When Police Officers Turn Law-Enforcement Databases Into Personal Surveillance Tools

Unfortunately, that same access has repeatedly been exploited by officers seeking information for reasons entirely unrelated to their official responsibilities. Some officers have searched for former romantic partners, investigated personal acquaintances, monitored individuals involved in private disputes, or retrieved information for friends and associates. Others have used government databases to obtain information that facilitated stalking, harassment, intimidation, or other forms of misconduct. These activities present substantially different degrees of culpability, but they share a common institutional problem: the exploitation of government information systems for purposes disconnected from lawful police duties.

The recurring administrative response to such misconduct raises serious questions about whether police departments adequately distinguish violations of internal computer-use policies from conduct that may independently constitute criminal offenses. Officers caught conducting unauthorized searches may receive command discipline, forfeit vacation days, accept negotiated penalties, resign, or be terminated without ever facing criminal charges. Those administrative dispositions may address the employment relationship, but they do not necessarily resolve the criminal-law implications of the underlying conduct.

New York law provides several potentially applicable criminal offenses, including official misconduct under Penal Law § 195.00, unauthorized use of a computer under Penal Law § 156.05, and computer trespass under Penal Law § 156.10. Depending upon the circumstances, other statutory provisions may apply when confidential information is unlawfully duplicated, disseminated, or used to facilitate additional criminal activity.

The relevant legal inquiry is not whether the Department regards the conduct as sufficiently serious to justify suspension or termination. It is whether the evidence establishes the elements of an applicable criminal offense, a determination that cannot be displaced by an internal disciplinary agreement or an officer’s resignation.

The infrequency of criminal prosecution does not establish that the underlying conduct is lawful, particularly where police departments have documented repeated unauthorized searches and have already incorporated computer misuse into their formal disciplinary systems.

The NYPD’s own Disciplinary Matrix illustrates the significance of this distinction. The Department has expressly recognized computer misuse and improper dissemination of information as categories requiring standardized discipline, while its published disciplinary decisions demonstrate that officers have conducted hundreds of inquiries unrelated to official duties. The existence of these institutional mechanisms, combined with documented incidents throughout the country, warrants a more searching examination of whether police departments are treating potentially criminal abuses of authority as matters of employee discipline rather than independently evaluating their criminal consequences.

I. The NYPD’s Disciplinary Matrix Demonstrates Institutional Recognition of Computer Misuse

The NYPD’s Disciplinary System Penalty Guidelines, commonly referred to as the Disciplinary Matrix, provide an important starting point because the Department itself has formally recognized computer misuse as a category of misconduct requiring predetermined disciplinary consequences.

Under the Matrix effective September 9, 2024, the Department identifies misuse of computers, email, and mobile digital devices as a specific disciplinary offense. The prescribed penalties include five days under mitigating circumstances, a presumptive penalty of ten days, and twenty days under aggravating circumstances. The Matrix separately identifies improper downloading or dissemination of Department reports and data, carrying a presumptive penalty of twenty days, with a range extending from ten to thirty days. Computer misuse involving dissemination of information also appears within the Schedule C Command Discipline provisions.

These classifications demonstrate that the Department has already developed an institutional framework for addressing improper access to and use of governmental information. The significance is not merely that the prohibited conduct appears in a disciplinary manual. The Department has identified different forms of technology-related misconduct, established presumptive consequences, and integrated them into a system intended to promote consistency across disciplinary proceedings.

The Matrix was established in January 2021 and subsequently revised, including in September 2024. In introducing the 2024 revisions, then-Police Commissioner Edward A. Caban expressly described a process informed by patterns and trends arising through the administration of departmental discipline. The Department therefore acknowledges that its disciplinary guidelines are intended to reflect experience with recurring categories of employee misconduct rather than exist as a purely theoretical compilation of prohibited behavior.

The inclusion of computer misuse in the Matrix does not independently establish the number of officers who engage in unauthorized database searches, nor does it prove that every computer-related disciplinary violation satisfies a criminal statute. Nevertheless, when viewed alongside published disciplinary cases involving repeated unauthorized inquiries, the Matrix supports the conclusion that the problem is sufficiently established to have generated a formal and continuing institutional response.

More importantly, the Matrix makes an express distinction between internal discipline and criminal prosecution. In its discussion of the intersection between the disciplinary and criminal justice systems, the Department acknowledges that conduct by its employees may be investigated by district attorneys, United States Attorneys, and the New York Attorney General. It further recognizes that criminal prosecution and internal disciplinary proceedings may occur independently, and that departmental discipline does not substitute for the criminal or civil justice systems.

That acknowledgment is particularly consequential because it eliminates any legitimate basis for suggesting that the existence of an administrative penalty resolves the criminal character of the underlying conduct. The NYPD’s own published framework recognizes that disciplinary proceedings and criminal prosecutions serve different purposes, operate under different evidentiary standards, and may arise from the same facts.

The question, therefore, is not whether the Department possesses sufficient authority to discipline officers who abuse its computer systems. The question is whether the Department consistently evaluates those cases for potential criminal violations and refers appropriate matters for independent prosecutorial review.

