02 April 2018
Support our work: become a Friend of Statewatch from as little as £1/€1 per month.
Scotland
Independent Advisory Group on the Use of Biometric Data in Scotland publishes final report
2.4.18
Follow us: | | Tweet
The report calls for a "national debate to improve public understanding of, and confidence in, the retention and use of biometric data in Scotland for policing, law enforcement and other public protection purposes" and advocates for the establishment of a national Code of Practice concerning law enforcement use of DNA, fingerprints, facial and other photographic images "and all existing, emerging and future biometrics."
Further recommendations include the need for seperate policies concerning the retention of childrens' biometric data and for the establishment of a Scottish Biometrics Commissioner, answerable to the Scottish Parliament, who should "keep under review the acquisition, retention, use and disposal of all biometric data by the police, SPA [Scottish Police Authority] and other public bodies."
The report was commissioned following revelations that the UK Police National Database contained 20 million custody images of individuals, many of whom had been charged but not convicted of a crime, yet had no rules governing the retention and use of those images.
The UK Home Office has been criticised recently for failing to publish its long-promised 'Biometrics Strategy', which is supposed to implement a review of the custody image database and introduce rules and safeguards.
The Independent Advisory Group's report notes that all those questioned as part of its review considered that legislation was necessary to underpin the use of biometrics, and that while it is "clear from case law in England that legislation is required to govern the retention of custody images... there is still no legislation in England."
According to the report's principal author, John Scott QC, the Scottish Government will hold a public consultation on the use of biometrics in policing later in 2018.
Full report: Independent Advisory Group on the Use of Biometric Data in Scotland (pdf)
Key recommendations from the report
Recommendation 1
There should be national debate to improve public understanding of, and confidence in, the retention and use of biometric data in Scotland for policing, law enforcement and other public protection purposes. Ideally, this should start before and continue during the Scottish Governments public consultation, as well as featuring in ongoing discussion after consultation.
Recommendation 2
Legislation should establish a Code of Practice covering the acquisition, retention, use and disposal of DNA, fingerprints, facial and other photographic images (including custody images) and all existing, emerging and future biometrics for Police Scotland, the Scottish Police Authority and other bodies working in the field of law enforcement. The legislation should outline matters relating to review of the Code by the Scottish Parliament.
Recommendation 3
The Code of Practice should be the subject of detailed consultation. It should contain relevant human rights and ethical principles, address the implications of any presumption regarding retention and specify relevant procedures for applications from private citizens for deletion of biometric data. It should contain specific reference to validation of biometric technologies.
Recommendation 4
Distinct policies should be formulated for the acquisition, retention, use and disposal of the biometric data of children aged between 12 and 17. In each case involving a child, consideration should be given to the proportionality and necessity of obtaining biometric data for the purposes of recording on the biometric databases, ensuring that the best interests of the individual child are taken into account in the decisionmaking process. Where the decision is to obtain and retain biometric data, the reasons should be recorded and subject to review and scrutiny. Appropriate consideration should be given, and adaptation made, in the treatment of the data of those (children and adults) with specific vulnerabilities.
Recommendation 5
There should be a review of the rules on retention of biometric data in sections 18 to 19C of the Criminal Procedure (Scotland) Act 1995, considering all questions of proportionality and necessity. The review should be research led and consider not only the gravity of the offending but also the value of biometrics in the investigation of certain offences, re-offending rates relating to different crimes, the escalation of offending, and the value that biometric retention has in the investigation of this escalation. It should be informed by any developments in the law in Scotland, England and the European Court of Human Rights.
Recommendation 6
There should be a presumption of deletion of biometric data after the expiry of prescribed minimum retention periods.
Recommendation 7
Evidence should be gathered from which continuing assessment can be made about appropriate periods of retention of biometric data. Public consultation should include specific questions on retention periods.
Recommendation 8
There should be legislation to create an independent Scottish Biometrics Commissioner. The Commissioner should be answerable to the Scottish Parliament, and report to the Parliament. The Commissioner should keep under review the acquisition, retention, use and disposal of all biometric data by the police, SPA and other public bodies. The Commissioner should promote good practice amongst relevant public and private bodies, and monitor compliance with the Code of Practice.
Recommendation 9
An ethics advisory group should be established as part of the oversight arrangements. This group should work with the Commissioner and others to promote ethical considerations in the acquisition, retention, use and disposal of biometric technologies and biometric data.
Full report: Independent Advisory Group on the Use of Biometric Data in Scotland (pdf)
Search our database for more articles and information or subscribe to our mailing list for regular updates from Statewatch News Online.
Spotted an error? If you've spotted a problem with this page, just click once to let us know.
Statewatch does not have a corporate view, nor does it seek to create one, the views expressed are those of the author. Statewatch is not responsible for the content of external websites and inclusion of a link does not constitute an endorsement. Registered UK charity number: 1154784. Registered UK company number: 08480724. Registered company name: The Libertarian Research & Education Trust. Registered office: MayDay Rooms, 88 Fleet Street, London EC4Y 1DH. © Statewatch ISSN 1756-851X. Personal usage as private individuals "fair dealing" is allowed. We also welcome links to material on our site. Usage by those working for organisations is allowed only if the organisation holds an appropriate licence from the relevant reprographic rights organisation (eg: Copyright Licensing Agency in the UK) with such usage being subject to the terms and conditions of that licence and to local copyright law.