As cited
Copy frozen at (site build).
regulatory
Metropolitan Police's unchecked use of shoplifting platform lands force in trouble with data watchdog
The Information Commissioner's Office (ICO) reprimanded London's Metropolitan Police Service (MPS) for officers using the Auror retail crime platform for over 18 months without formal approval, data protection impact assessment (DPIA), or data-sharing agreements. Between March 2023 and September 2024, around 500 officers uploaded personal data of 179 people, including children, to the platform without adequate oversight, revealing failures in governance that persist today. The ICO enforcement notice requires the MPS to strengthen safeguards against unapproved third-party tools and provide periodic progress updates, though the MPS has since obtained formal approval and resumed using Auror in 14 London boroughs.
Why it matters: Police forces and any organization using third-party platforms to process personal data must implement formal approval, data protection assessments, and data-sharing agreements before deployment, and enforce technical controls rather than relying on policy reminders alone.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
regulatory
Metropolitan Police's unchecked use of shoplifting platform lands force in trouble with data watchdog
The Information Commissioner's Office (ICO) reprimanded London's Metropolitan Police Service (MPS) for officers using the Auror retail crime platform for over 18 months without formal approval, data protection impact assessment (DPIA), or data-sharing agreements. Between March 2023 and September 2024, around 500 officers uploaded personal data of 179 people, including children, to the platform without adequate oversight, revealing failures in governance that persist today. The ICO enforcement notice requires the MPS to strengthen safeguards against unapproved third-party tools and provide periodic progress updates, though the MPS has since obtained formal approval and resumed using Auror in 14 London boroughs.
Why it matters: Police forces and any organization using third-party platforms to process personal data must implement formal approval, data protection assessments, and data-sharing agreements before deployment, and enforce technical controls rather than relying on policy reminders alone.
- Source published
- First seen by Cybersecurity Tracker