Where an officer knowingly accesses restricted information concerning a former romantic partner, personal acquaintance, or other individual for a purpose wholly disconnected from official duties, the Department cannot simply assume that forfeiture of vacation days adequately addresses the conduct. It must determine whether the facts also implicate official misconduct, computer trespass, or another criminal offense.

The danger arises when an administrative classification becomes the beginning and end of institutional accountability, particularly where the employee’s resignation or termination supplies a convenient conclusion to an investigation that may have uncovered substantially more serious wrongdoing.

II. Official Misconduct: When Government Authority Is Exploited for Personal Advantage

New York Penal Law § 195.00(1) makes official misconduct a class A misdemeanor when a public servant, intending to obtain a benefit or deprive another person of a benefit, knowingly engages in an unauthorized exercise of official functions.

The statute is especially relevant to police database misuse because the offense concerns the abuse of governmental authority itself, rather than simply whether a person accessed a computer without permission. An officer who uses official powers to obtain information for a private objective may implicate § 195.00 even where separate computer-access charges encounter difficulties concerning the precise scope of the officer’s technical authorization.

The statutory definition of benefit is broad. Under Penal Law § 10.00(17), a benefit includes any gain or advantage to the beneficiary, and New York courts have recognized that the advantage need not be financial.

In People v. Feerick, 93 N.Y.2d 433, 446–49 (1999), the New York Court of Appeals affirmed official-misconduct convictions involving NYPD officers who abused their authority while attempting to recover a police radio. The Court explained that the Legislature intended § 195.00 to address intentional abuses of public authority extending beyond bribery and traditional financial corruption. Importantly, the Court recognized that the requisite benefit could include personal advantages unrelated to money, while also emphasizing that ordinary errors of judgment and good-faith mistakes do not automatically become criminal offenses.

In People v. Moreno, 100 A.D.3d 435, 436–37 (1st Dep’t 2012), the First Department affirmed the official-misconduct convictions of two NYPD officers who exploited authority acquired during a legitimate police assignment for unauthorized personal purposes. The officers initially responded to a 911 call involving an intoxicated woman, assisted her into her apartment, and obtained access to her personal information and keys. After completing their assignment, they returned to her apartment on three separate occasions without authorization, while remaining on duty and in uniform. The court rejected their argument that the subsequent entries fell outside their official functions, reasoning that the conduct remained sufficiently connected to their police authority because their initial assignment provided the access and opportunity subsequently exploited for personal benefit.

The First Department explained that the officers’ unauthorized entries constituted an exercise of official police functions notwithstanding the absence of a legitimate assignment authorizing their return. Particularly significant was the court’s recognition that entering an apartment to investigate an incident or assist an occupant constitutes an ordinary police function, and that exercising such authority under false pretenses for personal benefit may satisfy Penal Law § 195.00(1). The court further distinguished the requisite personal benefit from mere neglect of duty, explaining that the evidence established an intent to pursue sexual relations with the complainant. Thus, criminal liability arose not simply because the officers departed from their assigned duties, but because they knowingly exploited official authority for an unauthorized personal objective.

The reasoning in Moreno is particularly instructive when examining officers who use restricted law-enforcement databases to investigate former romantic partners, obtain confidential information concerning personal acquaintances, or conduct inquiries for other private purposes. Although Moreno did not involve computer databases, its holding establishes that authority legitimately acquired through police employment can subsequently be exercised unlawfully when an officer knowingly redirects official functions toward obtaining a personal benefit. The possession of valid Department credentials does not, by itself, resolve whether the officer’s use of governmental authority constitutes official misconduct under § 195.00(1). Where the evidence establishes a knowing unauthorized exercise of official functions accompanied by the requisite intent to obtain a benefit, criminal liability may arise independently of whether the conduct also satisfies the separate authorization requirements governing computer crimes under Penal Law Article 156.

That distinction is directly relevant to the unauthorized use of police databases. When an officer knowingly exploits governmental information systems to obtain confidential records for personal surveillance, a private investigation, or the benefit of another individual, the prosecution must examine whether the conduct involved an unauthorized exercise of official functions undertaken with the requisite statutory intent.

An officer who searches for a former romantic partner’s current address to monitor that person’s activities may be seeking a personal advantage derived from privileged access to government information. Similarly, an officer who conducts a background investigation for a friend involved in a personal dispute may be using governmental authority to confer an advantage upon someone who has no entitlement to the Department’s investigative resources.

The criminal analysis necessarily depends upon the evidence establishing the officer’s knowledge, purpose, and intended benefit. Mere curiosity does not establish every element of official misconduct, and a violation of departmental computer-use restrictions does not automatically establish criminal intent. Nevertheless, where an investigation demonstrates a deliberate pattern of inquiries, knowledge of the applicable restrictions, and a sufficiently identifiable private advantage, § 195.00 provides a substantive criminal framework for evaluating that conduct.

The Court of Appeals reinforced the importance of examining the actual abuse of official authority in People v. Flanagan, 28 N.Y.3d 644 (2017), which affirmed official-misconduct convictions involving a Nassau County police official. The decision demonstrates that public servants remain criminally accountable when the required elements of intentional misuse of official authority are established.

