- BP1. Operate in accordance with ethical principles
- BP2. Operate in accordance with the principle of data minimisation
- BP3. Ensure the collection effort is properly documented
- BP4. Use specific and neutrally descriptive terminology
- BP5. Consider privacy by undertaking regular necessity and proportionality assessments
- BP6. Prepare a plan for the collection, processing, and transfer of audio data files
- BP7. Consider the feasibility and desirability of establishing cooperation with relevant state authorities and or non-state entities
- BP8. Assess the collection effort’s tools and techniques for possible impact to the integrity of the collected data
- BP9. Request the original copy and metadata of any audio data received from a third party source, if practicable
- BP10. Treat potentially exculpatory and inculpatory data equally
- BP11. Organise audio data to ensure it is findable, verifiable, and reviewable
- BP12. Consider transcribing and, if necessary, translating any audio data that contains voice
- BP13. Assess the relevance of the audio data
- BP14. Preserve the relevant audio data and its metadata
- BP15. Only make enhancements to a duplicate copy after securely preserving the original copy
- BP16. Delete any audio data that is deemed irrelevant
- BP17. Add associated metadata to all relevant audio data files
- BP18. Safeguard the integrity of any relevant audio data that undergoes file size compression
- BP19. Use encrypted communication channels with third parties
- BP20. Conduct a curated risk assessment before transferring audio data to a third party
- BP21. Obtain the consent of the data subjects prior to audio data transfer, if practicable
- BP22. Enter into a data transfer agreement with relevant third parties prior to transferring audio data
- BP23. If necessary, redact the duplicate audio data and its metadata before sharing
- BP24. Collect information that contextualises the downloaded data
- BP25. Do no harm when data scraping
- BP26. Programme the data scraping tool with data minimisation in mind
- BP27. Consider the feasibility of notifying the data subjects whose data was collected through scraping
- BP28. Place radio interception equipment in areas that pose minimal risk to the civilian population
- BP29. Demodulate radio signals that may contain relevant information