The Register® — Biting the hand that feeds IT

Feeds

Exposed: RSPCA drills into cops' databases, harvests private info

Animal charity gets its paws on police data - and nobody appears to be watching

5 ways to reduce advertising network latency

Exclusive British animal welfare charity the RSPCA enjoys unique access to confidential information on the Police National Computer (PNC) - the extent of which has not been disclosed before.

Civilians who claim to work for the Royal Society for the Prevention of Cruelty to Animals can access criminal records and carry out vehicle checks by making requests to the Association of Chief Police Officers Criminal Records Office (ACRO), which charges the charity for the information.

It's an unusual arrangement because the RSPCA can gain access to an individual's full criminal history (from warnings and reprimands to convictions), details of upcoming prosecutions, and "other information as deemed relevant by ACRO".

Police information may only be disclosed to "non statutory bodies" under strict criteria: each individual disclosure must be proportionate and necessary for the purpose for which it is being shared. Blanket disclosures are not legal.

The RSPCA is widely believed to have special powers to prosecute individuals - but it has none, and instead relies solely on common law rights. It does however have a large financial war chest to take out private prosecutions.

Although the number of animal cruelty investigations has fallen in recent years the charity has arguably used these resources much more aggressively. And it's claimed the taxpayer has footed the RSPCA's court prosecution legal bills - even when the charity failed to proves its case or the action was withdrawn.

The anti-cruelty organisation agrees to only request information about people it is actively investigating; to treat the data as restricted; and to handle it according to government guidelines – i.e. deleting it when it is no longer needed. In addition, the Leveson inquiry into press ethics published a Police National Computer User Manual [PDF, 618 pages] that specifically states the auditing requirements (paragraph 12.4, page 83) for sensitive information.

So where's the audit? Who's checking this? The answer, a series of Freedom of Information requests have established, is "nobody".

The RSPCA has not been audited by ACRO to establish whether it's following these obligations. For its part, the RSPCA does not need to disclose what information it uses or how, nor what auditing and training procedures it uses, since it is not a "public authority" under the terms of the Freedom of Information Act. The RSPCA therefore appears to inhabit a legal twilight zone, beyond the reach of scrutiny.

Freedom of Information (FOI) requests have teased out the service-level agreement (SLA) [PDF, 18 pages, easy read] between the police and the charity - as a response to this request [PDF]. It's lightly redacted (the cost to the RSPCA of police information is blanked) and the FOI requests confirm that ACPO has no record of auditing the charity.

The police are keen to throw a further cloak over its relationship with the animal protectors - as evidenced in this response, where the plod refer to an as-yet unfinished “national protocol” for dealing with the RSPCA.

The Home Office - in response to this [PDF] information request - confirmed it knows nothing about the legal basis of the agreement - while the Information Commissioner has never been challenged on the legality of the arrangement.

A cross-party group of MPs has called for an investigation of the RSPCA by the Charity Commission. ®

Supercharge your infrastructure

Whitepapers

5 ways to reduce advertising network latency
Implementing the tactics laid out in this whitepaper can help reduce your overall advertising network latency.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Email delivery: 4 steps to get more email to the inbox
This whitepaper lists some steps and information that will give you the best opportunity to achieve an amazing sender reputation.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
5 ways to prepare your advertising infrastructure for disaster
Being prepared allows your brand to greatly improve your advertising infrastructure performance and reliability that, in the end, will boost confidence in your brand.

More from The Register

next story
EU move to standardise phone chargers is bad news for Apple
Faster than a speeding glacier but still more powerful than Lightning
NSA in new SHOCK 'can see public data' SCANDAL!
What you say on Twitter doesn't stay on Twitter
Great Britain rebuilt - in Minecraft: Intern reveals 22-BEEELLION block map
Cunning Ordnance Survey bod spent the summer bricking it
Google's boffins branded 'unacceptably ineffective' at tackling web piracy
'Not beyond wit' to block rip-offs say MPs demanding copyright safeguards
Hundreds of hackers sought for new £500m UK cyber-bomber strike force
Britain must rm -rf its enemies or be rm -rf'ed, declares defence secretary
Michael Gove: C'mon kids, quit sexting – send love poems instead
S.W.A.L.K.: Education secretary plugs mate's app
Report says PRISM snooped on India's space, nuclear programs
New Snowden doc details extensive NSA surveillance of 'ally' India
Highways Agency tracks Brits' every move by their mobes: THE TRUTH
We better go back to just scanning everyone's number-plates, then?
The target: 25% of UK gov IT from small biz... The reality: Not even close
Proud mandarins ignoring Cabinet Office's master plan, note MPs
US House Republicans: 'End net neutrality or no debt ceiling deal' – report
Leaked document reveals a shedload of anti-Obama demands
prev story