ICO Reprimands Met Over Third-Party Data Leak
UK ICO reprimands the Metropolitan Police after personal data on 179 people reached unapproved Auror.
The UK Information Commissioner's Office reprimanded the Metropolitan Police Service and issued an enforcement notice over its use of the Auror retail-crime platform. Between March 2023 and September 2024, officers used Auror without formal approval; about 500 accounts were created and 375 were active. From January to September 2024, names, dates of birth, and home addresses for 179 people, including three children, were uploaded. The ICO found unlawful processing, weak safeguards, no prior DPIA, and continued gaps in approving third-party technology.
46