address the request to the force that controls the relevant processing. If you know the platform name, supplier, team or approximate date, include it. If not, describe the incident, interaction or decision that prompted your question.

Rank #4
Sale
Vaydeer Wrist Rest for Keyboard and Mouse, Computer Ergonomic Wrist Support Pad, Soft Memory Foam Arm Cushion for Desk, Palm Hand Office Laptop Typing
  • 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
  • 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
  • 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
  • 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
  • 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.

2. Choose the correct legal route

  • Subject-access or law-enforcement access request: use this when you want personal data about yourself, such as records, alerts, notes or data supplied to a platform. The applicable route depends on whether the processing falls under the UK GDPR or the law-enforcement provisions of the Data Protection Act 2018.
  • Freedom of information request: use this for organisational records, such as the contract, contract summary, DPIA summary, procurement route, retention policy, supplier list or automated-processing policy. FOI is not a substitute for a request for your own personal data.

3. Ask for a defined set of records

A focused request is easier to answer than “send everything.” You can request:

  1. the contract or the parts that can be disclosed, including schedules and amendments;
  2. the DPIA or a public summary, approval date and update history;
  3. any data-sharing or interface agreement;
  4. records of processing relevant to the platform;
  5. the supplier and subprocessor list;
  6. retention and deletion schedules;
  7. security, audit and breach-notification clauses; and
  8. the policy governing analytical or automated outputs.

4. Handle partial disclosure

Operational sensitivity, personal data belonging to others, security information and other exemptions may limit release. Ask the force to identify the exemption or legal basis relied on, explain what can be disclosed in redacted form, and provide a description or summary where the full document cannot be released. The existence of a contract or DPIA does not guarantee that every page will be published.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Procurement, suppliers and the risk of lock-in

Ask how the supplier was selected and whether the evaluation considered privacy, equality, security, human rights, interoperability and the force’s ability to supervise the service. College governance guidance says interfaces, downloads and extracts from PNC or LEDS are subject to governance review.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Important procurement questions include:

  • Was the supplier appointed through a lawful procurement route?
  • Could subcontractors be added or changed without the force’s approval?
  • Can the force audit the supplier and obtain independent test results?
  • What happens when the contract ends, the supplier fails or the force changes systems?
  • Can records be exported in a usable, documented format?
  • How are deletion from live systems, backups and supplier workspaces verified?
  • Does the agreement prevent the supplier from reusing police data for unrelated commercial analytics or model training?

Exit provisions are a data-protection safeguard as well as a commercial term. A force that cannot retrieve records or change supplier may struggle to honour correction, deletion, retention and access obligations.

Best Value
Sale
Under Desk Cable Management Tray No Drill, Metal Mesh Cable Management Under Desk with Clamp Mount, 2 Hole Cable Tray with Wire Management and Cord Organizer for Home Office Standing Desk
  • 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
  • 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
  • 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
  • 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
  • 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.

A warning from the Metropolitan Police enforcement case

An Information Commissioner’s Office enforcement report, reported by ITPro in 2026, described the Metropolitan Police use of an unapproved third-party retail-crime platform. Personal information relating to 179 people, three of whom were under 18, was uploaded between January and September 2024. The ICO found no DPIA and inadequate technical, organisational and approval controls, and required stronger governance, staff awareness and testing.

David Doodson, the ICO’s head of investigations, said: “This action should send a message across the policing sector, and beyond: if you are using new technology to process people’s information you must do so lawfully, transparently and with appropriate governance from the outset.” He also said: “Police forces hold large volumes of sensitive personal information and must have robust safeguards in place to protect it.”

This case is a reason to request approval records, DPIA evidence and oversight arrangements. It is not proof that every police platform has the same defect; the relevant question is what the particular force can demonstrate about its own system.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How to challenge inaccurate or unlawful use

Begin with the controller’s data-protection officer or information-rights team. State the record or decision you dispute, why it is inaccurate or unlawful, and what remedy you seek: correction, restriction while accuracy is checked, an explanation, human review or confirmation that data was deleted when no longer required.

Keep copies of your request, the force’s response, dates, reference numbers and any evidence supporting your account. If the force refuses or gives an incomplete answer, ask it to identify the legal basis, exemption or policing purpose. You can then consider the force’s internal review route and, where appropriate, raise the matter with the Information Commissioner’s Office or seek independent legal advice. A complaint about a platform should distinguish between an incorrect record, unlawful disclosure, excessive retention, inadequate security and an automated decision; the remedy and evidence may differ.

A 12-question checklist for any force

  1. Which force and supplier are parties to the agreement?
  2. Who is the controller, and who are the processors, joint controllers and subprocessors?
  3. What personal and special-category data is ingested, from which systems and for what purpose?
  4. What lawful basis and policing power authorise each processing activity?
  5. Was a DPIA completed, approved and updated after scope changes?
  6. Where is data hosted or remotely accessed, and are international transfers involved?
  7. What are the retention, deletion, correction, export and exit provisions?
  8. What security controls, audit rights and breach-notification deadlines apply?
  9. Does any algorithm make or materially influence a decision about an identifiable person?
  10. What human review, explanation and appeal route exists?
  11. Which procurement, equality and human-rights assessments were completed?
  12. How can a resident make a subject-access, law-enforcement access or FOI request, and what exemptions may apply?

What a useful answer from the force should let you establish

You should be able to map the information flow: what enters the platform, why it is used, who can see it, how accuracy is checked, how long it remains, and what happens when it is wrong or no longer needed. You should also be able to identify the accountable controller, the supplier’s limited role, the DPIA decision and update history, any automated influence on decisions, and a practical route to challenge the result.

Because contracts, supplier lists, retention periods and DPIA publication practices can change between forces and over time, verify the named force’s current procurement notice and current guidance before relying on an older document. The absence of a public contract is not evidence that no agreement exists; it is a prompt to ask what can be disclosed and why.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.