The overriding conclusion of the report is that the central database has a legal basis, but that the police failed to conform with data protection legislation in their investigations. The CNPD also highlighted that the police had 'disproportionately' accessed the database.
The commission deemed the police's use of the database as far too frequent and flagged this behaviour as a point requiring improvement. Further to that, the commission recommended that the police improve aspects pertaining to how long they keep data on citizens.
Finally, the CNPD recommended the police create a supervisory committee, which should meet in two weeks time.