These principles are incompatible with an institutional approach under which unauthorized database searches are treated as exclusively administrative matters merely because the officer possessed legitimate access credentials.

A police officer’s authority to retrieve confidential information exists only because the government has entrusted that individual with powers unavailable to the general public. When those powers are knowingly redirected toward private purposes, the conduct raises precisely the concerns about abuse of public office that the official-misconduct statute was enacted to address.

III. Computer Trespass and Unauthorized Computer Access Under New York Law

New York Penal Law Article 156 provides additional criminal remedies concerning unauthorized access to computer systems, but its application requires careful attention to the statutory definitions and controlling judicial decisions.

Penal Law § 156.05 makes it a class A misdemeanor to knowingly use or access a computer, computer service, or computer network without authorization. Penal Law § 156.10 elevates certain conduct to computer trespass, a class E felony, when the unauthorized access is accompanied by an intent to commit or further a felony, or when the individual knowingly gains access to computer material within the statutory definition.

The significance of § 156.10 is particularly apparent where law-enforcement systems contain sensitive government records protected by statutory restrictions. Criminal histories, certain sealed records, and other legally restricted information may implicate the statute’s definition of computer material, depending upon the precise nature of the information and the restrictions governing access.

Nevertheless, confidential information does not automatically qualify as computer material merely because it is stored in a police database. The prosecution must establish that the particular information satisfies Penal Law § 156.00(4), together with the remaining elements of the offense.

The question of authorization presents a separate and important legal limitation.

Under Penal Law § 156.00(8), unauthorized access involves use or access without the requisite permission, coupled with the statutory knowledge or notice requirements. The definition does not categorically criminalize every use of an otherwise accessible computer for an improper purpose.

In People v. Golb, 23 N.Y.3d 455, 466–67 (2014), the Court of Appeals vacated a conviction for unauthorized use of a computer where the defendant had permission to access university computers but used them in connection with unrelated criminal misconduct. The Court rejected the prosecution’s position that using an otherwise accessible computer for an unlawful objective necessarily rendered the access itself unauthorized under § 156.05.

That holding imposes a meaningful limitation upon computer-access prosecutions, and it cannot be disregarded merely because the conduct under investigation is objectionable.

However, Golb did not involve an NYPD officer accessing restricted law-enforcement information through an official database, and it did not address every possible configuration of permissions governing confidential government records. Whether a police officer’s access is unauthorized remains a fact-specific legal question requiring examination of the actual permission granted, applicable system restrictions, notice, and the officer’s knowledge.

The distinction between being issued credentials and possessing authorization for a particular category of access may be important, but the prosecution must establish that distinction through the statutory requirements rather than rely exclusively on departmental policy language.

Where the elements of unauthorized access are established, additional evidence concerning the information retrieved and the officer’s intended conduct may support computer trespass under § 156.10. Where those elements cannot be established, official misconduct or another independently applicable offense may still warrant consideration.

This is precisely why a serious investigation must examine the particular statutory offense instead of assuming that all database misuse is either automatically criminal or categorically protected because the officer possessed legitimate credentials.

The law demands individualized proof, but it does not excuse deliberate abuses of police authority merely because the Department originally entrusted the officer with access to restricted systems.

IV. The NYPD’s Documented Cases Establish That the Problem Is Not Hypothetical

The NYPD’s own disciplinary proceedings provide concrete evidence that unauthorized access to governmental databases is not an abstract concern.

On January 9, 2026, the New York State Attorney General’s Law Enforcement Misconduct Investigative Office issued findings concerning NYPD Police Officer Triston Trunk, whose conduct had previously been investigated by the Department’s Internal Affairs Bureau. According to the Attorney General’s findings, Trunk conducted approximately 133 unauthorized inquiries between October 8, 2018, and September 9, 2021, while assigned to the Criminal Intelligence Section.

The inquiries involved various individuals and their family members, occurred while Trunk was both on and off duty, and were unrelated to legitimate Department business. The Attorney General determined that the repeated inquiries constituted a pattern of abuse involving access to confidential NYPD information. Although the Department had disciplined Trunk for violating its computer-use policy, the Attorney General recommended additional monitoring, noting that he had not previously been placed in monitoring despite having accumulated at least six Civilian Complaint Review Board complaints during the preceding five years.

The significance of the findings extends beyond the approximately 133 searches. The inquiries occurred over nearly three years, involved numerous individuals, and were sufficiently serious to produce an Internal Affairs investigation and subsequent Attorney General findings concerning the abuse of official authority.

The publicly available findings do not establish that Trunk was criminally prosecuted, nor do they establish that every element of a particular criminal offense could have been proved. They do, however, raise a legitimate institutional question concerning the circumstances under which repeated unauthorized access to confidential law-enforcement information is evaluated for criminal referral.

A second example is found in the NYPD’s disciplinary proceedings against Police Officer Robert Benbella. In a decision issued in September 2025, the Department documented that Benbella admitted conducting more than 300 computer inquiries unrelated to his official duties or assignments, together with additional misconduct involving improper access to body-worn camera recordings. The Department also sustained other specifications, including unauthorized searches accompanied by the dissemination of information, and ultimately ordered his dismissal from the police service.

