Title 28 of the Code of Federal Regulations, part 23, governs what information can be put in a law inforcement database and how it can be used. The regulation states that all criminal intelligence systems "shall collect information concerning an individual only if there is reasonable suspicion that the individual is involved in criminal activity and the information is relevant to that criminal conduct or activity.
And the law limits the dissemination of Law Enforcement intelligence to situations in which 'there is a need to know the information in the performance of a law enforcement activity."