Table of Contents (Tap to Expand) ▼
The primary national database operational since 1974 containing records of convictions, cautions, arrests, vehicles, and wanted persons.
A national soft intelligence system introduced after the Bichard Inquiry, enabling cross-force sharing of unstructured intelligence reports.
The standardized UK system for evaluating intelligence based on source reliability, information validity, and dissemination security.
The business model used across UK forces to prioritize tasking and resource allocation at local, regional, and national levels.
Database algorithms that detect and link duplicate records of individuals, addresses, or phone numbers that are slightly misspelled.
The graphical mapping of communication nodes, travel logs, and associates to identify structural relationships in criminal networks.
Statistical tools used to classify individuals or scenarios based on historical data to predict reoffending or vulnerability.
The systematic collection and analysis of publicly accessible online data, including social media platforms and public registries.
The Regulation of Investigatory Powers Act, which provides the statutory framework for authorizing covert surveillance and informant management.
The legislation containing Part 3, which specifically governs the processing of personal data for law enforcement purposes.
1. What Is Police Intelligence? Evidence vs. Soft Data
In the landscape of modern law enforcement, understanding the fundamental distinction between evidence and intelligence is critical. Evidence consists of objective, verified facts, physical objects, forensic profiles, or direct statements that are legally admissible in a criminal court to prove or disprove a charge beyond reasonable doubt. The handling of evidence is strictly governed by the Police and Criminal Evidence Act 1984 (PACE) and the Criminal Procedure and Investigations Act 1996 (CPIA), which dictate rules of continuity, integrity, and disclosure to the defense.
Intelligence, by contrast, is unprocessed or evaluated information that has been collected and analyzed to help guide operational decisions, identify emerging threats, and deploy resources. Intelligence is soft data; it includes anonymous tips, vehicle tracking histories, informant statements, observations from surveillance, and links between suspects. While it acts as the compass for police work, intelligence itself is generally inadmissible in court. Its primary role is to guide investigators to the location of hard, admissible evidence.
The transition of raw information into intelligence requires a formal process of evaluation. When an officer receives a tip, it is not simply written in a file. It must be evaluated for context, reliability, and motive. This ensuring that decisions are guided by structured analysis rather than rumor or prejudice, keeping resources focused on high-risk criminals.
2. Intelligence-Led Policing and the National Intelligence Model
Intelligence-Led Policing (ILP) is a strategic business model that emerged in the UK during the 1990s as a response to rising crime rates and falling police budgets. Rather than relying on reactive patrol dispatch (waiting for a 999 call), ILP places data and intelligence analysis at the center of all operational decision-making, focusing resources on active, high-rate repeat offenders and criminal hotspots.
The framework for implementing ILP is the National Intelligence Model (NIM), adopted by all 43 regional police forces in England and Wales. The NIM divides policing operations into three distinct levels:
- Level 1 (Local): Focused on crime and disorder within a single basic command unit or local authority area, such as local burglaries, street violence, and anti-social behavior.
- Level 2 (Regional): Focused on cross-border crime affecting multiple force boundaries, such as regional organized crime groups, county lines drug supply, and complex frauds.
- Level 3 (National/International): Focused on serious threats requiring national coordination, such as terrorism, state-sponsored cyber espionage, and international human trafficking.
Under the NIM, forces hold regular tasking and coordination group (TCG) meetings. Analysts present strategic and tactical intelligence assessments detailing crime patterns and active targets. Commanders use these assessments to allocate resources, deploy undercover units, and set the force control strategy. This ensures that police focus is dictated by evaluated data rather than subjective priorities.
3. How Intelligence Systems Work: Ingestion to Action
Police intelligence systems are designed to automate and standardize the Intelligence Lifecycle, which consists of five distinct phases: Direction, Collection, Evaluation, Analysis, and Dissemination.
Figure 1: The Intelligence Lifecycle. Information begins with operational direction, is collected from field systems, is evaluated via the 5x5x5 model, is analyzed by specialists, and is disseminated to frontline officers.
A central pillar of the evaluation phase is the 5x5x5 system. When an intelligence report is submitted, the submitting officer must grade the information using three indexes:
A represents a source whose reliability is unquestioned (such as technical surveillance or forensic databases). B represents a source who has been tested and proved reliable in the past. C is a source who has provided reliable info sometimes, but needs caution. D is historically unreliable. E is untested (such as a first-time tipster).
1 indicates information known to be personally true by the source. 2 is information known personally, but not witnessed directly. 3 is uncorroborated but matches existing logs. 4 cannot be judged. 5 is suspected to be false or malicious.