Although the disciplinary decision involved several specifications beyond database misuse, it is particularly significant because the Department’s own adjudicative process established repeated misuse of government information systems. The fact that an officer could conduct hundreds of unrelated inquiries raises questions not only about individual misconduct but also about the effectiveness of automated monitoring, supervisory review, and the identification of suspicious search patterns before they become established practices.

These cases cannot be treated as proof that every unauthorized search satisfies a criminal statute, and the published disciplinary record does not supply a complete accounting of criminal referrals or prosecutorial decisions. Nevertheless, they establish that the Department has encountered repeated, substantial misuse of confidential systems involving more than isolated accidental inquiries.

The October 29, 2026 arrest of NYPD Sergeant Joel DeJesus provides an additional and particularly consequential example because criminal charges were actually pursued.

According to contemporaneous reporting, DeJesus was charged in the Bronx with computer trespass, official misconduct, and unlawful dissemination of an intimate image following allegations that he improperly accessed NYPD license plate reader information to monitor a female subordinate with whom he had previously been involved and another individual. The reports describe alleged database inquiries occurring between August 2024 and July 2025, together with allegations involving the dissemination of an intimate photograph.

DeJesus pleaded not guilty, and the accusations remain subject to adjudication. Nevertheless, the charges demonstrate that prosecutors can treat alleged misuse of police information systems as criminal conduct rather than limiting institutional accountability to Department discipline.

The factual differences among these cases are important, and no conclusion about unequal prosecution can responsibly be drawn without comparing the underlying evidence, investigative records, applicable statutes, and referral decisions.

However, the contrast between documented administrative proceedings and a criminal indictment illustrates precisely why transparent referral standards are necessary. When one officer’s unauthorized searches result in disciplinary penalties and another officer faces criminal charges, the public is entitled to expect that the difference reflects legally significant facts and evidentiary considerations rather than institutional convenience, rank, assignment, or personal relationships.

The Department cannot reasonably expect public confidence in its disciplinary system while failing to provide a sufficiently transparent account of how potentially criminal database misconduct is identified and referred for independent review.

V. The National Problem: Police Database Misuse Is Not Confined to New York City

The misuse of law-enforcement databases has been documented throughout the United States, and the available investigative reporting demonstrates that the problem extends well beyond the NYPD.

In September 2016, the Associated Press published a nationwide investigation examining how police officers and other law-enforcement employees exploited confidential government databases to obtain information about romantic partners, neighbors, journalists, business associates, and other individuals for reasons unrelated to legitimate police work.

Through public-records requests submitted to state agencies and major police departments, the Associated Press identified more than 325 instances between 2013 and 2015 in which database misuse resulted in termination, suspension, or resignation. More than 250 additional incidents resulted in reprimands, counseling, or lesser disciplinary measures, while more than 90 involved unspecified disciplinary action. The investigation also found inconsistencies in recordkeeping and reported that no single national agency maintained a comprehensive accounting of the misconduct.

These figures are historical findings rather than a current nationwide incidence rate, but their implications remain important. Even when considering only the incidents that could be identified through available records, the investigation revealed a pattern involving hundreds of disciplinary outcomes across multiple jurisdictions.

The misconduct documented by the Associated Press included criminal stalking, repeated invasions of personal privacy, and the use of confidential law-enforcement information against journalists. In Ohio, former Akron Police Sergeant Eric Paull pleaded guilty in 2015 to offenses including menacing by stalking and unauthorized use of a law-enforcement computer after investigators discovered that he had accessed information concerning his former girlfriend, Alexis Dekany, and other individuals connected to her. In Michigan, state investigative records documented a Mount Morris police officer’s repeated use of restricted databases to obtain residential addresses of women he found attractive, with the investigation also identifying an allegedly unjustified traffic stop undertaken to meet a woman. In Florida, two Miami-Dade police officers were disciplined after conducting database inquiries concerning a journalist who had published unfavorable reporting about their department. Although the officers’ identities were not disclosed in the available reports, the incidents collectively demonstrate how official database privileges can be exploited for personal surveillance, unwanted romantic pursuits, and potential retaliation against individuals scrutinizing police conduct.

These examples demonstrate how access to restricted governmental information can be exploited for substantially different personal objectives, including romantic fixation, unwanted surveillance, and potential retaliation against individuals exercising their rights to report on police activity.

Additional reporting from Denver provides another illustration of institutional recognition without necessarily corresponding criminal prosecution.

In March 2016, Denver’s independent police monitor reported that twenty-five officers had been disciplined since 2006 for misusing confidential criminal justice databases for personal purposes. According to the monitor, most received reprimands, notwithstanding cases involving officers who obtained personal information for conduct unrelated to their official responsibilities.

Federal law-enforcement personnel have also abused restricted information systems.

On June 30, 2023, the United States Department of Justice announced that Deputy United States Marshal Adrian Pena had pleaded guilty to unlawfully obtaining cellphone location information through a restricted law-enforcement service. According to the Department of Justice, Pena used the system to locate individuals with whom he had personal relationships and their spouses, submitting false documents and certifications to obtain information that he was not authorized to retrieve. He was subsequently sentenced to three years of probation.

