Data has become the lifeblood of modern policing. Every call, every incident, every piece of digital evidence — from CCTV footage to mobile phone downloads — generates more data that has to be stored, accessed, shared, and ultimately disposed of correctly.
The scale of it is staggering. Forces now hold petabytes of digital evidence across multiple systems — from case management platforms and body-worn video to forensic tools and shared drives that have been around for years. And while the amount of data has exploded, the ability to manage it effectively hasn’t always kept pace.
"Data has to be kept only for as long as it’s relevant..."
Police and Criminal Evidence Act (PACE) & Police Information (MOPI)
Keep Everything or Delete the Wrong Thing
The Police and Criminal Evidence Act (PACE), sentencing guidelines, and the Management of Police Information (MOPI) rules are clear: data has to be kept only for as long as it’s relevant, and disposed of when it’s not – That sounds straightforward on paper. In reality, it’s anything but.
Forces face a constant tension between operational necessity and compliance risk. Keep too much data, and you increase cost, complexity, and legal exposure. Delete too soon, and you risk losing evidence that could secure a conviction or support an appeal.
It’s even harder when data is scattered across dozens of systems — some cloud-based, some legacy, some that no one quite owns anymore. Add to that the challenge of handling material linked to falsely accused individuals, and the problem becomes as much ethical as technical.
Why It’s Not Just About Storage
Many forces are trying to tackle the data management issue through technology — better storage, cheaper cloud, or data lake strategies. Those are important steps, but technology alone won’t fix the problem.
Data management is as much about people and process as it is about platforms. You can have the most sophisticated system in the world, but if users don’t understand what should be retained, how long for, or where it should go, it won’t matter.
Clear governance, accountability, and training are just as important as the tech. Data ownership must be defined. Roles need to be clear. And policies have to be practical — not buried in documents no one reads, but embedded in day-to-day operations.
Technology Still Has a Role to Play
That said, technology can make compliance simpler — and safer.
Modern data management and archiving tools can automate retention policies, flag records for review, and enforce deletion when required. Metadata and classification systems can identify sensitive material, link related data, and prevent duplication. AI-assisted analytics can even help surface forgotten data that should be retained or removed.
Hybrid cloud also plays an important role. It offers scalable storage and improved resilience but, critically, enables centralised control and visibility across multiple data sources.
However, these technologies only deliver value when implemented as part of a broader, governed approach — where information management, digital forensics, and IT strategy all align.
The Risk of Doing Nothing
Ignoring the issue isn’t an option.
Retaining everything “just in case” may feel safer in the short term, but it creates long-term risk. It increases storage costs, weakens control, and makes compliance audits harder. Worse still, it undermines public trust — especially when data about individuals who were never charged or were wrongly accused remains in circulation.
Poor data management doesn’t just waste resources; it damages confidence in policing.
Taking a Structured Approach
Forces that are serious about fixing the problem need to take a structured, end-to-end approach to data management:
- Understand what data you have, where it is, and why it’s being kept.
- Align retention and deletion to MOPI and sentencing rules.
- Introduce systems that can enforce policy and automate compliance.
- Make someone responsible for oversight and reporting.
- Create awareness across the organisation that data is an asset — and a risk if mishandled.
At dstilld technologies, we often find that the hardest part isn’t technology design — it’s joining up policy, process, and behaviour so that technology delivers the intended outcomes.
Let's Talk
Digital data management in policing is no longer just a back-office issue. It sits at the heart of public confidence, operational integrity, and compliance.
At dstilld technologies, we help police forces and regulated organisations build data management strategies that balance operational need, compliance, and cost. From assessing current environments to designing policy-aligned solutions, we help forces regain control of their data and reduce risk.
👉 If your force is struggling with data growth, retention, or deletion, let’s talk. We can help you take a structured, practical approach to managing digital evidence and information safely, securely, and in line with MOPI and sentencing rules.