AI in Prisons and Custody

Prisons are an unusual environment for the technologies in this catalogue. Monitoring that would be plainly disproportionate in public is lawful and expected inside a custodial institution; people held there have reduced privacy rights by design, and are told so.

That makes the interesting question not whether monitoring is permissible, but where its limits sit, and who else it captures.

TWO DISTINCT MODELS

The first is retrospective analysis of seized material. HM Prison and Probation Service uses AI language analysis on phones seized from prisoners — devices already unlawfully held, examined after seizure, in connection with a specific investigation. This is closest to conventional digital forensics: a bounded examination of a specific item.

The second is continuous monitoring of live infrastructure at population scale, covered in detail on this site's page on AI prison communications monitoring. Every call transcribed, every conversation analysed, extending in the current generation into voice identification and video behaviour analysis.

The distinction matters more than the shared setting. A seized device belongs to the person it was taken from. A monitored telephone system captures both parties, and the person outside is not in custody.

WIDER APPLICATIONS

Beyond communications, AI is applied in custodial settings to automated headcounts, behaviour detection and real-time alerting from CCTV, and to risk assessment for categorisation, parole and release planning — the latter covered by this site's offender risk assessment page.

THE CASE FOR IT

Prisons are dangerous places for the people held in them and for staff. Violence, coercion, drug supply and self-harm are persistent problems, and staffing levels in many systems are inadequate to observe what is happening.

Monitoring is also lawful, disclosed and long established. All parties to a prison telephone call are notified it is monitored, and courts in multiple jurisdictions have upheld wide latitude where the purpose is safety and crime prevention.

Some applications are unambiguously protective: identifying a person at risk of self-harm, or detecting that someone is being coerced by another prisoner, are uses where automation genuinely extends what limited staff can observe.

THE CASE AGAINST

The people on the other end of the call are the central problem. They have been convicted of nothing, have no realistic alternative means of contact with their relative, and cannot consent in any meaningful sense. Continuous voice identification, as now marketed, builds biometric profiles of them specifically.

Scope creep in this setting is documented rather than hypothetical. An investigation of one widely used system found calls flagged for content unrelated to any security concern, and a vendor pitch citing the value of monitoring in defending an institution against litigation brought by the people it holds.

Contact with family is also one of the strongest predictors of successful resettlement. A monitoring regime experienced as total may reduce the contact that reduces reoffending, which sets a security measure against a rehabilitative one.

And the environment weakens the usual safeguards. A person in custody who believes a system has flagged them wrongly has less practical ability to contest it than almost anyone else in this catalogue.

WHAT IS NOT ESTABLISHED

The scale of AI use across UK custodial estates is not published.

Whether outside parties to monitored calls are informed that voice profiles may be built from their speech is not established in any deployment reviewed.

No evaluation of whether communications monitoring reduces violence or contraband, as opposed to generating intelligence, has been identified.

Retention periods for transcripts, voice profiles and behavioural analysis outputs are not documented.