These incidents involve different departments, information systems, criminal statutes, and factual circumstances. They cannot be used to calculate a current national prosecution rate, and the available records do not establish that prosecutors routinely decline cases that otherwise satisfy every criminal element.

They do establish something sufficiently serious in its own right: police database misuse is a documented, geographically widespread institutional problem, and the harmful consequences are not limited to violations of departmental administrative rules.

When confidential government information is exploited to investigate former romantic partners, monitor private individuals, or retaliate against those who criticize law-enforcement personnel, the misconduct implicates both the integrity of public institutions and the safety and privacy of the people those institutions are obligated to protect.

VI. Federal Computer-Crime Precedent Does Not Confer Immunity From State Criminal Law

Discussions concerning unauthorized database access must also account for the United States Supreme Court’s decision in Van Buren v. United States, 593 U.S. 374 (2021), which addressed the interpretation of the federal Computer Fraud and Abuse Act.

In Van Buren, a police sergeant used his authorized access to a law-enforcement database to retrieve license plate information for an improper purpose. The Supreme Court held that the federal statute’s prohibition against exceeding authorized access did not encompass a person’s retrieval of information from portions of a computer system that the person was otherwise entitled to access merely because the information was obtained for an impermissible purpose.

The decision interpreted specific language in 18 U.S.C. § 1030(a)(2) and the federal statute’s definition of exceeding authorized access. It did not establish a generalized right of police officers to exploit government databases for personal purposes, nor did it hold that such conduct could never violate independently applicable criminal statutes.

The distinction matters because federal and state criminal laws do not necessarily define prohibited conduct in identical terms.

A federal limitation upon prosecutions under a particular provision of the Computer Fraud and Abuse Act does not eliminate potential liability for official misconduct under New York Penal Law § 195.00, and it does not prevent prosecutors from examining whether conduct satisfies other provisions of New York’s Penal Law.

At the same time, Van Buren cannot simply be dismissed as irrelevant to the analysis of unauthorized computer access. The Supreme Court’s reasoning reinforces the need to distinguish a person’s access permissions from the reasons the person accessed particular information, and New York’s decision in Golb independently imposes a substantial limitation upon efforts to criminalize improper computer use under Article 156.

The correct legal position therefore requires more precision than the categorical assertion that every database inquiry conducted for a non-law-enforcement purpose necessarily constitutes computer trespass.

Where the evidence establishes knowingly unauthorized access, the statutory requirements of Article 156 must be applied. Where the misconduct instead concerns the knowing exploitation of official authority to obtain a personal advantage, official misconduct may present a separate and more appropriate criminal theory. Where the information is unlawfully duplicated, disseminated, or used to facilitate stalking, harassment, or another offense, the additional facts must be evaluated under the statutes governing that conduct.

Criminal liability depends upon the charged offense and the evidence supporting its elements, not upon a generalized characterization of the officer’s behavior.

Nevertheless, the existence of technical limitations upon one computer-access statute does not mean the underlying abuse of police authority is legally inconsequential. It means that investigators and prosecutors must identify the proper statutory theory and develop the evidence necessary to establish it.

The unfortunate institutional tendency to treat the absence of charges as proof that no criminal offense was implicated fails to account for these distinctions and improperly conflates prosecutorial decisions with substantive legality.

VII. Why Administrative Discipline Cannot Substitute for Criminal Accountability

One of the most troubling institutional practices surrounding police misconduct is the tendency to treat the conclusion of an employment relationship as the practical resolution of the underlying allegations, even where those allegations implicate conduct that may constitute a criminal offense.

An officer accused of making unauthorized database inquiries may be placed on modified duty, questioned by internal investigators, served with disciplinary charges, or confronted with electronic records documenting searches unrelated to official assignments. The matter may ultimately conclude through a negotiated disciplinary agreement, resignation, retirement, or termination, without any publicly identifiable criminal prosecution.

Those outcomes may satisfy the Department’s immediate administrative interests, particularly where the officer is no longer permitted to access confidential information. However, they do not necessarily resolve the separate governmental responsibility to determine whether the officer committed a criminal offense.

Resignation addresses employment status, while prosecution addresses criminal responsibility. An internal disciplinary agreement resolves allegations under departmental regulations, while a criminal proceeding determines whether the prosecution has established an offense under the applicable law beyond a reasonable doubt. These processes serve different purposes and cannot be treated as interchangeable simply because they arise from the same underlying conduct.

The NYPD’s own Disciplinary Matrix expressly recognizes this distinction. Its discussion of the criminal justice system provides that a member’s conduct may result in independent criminal and disciplinary proceedings, and that the outcome of one process does not necessarily control the other. The Department further acknowledges that a prosecutor’s declination, a grand jury’s refusal to indict, or an acquittal does not automatically preclude administrative discipline because the governing standards of proof are different.

A negotiated resignation cannot transform conduct satisfying the elements of an offense into lawful behavior, and a disciplinary penalty cannot immunize an officer from an otherwise permissible prosecution.

