The Louisville Metro Police Department has spent nearly $140,000 in recent years on social media monitoring software that can track and compile data on a vast number of internet users.

Since 2014, the department has expanded the potential of this database, which can catalog up to 9.5 million social media postings and a limitless supply of individual profiles, according to a WFPL News investigation.

The department’s ability to surveil social media users comes with little oversight and no guiding policy, according to documents obtained through the Kentucky Open Records Act.

Department officials have declined multiple interview requests over the past two weeks. It remains unclear how LMPD uses this system, who they track and what becomes of their data.

To date, the department has provided virtually no detail about their relationship with SnapTrends, an Austin, Texas-based company that offers “location-based social insights” that provide a “the full story of every social conversation,” according to its website.

Police departments across the country spend thousands of taxpayer dollars to monitor local social media channels. The public agencies have said that monitoring Twitter and Facebook is now standard practice for law enforcement in the Internet Age.

But the mass surveillance of social media users raises concerns among privacy experts and civil liberty advocates.

“It undermines people’s speech and their associations when the entirety of their social media data is being analyzed by law enforcement,” said Jeramie Scott of the Electronic Privacy Information Center, a Washington, D.C.-based research group focused on emerging privacy and civil liberties issues.

In paying for the social media tracking service, LMPD also utilized an exemption in the city’s purchasing policy that allows an agency to forgo a typical competitive bidding process.

No Police Policy, No Public Discussion

The police department’s purchase of social media monitoring software in March 2014 came just days after a group of some 200 young people caused several acts of vandalism and violence downtown, starting at Waterfront Park.

A gas station was ransacked. Cars sitting at traffic lights were pummeled, and robberies were reported. Police said they received some 30 calls for assistance in the downtown area that night, which resulted in 17 police reports and at least 10 assaults, said Chief Steve Conrad in a briefing days later. Conrad called it “truly mob-like behavior.”

Mayor Greg Fischer quickly ordered the installation of $230,000 worth of high-definition cameras in and around Waterfront Park. Police racked up more than $1 million in overtime pay in the six weeks that followed, according to a report from The Courier-Journal. And via a state-of-the-art crime information center in downtown Louisville, police began monitoring cameras across the city.

Just over a week later, department officials made their first order for a subscription to SnapTrends. The service is employed by police departments, school districts and foreign governments.

Louisville police’s first SnapTrends purchase in 2014 gave seven users the ability to monitor and store more than three million postings. Since then, the department has continued to expand on the subscription service.

In all, LMPD has paid nearly $140,000 for the program. The most recent agreement allows 19 users to mine 9.5 million social media postings and create a limitless database of user profiles.

Conrad, the police chief, has publicly praised the push for other tech tools: more cameras, the opening of the crime information center and, more recently, the adoption of a gunshot detection system. But the proliferation of LMPD’s social media surveillance effort has flown under the radar.

There has been scant public discussion of the effort and no briefing to the Metro Council.

The department has issued no public report on the surveillance program, and LMPD’s transparency website provides no information about its use of SnapTrends.

Through a spokesman, the LMPD major in charge of the program declined an interview to discuss the department’s use of the software.

The police department also declined a records request seeking all archived social media postings from March 2014 to August 2016, as well as records of correspondence with SnapTrends. The department cited an exemption in Kentucky’s open records law that allows records to be withheld if their disclosure would expose a vulnerability in preventing or protecting against a terrorist act.

WFPL News has appealed that decision to the state’s attorney general.

Exemption Allowed LMPD Secrecy in Purchase of Monitoring Software

The four payments to SnapTrends from the Louisville Metro Police Department have ranged from $19,500 to $53,000, according to invoices obtained by WFPL News.

Louisville Metro government purchasing policy requires a contract for all purchases regardless of amount, according to an August 2016 internal audit of the city’s procurement policy. Purchases exceeding $20,000 are to be made using a Professional Service Contract, the audit states, which must be reviewed by the Metro Council.

