Any data that is considered criminal justice information, or CJI. In many cases this is very clear and well-defined such as data contained in a records management system or a facial recognition gallery made up of mugshots and the related criminal history. But, some forms of data such as license plate reader (LPR) data, the lines are not as clear. It is generally accepted that LPR detection data is NOT CJI as it is anonymous in nature (it is only the alphanumerics of the plate, time/date, and location). There is no personal information or case information contained in an LPR detection. But, LPR hotlist data, depending on the source, MAY contain CJI. It is because of this possibility that many agencies desire that their LPR solution is in compliance with FBI-CJIS Security Policy.
To what types of data does the FBI-CJIS Security Policy apply? Does this differ for hosted solutions?
Any data that is considered criminal justice information, or CJI. In many cases this is very clear and well-defined such as data contained in a records management system or a facial recognition gallery made up of mugshots...