Limits who can access the report. Code 1 permits dissemination within the force and external law enforcement partners. Code 2 restricts access to named agencies. Code 3 restricts to internal force access. Code 4 restricts to specific named officers. Code 5 is special handling requiring commander authorization.
Figure 2: The 5x5x5 Intelligence Matrix. Demonstrates the grid crossing of Source Reliability (A to E) and Information Reliability (1 to 5). Highlighted cells represent configurations ranging from high-reliability forensics (A1) to standard corroborated tips (C3).
4. What Data Do Police Intelligence Systems Ingest?
Modern police intelligence operations process a massive array of digital data feeds. Instead of relying solely on written reports, force intelligence systems integrate structured and unstructured datasets:
- Command and Control Logs: Records of 999 and 101 emergency calls, listing dispatcher summaries, caller caller details, and immediate response logs.
- Crime Records Management Systems: Formal arrest files, crime scene reports, victim logs, and custody database records.
- Automatic Number Plate Recognition (ANPR): Photographic plate captures, directional camera locations, and timestamps from vehicle tracking grids.
- Biometric Data: Suspect fingerprints, custody images, DNA profile markers, and facial recognition templates.
- Communications Data: Telecommunication metadata (call logs, cell site connections, SMS headers) accessed under Investigatory Powers Act warrants.
- Digital Forensics: Text messages, contact lists, web history, and location data extracted from seized mobile phones under statutory disclosure rules.
To prevent system overload and maintain data integrity, forces use automated parsing scripts that structure these logs. Once ingested, data is indexed for search terms, entity coordinates, and phone numbers, allowing analysts to search millions of records instantly.
5. UK National and Regional Databases: PNC, PND & Local RMS
UK law enforcement relies on a tiered system of databases, balancing national sharing with regional autonomy:
The Police National Computer (PNC)
The PNC is a structured, central register that tracks formal police actions. It contains records of convictions, cautions, bail conditions, warrants, and vehicle warnings. Accessible instantly from patrol cars, the PNC ensures that if a suspect is stopped, officers know immediately if they are wanted.
The Police National Database (PND)
The PND is a national soft intelligence sharing platform. It was created in response to the Soham murders, where investigation failures revealed that regional forces did not share soft intelligence. The PND allows forces to search across regional borders to read local intelligence reports, suspect descriptions, safeguarding warnings, and custody photographs.
Local Records Management Systems (RMS)
Forces manage their daily logs using regional systems. Forces typically collaborate in consortia utilizing shared platforms, such as the Athena system (used by forces like Essex, Kent, and Hertfordshire) or NicheRMS (used by Greater Manchester, Merseyside, and others). These platforms store case files and domestic abuse logs.
6. The Role of Force Intelligence Bureaus & Crime Analysts
While algorithms automate data sorting, the core of police intelligence work remains human analysis. Every UK force operates a Force Intelligence Bureau (FIB), housing specialist intelligence officers, researchers, and crime analysts.
Analysts are trained to synthesize large, disconnected datasets into clear intelligence reports. They use standardized methods:
- Link Analysis: Mapping relationships between suspects, communication logs, and vehicle movements to locate organizational nodes.
- Telephone Toll Analysis: Evaluating billing records and call frequencies to identify drug line numbers and coordinators.
- Strategic Assessments: Evaluating long-term crime trends to help chief officers set priorities.
- Tactical Assessments: Providing weekly briefs to direct patrols and specify target packages.
The analysts' outputs ensure that officers do not proceed on gut feeling. Instead, they provide commanders with structured, audited intelligence to support operations.
7. AI & Pattern Recognition: Entity Resolution & Links
With forces ingesting millions of records, manual searching is insufficient. Modern intelligence systems integrate machine learning and database algorithms to identify patterns automatically.
A key algorithm is Entity Resolution. Suspects often use aliases, false dates of birth, or list variations of their address. Entity resolution algorithms evaluate fields (e.g., matching a mobile number, a vehicle registration, and a partial name) to link disparate records, revealing that they refer to the same individual.
Figure 3: Network Link Mapping Graphic. Visualizes link weight scoring (w) between suspect nodes, telephone logs, ANPR vehicle targets, and addresses. Stronger link weights represent high-reliability connections.
Additionally, forces utilize network mapping algorithms that scan call data records (CDRs) to map organized crime networks. By looking at call frequencies and locations, the algorithm can flag burner phones that are used exclusively to coordinate county lines travel.
