home.social

#informationcommissionersoffice — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #informationcommissionersoffice, aggregated by home.social.

fetched live
  1. CYBER ATTACK: Dyfed-Powys Police hit, and the force still can’t say whether staff data was accessed

    Dyfed-Powys Police has been hit by a cyber attack, and nearly two weeks on it still cannot say whether information about its own staff was accessed.

    It took the force 11 days to go public. The attack was spotted on Monday 14 September, but only confirmed on Friday.

    It hit some of the force’s non-emergency systems, and for a time people could not contact it online or by email.

    No sign the public’s data was hit, Dyfed-Powys Police says, but staff details still being checked

    So far, the force says, its investigation has found no evidence that members of the public’s personal data has been accessed or compromised.

    It is still investigating whether any information relating to staff was, and says it is taking steps to protect that information and will advise colleagues if needed.

    The Information Commissioner’s Office, the UK’s data protection regulator, has been told.

    999 and 101 kept working as Dyfed-Powys Police online contact went down

    The force insists it remains fully operational, and says its response to emergencies has not been affected.

    The 999 and 101 phone lines kept working throughout, it says. Online and email contact has now been restored.

    Its systems have been under precautionary measures while specialist teams investigate and work to bring services back safely, the force says.

    Tarian’s cyber-crime unit takes charge of the Dyfed-Powys investigation

    The force describes what happened as a “cyber incident”. The investigation is being run by Tarian, the regional organised crime unit for southern Wales, through its cyber-crime unit, with help from cyber-security specialists.

    The force says it is monitoring its systems closely.

    It says it understands the attack may cause concern, and has promised further updates when it is able to give them.

    Dyfed-Powys Police covers Carmarthenshire, Pembrokeshire, Ceredigion and Powys.

    From a police legal database to Jaguar Land Rover, the cyber attacks that went before

    It is not the first time this summer that police in Wales have been caught up in a cyber attack.

    In July, hackers got into the Police National Legal Database, an online legal reference service used by every Home Office force in England and Wales.

    Its operators said names, organisations and work email addresses of police officers, staff and criminal justice professionals were accessed. The names and emails of members of the public who had sent in questions through its Ask the Police website were also compromised.

    Dyfed-Powys Police has not said what caused its own attack, or who was behind it.

    Closer to home, last year’s cyber attack on Jaguar Land Rover halted the carmaker’s production across the UK and hit workers at two Llanelli suppliers, Marelli and Gestamp, where agency staff were laid off and overtime scrapped.

    Related stories from Swansea Bay News

    Llanelli workers face pre-Christmas earnings hit after Jaguar Land Rover cyber attack
    How last year’s attack on the carmaker reached two Llanelli factories.

    Dyfed-Powys Police news
    The latest from the force covering Carmarthenshire and west Wales.

    #cyberAttack #cyberCrime #DyfedPowysPolice #InformationCommissionerSOffice #Tarian
  2. UK Watchdog Warns Police on Facial Recognition Data Governance

    The UK's Information Commissioner's Office warns that police use of facial recognition technology poses significant risks to privacy and individual rights if not governed properly. A recent audit of five police forces revealed inconsistent compliance with data protection laws, highlighting an urgent need for improved…

    osintsights.com/uk-watchdog-wa

    #FacialRecognition #DataGovernance #LawEnforcement #InformationCommissionersOffice #Uk

  3. UK Watchdog Reprimands ACRO for 2023 Data Breach Failings

    A major security blunder at the Criminal Records Office (ACRO) left 10,920 people vulnerable to a data breach after a hacker gained unauthorized access to its website and content management system for a staggering eight months. The Information Commissioner's Office (ICO) has now reprimanded ACRO for its failings in preventing this massive breach.

    osintsights.com/uk-watchdog-re

    #DataBreach #Uk #Acro #InformationCommissionersOffice #Ico

  4. UK Criminal Records Office Breach Exposes 11,000 People's Sensitive Data

    A shocking data breach at the UK's Criminal Records Office has left 11,000 individuals vulnerable after sensitive information was exposed due to basic cyber security failings. The breach went undetected for seven months, highlighting the devastating consequences of neglecting online security.

    osintsights.com/uk-criminal-re

    #DataBreach #Uk #PersonalDataProtection #InformationCommissionersOffice #EmergingThreats

