Police reconnaissance records (ASP): criticism, gypsies and what is meant by Z-register

The Police General Reconnaissance Register, ASP, is one of the records most often cited when the issue of ethnic profiling and the police's history with Roma comes up. In March 2014, Publikt och Sveriges Radio published news that the Swedish Data Inspectorate had found groupings such as gypsies and itinerants in the register. In the same week, the White Paper on the situation of Roma in Sweden was presented. It was not the first time police records raised questions, but 2014 became a distinct year in which national oversight, media and civil society came together in the same debate.

This article follows the register over time: from the manual reconnaissance protocols of the 1970s to computerization, law reform in 2010, Skånepolisen's surveys 2009—2013 and IMY's (then Datainspektionen's) decision. We also explain what is meant by “Z-register”, an expression that circulates in the debate but does not exist in the text of the law. The text is scrutinizing and is based on public sources, not legal advice on an individual case.

From Manual Protocols to National ASP

Reconnaissance records have been around longer than today's database. During the 1970s, reconnaissance duties were part of the day-to-day work of the police in following suspects and crime patterns. In 1979, the manual registers of the National Police Board and local police departments were replaced by an ADB-based general reconnaissance register. It was the starting point for the system that later came to be known as ASP internally with

the police.

As early as the 1980s, there were political concerns about how widely the register could be used. In the parliamentary motion Polisens reconnaissance register (1983/ 84:2178), Marie-Ann Johansson and others pointed out that the police had extensive registration powers and called for sharper legislation so that citizens would not end up on the register without a factual basis. That discussion shows that the privacy issue did not begin in 2014, but followed the registry

type for several decades.

ASP as we know it today is regulated in law (2010:362), which came into force in conjunction with the major police data legislation in 2010. The law would provide a clearer framework for what data is allowed to be processed, how long it is allowed to remain and who is allowed to search. Nevertheless, the regulator has described the register as particularly sensitive to privacy, partly because the threshold for registration is low and because even people who are not suspects can be

entered.

What ASP contains and who reaches it

ASP collects personal data that has come to light in the police's law enforcement activities: names, social security numbers, criminal records, surveillance notices, connections between persons, and sometimes so-called groupings used to sort or search the material. A registration in ASP is not a judgment. Nevertheless, it may have significance for a long time, since many government agencies and thousands of executives may have access.

The Data Inspectorate's audit in 2014 contained data on approximately 100,000 suspicious persons, plus an unknown larger number registered as non-suspects (so-called bystanders). Publicly stated that approximately 26,000 users were authorized to take part in the register, at the National Police Agency, the police regions, the Swedish Environmental Crime Agency, the Customs Service and the Coast Guard. About 2,000 were authorized to register new data

.

The wide access was part of the criticism. When a register is both easy to fill and easy to search for tens of thousands of users, there is an increased risk that erroneous entries will spread and that data that should have been deleted will remain

.

Skåne 2009-2013: mapping before the national storm

The debates in 2014 cannot be understood without what happened in Skåne the year before. In September 2013, Dagens Nyheter published a series of articles stating that the Police Authority in Skåne had data collections of more than 4,000 people, a larger number of whom could be assumed to be Roma. It was about criminal intelligence operations, not about the same technical system as ASP as a whole, but about the same kind of issues: kinship, ethnicity

and records that grow without clear thinning.

The JO later reviewed the liability in case JO No 5205-2013. The County-wide Crime Survey had been decided in 2009 and extended several times. Within it, folders emerged with names such as Conflict, Staffanstorp, Romer and Kringresande. The JO described that lack of thinning over time built up a “more or less permanent genealogical record” concerning a large number of persons of Roma origin, and that the collections had in practice acquired the character of a register of ethnic affiliation

.

In parallel, the Security and Privacy Protection Board examined the Kringresande data collection. The Chancellor of Justice later agreed and found that the data subjects could be entitled to damages of SEK 5,000 for infringement (JK no. 1441-14). The Discrimination Ombudsman investigated whether ethnic profiling existed and could not rule it out. The criminal investigation was dropped citing systemic failures, but the JO directed serious criticism at the

police leadership in Skåne.

When the Danish Data Inspectorate in March 2014 examined the national ASP, the events in Skåne were thus fresh in the memory. Many experienced that the same pattern was found in a register that reached the whole country

.

March 27, 2014: six injunctions against the National Police Agency

The

Swedish Data Inspectorate had inspected ASP at the National Police Agency on four occasions. The result was six injunctions and three recommendations. Director General Kristina Svahn Starrsjö stressed that the register is particularly sensitive to privacy precisely because the requirements for registering are low and because even non-suspects can be

entered.

Among the measures called for by the authority were:

• Procedures so that only data of special importance for reconnaissance are recorded.
• Removal of data on persons who have been acquitted or where charges have been dropped (DI pointed out that such data were often left behind at that time).
• Modification of the IT system so that protected personal data is not displayed in plain text without active action by the user.
• End of grouping names containing sensitive personal data, and review of the Kringerresande and Kringfaring groupings so that they do not allow searching by ethnicity.
• Continuous records maintenance, with a deadline of September 1, 2014 to clear listings with no reconnaissance value, and accounting by September 15, 2014.

