{"resourceId":"seattle-audit-oig-rtcc-federal-access-search-controls-20261007","versions":[{"version":"external-0ea8afa86fd006c13a9ae66287e29e5af94be7717a97d657e788258e60666135","resource":{"id":"seattle-audit-oig-rtcc-federal-access-search-controls-20261007","title":"Seattle auditor and OIG reports find undisclosed traffic-camera feeds in SPD's AI-enabled crime center, a federal data-rights clause, and no controls on proactive surveillance","organization":"Seattle Office of the City Auditor and Office of Inspector General for Public Safety (reported by The Urbanist)","sector":"Municipal policing / real-time crime center oversight","geography":"Seattle, Washington, United States","publishedAt":"Oct. 7, 2026","publicationDate":"2026-10-07","eventDate":null,"sourceName":"The Urbanist","sourceLabel":"The Urbanist analysis of Seattle auditor and OIG surveillance reports","sourceUrl":"https://www.theurbanist.org/recent-spd-surveillance-audits-highlight-overreach-vulnerabilities/","evidenceClass":"independent-reporting","outcomeClass":"cautionary","topics":["infrastructure","data-security","governance-procurement","operating-model"],"finding":"The Urbanist summarized two newly released city reports on the Seattle Police Department's real-time crime center, whose software uses AI to analyze CCTV, traffic-camera and other feeds. The auditor found traffic cameras not on SDOT's public map streaming into the center, more recordings created than under SDOT's manual practice, and an SDOT contract with AI vendor Derq that lets the federal government obtain data from federally funded projects. The Inspector General found private cameras joining from anywhere in the city via Connect Seattle without formal policy, weak control over private-camera masking and retention, delays masking SPD's own cameras, and no controls to prevent or monitor proactive surveillance by analysts, which policy prohibits. Before in-vehicle ALPR was suspended under state law SB 6002, officers failed to log a reason for 47% of 2025 searches, per an advocacy group citing the report. The Seattle Times count cited is 427 cameras streaming, including 23 private.","sledRelevance":"An internal-audit view of a live AI-enabled real-time crime center, showing where controls were missing after go-live; directly useful to agencies building similar centers.","evidence":"Independent local reporting summarizing two government reports (auditor and OIG) and adding advocacy quotes. The underlying reports were not opened tonight; specific figures (47%, 427 cameras) are attributed second-hand.","architectureImplications":"The center ingests SPD CCTV, SDOT traffic cameras and private cameras through Axon-supplied devices; scope control depends on camera lists, masking and analyst behavior rather than technical enforcement.","governanceImplications":"Policies existed on paper (no proactive surveillance, traffic cameras not for enforcement) without technical controls; SPD is discussing a search-justification requirement with Axon after more than a year live.","securityPrivacyImplications":"Federal data rights in a grant-funded AI traffic contract could expose footage to federal agencies, including immigration enforcement, beyond city facial-recognition limits.","caveats":"Secondary reporting from an outlet with an editorial stance; primary reports not opened; advocacy statements mixed with findings. Other outlets describe the OIG review as finding some safeguards working; this record relies on The Urbanist's account.","streamIds":["public-safety"],"roles":{"sales":"Sales framing: Seattle shows that a real-time crime center can pass a council vote and still lack basic controls a year later. Discovery should ask which feeds enter the center, what contracts govern each, whether policy limits are enforced technically and when the last audit occurred. A bounded engagement is a pre-expansion control assessment; do not claim these centers reduce crime or that Seattle's findings apply unchanged elsewhere.","engineering":"Engineering framing: the center combines police, traffic and private feeds with AI analysis, but scope depends on camera lists and analyst discipline. Engineers should maintain an authoritative feed inventory, enforce masking centrally, require a reason before footage views and log analyst activity. Contracts for grant-funded feeds need review for federal data rights. Proof should be a feed reconciliation and access-log analysis.","delivery":"Delivery framing: the department needs a feed inventory, written policy for private camera onboarding, technical search justification and a recurring audit. Ownership sits with SPD's real-time crime center, with SDOT for traffic feeds and the OIG for oversight. Risks include undisclosed feeds, federal data claims, masking backlogs and expansion before fixes land."},"roleDetails":{"sales":{"customerProblem":"Real-time crime centers integrate feeds faster than policies and technical controls are put in place.","stakeholders":["Police real-time crime center leadership","Transportation department","Office of Inspector General and city auditor","Mayor's office","Private camera owners"],"discoveryQuestions":["Is there an authoritative list of every feed entering the center?","Do any feed contracts grant federal data rights?","Are analyst views tied to a recorded reason?","How are private-camera masking and retention controlled?"],"valueHypothesis":"A control assessment before expansion can find feed, contract and access gaps that later audits otherwise surface publicly.","potentialEngagement":"Pre-expansion RTCC control assessment covering feed inventory, contract data rights, masking and access logging.","unsupportedClaims":["That RTCCs reduce violent crime","That federal agencies accessed Seattle data","That all OIG findings were negative","Specific figures not verified in primary reports"]},"engineering":{"fit":"Relevant to agencies operating or planning AI-enabled real-time crime centers with mixed public and private feeds.","architectureIntegration":"RTCC software ingests SPD CCTV, SDOT traffic cameras and private cameras via Axon devices, with AI analysis on streams.","prerequisites":["Feed inventory","Masking capability and technician capacity","Analyst access logging","Contract review of feed sources"],"constraints":["Washington SB 6002 ALPR restrictions","Federal data rights in grant-funded contracts","City facial-recognition prohibition","Private owners control camera orientation"],"security":"Enforce search justification before footage views, log analyst sessions, centrally manage masking and block unapproved feeds.","proofOfValue":["Reconcile live feeds against approved list","Sample analyst sessions for proactive surveillance","Review contracts for federal data clauses","Measure masking turnaround time"]},"delivery":{"work":"Close audit findings: reconcile feeds, codify private-camera onboarding, add search justification and set an audit cadence.","dependencies":["Axon configuration changes","SDOT cooperation","OIG follow-up","Mayor's decision on expansion"],"ownership":"SPD real-time crime center, with SDOT for traffic feeds and OIG oversight.","skillsAdoption":"Analysts need training on justification requirements; technicians need capacity for masking.","governanceCheckpoints":["Feed inventory sign-off","Private camera policy adoption","Search justification go-live","OIG follow-up review before expansion"],"acceptanceCriteria":["Proposed: zero unapproved feeds in monthly reconciliation","Proposed: 100% of footage views carry a recorded reason","Proposed: masking applied within a defined number of days of install","Proposed: federal data-rights clauses removed or disclosed"],"risks":["Expansion before fixes","Federal access via contract terms","Analyst drift to proactive surveillance","Private feeds outside policy"]}},"retrievedAt":"2026-10-08T02:56:08Z","enrichedAt":"2026-10-08T02:59:04Z","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Masking delays tied to technician availability show staffing limits on privacy controls.","procurementImplications":"Grant-funded technology contracts can carry federal data-rights clauses that conflict with city privacy commitments; review these before integrating feeds.","operatingModelImplications":"Mayor Wilson's paused expansion awaits a delayed NYU Policing Project audit; these reports add evidence to that decision.","sourceVerification":{"openedUrl":"https://www.theurbanist.org/recent-spd-surveillance-audits-highlight-overreach-vulnerabilities/","referenceExcerpt":"there are currently no controls in place to either prevent or monitor this behavior","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}