Of course, prosecutors retain discretion concerning whether charges are warranted. The available evidence may be insufficient to establish a required mental state, an officer’s access may have been authorized within the governing statutory definition, or an investigation may reveal circumstances that defeat an otherwise plausible criminal theory. These are legitimate considerations, but they are questions that must be resolved through competent legal and evidentiary assessment rather than through an assumption that administrative discipline is enough.

The deeper concern is whether the evidence ever reaches an independent prosecutorial authority capable of making that determination.

Where an internal investigation identifies repeated unauthorized inquiries involving a former intimate partner, private acquaintances, or individuals implicated in a personal dispute, the public has a legitimate interest in knowing whether the allegations were examined for potential criminal violations. That interest becomes especially compelling where the records concern private addresses, travel patterns, criminal histories, confidential investigative information, or other material capable of facilitating harassment and intimidation.

A police department must not permit its interest in resolving an internal disciplinary matter to displace the independent public interest in criminal accountability.

VIII. The Problem Begins With Detection and the Decision to Refer Misconduct for Prosecution

Criminal accountability depends upon the quality of the underlying investigation, and the ability of internal investigators to identify unauthorized database access is only the beginning of that process.

Modern law-enforcement information systems can preserve detailed electronic records identifying the user, the time of access, the database searched, and the information requested. Those records can be compared against assignments, complaint reports, arrest investigations, warrant inquiries, and other contemporaneous documents to determine whether the search was connected to official duties.

When an officer repeatedly accesses information concerning the same private individual, conducts inquiries outside assigned duties, or searches for people with identifiable personal connections to the officer, those patterns may warrant heightened scrutiny. Investigators must determine whether the officer possessed a legitimate law-enforcement purpose, what information was actually retrieved, whether the access was permitted, and whether any information was subsequently disclosed or exploited.

The number of inquiries may be important evidence of repetition, but the number alone cannot resolve criminal liability. A single search may be sufficiently serious to support criminal charges where the required elements are established, while numerous improper inquiries may present different evidentiary difficulties concerning authorization or criminal intent.

The institutional danger arises when investigators stop at documenting a violation of the Patrol Guide without examining whether the same evidence supports a Penal Law offense.

The NYPD’s established investigative structure includes the Internal Affairs Bureau, command-level investigations, and the Department Advocate’s Office. Its published Disciplinary Matrix recognizes that possible criminal behavior may require coordination with the relevant prosecutorial authorities. The existence of those mechanisms makes the quality and consistency of criminal referrals a legitimate subject of public oversight.

An effective accountability framework must identify when an administrative investigation requires criminal-law screening, establish who is responsible for that assessment, and preserve the information necessary for an independent charging decision.

That framework must include scrutiny of supervisory failures. When an officer conducts repeated unauthorized searches over an extended period, investigators must examine whether electronic alerts existed, whether supervisors reviewed unusual activity, whether previous complaints provided warning signs, and whether applicable access controls were actually enforced.

The Department must also distinguish ordinary investigative mistakes from intentional misuse. An officer who incorrectly enters a record while performing a legitimate assignment is not necessarily situated like an officer who deliberately retrieves confidential information about a former romantic partner for a private objective.

Those distinctions protect officers against unsupported accusations while ensuring that deliberate abuses of authority receive the level of scrutiny they warrant.

Criminal investigations also introduce important procedural safeguards. Where an internal investigation has obtained compelled statements under threat of employment discipline, prosecutors must account for the protections recognized in Garrity v. New Jersey, 385 U.S. 493 (1967), and the restrictions governing the use of compelled statements in criminal proceedings. The existence of those protections does not prevent an independent criminal investigation, but it requires careful separation of compelled administrative evidence from evidence lawfully available for criminal prosecution.

A properly structured referral system must therefore protect both the integrity of potential criminal prosecutions and the constitutional rights of the officers under investigation.

The objective is not to manufacture criminal charges from every disciplinary violation. It is to ensure that potentially criminal conduct is neither overlooked nor rendered practically unprosecutable through deficient investigative procedures.

IX. Unauthorized Database Searches Can Become Instruments of Harassment, Stalking, and Retaliation

The consequences of police database misuse extend well beyond the unauthorized retrieval of information because the records available through government systems may expose individuals to unwanted surveillance, threats, harassment, or physical danger.

An individual who attempts to end a personal relationship with a police officer may reasonably expect that the officer will respect the same legal boundaries applicable to everyone else. That expectation is compromised when the officer uses governmental databases to identify the individual’s current address, monitor a vehicle’s movements, investigate a new romantic partner, or obtain other information that would not otherwise be accessible.

The resulting imbalance of power is substantial. The officer possesses institutional access to information that may be unavailable to the affected individual, and the target may remain unaware that confidential records are being searched.

These concerns are particularly serious when the officer occupies a supervisory position or the affected person is another member of the Department.

Where a subordinate officer becomes the subject of unwanted attention, the misuse of departmental information systems may intersect with broader questions of workplace harassment, coercion, retaliation, and abuse of supervisory authority. A supervisor who exploits government resources to obtain information concerning a subordinate’s private relationships may implicate more than the Department’s computer-use policy, depending upon the conduct and the evidence supporting the applicable statutory elements.

