Police leak sexual assault victims identities online

[glazbagun]

This seems scarecely believable:

https://www.bbc.co.uk/news/uk-england-suffolk-6363...

bbc said:

An investigation has begun after the personal details of sexual abuse victims appeared on a police website.

What is the penalty for fk8ng up something like this?

[otolith]

glazbagun said:

What is the penalty for fk8ng up something like this?

For the private sector, this;

https://ico.org.uk/for-organisations/guide-to-data...

For the state, dunno. Maybe they have to learn some lessons?

[Jenny Tailor]

The cynic in me says that this is one way to cut down on the crime figures.

Would you feel comfortable reporting it to the police??


A penny to a pound that someone has already harvested that info and will look to profit from it.

[sociopath]

glazbagun said:

This seems scarecely believable:

https://www.bbc.co.uk/news/uk-england-suffolk-6363...

bbc said:

An investigation has begun after the personal details of sexual abuse victims appeared on a police website.

What is the penalty for fk8ng up something like this?

It's not easy to post personal data by accident.
Someone knew what they were doing.

[sociopath]

otolith said:

glazbagun said:

What is the penalty for fk8ng up something like this?

For the private sector, this;

https://ico.org.uk/for-organisations/guide-to-data...

For the state, dunno. Maybe they have to learn some lessons?

They'll already have been learnt and "processes changed" , and no one will be punished as they're trying to move on.

[Biggy Stardust]

sociopath said:

They'll already have been learnt and "processes changed" , and no one will be punished as they're trying to move on.

You forgot "We don't want a culture of blame".

[sociopath]

Biggy Stardust said:

sociopath said:

They'll already have been learnt and "processes changed" , and no one will be punished as they're trying to move on.

You forgot "We don't want a culture of blame".

Are you criticising my post?
I'm heartily offended and would like you to open an investigation.

[Hugo Stiglitz]

I'm going with a hack.

[bitchstewie]

glazbagun said:

What is the penalty for fk8ng up something like this?

Lessons will be learned at a guess.

[Biggy Stardust]

sociopath said:

Are you criticising my post?
I'm heartily offended and would like you to open an investigation.

You think the investigation will reach a worthwhile conclusion? Bless.

[sociopath]

Biggy Stardust said:

sociopath said:

Are you criticising my post?
I'm heartily offended and would like you to open an investigation.

You think the investigation will reach a worthwhile conclusion? Bless.

Have lessons been learnt?

[glazbagun]

sociopath said:

It's not easy to post personal data by accident.
Someone knew what they were doing.

That did occur to me. CCing someone into an email is maybe a quick brain fart, but publishing a database on a website seems hard to do by omission,

[pavarotti1980]

otolith said:

For the private sector, this;

https://ico.org.uk/for-organisations/guide-to-data...

For the state, dunno. Maybe they have to learn some lessons?

Same for the public sector too

[otolith]

pavarotti1980 said:

otolith said:

For the private sector, this;

https://ico.org.uk/for-organisations/guide-to-data...

For the state, dunno. Maybe they have to learn some lessons?

Same for the public sector too

Ah, so the left hand will fine the right hand.

[CraigyMc]

This is so dangerous for those whose details are now public -- rapists can know their accusers, because the police told them.

Something being online for minutes puts it in the public domain. People will have copied this data. Taking it down again afterwards is necessary but it's also locking the door after the horse has bolted.

The police force need to be sued over this and a proper investigation needs to take place through the IOPC.

Nobody is saying this was done on purpose. Yet. It's to be established.

[Biggy Stardust]

CraigyMc said:

This is so dangerous for those whose details are now public -- rapists can know their accusers, because the police told them.

At the risk of upsetting people, surely it's an accused's right to face their accuser? Otherwise we can accuse anyone of anything, knowing that our identity is safely hidden. How can both sides of the story otherwise be heard? The US 6th amendment is an example.
"Let my accuser come face to face and be deposed!'' Sir Walter Raleigh 1603

CraigyMc said:

Something being online for minutes puts it in the public domain. People will have copied this data. Taking it down again afterwards is necessary but it's also locking the door after the horse has bolted.

The police force need to be sued over this and a proper investigation needs to take place through the IOPC.

Nobody is saying this was done on purpose. Yet. It's to be established.

Nobody will be found to have done anything wrong; it will be a systemic or procedural error from which lessons will be learned. It would be wrong to hold anyone accountable as this would establish an unwanted precedent whereby members of the public sector will be fearful of suffering the consequences of their actions, intended or otherwise.

Edited by Biggy Stardust on Wednesday 16th November 20:35

[Earthdweller]

sociopath said:

glazbagun said:

This seems scarecely believable:

https://www.bbc.co.uk/news/uk-england-suffolk-6363...

bbc said:

An investigation has begun after the personal details of sexual abuse victims appeared on a police website.

What is the penalty for fk8ng up something like this?

It's not easy to post personal data by accident.
Someone knew what they were doing.

Or more likely didn’t know what they were doing

[Earthdweller]

MrBogSmith said:

Hugo Stiglitz said:

I'm going with a hack.

It does seem an odd route to get the data online.

You have a front-end website for the 'business', and then you have data systems (Crime Management Systems) with victim data etc.

Not sure how they've connected without some malice / intent.

But the victim data is all in separate records with no links to each other

Somebody would have to search all the records and create a separate file

I think that all the details could be extracted into a spreadsheet via the crime management tools if you know what you’re doing and I’d guess have supervisors access levels and authorities

It would make me guess that a database was created for sharing internally/with partner agencies securely and some muppet has added it to a part of the public side of the system erroneously

I can’t see it being hacked tbf

Whatever happened it’s a major fk up without doubt

[glazbagun]

Biggy Stardust said:

CraigyMc said:

This is so dangerous for those whose details are now public -- rapists can know their accusers, because the police told them.

At the risk of upsetting people, surely it's an accused's right to face their accuser? Otherwise we can accuse anyone of anything, knowing that our identity is safely hidden. How can both sides of the story otherwise be heard? The US 6th amendment is an example.
"Let my accuser come face to face and be deposed!'' Sir Walter Raleigh 1603

They can face them in court. If you're assaulted in a pub by a group of feral random lowlifes you think they should be given your name, address, DOB via the police website so they can come round to your house and remonstrate?

[CraigyMc]

Biggy Stardust said:

CraigyMc said:

This is so dangerous for those whose details are now public -- rapists can know their accusers, because the police told them.

At the risk of upsetting people, surely it's an accused's right to face their accuser? Otherwise we can accuse anyone of anything, knowing that our identity is safely hidden. How can both sides of the story otherwise be heard? The US 6th amendment is an example.
"Let my accuser come face to face and be deposed!'' Sir Walter Raleigh 1603

Biggy, please read this. It is not a long read.
--> https://www.parliament.uk/business/publications/re...

Then tell me if it has changed anything for you, other than your understanding of current law in this area.