Oversight, scrutiny and review workstream report

Appendix 1 – Internal and external governance bodies

Internal bodies

Data-driven technology Oversight group - This will be a 'project level', advisory group involved throughout the lifecycle of a project. It will provide input, oversight and challenge specifically on proposed data-driven projects6. The Group will comprise internal Police Scotland data analysts, data scientists, the Chief Data Officer, the Data Protection Officer, the legal advisor, and leads in the Professional Standards Unit.

Digital ad Data Design Authority - The Authority will be an advisory group, responsible for supporting and reviewing ideas for data-driven projects at the 'Design' stage of a project, and providing a foundation for responsible innovation. It will provide an internal forum for experimentation and testing in a controlled environment.

Existing Internal groups - These groups will work alongside the relevant governance bodies that already exist including the Data Governance Board, the Strategic Design Authority and groups like the Cyber Resilience and Digital Capability Board and Biometrics Oversight Board.

External bodies

Independent Data Ethics Group - The Group should be advisory, not a decision-making body, however the advice should be sought before decisions are made. In setting up a Group, Police Scotland should carefully consider its function and ways of working. The Group will need to operate independently from Police Scotland and with the right structures in place to support and enable it to be challenging and effective. A ToR will need to be carefully considered to ensure that the Group has the greatest possible impact and to determine how Police Scotland will feedback to the Group.