Skip to content
Submit incident
AII-1002-42811
ReportedReported by fewer than three independent publishers, with no official finding.

Bavarian Police AI Platform VeRA Ready for Deployment but Not Yet Used

Bavaria's police announced that VeRA, a controversial artificial intelligence-powered platform from Palantir designed to search and analyse millions of police records, was operationally ready but awaited deployment pending statutory review by the state data protection officer. Critics expressed concerns about data sharing with the US vendor and risks to privacy protections.

21 August 2024 · Palantir · Privacy and surveillance
21 August 2024
AII-1002-42811View source ↗

What happened

Approximately one month after the Bavarian Parliament passed necessary legislation in July 2024, the controversial police analysis software VeRA from US vendor Palantir remained operationally ready but not yet deployed.

The Bavarian State Data Protection Officer must be given six weeks to provide an opinion before first use, as mandated by the Polizeiaufgabengesetz (PAG). The State Criminal Police Office (LKA) stated this waiting period was still being observed.

Reported impact

VeRA is designed to access millions of data records across all Bavarian police databases to search and analyse information about serious crimes including organised drug trafficking, telephone fraud gangs, terrorism, sexual offences and child pornography.

Critics raised concerns that data could flow to the United States through the vendor Palantir, though source code review found no hidden backdoors. Data protection advocates, including Bavaria's chief data protection officer Thomas Petri, objected to the system's access to police data collected for different purposes, citing risks to the principle of purpose limitation.

Index analysis

The SPD faction in the Bavarian Parliament considered legal action before the state constitutional court. Green Party digital spokesperson Benjamin Adjei urged the interior ministry not only to wait for Petri's statement before deployment but also to take his criticism of the programme seriously.

Governance controls

The PAG requires the state data protection officer to be given six weeks for a statement before first use. An emergency exception exists if danger is imminent, but the LKA reported this threshold had not been met as of August 2024.

Classification

Category
Privacy and surveillance
Industry
Government, security and defence
Country
Germany
Harm status
Potential harm
Intent
Unintentional
Timing
Pre-deployment
Harm types
Public interest
Harmed
General public
Consequences
Legislative action
AI systems
VeRA (Verfahrensübergreifende Recherche- und Analyseplattform)
Regulations
GDPR (cited)

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

N-tv
Bayern: Neue Polizei-Software in Bayern bisher nicht im Einsatz
21 August 2024