As I understand it, ACPO are a private company set up by senior police officers to enable them to make lots of money from their experience and wide ranging contacts in government and the police. I don't mind them being paid to give their expert opinion and advice or to carry out expert audits etc. I'd do that if I had the relevant experience.
However, I wonder how it is that a private company, with no statutory authority, can take a copy of highly confidential and sensitive information and then sell it to another 'company' which has no statutory authority.
Who else are they selling this information to? Could it be those banks and financial institutions, involved in illegal information gathering, that SOCA have known about but refuse to identify. (SOCA, another group of senior and experienced police officers.) It all looks very cosy doesn't it?