8. Risk Scoring & Threat Assessment Algorithms
UK police forces have pioneered the trial of algorithmic risk scoring systems to classify individuals and prioritize work. A prominent example is the Harm Assessment Risk Tool (HART), developed by Durham Constabulary and Cambridge University.
HART was designed to assist custody officers in deciding who should be referred to rehabilitation diversion schemes. Using a random forest machine learning model, HART analyzed 104 predictor variables—including prior arrest history, offence types, age, and postal code data—to classify suspects into low, medium, or high risk of committing a serious reoffence.
Figure 4: Risk Scoring Dashboard. Illustrates scoring threshold scales from Low to High. Flags above the intervention threshold trigger mandatory human audit checkpoints to prevent automation bias.
Similarly, forces use algorithmic screening in safeguarding hubs. Domestic abuse logs are parsed by natural language processing algorithms that scan for risk terms (e.g. references to weapons, threats to life) to identify cases that require immediate specialist intervention.
9. ANPR & CCTV Intelligence: Vehicle Logs & Trackers
Automatic Number Plate Recognition (ANPR) is one of the most powerful intelligence tools available to UK policing. The National ANPR Service (NAS) ingests up to 60 million plate reads daily from fixed roadside cameras, mobile police vehicles, and regional checkpoints.
ANPR acts as both a real-time tactical tool and a retrospective investigation platform:
- Real-Time Watchlists: If a vehicle linked to a wanted person or an active organized crime target triggers a camera, the NAS flashes an alert to the local force control room, coordinating intercept teams.
- Retrospective Travel Maps: Detectives can query plate records to reconstruct the travel history of a vehicle before and after a crime, disproving false alibis.
- Co-Traveler Analysis: Algorithms identify vehicles that commute in tandem along highway corridors, mapping potential convoy movements.
These systems operate alongside public CCTV networks. Forces increasingly trial computer vision tools to filter large volumes of CCTV footage, searching for individuals based on apparel color or direction of travel, replacing manual viewing.
11. Inter-Force Intelligence Sharing and Collaboration
Because UK policing is divided into 43 independent forces, cross-border intelligence sharing is a constant operational challenge. Criminal networks exploit force boundaries, committing offences in one county while residing in another.
Forces bridge these gaps through three primary channels:
- The Police National Database (PND): Serving as the national link for soft logs, the PND allows local force intelligence databases to sync records, enabling search across local boundaries.
- Regional Organised Crime Units (ROCUs): ROCUs act as regional centers, coordinating intelligence on organized crime groups across multiple forces and linking to the National Crime Agency (NCA).
- Shared Software Consortia: By procuring shared Records Management Systems (such as Athena or Niche), adjacent forces integrate their local intelligence systems directly, allowing real-time searches.
12. Safeguarding & Vulnerability Systems: County Lines Data
Intelligence systems are not used solely for hunting suspects; they are also critical tools for safeguarding children and vulnerable adults. Vulnerability triage systems are designed to detect signs of exploitation:
- Missing Persons Logs: National databases track children reported missing from care homes, cross-referencing locations where they are found to identify patterns of systematic grooming.
- County Lines Triage: Systems analyze ANPR, custody records, and local logs to flag young people who are being exploited as drug couriers, transitioning them from suspect to victim status in the database.
- Multi-Agency Safeguarding Hubs (MASH): Multi-agency portals that link police records with social work, education, and health databases, providing a complete view of a child's risk profile.
13. Legal Powers, Privacy Laws, and Audits: DPA 2018 & PACE
All UK police intelligence systems must operate within strict legal boundaries. The primary legislative frameworks include:
Data Protection Act 2018 (Part 3)
Part 3 of the DPA 2018 governs the processing of personal data for law enforcement purposes. It mandates that forces must process data lawfully, fairly, and transparently. Every database entry must be limited to specific policing purposes, and forces must conduct Data Protection Impact Assessments (DPIAs) before deploying new tools.
Human Rights Act 1998 (Article 8)
Article 8 ECHR protects the right to respect for private and family life. Any intelligence gathering that interferes with this right—such as telephone analysis or covert tracking—must be necessary, proportionate, and authorized under law.
Independent Watchdogs & Audit Logs
To prevent abuse, every query in a police database is logged with the user's ID, terminal location, and purpose. The Information Commissioner's Office (ICO) and His Majesty's Inspectorate of Constabulary (HMICFRS) conduct regular inspections, and misuse of systems leads to immediate dismissal and criminal prosecution.