  5. UK Police Expose Victim Data to Stalker, Regulator Warns

    When victims share their most sensitive information with the police, they trust that it will be kept safe - but in two shocking data breaches, the Metropolitan Police Service let that trust down, putting a stalking victim's new address and number at risk. The incidents have sparked a stern warning from regulators…

    osintsights.com/uk-police-expo

    #DataBreaches #LawEnforcement #Stalking #InformationCommissionersOffice #MetropolitanPoliceService

  6. UK Duo Ordered to Repay £118k for Selling Car Crash Victims' Data

    Two former RAC employees have been ordered to repay £118k for selling personal data of car crash victims, a stark reminder that justice can extend far beyond prison sentences. This significant repayment demonstrates the Information Commissioner's Office's commitment to upholding data protection laws.

    osintsights.com/uk-duo-ordered

    #DataBreach #DataProtection #UnitedKingdom #InformationCommissionersOffice #DataMisuse

  7. UK's ICO Unveils Five-Step Plan to Counter AI-Powered Cyber Threats

    Boost your organization's defenses against AI-powered cyber threats with the UK's ICO five-step plan, and build public trust by putting robust security measures in place to protect personal data. By investing in cyber resilience, you can safeguard the data you hold and foster confidence…

    osintsights.com/uks-ico-unveil

    #AipoweredCyberThreats #CyberResilience #UnitedKingdom #InformationCommissionersOffice #NationalCyberSecurityCentre

  8. UK Water Supplier Fined $1.3M for Data Exposure Lapse

    A UK water supplier has been slapped with a $1.3 million fine after a devastating cyber attack exposed the personal data of nearly 664,000 customers and employees, with sensitive information even being published on the dark web. The hefty penalty was reduced by 40% after the company admitted liability and cooperated with investigators.

    osintsights.com/uk-water-suppl

    #DataExposure #Uk #WaterSector #EmergingThreats #InformationCommissionersOffice

  9. UK Data Watchdog Chief Steps Back Amid Workplace Probe

    UK's top data watchdog, John Edwards, has temporarily stepped down from his role amid an independent workplace investigation, cooperating fully with the probe. He made the announcement via LinkedIn, confirming his voluntary leave of duties as head of the Information Commissioner's Office.

    osintsights.com/uk-data-watchd

    #UkDataWatchdog #InformationCommissionersOffice #Ico #JohnEdwards #WorkplaceInvestigation

  10. Swansea city centre live facial recognition cameras return on September 26

    South Wales Police have confirmed that Live Facial Recognition (LFR) technology will be deployed across Swansea city centre on Friday, September 26. The force says the system will help officers identify wanted individuals and high‑risk missing people as part of ongoing public safety measures.

    Marked vehicles and signage will highlight the areas where cameras are in use, and officers will be available to answer questions or provide demonstrations.

    Before each deployment, police compile a watchlist of individuals who are either wanted by the courts, suspected of offences, or considered at risk of harm. Cameras then scan faces in real time and compare them against the watchlist. If a possible match is flagged, an officer makes a visual check before deciding whether to approach the person.

    South Wales Police stressed that anyone not on the watchlist cannot be identified. Images of people who do not trigger an alert are deleted immediately, while alerts are wiped within 24 hours. CCTV footage used by the system is retained for 31 days.

    How the technology works in Swansea

    The LFR system uses cameras to scan faces in real time and compare them against a police watchlist. Officers then decide whether to engage with anyone flagged by the system.

    Police say the technology is used to locate suspects, wanted people and vulnerable missing individuals. They emphasise that images of people not on the watchlist are never stored.

    🖥️ What is facial recognition?

    Live Facial Recognition (LFR)
    Cameras scan faces in real time and check them against a watchlist of wanted or high‑risk individuals.

    Retrospective Facial Recognition (RFR)
    Still images from CCTV, body‑worn cameras or social media are checked against police databases after an incident.

    Operator‑Initiated Facial Recognition (OIFR)
    Officers can take a photo on a mobile device and check it instantly against police records.

    Why police use it: To identify suspects, find missing people and protect the public.

    Why campaigners are concerned: Could be used without enough legal safeguards, misidentify innocent people or expand surveillance in public spaces.

