# Arkansas State Police Remaining Communications Tess Bradford delivered an additional SharePoint folder on 2026-07-28 while stating that the response remains in progress. The local package contains 202 Outlook `.msg` files: 112 are byte-identical to messages already preserved in the July 7 production and 90 are new to the corpus. There are 201 unique message hashes because `ALPR CLASS.msg` and `ALPR CLASS (2).msg` are exact duplicates. ## What's inside - **Policy and retention:** a June 4, 2025 Leonardo confirmation that all ASP cameras in HIDTA were configured for 150-day retention; the same thread recommends seeking an express Arkansas FOIA exemption for LPR data; and a December 2024 ASP policy manual attachment contains the effective-2011 ALPR policy. - **HIDTA governance:** the blank 14-page HHIDTA MOU template, five-page HIDTA LPR policy, March 2024 member list, and blank agency-contact workbook sent to ASP as signature/onboarding materials. - **Site and coordinate records:** the 42-page January 2025 F4 survey, 24-page August 2025 Street Sentry survey, December 2024 site/power-coordinate list, and July 2025 final site-name/coordinate list. - **Procurement and operations:** additional quotes, purchase-order material, training records, implementation messages, troubleshooting, SIM-card coordination, and forwarded legal/vendor news. ## Key takeaways - ASP's vendor confirmed: **"ALL ASP cameras in HIDTA are set to 150 day data retention"** (`RE_ Data Retention.msg`, 2025-06-04). - ASP's published manual still contained an effective-2011 policy saying captured image files **"will only be maintained for an open/active criminal investigation"** (`ASP Policy Manual - Mike Hagar, Director_Secretary (1).pdf`, PDF p. 344). [[T037 - ASP Active-Investigation-Only Image Policy vs 150-Day HIDTA Retention|T037]] preserves the unresolved scope/supersession question. - The HIDTA templates require at least twelve months of user-access audit logging, monthly member-user audits, hot-list audits, origin-agency custody, state-law-controlled retention, and incident/report numbers for data queries. - The recovered surveys and site lists add thirty planning/survey source records to the camera register. They are not treated as thirty operational cameras. ## Production integrity - ZIP: 202 safe-path entries, no encryption or path collision, CRC verification passed; Microsoft Defender reported no threat. - Raw: 202 `.msg` files, 95,230,976 bytes, with zero source/staged hash mismatches. - Extracted: one text mapping per message plus 101 attachment directories; 335 files totaling 69,349,070 bytes. - Attachments include 22 PDFs, five DOCX files, one XLSX file, and image assets. The blank workbook contains only an agency-contact header and blank rows. ## Safety and handling The 1,202-page ASP policy manual is unencrypted and Defender-clean but contains interactive form actions, including JavaScript validation and legacy local-document launch actions. Those actions were enumerated without execution; the relevant policy page was text-extracted, rendered, and visually verified. The F4 and Street Sentry survey PDFs are unencrypted, contain no JavaScript, and were rendered for visual review. ## People and orgs mentioned - [[Dennis Overton]], [[Robert Ryan]], [[Craig Duncan]], [[Elizabeth Reyes]], and [[Leonard J. Turner]] - [[Arkansas State Police]], [[Arkansas Highway Police]], [[Houston HIDTA]], [[HIDTA LPR Network]], [[Leonardo US Cyber and Security Solutions, LLC]], [[ELSAG ALPR Systems]], and [[Arkansas Department of Transportation]] ## Cross-references - [[ASP ALPR Policy Retention and FOIA Exemption Proposal]] - [[ASP HIDTA Governance Terms and Administrator Duties]] - [[ASP F4 and Street Sentry Site Surveys and Coordinate Variants]] ## Open questions / follow-ups - Bradford expressly said the work remains ongoing; this production is not a completion disposition. - The executed ASP/Houston HIDTA MOU referenced in later correspondence is still absent. This release supplies the blank template and policy terms, not the signed ASP copy. - Current user, hot-list, camera, retention-change, query, dissemination, and audit exports remain unproduced. - The accepted Motorola/WatchGuard fiscal records remain outstanding.