Three LMPD payments to SnapTrends exceed that threshold, records show. Yet in response to an open records request, the police department said “no records exist” of a contract detailing the agreement.

Erica Allen, an administrator in the city’s office of management and budget, said the police department’s purchase is considered “a subscription” and thus exempt from such requirements.

City purchasing policy provides an exemption to “memberships, dues and purchase of periodicals in either paper or electronic format.” Exemptions exist when competitive bidding is not feasible or practical, the policy states.

Metro Councilman David James, chair of the council’s public safety committee and a former police officer, said that policy is vague.

“I don’t think we were thinking in terms of a subscription costing over $20,000,” he said. “Technology has gone beyond what our public policy is that we wrote, and so we need to go back and look at it and change it to adjust to 2016.”

Widespread Scrutiny of Social Media Monitoring

The surveillance of social media by law enforcement is under scrutiny across the country.

Some companies assisting law enforcement with conducting mass online surveillance are under fire for misusing social media data to help law enforcement track certain communities.

For instance, Geofeedia, a Chicago-based company, had its access to certain social media user data severed earlier this month by Facebook, Instagram and Twitter, after the ACLU reported it marketed its service as a way to monitor activists.

SnapTrends had its access cut by Twitter for similar reasons, according to a report from The Daily Dot.

A report from Bloomberg details SnapTrends use in the United Arab Emirates and Bangladesh, where the company provided Twitter data to a law enforcement agency classified by Human Rights Watch as a “death squad.”

The company did not respond to a request for comment.

Chris Burbank, director of law enforcement engagement for the Center for Policing Equity and a former police chief in Salt Lake City, said police are likely conducting social media surveillance regardless of whether they’ve purchased a subscription with a software company like SnapTrends.

“I only see it getting more significant,” he said.

But that doesn’t mean it’s inevitable, said Scott, national security counsel and director of the domestic surveillance project for the Electronic Privacy Information Center. He said individuals can push back against efforts to monitor their online lives, or at least help ensure such programs are justified.

“With any of these large-scale surveillance activities, social media monitoring including, it’s important transparency, oversight and accountability are implemented, and there are mechanisms in place that ensure there is not a disparate impact with the use of social media monitoring,” he said.

With no policy guiding the the Louisville police department’s surveillance of social media, it’s unclear just how they do it. No regulations dictate who they monitor, what they monitor or why.

And the department has provided no details on what justifies a profile or post being collected, how long the information is stored and who has access to the data.

The lack of oversight is “troubling” to the American Civil Liberties Union of Kentucky.

Widespread monitoring of social media by police can lead to the collection and storage of “innocent people’s personal data,” and how that data may be used is reason for concern, said Amber Duke, spokeswoman for the ACLU of Kentucky.

“Social media is, among other things, a driver for political conversation and activism,” she said. “Constitutionally protected speech shouldn’t make one a target for surveillance.”

James, the councilman, said he supports the police effort to keep watch on social media users.

“Public safety is the No. 1 responsibility of government, and this is just another tool in the toolbox,” he said.

James also said he doesn’t believe LMPD needs a policy to guide its surveillance effort.

“Why do you want to put more restrictions on the police than are on the general public? The general public can do the same thing,” he said. “They’re just looking at stuff that’s already out there.”

Walter Lamar, a former FBI agent and one-time senior adviser to the U.S. Department of the Interior’s office of law enforcement and security, said it’s difficult to argue against the need for a surveillance tool that can help law enforcement prevent crime or save a life.

“They’re just patrolling in a different venue, looking for criminal activity, looking for activity that might pose a threat or danger to the community,” said Lamar.

Burbank, of the Center for Policing Equity, said keeping the public out of such efforts can erode public trust in law enforcement.

“They have to write policy,” he said. “You can’t have a tool this strong and this powerful and this potentially invasive without some sort of policy.”