https://www.theregister.com/2023/04/18/ico_surrey_sussex_police/ [user] [user] Sign in / up The Register(r) -- Biting the hand that feeds IT [magn] [burg] [burg] Topics Security Security All SecurityCyber-crimePatchesResearchCSO (X) Off-Prem Off-Prem All Off-PremEdge + IoTChannelPaaS + IaaSSaaS (X) On-Prem On-Prem All On-PremSystemsStorageNetworksHPCPersonal Tech (X) Software Software All SoftwareAI + MLApplicationsDatabasesDevOpsOSesVirtualization (X) Offbeat Offbeat All OffbeatDebatesColumnistsScienceGeek's GuideBOFHLegalBootnotesSite NewsAbout Us (X) Special Features Special Features Spotlight on Databases Defense Tech Week Energy Efficient Datacenters Vendor Voice Vendor Voice Vendor Voice All Vendor VoiceAmazon Web Services (AWS) Business TransformationDDN ElasticGoogle Cloud for Startups (X) Resources Resources Whitepapers Webinars Newsletters [front] Security 19 comment bubble on white Brit cops rapped over app that recorded 200k phone calls 19 comment bubble on white Officers didn't know software was saving personal data and neither did people on other end icon Paul Kunert Tue 18 Apr 2023 // 13:38 UTC # Several police forces in Britain are being put on the naughty step by the UK's data watchdog for using a calling app that recorded hundreds of thousands of phone conversations and illegally retained that data. The Information Commissioner's Office (ICO) said today it was made aware in June 2020 that Surrey Police and Sussex Police were given access to the Another Call Recorder app that recorded all incoming and outgoing conversations. Some 1,015 staff downloaded the software on their work phones and made more than 200,000 records of phone chats, which the regulator reckons was likely with "victims, witnesses, and perpetrators of suspected crimes" and were "automatically saved." [front] However, the ICO thinks it probable that the app captured a range of personal information during these calls, and the "processing of some of this data was unfair and unlawful. The police officers were themselves unaware that calls would be recorded and so were the people on the other end of the line," the watchdog added. [front] [front] The app was first made available in 2016 and was intended to be used by a small subset of specific officers, yet the Sussex and Surrey forces made it open for all staff to download. It's no longer used and the recordings, save for those containing evidential material, were destroyed. The ICO could have issued a PS1 million ($1.24 million) fine to both forces, which represent two counties in the south of England, but instead opted for its revised public sector approach in which it seeks to help entities learn from their mistakes, hence the reprimand. [front] In a statement, Stephen Bonner, ICO Deputy Commissioner, said: "People have the right to expect that when they speak to a police officer, the information they disclose is handled responsibly. We can only estimate the huge amount of personal data collected during these conversations, including highly sensitive information relating to suspected crimes. "The reprimand reflects the use of the ICO's wider powers towards the public sector as large fines could lead to reduced budgets for the provision of vital services. This case highlights why the ICO is pursuing a different approach, as fining Surrey Police and Sussex Police risks impacting the victims of crime in the area once again." * Marketing biz sent 107 million spam emails... to just 437k people * Criminal records office yanks web portal offline amid 'cyber security incident' * UK data watchdog slaps Ministry of Justice with Enforcement Notice for breaking GDPR law * UK police lack framework for adopting new tech like AI and face recognition, Lords told In a joint statement, Surrey Police and Sussex Police said the app was meant to be used by a small number of specialist hostage negotiators to support kidnap and crisis negotiations. They said the app was used on 432 phones and 1,024 officers downloaded the app, according to their findings. "There was no means at that time of restricting use of the app and, unintentionally, it was enabled for all staff to download without appropriate guidance in place. When enabled, the app records and stores all phone calls made in the mobile device. "The forces took immediate action when the error was identified in March 2020 including removing access to the app, securing evidence and self-referring the breach to the relevant regulators." [front] "At no point was any risk or harm to any data subject identified," they added. New governance was put in place to ensure news app are compliant with existing legislation, and all staff now have instructions on data protection for the use of apps. (r) Get our Tech Resources # Share Similar topics * App * ICO * Police More like these x Similar topics * App * ICO * Police * Privacy Narrower topics * App stores * cookies * Interpol * Privacy Sandbox Broader topics * Government of the United Kingdom * Software Similar topics # Share 19 comment bubble on white COMMENTS Similar topics * App * ICO * Police More like these x Similar topics * App * ICO * Police * Privacy Narrower topics * App stores * cookies * Interpol * Privacy Sandbox Broader topics * Government of the United Kingdom * Software TIP US OFF Send us news --------------------------------------------------------------------- Other stories you might like Google: If your Android app can create accounts, it better be easy to delete them, too Awoogah, awooooogah, new policy coming for developers Personal Tech7 Apr 2023 | 14 US police have run nearly 1M Clearview AI searches, says founder Crimes Clearview has helped solve include murder and the devastating scourge of ... shoplifting AI + ML28 Mar 2023 | 15 Marketing biz sent 107 million spam emails... to just 437k people Recruitment company fined PS130,000 by data regulator for breaking PECR Security17 Apr 2023 | 15 The age of acceleration engines Why CPU core counts may not be as important as you think Sponsored Feature [front] Smile! UK cops reckon they've ironed out gremlins with real-time facial recog Report says code has improved - and thousands could still end up falsely ID'd, argue privacy advocates AI + ML6 Apr 2023 | 39 Criminal records office yanks web portal offline amid 'cyber security incident' ACRO says payment data safe, other info may have been snaffled Cyber-crime6 Apr 2023 | 20 Canada sticks a privacy probe into OpenAI's ChatGPT Chatbot's overseers accused of collecting, using, disclosing personal info without consent AI + ML6 Apr 2023 | 6 Russia-pushed UN Cybercrime Treaty may rewrite global law. It's ... not great Special report Let's go through all the proposed problematic powers, starting with surveillance and censorship Cyber-crime14 Apr 2023 | 22 Twitter users complain 'private' Circle posts aren't Sorry, make that Titter. We can explain Personal Tech10 Apr 2023 | 27 SHEIN has the look of America's next tech-meets-geopolitics fit-up Chinese fast fashion vendor could be this season's TikTok thanks to alleged tax evasion, slave labour, toxic goods, and an outsized carbon footprint Personal Tech29 Mar 2023 | 18 Google (sort of) loses in Indian antitrust appeal Updated $161 million slap-on-the-wrist fine stands, but major restrictions are eased Legal30 Mar 2023 | 4 Europol warns ChatGPT already helping folks commit crimes There is no honor among chatbots AI + ML28 Mar 2023 | 48 The Register icon Biting the hand that feeds IT About Us* * Contact us * Advertise with us * Who we are Our Websites* * The Next Platform * DevClass * Blocks and Files Your Privacy* * Cookies Policy * Privacy Policy * T's & C's * Do not sell my personal information Situation Publishing Copyright. All rights reserved (c) 1998-2023 no-js