14. Privacy & Ethical Concerns: Bias and Feedback Loops
The integration of advanced data systems and AI in policing raises significant ethical concerns. Privacy advocates highlight several critical risks:
- Algorithmic Feedback Loops: If an analytical system is trained on historical arrest logs, it reflects past enforcement patterns. Directing patrols to those areas leads to more arrests, creating a feedback loop that reinforces over-policing of specific neighborhoods.
- Lack of Algorithmic Transparency: Many machine learning models operate as "black boxes," making it impossible for analysts or suspects to understand why they were flagged as high risk.
- Public Consent: Deploying technologies such as Live Facial Recognition in public places without clear consent challenges the principle of policing by consent.
Forces address these challenges by forming independent ethics panels to review proposals before deployment, seeking to balance operational needs with public trust.
15. Future AI Intelligence Systems: Real-Time Data & Ethics
The next generation of police intelligence systems is moving toward real-time data integration and automated triage. Emerging technologies include:
- Automated Case File Assembly: Using natural language models to compile suspect logs and draft case files for the Crown Prosecution Service (CPS), reducing officer administrative time.
- Smart Video Redaction: AI computer vision that automatically blurs bystander faces in bodycam videos, saving hours of manual editing before case files are disclosed.
- National Data Standards: Standardizing databases across all regional forces to enable real-time cloud collaboration, replacing the current siloed structures.
The National Police Chiefs' Council (NPCC) emphasizes that the future of these systems depends on developing clear ethical codes, ensuring that AI remains a tool to assist human decision-making rather than replacing human accountability.
16. Police Intelligence In Practice: 7 Operational Scenarios
How data systems, databases, and analyst units assist investigations in the real world:
1. Cross-Border County Lines Detection
When a vehicle registered in London triggers multiple ANPR cameras in a rural town within a short window, the system flags the anomalous travel pattern. Analysts cross-reference the vehicle with local drug intelligence logs, identifying a county lines transport pattern and authorizing roadside stops.
2. Safeguarding Vulnerable Missing Children
A teenager is reported missing. Analysts query the PND to search for their associates across adjacent force boundaries. The search reveals a local intelligence log in a neighboring force linking their name to a known exploitation address, guiding search teams directly to the property.
3. Multi-Agency Domestic Abuse Triage
Safeguarding hubs receive hundreds of domestic incident logs daily. An algorithmic triage tool parses variables like historical weapon mentions, escalating call frequencies, and custody records to highlight high-risk households, allowing social workers to prioritize immediate visits.
4. Digital Forensic Data reduction
Detectives investigating an organized crime group extract thousands of messages from a seized phone. An analytics tool uses entity resolution and network mapping to isolate the conversations matching high-priority drug keywords, reducing manual review hours from weeks to days.
5. Public Order Threat Assessment
Prior to a high-profile demonstration, OSINT analysts evaluate public social media posts. By mapping keywords and logistics plans, they generate a strategic assessment of potential crowd sizes and counter-protest mobilization, helping commanders plan police numbers.
6. Retrospective Crime Pattern Analysis
Following a series of commercial burglaries, analysts map the entry methods, times, and targeted items. The pattern matches a historical series, triggering a search of the local database for recently released offenders with matching profiles and guiding patrols to specific target boxes.
7. Informant Reliability Evaluation
A source provides information about a hidden firearm. Before deploying armed units, an intelligence officer enters the report into the 5x5x5 portal. The database flags the source's past rating as C (fairly reliable) and the info as 3 (uncorroborated), prompting a demand for physical surveillance verification.
17. Myth vs Reality: Clarifying Common Misconceptions
"Intelligence reports are admissible as direct evidence in a criminal trial."
Intelligence reports are soft information used to guide investigations. They are inadmissible as evidence. Convictions require hard evidence, such as physical items, forensic profiles, or direct witness statements.
"Police databases automatically flag individuals for arrest based on algorithm scores."
Under UK law, an arrest requires a human police officer to hold objective reasonable grounds for suspicion and satisfy local necessity criteria under PACE Code G. No automated score can authorize or execute an arrest.
"The PND and PNC are the same system and share all data in real time."
The PNC is a structured registry of formal arrest, conviction, and vehicle records. The PND is an unstructured system for soft intelligence files, logs, and notes. They are separate platforms with different search rules.
"Forces can monitor anyone's private social media accounts indefinitely without authorization."
Under RIPA guidelines, persistent or repeated monitoring of an individual's social media profile requires a directed surveillance authorization. Officers cannot bypass this by using fake profiles without approval.
