Surveillance Technology Policy and Data Governance in City of Syracuse

Surveillance Technology Policy and Data Governance 2021 Surveillance Technology Working Group Meeting #12 10.19.2021 1 CITY OF SYRACUSE

Surveillance Technology Policy and Data Governance 2021 Agenda Flock Safety documentation and vendor responses Public comment period Questions 2 CITY OF SYRACUSE

Surveillance Technology Policy and Data Governance 2021 New Requests Proof of Concept Demonstration? Technology Implementation? Exempt? X Applicant name: SPD Company: Flock Safety Sponsoring Department: Syracuse Police Department Application Date: 10/04/21 Partner Organization/Technologies: Flock Safety Technology Purpose: Street cameras that capture still photos and also vehicle license plates to add police with investigations and apprehension of suspect after criminal activity has occurred. Operation/Implementation description: The technology will be installed on free- standing poles on city streets or in overlays of currently existing cops cameras. Locations were chosen consulting analysts and officers. 57 locations were pinpointed, covering the entire City. Pilot will run for 90 days. Intended Operation: The technology will be permanently installed and will operate continuously. This technology will assist the Syracuse Police Department in its mission to make the city safer by improving their ability to more swiftly and effectively investigate criminal activity, as well as, apprehend those committing the crimes. Maintainability/Scalability/Reliability/ Vulnerabilities: Who is the audience for this system?: Training detectives (SPOs watch cameras) - not every officer. Data Management Plan: The data will be collected and stored by Flock Safety and retained for one month and will be destroyed with and auto override. SPD will be responsible for ensuring compliance. Cybersecurity Plan: Audit trails and passwords that track what data is pulled How many units/how is the system deployed?: 75 cameras on on-off ramps, to assist on investigations Broader Impacts/Unintended Consequences/Concerns: Retention follows standards set by the New York State Educational Law. Volume, size and type of data: Images, size TBD Cloud vs on prem: Cloud-based server (evidence.com) Length of time application is expected to be used: Indefinitely 5

Surveillance Technology Policy and Data Governance 2021 New Requests Outstanding Questions on Flock Safety: Q: What cyber and security standards do they apply to both accessing the data but also in transit? A: The attached End to End Data Security document provides a deeper look at how data is handled by Flock Safety. Q: Do they perform PIN test s i.e. penetration tests, and if so is it done by a third party? A: We conduct weekly scanning of our AWS environments with a third-party to identify any security gaps, or misconfigurations. In addition, we have extensive logging capabilities enabled for all systems. Flock Safety also participates in annual penetration testing, and an ongoing bug bounty program. Q: Where do the servers physically reside? A: Flock Safety utilizes AWS. The servers are in the US-East-1 region. Q: What is the data retention policy? And how are aged and/or disposed of records treated? A: Customer footage is maintained for 30 days and is then automatically deleted based on our data retention rules. 6

Surveillance Technology Policy and Data Governance 2021 New Requests Attached documentation COPs Camera Policy Body Worn Cameras Retention Schedule (this translates to COPs Cameras when applied to evidence) 7

Surveillance Technology Policy and Data Governance 2021 Public Comment Period Link to press release: Public comment period will be open until Tuesday November 2nd Please share! 8 CITY OF SYRACUSE

Surveillance Technology Policy and Data Governance 2021 Questions ? 9 CITY OF SYRACUSE