The October 2026 allegations involving Sergeant DeJesus illustrate the potential overlap between improper database inquiries and other alleged misconduct involving an intimate relationship. Although those charges have not been adjudicated, the reported allegations demonstrate why investigators must examine the surrounding circumstances rather than isolate each electronic search from the conduct it may have facilitated.

The danger also extends to journalists, complainants, whistleblowers, and other individuals whose activities may attract unwanted attention from law-enforcement personnel.

The Associated Press investigation documented incidents involving officers obtaining information about journalists and other individuals for reasons unrelated to police duties. Such conduct can create concerns about retaliation and the misuse of government authority against people who criticize or investigate public institutions.

The constitutional implications must be assessed carefully. Not every unauthorized database inquiry independently establishes a Fourth Amendment violation, a First Amendment retaliation claim, or a cause of action under 42 U.S.C. § 1983. Those claims require proof of their respective elements, including any applicable constitutional deprivation, personal involvement, causation, and municipal-liability requirements.

Nevertheless, where database misuse forms part of a larger course of surveillance, intimidation, retaliation, or discriminatory treatment, the electronic searches may constitute important evidence of improper purpose and abuse of authority.

The affected individual’s interests must also be considered independently of the officer’s employment status. A disciplinary proceeding may conclude without revealing whether sensitive personal information was disclosed, retained, or used against the person whose records were accessed.

That omission can leave the individual without meaningful information concerning the breach of confidentiality or the risks created by the officer’s conduct.

Police departments entrusted with confidential information must therefore maintain procedures for determining whether affected individuals require notification, whether additional protective measures are necessary, and whether the misconduct warrants independent criminal or civil investigation.

The central concern is not simply whether an officer violated an internal rule governing computer use. It is whether the officer exploited governmental information and institutional authority in a manner that compromised another person’s privacy, safety, or legal rights.

X. Institutional Accountability Requires More Than a Disciplinary Matrix

The NYPD’s decision to incorporate technology misuse into its Disciplinary Matrix represents an acknowledgment that unauthorized and improper use of departmental systems requires standardized administrative consequences. That recognition is useful, but it cannot substitute for a comprehensive system capable of distinguishing disciplinary violations from potentially criminal abuses of authority.

The first requirement is consistent investigative classification. When an allegation involves restricted database inquiries, investigators must identify the nature of the accessed information, the applicable permissions, the officer’s knowledge of those permissions, the purpose of the searches, and any evidence of subsequent disclosure or personal exploitation.

The second requirement is documented criminal-law screening. Where an investigation produces evidence potentially satisfying Penal Law § 195.00, § 156.05, § 156.10, or another criminal provision, the relevant elements must be evaluated and the basis for a criminal referral or decision not to refer must be documented. This process must not depend upon whether the officer remains employed or agrees to a negotiated disciplinary disposition.

The third requirement is preservation of electronic evidence. Access logs, audit records, training certifications, applicable policies, communications, assignment records, and related documentation must be maintained in a manner that permits independent review. The Department cannot reasonably expect prosecutors to evaluate criminal liability if the underlying evidence has not been adequately preserved or if compelled administrative statements have been improperly mixed with evidence intended for criminal use.

The fourth requirement concerns supervisory responsibility. When an officer conducts hundreds of unauthorized inquiries over a period of years, the Department must determine whether the monitoring system detected suspicious activity, whether supervisors received alerts, and whether earlier intervention was possible.

The fifth requirement is transparent institutional reporting. Aggregate information concerning substantiated unauthorized database inquiries, disciplinary dispositions, criminal referrals, and prosecutorial outcomes would permit the public to distinguish between the number of detected violations and the number of cases presenting sufficient evidence for prosecution.

Such reporting must protect legitimate investigative interests, privacy rights, and ongoing criminal proceedings, but those concerns do not justify leaving the broader accountability process entirely opaque.

Finally, any system intended to prevent misconduct must account for the position of the affected individuals. When a law-enforcement employee uses restricted government systems to investigate a person for private reasons, the resulting harm may extend beyond the administrative interests of the Department. The information accessed may be sensitive, the officer’s purpose may be threatening, and the person whose records were searched may have no independent means of discovering the intrusion.

An accountability system that focuses exclusively on the employee’s disciplinary penalty overlooks the very individuals whose privacy and security the restrictions were designed to protect.

No disciplinary framework can eliminate every instance of intentional misconduct, and no criminal statute can substitute for competent supervision, technical safeguards, or institutional integrity. Nevertheless, the existence of those practical limitations does not justify treating potentially criminal conduct as a purely administrative concern.

The law-enforcement profession depends upon public confidence that officers will not exploit governmental authority for their private benefit. That confidence cannot be maintained through disciplinary procedures alone when the underlying conduct may satisfy independently applicable criminal statutes.

XI. My Professional Position: Not Every Police Officer Deserves My Representation

My assessment of these issues is informed by my experience as a retired NYPD police officer and more than two decades practicing law in matters involving civil rights, police misconduct, employment discrimination, and institutional accountability.

