{"resourceId":"portland-police-copilot-planning-despite-city-ban-cjis-risk-20261028","versions":[{"version":"external-76a79ce4223be5374be9786e26020d117597fbc53e08ecec3d4dcd1d514bed82","resource":{"id":"portland-police-copilot-planning-despite-city-ban-cjis-risk-20261028","title":"Records show Portland police and city tech staff held at least eight meetings planning Microsoft Copilot use despite the city rule that excludes the Police Bureau, while flagging CJIS audit risk","organization":"Portland Police Bureau / Portland Bureau of Technology Services","sector":"Policing / generative AI for administrative and analytical work","geography":"Portland, Oregon, United States","publishedAt":"Street Roots, Oct. 28, 2026","publicationDate":"2026-10-28","eventDate":"2026-10-28","sourceName":"Street Roots","sourceLabel":"Portland police are banned from using AI. They’ve planned to use it anyway.","sourceUrl":"https://www.streetroots.org/news-stories/2026/10/28/portland-police-are-banned-from-using-ai-theyve-planned-to-use-it-anyway/","evidenceClass":"independent-reporting","outcomeClass":"cautionary","topics":["data-security","governance-procurement","knowledge-work"],"finding":"Street Roots reports, from unredacted meeting records obtained through a public records request, that Portland Police Bureau (PPB), Bureau of Technology Services (BTS) and other city tech staff held at least eight meetings between May and September 2026 about using Microsoft Copilot Chat, although the city’s April 2026 approval of Copilot covered only employees outside the Police Bureau. An August record says “Copilot at Police is feasible” and plans to “pilot, test and validate” it, with more than 1,000 PPB users possible and BTS planning to fund the first full year. Participants flagged risks of “Failing a CJIS Audit” and “Exposing CJIS to AI”, noted “all users at Police have access to CJI”, and wrote that Microsoft documentation was vague about what is sent to Bing. Oregon State Police told the paper that AI systems must not interface with CJIS environments and no criminal justice information may be included in prompts, outputs or training data. PPB says the work is a discovery phase and deployment remains contingent on city and CJIS requirements; there is no PPB-specific Copilot policy. Because the work was not called an official pilot, PPB’s tech-trial directive, open for public comment through Oct. 31, never applied.","sledRelevance":"Shows how general-purpose office AI reaches police through enterprise licensing, and why criminal justice information rules, not the city AI policy alone, decide whether it can be used.","evidence":"Opened the Street Roots article and read it in full; quoted meeting-record phrases and agency statements are as reported; the underlying records and Portland’s Copilot privacy impact assessment were not separately opened.","architectureImplications":"Copilot sits inside the city’s Microsoft 365 tenant ($4 million a year, authorized through 2027); staff were assessing which Microsoft security tier and data flows (including Bing web queries) would be needed to meet CJIS requirements.","governanceImplications":"The city AI rule lets the city administrator inspect and stop AI use; no council agenda item has addressed lifting the police exclusion; PPB’s own Equipment Authorization Directive lets PPB approve its own tech pilots and does not reference the City Data and Privacy Office.","securityPrivacyImplications":"Oregon guidance bars any CJI in AI prompts, outputs, training or workflows; every PPB user has CJI access, so separation would have to be technical, not role-based. The 2025 city privacy assessment found 48 risks for non-police use alone.","caveats":"Single investigative news report; meeting-record quotes are as reported; no deployment has occurred; PPB and BTS say they will follow state and federal CJIS policy and that some uses would not involve CJI. The article does not show any CJI was exposed.","streamIds":["public-safety"],"roles":{"sales":"Sales framing: Portland shows police departments wanting the same office AI the rest of the city already has, and being stopped by criminal justice information rules rather than by the city AI policy. The buyer problem is proving that a deployment can keep CJI out of prompts and outputs before anyone pilots it. A bounded engagement could map one agency’s Microsoft 365 data flows against CJIS policy. The evidence does not support claims that Copilot saves police time or can be made CJIS-compliant.","engineering":"Engineering framing: the technical question is data separation. Every Portland police user can reach CJI, and Oregon says no CJI may enter AI