The National Data Analytics Solution (NDAS) Project is a new, scalable and flexible analytics capability for UK law enforcement using advanced analytics to deliver insights to partners on agreed high priority operational and organisational issues. NDAS is sponsored and mandated by the Home Office.
West Midlands Police (WMP) are operating on behalf of the Home Office as the Lead Force for its implementation. NDAS are working in collaboration with Accenture who are a Data Processor for the NDAS Project, to which WMP (as Lead Force and Data Controller in its own right) and Accenture work under the terms and conditions of a Master Services Agreement. The NDAS Project consists of a number of UK Police Forces to which they are operating under a Joint Data Controllership arrangement.
WMP are working through NDAS to develop a use case for modern slavery (MS) with the aim of enabling WMP and other law enforcement agencies (LEAs) to benefit from the operational use of NDAS leading edge analytics capability to help WMP to prevent, detect and prosecute MS crimes and safeguard victims of MS.
NDAS MS use case is currently in the Acceleration Stage.
Additional use cases to be explored and developed within the NDAS Project include:
- Serious Violence
- Organised Exploitation
- Domestic Abuse
- Contact, Demand and Resourcing
WMP has shared information (including personal data) within NDAS for research and development purposes during the Acceleration Stage and this information and future information is being processed by NDAS and WMP for validation and operational purposes to:
- Introduce a new shared, central data and analytics capability that is owned and directed proportionately by participating UK law enforcement agencies.
- Draw in data from across each participating law enforcement agency at a local level to create a rich picture of the law enforcement landscape. There will also be the ability to pull in data from other local public service providers (such as social care services, local authorities, education providers and other emergency services), private sector organisations, or open source data to deepen understanding of local services and the social context.
- Use advanced analytics and statistical techniques to derive new insights from the repository of shared data on high priority issues that persist within each local area or across geographical boundaries.
- Provide law enforcement agencies with reporting and support to action the insights generated to create more evidence-based local interventions.
The joint controllers for the NDAS are:
a) Chief Officers of Police Forces in England & Wales
b) The Secretary of State for the Home Office (HO)
c) The Heads of the other LEAs (as set out in the Schedule 1 of the NDAS Joint Data Controller Agreement)
The data controller for NDAS within West Midlands is the Chief Constable of West Midlands Police.
Legal basis and Purpose of Processing
West Midlands Police and NDAS Project operate under a complex framework of legislation of general application, including the General Data Protection Regulations (GDPR), the Data Protection Act 2018 (DPA), Crime and Disorder Act 1998, Human Rights Act 1998, Serious Crime Act 2015, MOPI 2005, The Rehabilitation of Offenders Act 1974, Freedom of Information Act 2000 and Common Law.
NDAS and West Midlands Police are subject to the Information Commissioner’s Office (ICO) regulatory provisions.
West Midlands Police process personal data for the purposes of NDAS and for the Law Enforcement Purpose as defined by Part 3 DPA, namely the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security and to discharge the following common law policing purposes:
- protecting life and property,
- preserving order,
- preventing the commission of offences,
- bringing offenders to justice, and
- any duty or responsibility of the police arising from common or statute law
Data processed within NDAS may include:
Personal data and other information of individuals relevant to MS, which may include aspects of ‘sensitive processing’ as defined by Section 35(8) DPA, criminal offence and conviction data and also special category personal data.
The personal data or information may relate to:
(a) persons suspected of having committed or being about to commit a criminal offence;
(b) persons convicted of a criminal offence;
(c) persons who are or may be victims of a criminal offence;
(d) witnesses or other persons with information about offences.
(e) circumstances of significant public interest and the purposes of public safety (for example vulnerable and missing persons.)
Retention provisions for NDAS are as follows:
Records held within NDAS are overwritten within a maximum period of one week; this new data will serve as use for processing within the NDAS whilst the old datasets will be archived for a period of 12 months.
a) they have been preserved under provisions of the Criminal Procedure and Investigations Act 1996 (CPIA)or similar provisions in Scotland, and preservation within NDAS is inappropriate or;
b) the data has been assessed in accordance with the requirements of the Code of Practice on the Management of Police Information (MOPI )that has identified that a continued policing purpose for retention of the data remains that can only be satisfied by transfer of the data from NDAS.
Data Subject Rights
The DPA establishes data subject rights.
Right of Access
A data subject is entitled to obtain from the controller confirmation as to whether or not personal data concerning him or her is being processed, and are entitled to request from the relevant controller access to the personal data held.
Any requests may be submitted by email.
Rectification or Erasure
A data subject is entitled to request:
- Rectification of any error within the data;
- Erasure of data or restriction of its processing.
Any requests should be submitted via email.
Each request will be considered on its own merits and if the request is not granted you will be advised in writing together with the reasons.
You have the right to lodge a complaint with the Information Commissioner and the right to apply to a court for a compliance order.
You can contact the Information Commissioner by:
You can also write to:
The Information Commissioner