    Why South Wales Police say it’s needed

    South Wales Police have been one of the UK’s leading adopters of facial recognition technology, deploying it at major events and in busy town centres. Earlier this year, the force confirmed similar operations in Bridgend and during Operation Sceptre week in Swansea.

    The technology is part of a wider rollout that includes a mobile facial recognition app for frontline officers in South Wales and Gwent. Known as Operator Initiated Facial Recognition (OIFR), the app has already led to arrests and the identification of missing people.

    What campaigners are warning about

    An audit by the Information Commissioner’s Office (ICO) earlier this year gave South Wales Police’s use of both live and retrospective facial recognition a “high” assurance rating, citing strong safeguards and oversight. The watchdog found no evidence of bias across age, gender or ethnicity.

    However, campaigners remain sceptical. Groups such as Big Brother Watch argue that live facial recognition represents a “significant expansion of the surveillance state” and risks treating “every passer‑by as a walking barcode.” Critics also point out that there is still no dedicated law governing police use of the technology.

    What happens next

    The force has encouraged anyone with questions or concerns to speak directly to officers during Friday’s deployment. Information leaflets will also be available, and further details about how the technology works can be found on the South Wales Police website.

    Related stories from Swansea Bay News

    Watchdog gives high marks to South Wales Police over facial recognition use – but campaigners remain wary
    Independent review praised safeguards but critics say concerns remain.

    Your face, their tech: Police turn facial recognition back on in Bridgend
    Deployment in town centre reignited debate over privacy and policing.

    South Wales and Gwent Police roll out facial recognition app to frontline officers amid privacy concerns
    New mobile app allows instant checks against police databases.

    Police to use live facial recognition cameras in Swansea city centre
    Previous deployment in Swansea highlighted public engagement efforts.

    South Wales Police restarts facial recognition tech usage – although critics reiterate privacy concerns
    Civil liberties groups continue to call for stronger legal safeguards.

    #BigBrotherWatch #CCTV #FacialRecognition #ICO #InformationCommissionerSOffice #LiveFacialRecognition #PoliceWatchlist #privacy #SouthWalesPolice #Swansea #SwanseaCityCentre #Technology #watchlist

  11. Watchdog gives high marks to South Wales Police over facial recognition use — but campaigners remain wary

    The Information Commissioner’s Office (ICO) – which enforces data protection laws – carried out an audit looking at live facial recognition (real‑time camera scans against a police watchlist), retrospective facial recognition (checking images after an incident), and a new operator‑initiated system being trialled on police mobile devices.

    What the ICO found

    The audit gave both live and retrospective systems a “high” assurance rating, meaning the watchdog found good safeguards in place and only limited room for improvement.

    The ICO said the forces:

    • Have clear rules and oversight for when and how the technology is used
    • Make sure images for watchlists are lawfully obtained
    • Carry out privacy impact checks before deployments
    • Engage with the public during live operations
    • Review every retrospective search afterwards and report the results to oversight meetings

    Some recommendations were made, including tightening up how document changes are recorded and making sure data retention rules are always applied consistently.

    🖥️ What is facial recognition?

    Live Facial Recognition (LFR)
    Cameras scan faces in real time and check them against a watchlist of wanted or high‑risk individuals.

    Retrospective Facial Recognition (RFR)
    Still images from CCTV, body‑worn cameras or social media are checked against police databases after an incident.

    Operator‑Initiated Facial Recognition (OIFR)
    A trial system allowing officers to take a photo on a mobile device and check it instantly against police records.

    Why police use it: To identify suspects, find missing people and protect the public.

    Why campaigners are concerned: Could be used without enough legal safeguards, misidentify innocent people or expand surveillance in public spaces.

    Police response

    Chief Superintendent Tim Morgan, from the joint South Wales and Gwent digital services department, said the findings show the forces are “in a stronger position than ever” to prove the technology is used fairly, legally and ethically.

    He stressed there have been no wrongful arrests and no false alerts for several years, and that independent testing has shown the system does not discriminate by gender, age or race.

    “Our priority is to keep the public safe and this technology continues to help us bring offenders to justice and protect the public,” he said.

    Concerns from privacy campaigners

    Not everyone is reassured. Civil liberties group Big Brother Watch has long argued that live facial recognition represents a “significant expansion of the surveillance state” and risks treating “every passer‑by as a walking barcode”.