prompts, outputs or workflows, so role-based access alone will not work. Pre-sales should ask which tenant and cloud tier would host Copilot, what leaves it for web grounding, and how sensitivity labels block CJI. A proof of value would test whether labelled CJI documents can be surfaced by the assistant. Microsoft documentation was described as vague on Bing data flows.","delivery":"Delivery framing: the work is governance before configuration: name the approval path, the data boundary and the audit evidence before any trial. The operational owner is the bureau’s technology lead with the city data and privacy office, reporting to the city administrator. Acceptance criteria are proposals: zero CJI in sampled prompts and outputs, a written police-specific use policy, and council or administrator sign-off. Risks include discovery work drifting into use without a formal pilot, and staff using unsanctioned tools meanwhile."},"roleDetails":{"sales":{"customerProblem":"A police bureau wants office AI efficiencies but cannot show that criminal justice information stays out of an enterprise assistant every user can reach.","stakeholders":["Police bureau leadership","City Bureau of Technology Services","City Data and Privacy Office","State CJIS Systems Officer","City administrator and council"],"discoveryQuestions":["Which users and repositories hold CJI, and can they be technically excluded from the assistant?","What data leaves the tenant for web grounding?","Which approval process applies to discovery work before a formal pilot?","What does the state CJIS officer require in writing?"],"valueHypothesis":"Interpretation: a documented data-boundary assessment could let an agency decide on bounded non-CJI uses without risking a CJIS audit finding.","potentialEngagement":"A CJIS data-flow and governance assessment for one agency’s enterprise AI assistant.","unsupportedClaims":["That Copilot saves police time","That any configuration is CJIS-compliant","That PPB has exposed CJI"]},"engineering":{"fit":"Relevant to any agency whose city already licenses Microsoft 365 with Copilot.","architectureIntegration":"Assistant inside the city Microsoft 365 tenant; web grounding via Bing; CJI repositories must be excluded by labels, permissions or separate environments.","prerequisites":["Inventory of CJI locations","Sensitivity labelling","Written CJIS officer position","Police-specific use policy"],"constraints":["Oregon bars CJI in any AI workflow","City approval excludes the Police Bureau","Annual triennial state CJIS audits"],"security":"Block CJI from prompts and retrieval, log all assistant use, and document what leaves the tenant.","proofOfValue":["Test whether labelled CJI can be retrieved by the assistant","Capture and review outbound web-grounding queries","Audit-log sample review against policy"]},"delivery":{"work":"Establish the approval path, data boundary and audit evidence before any trial.","dependencies":["City Data and Privacy Office","State CJIS officer","Microsoft documentation on data handling"],"ownership":"Police bureau technology lead with the City Data and Privacy Office","skillsAdoption":"Training on permitted non-CJI uses and on spotting outdated or inaccurate outputs.","governanceCheckpoints":["Administrator or council decision on lifting the exclusion","Privacy impact assessment for police use","Pre-pilot CJIS review"],"acceptanceCriteria":["Zero CJI found in sampled prompts and outputs (proposed)","Written police-specific policy before pilot (proposed)","Formal sign-off recorded before any user access (proposed)"],"risks":["Discovery drifting into use outside the pilot process","Shadow AI use continuing meanwhile","CJIS audit finding"]}},"retrievedAt":"2026-10-29T02:51:38Z","enrichedAt":"2026-10-29T02:57:15Z","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"PPB cites staffing shortages and steady or rising workloads as the reason to explore efficiencies; records note users “will likely use it however they can”, a shadow-AI risk.","procurementImplications":"Bundled AI in an existing enterprise license can bypass the usual surveillance-technology or pilot approval path; BTS planned to fund year one.","operatingModelImplications":"Discovery work happened outside both the formal pilot process and council review, so the governance trigger depends on what the work is labelled.","sourceVerification":{"openedUrl":"https://www.streetroots.org/news-stories/2026/10/28/portland-police-are-banned-from-using-ai-theyve-planned-to-use-it-anyway/","referenceExcerpt":"Records show more than 1,000 users inside PPB could eventually use the tool if implemented.","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}