Audit manager Nicklas Hjertonsson (sometimes Hjertesson in the media) told Ekot that the police had failed in the continuous control that should take place on a register with so many users. The police response, via Superintendent Per Blomqvist, was that concepts such as itinerant referred to mobile crime rather than a crowd, and that some older labels could stem from when the registry was built in 1989. The Danish Data Protection Authority did not accept that the explanation in itself solved the problem

of searchability on sensitive categories.

Groups, notifications and keywords that aroused anger

In random samples, the supervision found that it was possible to search for groupings and words such as evaders, itinerants, gypsies, Roma and racists. Publicly and SR reported about more than 1,000 alerts related to itinerants and the like. Examples that were cited in media and decisions:

Grouping: Circumvention
Note: Six zig families camped at the site. Meanwhile, they sold X in the area. Thefts from the elderly and disabled took place

at the same time. /blockquote >

The Echo published more quotes from the material, including hints about “a bunch of gypsies” on a theft tour, “a gypsy couple with three younger children” and notes about “ziegner weddings”. The data inspectorate even found one ethnic grouping that was not allowed to be named publicly because of confidentiality

.

In a longer interview with Radio Sweden, lawyer Nicklas Hjertesson explained that there is scope to process certain sensitive data if it is absolutely necessary for the purpose, but that searching and collating based on ethnicity or political views should not occur in the activities of the open police. If groupings have been on the register for a long time despite the fact that the police's own procedures say they should not exist, it is a sign that the control of the content is lacking, he said

.

What “Z-register” means (and doesn't mean)

In debate and searches, sometimes the word Z-register pops up. It is not found in law (2010:362) or in the ASP regulation. It is not a separate database with its own registry number. The term has instead emerged as shorthand in the context of the Gypsy grouping and with media reporting of ethnic keywords in the reconnaissance register. When someone writes “Z-register” they almost always mean ASP or a combination of ASP and the groupings that the oversight criticized

.

That the name sounds like a secret registry could make the issue harder to follow legally. The central issue is not the letter Z, but whether the police are allowed to compile people on the basis of ethnicity, whether thinning takes place, and whether the data subject can get transparency and rectification

.

Reactions: White Paper, the Roma movement and ongoing distrust

The criticism of the ASP came in the same week that the White Paper on antiziganism and abuse against Roma in Sweden was due to be unveiled. SR linked the articles explicitly. Stefano Kuzhicov, then president of the National Association of Roma in Europe, said in an interview that many Roma already knew that similar registration was taking place, but that it still felt frustrating that it was “still going on in our time”. He cited the White Paper and the Roma Commission, expressing suspicion that more agencies may have similar collections of data

.

At the same time, the public pointed to three other tracks: Skånepolisen's register, the DO's assessment that discrimination could not be ruled out, and JK's line on damages. Together, they form a longer story than a single supervisory decision in

March 2014.

Post-2014: what we know and don't know

The police reported the measures to the Swedish Data Inspectorate in autumn 2014. The general picture in the media was that the authority had to thin big and change procedures. How far this has reached in practice for each individual listing is difficult to judge from the outside. ASP remains in place under the 2010 Act, and the Privacy Protection Authority continues planning oversight of police personal data processing

.

For those who believe themselves to be registered, the practical questions are often: What does it say about me? Is that correct? Has data been deleted when a goal is closed? You can request records extracts and request rectification in accordance with data protection rules and the Criminal Data Act, except where confidentiality or ongoing investigation prevents disclosure. Our guides on privacy against authorities and requesting documents walk you through how you can work methodically

.

Why history still belongs in the 2026 debate

The ASP issue is about more than an old news story. It shows how records can be built up slowly, how ethnic categories can become searchable despite prohibitions in the Police Data Act, and how a lack of thinning can give a temporary reconnaissance note almost permanent effect. As police now develop AI analytics and big data platforms, the quality of basic records becomes even more important. In our review of Palantir and the police analysis tool, we describe how errors in source records can be amplified when data is automatically linked. ASP is the equivalent problem without machine learning: old groupings and overregistration

follow the person through the system.

On the statistics page, we collect supervision, complaints and other signals per authority. The police area highlights integrity, evidence and links to JO and IMY

.

Common misunderstandings

ASP Police. ASP is short for General Reconnaissance Registry

, not a special police unit.

“Can you tell if someone is a police officer? “ASP applies to reconnaissance data of suspects or others registered in law enforcement

, not personnel records of police employees.

“Do Z-registers exist? “Not as an official record. Searches on Z-registers lead in debate and media back to ASP and

the grouping Gypsies.

Sources

• Public: Harsh criticism of police records
• Swedish Radio: New illegal registry has been discovered with the police
• Sweden's Radio Ekot: Police criticised for registering Roma
• IMY (archive): The Swedish Data Inspectorate criticises ASP
• JO no. 5205-2013 (Skåne Police)
• Riksdag: Motion on police reconnaissance records 1983/84
• SFS 2010:362 on the Police General Reconnaissance Register
• SVT: Heavy criticism of the police's general reconnaissance records