"Predictive intelligence models can foresee exactly when a crime will happen."
Models only calculate statistical probabilities of geographic areas based on historical trends (hotspotting). They represent likelihoods, not certainties, and cannot foresee individual human intent.
"General intelligence sharing is exempt from all privacy and data laws."
All law enforcement data processing must comply with Part 3 of the Data Protection Act 2018. This mandates that every entry must be lawful, fair, transparent, and subject to regular review and deletion schedules.
18. Extensive FAQS & Quick Answers
Evidence is information that is legally admissible in a criminal court to prove or disprove a charge, complying with strict rules of disclosure under the CPIA 1996. Intelligence is evaluated information that guides police investigations and operations but is not directly admissible as proof of guilt.
The PND is a national IT system that allows UK police forces to share local intelligence records, custody photographs, child protection logs, and domestic abuse reports. It enables cross-force search capabilities to prevent offenders from exploiting force boundaries.
The PNC is a structured database containing official records of arrests, convictions, cautions, missing persons, and wanted status. The PND, by contrast, is a repository for unstructured intelligence logs, suspect cards, and soft information compiled by local forces.
The 5x5x5 model is a standardized grading system used by UK police to evaluate intelligence. It assesses three variables: source reliability (A to E), information validity (1 to 5), and dissemination sensitivity (1 to 5 or GOM codes), ensuring that data is used proportionately and safely.
Access is strictly restricted to vetted police officers, analysts, and specific law enforcement staff who require it for operational purposes. Every search is logged, audited, and must be justified under a specific crime reference number or operational code.
Data retention is governed by the Management of Police Information (MoPI) guidelines. Retention periods depend on the severity of the offence or risk profile, ranging from 6 years for minor incidents to 100 years for serious crimes, subject to periodic reviews.
You can submit a Subject Access Request (SAR) under the Data Protection Act 2018. However, police forces are legally permitted to withhold intelligence data if disclosing it would prejudice ongoing investigations, compromise sources, or reveal operational tactics.
The NIM is an operational framework that standardizes how UK police forces collect, analyze, and deploy intelligence. It defines three levels of operations—local, regional, and national—and structures the decision-making process for allocating resources.
Automatic Number Plate Recognition (ANPR) systems capture vehicle plate logs, timestamps, and locations. This data is fed into the National ANPR Service (NAS) to detect vehicles of interest in real time and reconstruct travel histories for retrospective investigations.
An Appropriate Adult is a safeguard for children and vulnerable adults detained in custody. They must be present during formal PACE interviews. While they do not oversee the internal databases, their presence ensures that any intelligence gathered during custody matches legal rules.
Forces share intelligence primarily through the PND, the PNC, and regional networks coordinated by Regional Organised Crime Units (ROCUs). They also utilize single points of contact (SPOCs) to route urgent inquiries to neighboring force intelligence bureaus.
A crime analyst parses structured and unstructured data to identify patterns, associations, and trends. They create intelligence products such as link charts, telephone network maps, hot-spot forecasts, and strategic assessments to assist commanders.
Monitoring public social media profiles is legal if it is relevant to a policing purpose. However, repeat or systematic monitoring of an individual's account constitutes surveillance and must be authorized under RIPA guidelines.
Yes, but this is highly regulated. Using fake profiles to interact with suspects or gather covert intelligence constitutes undercover policing. It requires high-level authorization as a Covert Human Intelligence Source (CHIS) under RIPA.
HART was a machine learning system trialled by Durham Constabulary. It used historical custody and offending records to classify individuals as low, medium, or high risk of reoffending to assist custody sergeants with rehabilitation diversion schemes.
The identity of a CHIS is protected under strict confidentiality guidelines. Their real name is never entered into standard databases. Instead, they are referred to by a unique code number, and access to their records is restricted to a dedicated handler unit.
A CHIS is an individual who establishes or maintains a personal relationship with a suspect to covertly obtain information and pass it to the police. Their recruitment, tasking, and safety are strictly governed by RIPA 2000.
The primary laws are the Data Protection Act 2018 (specifically Part 3), the UK General Data Protection Regulation (GDPR), the Human Rights Act 1998 (Article 8), and the Police and Criminal Evidence Act 1984 (PACE).
The Regulation of Investigatory Powers Act 2000 (RIPA) sets out the legal thresholds and authorization paths for covert surveillance, intercepting communications, and using undercover officers or informants, ensuring compliance with the Right to Privacy.