    Campaigners say there is still no dedicated law governing police use of the technology, and warn that even with safeguards, it can be inaccurate in real‑world conditions or misidentify people from minority backgrounds. They are calling for a pause on further roll‑outs until robust legal protections are in place.

    Background

    South Wales Police has been one of the UK’s early adopters of facial recognition, using it at major events and in targeted operations. The force says it only uses the technology when there is a clear policing need, and in line with national guidance brought in after a legal challenge in 2020.

    The ICO’s audit is the first in a new series looking at police use of facial recognition across England and Wales. Further audits of other forces are planned.

    #BigBrotherWatch #CivilLiberties #FacialRecognition #ICO #InformationCommissionerSOffice #LiveFacialRecognition #privacy #SouthWalesPolice

  12. Brytyjskie ICO otwiera śledztwo w sprawie TikToka dotyczące wykorzystania danych dzieci

    Śledztwo ze strony Information Commissioner’s Office – brytyjskiego odpowiednika UODO – obejmie wykorzystanie przez tę platformę danych przesyłanych przez dzieci od 13. do 17. roku życia.

    kontrabanda.net/r/brytyjskie-i

    #Cyberbezpieczeństwo #InformationCommissionerSOffice #TikTok #WielkaBrytania

  13. The #InformationCommissionersOffice #ICO releases a joint statment with 11 other non-EU #DataProtection Authorities around the world claiming that social media sites must take active steps to prevent data #scraping, else it may be considered a #dataBreach. Nothing on more enforcement against (illegitimate) scrapers, though... ico.org.uk/media/about-the-ico

  14. TikTok Is Fined $15.9 Million Over Misusing Kids’ Data in Britain - The video-sharing app inappropriately allowed more than one million underage children in ... - nytimes.com/2023/04/04/busines #informationcommissionersoffice(greatbritain) #tiktok(bytedance) #fines(penalties) #childrensprivacy #greatbritain #socialmedia #privacy

  15. TikTok May Face $29 Million Fine for Failing to Protect Children’s Privacy - British regulars have sent a warning notice to the company, the first major case under ne... - nytimes.com/2022/09/26/technol #informationcommissionersoffice(greatbritain) #mobileapplications #tiktok(bytedance) #childrensprivacy #socialnetworking #childrenscode #videosharing #musicvideo #privacy

  16. Clearview AI fined $22.6 million by U.K. privacy commissioner. - The Information Commissioner’s Office said it fined Clearview AI for failing to inform Br... - nytimes.com/2021/11/29/technol #informationcommissionersoffice(greatbritain) #clearviewaiinc #ton-thathoan #greatbritain

  17. UK dials up the spin on data reform, claiming ‘simplified’ rules will drive ‘responsible’ data sharing - The UK government has announced a consultation on plans to shake up the national d... - feedproxy.google.com/~r/Techcr #informationcommissionersoffice #artificialintelligence #moorfieldseyehospital #dataprocessing #google-health #unitedkingdom #deeplearning #oliverdowden #ukgovernment #johnedwards #healthcare #deepmind #privacy #europe #policy #google #ukgdpr

  18. EasyJet says 9 million travel records taken in data breach - EasyJet, the U.K.’s largest airline, said hackers have accessed the travel details of 9 million cust... more: feedproxy.google.com/~r/Techcr #informationcommissionersoffice #securitybreaches #businesstravel #unitedkingdom #datasecurity #databreach #security #airlines #nofrills #airline

  19. Cathay Pacific fined £500k by UK’s ICO over data breach disclosed in 2018 - Cathay Pacific has been issued with a £500,000 penalty by the UK’s data watchdog for security lapses... more: feedproxy.google.com/~r/Techcr #generaldataprotectionregulation #informationcommissionersoffice #computersecurity #cathaypacific #europeanunion #unitedkingdom #datasecurity #databreach #antivirus #privacy #airline #europe

  20. Facebook agrees to pay UK data watchdog’s Cambridge Analytica fine but settles without admitting liability - Facebook has reached a settlement with the UK’s data protection watchdog, the ICO, agreeing to pay ... more: feedproxy.google.com/~r/Techcr #informationcommissionersoffice #cambridgeanalytica #dataprotectionlaw #elizabethdenham #europeanunion #unitedkingdom #facebook #privacy #europe #social #apps #ico

Share on Mastodon

Enter the server where you have an account.