Criminal Intelligence System Operating Policies (28 CFR Part 23)

The management of criminal intelligence information is a critical component of modern law enforcement, balancing the need for actionable data with the protection of individual privacy and constitutional rights. The regulatory framework governing this balance in the United States is codified in 28 CFR Part 23.

Overview and Purpose

28 CFR Part 23 serves as a federal regulation that dictates the operating policies for interjurisdictional criminal intelligence systems that receive funding from the U.S. Department of Justice. The primary objective of these regulations is to ensure that law enforcement agencies collect, store, and share information regarding criminal activity in a manner that protects the privacy and civil liberties of the individuals involved.

By establishing uniform standards, Part 23 seeks to prevent the abuse of surveillance powers, prohibit the collection of information based solely on protected speech or association, and ensure that only relevant, accurate, and timely information remains in intelligence databases.

Core Requirements for Intelligence Systems

For a system to be compliant with 28 CFR Part 23, it must adhere to several strict criteria regarding the nature of the information maintained:

Furthermore, the regulation mandates that intelligence systems do not store information based solely on an individuals political, religious, or social views, associations, or activities. This safeguard is essential for protecting First Amendment rights and ensuring that law enforcement focus remains on criminal behavior rather than ideological differences.

Data Quality and Retention

One of the most significant aspects of 28 CFR Part 23 is the requirement for ongoing data validation. Intelligence information cannot remain in a database indefinitely. Agencies are required to review the information contained within their systems periodicallytypically every five yearsto determine its continued relevance and accuracy.

If information is found to be no longer relevant, it must be purged from the system. This "sunset" provision prevents the accumulation of outdated or inaccurate "stale" data, which can lead to misinformed investigative decisions or the unfair stigmatization of citizens.

Security and Access Controls

Compliance necessitates rigorous security protocols to protect against unauthorized access. Systems must have:

• Procedures to ensure that information is kept secure from unauthorized access.
• Strict controls over who can input, access, and modify intelligence data.
• Comprehensive audit logs to track system usage, ensuring accountability for every search or data entry.

The Role of Intelligence Sharing

While Part 23 places limitations on data collection, it also facilitates the legitimate sharing of intelligence between agencies. By standardizing the format and the vetting process for information, 28 CFR Part 23 allows law enforcement across state and local lines to collaborate effectively. It ensures that when an agency receives information from an intelligence system, they can have a degree of confidence that the data has been vetted for legality and accuracy.

Conclusion

28 CFR Part 23 represents a fundamental compromise in a democratic society. It acknowledges that effective law enforcement requires the organized collection of intelligence, but it imposes essential checks and balances to prevent the misuse of that power. By mandating reasonable suspicion, enforcing periodic data reviews, and ensuring strict security, these policies help maintain public trust in the law enforcement community while supporting the safety of the public.