IPCO is an independent watchdog that oversees how public authorities, including police forces and intelligence agencies, use covert investigatory powers. They conduct regular inspections and audits to ensure compliance with the law.
Live interception of phone calls is an extraordinary power that requires a warrant signed by the Secretary of State (Home Secretary) and approved by a Judicial Commissioner under the Investigatory Powers Act 2016.
Police can request historical cell site location data from telecommunication operators to map a suspect's device to specific transmission towers during a crime, helping corroborate or challenge alibis under strict IPA authorizations.
Entity resolution is a data management technique that identifies when different records across multiple databases refer to the same real-world entity (e.g., matching a person named 'Jon Smyth' to 'John Smith' based on matching birthdates and addresses).
Analysts map relationships between burner phone call records, vehicle travel histories logged by ANPR cameras, and intelligence logs of local drug sales, revealing the communication links between city suppliers and rural markets.
ROCUs serve as regional hubs that bring together specialist capabilities (such as cybercrime units, surveillance teams, and technical analysts) to target organized crime groups that operate across multiple regional force boundaries.
Safeguarding teams query database history, domestic call logs, and multi-agency records to flag children or vulnerable adults who are showing markers of exploitation, county lines involvement, or home abuse, enabling preventative triage.
Algorithmic bias occurs when an analytical system produces discriminatory outputs because it was trained on historical data reflecting disproportionate enforcement patterns. This can lead to over-policing of specific areas or communities.
A feedback loop occurs when an algorithm directs patrols to an area based on historical arrests. The increased police presence leads to more arrests in that area, which are logged into the database, causing the algorithm to recommend even more patrols.
Yes. Some forces (such as the Metropolitan Police and South Wales Police) deploy Live Facial Recognition (LFR) cameras in public places to scan faces against watchlists of wanted offenders or missing persons, subject to local necessity thresholds.
The Court of Appeal (2020) ruled that South Wales Police's deployment of LFR was unlawful because the legal framework gave officers too much discretion over watchlists and location choices, and failed to conduct sufficient equality impact audits.
RFR is an investigative search tool. Officers upload clear images of unidentified suspects (e.g., from CCTV or mobile video) to a facial recognition system to search against a database of custody photographs, generating potential leads.
The Biometrics and Surveillance Camera Commissioner oversees compliance with the Surveillance Camera Code of Practice, ensuring that public surveillance cameras (CCTV, ANPR, LFR) are operated proportionately and transparently.
Under the Equality Act 2010, police forces must ensure that any new technology, database, or algorithm does not discriminate against protected groups. This requires forces to conduct formal equality impact assessments.
No. Under the Data Protection Act 2018, individuals are protected against solely automated decisions that have legal or significant effects. A human officer must review the system output and make the final decision.
Extracting data from a suspect's or witness's phone is regulated by the Police, Crime, Sentencing and Courts Act 2022. It requires voluntary consent or statutory powers, and must be strictly limited to data that is necessary for the investigation.
Ethics panels are independent advisory bodies composed of legal experts, academics, and community members. They review proposed uses of new technology (such as AI risk tools or biometrics) to advise chiefs on proportionality and consent.
No. Intelligence reports (such as a 5x5x5 log) are internal police documents. They are used to generate investigative leads but cannot be introduced as evidence. The prosecution must present the original source material or witness evidence.
Level 1 intelligence deals with local crime within a single force or command unit. Level 2 intelligence coordinates cross-border activity across a region. Level 3 intelligence targets national and international threats like terrorism.
Tips are received anonymously, stripped of metadata, and sent to the force intelligence bureau. Analysts cross-reference the details with existing databases. The tip is graded under the 5x5x5 system before any operational action is authorized.
The future centers on automated case file assembly, smart redacting of bodycam video, parsing digital evidence, and integrating regional databases into unified cloud networks, all subject to national data governance guidelines.
This document is designed as a neutral, plain-English reference explaining the technical, administrative, and legal boundaries of intelligence systems. It does not endorse or criticize any software vendor, private product, or policy framework. Implementation, database access rules, and audit frequencies vary by regional UK police force.
10. Open Source Intelligence & Social Media Analysis
Open Source Intelligence (OSINT) refers to the collection and analysis of information obtained from publicly accessible online platforms. UK police forces maintain dedicated OSINT desks to monitor public forums, mapping active threats to public safety.
This capability is used to monitor public order events, manage football crowd safety, and track online gang disputes. However, the legal threshold for social media monitoring is strict:
This ensures that online intelligence gathering does not breach Article 8 of the European Convention on Human Rights (ECHR) regarding the right to private life.