I understand the demands of police work, the importance of sound investigative judgment, and the consequences that disciplinary allegations can have upon an officer’s career and reputation. I also understand that accusations are not proof, that investigators sometimes reach incorrect conclusions, and that officers facing serious allegations remain entitled to due process and the protections afforded by law.

Those principles are fundamental to the proper administration of justice, but they do not require me to accept every prospective client or defend conduct that I have independently determined involved a knowing abuse of governmental authority.

There is a substantial difference between representing an officer who disputes an allegation, representing an officer who made a genuine mistake, and knowingly undertaking the defense of an officer who deliberately exploited confidential police databases to investigate private individuals for personal purposes.

My professional judgment concerning the clients I accept is informed by both my prior law-enforcement experience and my obligations as an attorney. I do not believe that prior police service creates an obligation to defend every officer accused of misconduct, regardless of the facts or the officer’s own conduct.

Indeed, my experience as an investigator makes me particularly unwilling to overlook the deliberate misuse of governmental information systems, especially where the conduct involves stalking, harassment, retaliation, or the exploitation of personal relationships.

Officers entrusted with confidential information are expected to understand that their access privileges exist for legitimate law-enforcement purposes. They are not personal investigative tools, and those privileges cannot properly be used to satisfy curiosity, monitor former intimate partners, investigate romantic interests, or obtain confidential records for private disputes.

An officer who knowingly engages in that conduct has made a decision fundamentally inconsistent with the responsibilities attached to the position.

I recognize that every accused officer may obtain legal representation and challenge the allegations through the applicable criminal or disciplinary process. My position does not diminish those rights, nor does it imply that criminal charges establish guilt.

However, I am under no professional obligation to represent an officer whose deliberate misconduct I have independently determined to be incompatible with the standards I maintain in my practice.

Accordingly, my position to officers who knowingly misuse law-enforcement databases for unauthorized personal purposes is straightforward: Do not call me for representation.

I have spent substantial portions of my professional life investigating misconduct, evaluating evidence, challenging institutional abuses, and representing individuals whose rights were violated by public officials. I will not compromise those principles merely because the individual seeking representation wears the same uniform I once wore.

The responsibility to enforce the law carries corresponding obligations to obey it, and the profession cannot maintain its legitimacy if intentional abuses of police authority are excused through misplaced personal or institutional loyalty.

That principle applies to the NYPD and to every police department entrusted with the power to obtain confidential information concerning the public.

XII. Conclusion: The Absence of Criminal Charges Does Not Establish That No Crime Occurred

The misuse of confidential law-enforcement databases represents an established accountability problem that extends beyond individual officers and individual police departments. The NYPD’s Disciplinary Matrix, its published disciplinary decisions, findings issued by the New York State Attorney General, and documented incidents throughout the United States demonstrate that governmental information systems have repeatedly been exploited for purposes unrelated to legitimate law enforcement.

The central legal distinction remains essential. Not every unauthorized or improper database inquiry automatically establishes a criminal offense, because the prosecution must prove each statutory element, including the required authorization and mental-state provisions. Nevertheless, where the evidence establishes intentional abuse of official authority, knowingly unauthorized access, or the use of restricted information to facilitate additional criminal conduct, the applicable Penal Law provisions must receive meaningful consideration.

Police departments cannot determine the criminal significance of their employees’ conduct simply by assigning administrative penalties, negotiating resignations, or terminating employment. Those actions resolve questions concerning continued public service, but they do not extinguish independently established criminal liability.

The Department’s own disciplinary framework recognizes that criminal prosecution and administrative discipline are separate processes. That acknowledgment must have practical consequences when investigators uncover repeated misuse of confidential information, particularly where the records involve private individuals, former intimate partners, or persons potentially exposed to harassment and retaliation.

The most consequential institutional question is not whether every officer who violates a database policy must be arrested. It is whether police departments maintain a reliable and transparent process for determining when the evidence warrants independent criminal investigation, and whether that process operates consistently regardless of the officer’s rank, assignment, relationships, or employment status.

A criminal prosecution must never be pursued merely to satisfy public pressure, just as criminally significant allegations must never be disregarded merely to protect an institution from embarrassment. Both outcomes would undermine the impartial administration of justice.

The appropriate standard is the same one that law-enforcement officers are sworn to apply to the public: investigate the evidence, identify the governing law, distinguish suspicion from proof, and hold individuals criminally accountable when the elements of an offense are established.

When a police officer deliberately exploits confidential government information for personal surveillance or other unauthorized objectives, the Department’s disciplinary response is only one part of the accountability inquiry. The criminal-law implications cannot be presumed away because no arrest occurred or because a resignation brought the employee’s service to an end.

A police officer’s resignation does not extinguish criminal liability, administrative discipline does not substitute for criminal adjudication, and the absence of criminal charges does not establish that the underlying conduct was lawful.

Until police departments consistently distinguish administrative misconduct from potentially criminal abuses of authority, the public will have legitimate reasons to question whether those entrusted to enforce the law are subjected to the same criminal accountability as the people they police.

That is the institutional failure requiring examination, and it cannot be resolved by placing another penalty category in a disciplinary manual while leaving the criminal referral process beyond meaningful scrutiny.