UKAS suspends a number of its customers each quarter. This proves it’s doing its job while limiting its financial losses.
The Guardian reports the story of one of them:
The Guardian has heard of further concerns from former staff who said that broken phones had been unsealed from evidence bags and sent to a consumer repair shop called Fone Fun Shop. On other occasions phones were sent abroad to be decrypted without the knowledge of the police, a former staff member said.
Sytech, based in Stoke-on-Trent, holds major contracts with more than a dozen police forces, and during a period when police spending on forensics science has fallen precipitously, it is one of the few companies to have expanded. However, concerns have been raised about the chain of custody of evidence entrusted to the company and the case raises broader questions about the outsourcing of forensic work to private labs.
“What made me report them to the forensic services regulator was because I couldn’t get it out of my head [that] any doubt in a case can get a case overturned or thrown out or even an appeal on a previous conviction,” the former Sytech analyst said.
A second former employee, who also did not wish to be named, said a police force, understood to be Greater Manchester police, raised concerns with Sytech last year after learning that phones had been sent abroad to be unlocked by the Israeli-founded, Japanese-owned company Cellebrite.
When asked to confirm this, Emily Burton, the head of forensic services at Greater Manchester police, said: “In October 2018, we became aware of potential issues with the data extraction service provided to us by an external digital forensics company. When this potential issue became apparent, we raised this with the national policing leads for forensics, immediately reviewed current investigations and made alternate arrangements for our data extraction needs whilst the matter was resolved.”
In an email, Sytech said the findings of the recent inspection by the UK Accreditation Service (UKAS) “make no reference to our handling of phones requiring pin-decryption”. Currently phones were not sent abroad, the company said, adding that all exhibits sent to external labs for unlocking were transported by a driver with police security clearance in a secure van.
Gillian Tully, the government’s forensic science regulator, declined to comment on specific concerns about Sytech. In general, she said, establishing a continuous chain of custody for evidence was a cornerstone of forensic science. “All organisations engaged in work for the criminal justice system should be well aware of those requirements and of adhering to them,” she said. “If the continuity can’t be established … it could compromise cases.”
Nick Baker, the national police lead on digital forensics and deputy chief constable of Staffordshire police, said his force had placed outsourcing to Sytech temporarily on hold while a risk assessment was carried out. “We’re going through a process of understanding what the issues are and understanding what our own exposure and risk is and obviously [we’ll] make a decision based on that,” he said.
It said the company completed “internal authentication of staff” and arranged for the police online application to be completed immediately when staff joined the company. “All new employees go through a period of training and strict supervision during their probationary period,” Sytech said.
As seen previously with Randox Testing Services, UKAS weren’t quick to spot they’d been accrediting services that fell short of the standards they claim to enforce.
Ergo, “takes one to know one” is disproved.