'ATF should better adhere to its policies': GAO

From the report:

Of the four data systems we reviewed, two systems were in full
compliance with the appropriations act restriction. The other two data
systems did not always comply with the restriction, although ATF
addressed the compliance issues during the course of our review. In
addition, three data systems could better adhere to ATF policies.
Specifically:
• OBRIS complies with the appropriations act restriction and adheres to
ATF policies.
• A2K for in-business industry members’ records complies with the
appropriations act restriction, but ATF’s collection and maintenance of
A2K out-of-business records in A2K on a server at NTC violated the
appropriations act restriction. ATF deleted the records from the server
in March 2016. In addition, industry members may benefit from clearer
ATF guidance to ensure that they are submitting out-of-business
records as required.
• FRNP generally complies with the appropriations act restriction.
However, a regional program using FRNP from 2007 through 2009
did not comply with the restriction, and ATF removed the data it
collected through this program from FRNP in March 2016.44 Further,
FRNP generally adheres to ATF policies, but a technical defect allows
ATF agents to view and print FRNP data beyond what ATF policy
permits.
• MS complies with the appropriations act restriction, but ATF continues
to inconsistently adhere to its own policy when deleting these records.
For a more detailed legal analysis of compliance with the appropriations
act restriction, see appendix VII.

For the entire report in PDF format, see http://www.gao.gov/assets/680/678091.pdf