- The Information Commissioner’s Office (ICO) has ordered the Metropolitan Police to review its data protection policies, citing “weak” and “serious shortcomings” in their practices.
- This directive follows two significant data breaches, including one where a female stalking victim’s address and phone number were sent to the defendant, forcing her to move house.
- In another incident, related to the alleged Westminster “honeytrap” case, the Met failed to blind-copy recipients in an email, inadvertently revealing the identities of 18 people linked to Parliament.
- The ICO noted that the officer responsible for the email in the “honeytrap” case had not completed data protection training for over four years, highlighting systemic issues within the force.
- The ICO has issued a reprimand and an enforcement notice, stating that these incidents were “foreseeable and preventable” and demanding improved training, monitoring, and enforcement of data protection policies.
IN FULL
