A Colorado Sheriff Signed a Data-Sharing Contract With No Way to Audit It

The Clear Creek County Sheriff's Office joined the Colorado Information Sharing Consortium in 2024, signing a standard LexisNexis addendum that commits the agency's records to the CISC Data Warehouse — which the contract itself describes as "a PSDEX private container database provided by LN."

The addendum contains a provision the project had not previously documented. Under Section II, agencies are given a choice: initial here to share your data with PSDEX customers across the country, or leave it blank to remain within the CISC container only. Clear Creek left that line blank. The county's 22 deputies produce reports that flow into LexisNexis infrastructure — but, on paper, only to other CISC member agencies.

The problem is the paper. Nothing in the addendum grants the agency any right to audit how its data is used. There is no inspection clause, no access log requirement, no independent verification mechanism. The boundary between "CISC container" and "national PSDEX network" exists as a contractual representation by LexisNexis. Whether that boundary is technically enforced — whether a query run by an ICE analyst in another state can reach Clear Creek's records — is not answerable from the contract alone.

The agency signed. The data moved. The audit never happened, because the contract does not require one.

This is the first CISC member agency addendum in the project's records to make the national opt-in explicit as a discrete initialed choice. It raises the question for all 124 CISC member agencies: how many initialed Section (b), and how many assumed the container wall was real without the means to verify it?