Call for backup! —

Judge shocked to learn NYPD’s evidence database has no backup [Updated]

City says cash forfeitures not in flagship PETS system; police say PETS backed up.

Judge shocked to learn NYPD’s evidence database has no backup [Updated]

As part of an ongoing legal battle to get the New York City Police Department to track money police have grabbed in cash forfeitures, an attorney for the city told a Manhattan judge on October 17 that part of the reason the NYPD can't comply with such requests is that the department's evidence database has no backup. If the database servers that power NYPD's Property and Evidence Tracking System (PETS)—designed and installed by Capgemini under a $25.5 million contract between 2009 and 2012—were to fail, all data on stored evidence would simply cease to exist.

Courthouse News reported that Manhattan Supreme Court judge Arlene Bluth responded repeatedly to the city's attorney with the same phrase: “That’s insane.”

Last year, NYPD’s Assistant Deputy Commissioner Robert Messner told the City Council's public safety committee that “attempts to perform the types of searches envisioned in the bill will lead to system crashes and significant delays during the intake and release process.” The claim was key to the department’s refusal to provide the data accounting for the approximately $6 million seized in cash and property every year. As of 2013, according to the nonprofit group Bronx Defenders, the NYPD was carrying a balance sheet of more than $68 million in cash seized.

City attorney Neil Giovanatti continued that line of argument. He claimed that the NYPD doesn’t have the technical capability to pull an audit report from its forfeiture database—because the system wasn’t designed to do that.

But an expert witness for Bronx Defenders, which is suing for access to the data, undercut claims that the system could not produce a report on the cash. Robert Pesner, former chief enterprise architect for New York City’s Department of Housing Preservation and Development, told the court, “Based on the information I have reviewed about the technical specifications of PETS’s hardware and software, it is my opinion that it is technologically feasible to retrieve much of the data sought from PETS by running queries directly on the underlying [IBM] DB2 database.”

When it was activated in 2012, Capgemini vaunted PETS—which was built using SAP’s enterprise resource planning (ERP) software platform as well as IBM DB2 databases—as a flagship public sector project. The company went as far as submitting PETS as a nominee for the 2012 Computerworld Honors awards. But the system was apparently designed without any sort of data warehouse to perform analytics on the data.

When told by Giovanatti that the police department’s IT department did not keep backups and only knew that the database “is in IBM," Judge Bluth responded, “Do you want the Daily News to be reporting that you have no copy of the data?... That deserves an exposé in the New York Times.”

Update, 1:10 PM ET 10/19/2017:

Ars received the following statement from Meryl Holt, Assistant Corporation Counsel for New York City's Law Department, attempting to clarify Giovanatti's statement:

Neil tells me our whole argument is that the NYPD's database is not an IBM database so he definitely didn't say that NYPD personnel said "the database is in IBM." He says he was referring the Petitioner's expert, not any NYPD personnel. The "He" would be Robert Pesner, the Petitioner's expert, not NYPD personnel.

So, to clarify, it's the contention of the city that the system architecture spelled out by Pesner (and by Capgemini in various descriptions of the project) does not describe how data on cash forfeitures is stored. But there's still no backup of the data.

Update, 3:15 PM ET 10/19/2017:

In a statement e-mailed to Ars, NYPD Deputy Commissioner Stephen Davis made it clear that PETS itself is backed up:

Contrary to some published reports suggesting that NYPD does not electronically back up the data in its Property and Evidence Tracking System (PETS), all such data is backed up continuously in multiple data centers.

That would be consistent with the architecture described by Capgemini. But those backups are live versions of the database, based on the affadavit submitted by the city in this case.

Davis did not expound on how this connected with the statements in court that no backups were kept of cash forfeiture data—other than that data residing in a separate system from PETS entirely. Ars reached out for further clarification, but was told by a NYPD public relations officer that further information could not be provided because of ongoing litigation.

 

 

 

 

 

Channel Ars Technica