DriversRecommendedOutdated drivers can make a good PC feel brokenScan driver issues before chasing fixes manually.Scan NowHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan Now×
Skip to content
World desk4 min

ICO Reprimands Met Over Unapproved Third-Party Shoplifting Data Platform

The ICO found the Metropolitan Police used an unapproved retail-crime intelligence platform without adequate lawful-processing controls, a prior DPIA or effective oversight. Information on 179 people, including three minors, was uploaded before the force suspended and later reintroduced the service under new controls.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The UK Information Commissioner’s Office (ICO) has reprimanded the Metropolitan Police Service (MPS) and issued an enforcement notice after finding that officers and staff uploaded personal information to an unapproved third-party retail-crime intelligence platform without the required legal basis, risk assessment or oversight. The ICO announced the action on 14 October 2026; its enforcement record dates the combined action to 23 September 2026.

Why the ICO acted

The MPS used the platform from March 2023 to September 2024 to help identify suspected shoplifters. The force had not formally approved the service for processing personal information. The ICO found that the MPS failed to maintain adequate controls ensuring that personnel used only approved third-party technologies.

As an Amazon Associate I earn from qualifying purchases.

In the regulator’s assessment, some sharing was not necessary for law-enforcement purposes and therefore lacked a lawful basis under the Data Protection Act 2018. The action concerns infringements framed under sections 35(1), 40 and 64(1), covering lawful processing, appropriate safeguards and data-protection impact assessments in this law-enforcement context.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What information was uploaded

About 500 accounts were created on the service, of which 375 were actively used for policing. Between January and September 2024, personnel uploaded information relating to 179 people while trying to identify suspected shoplifters. Three of the affected people were under 18.

#1 Best Overall
ANNKE 3K Lite Wired Security Camera System Outdoor, 8X 2MP Cameras, 1TB HDD
  • AI Motion Detection 2.0 – Driving AI to the next level, human&vehicle detection and flexible detection area are more accurate than before. For quicker locating in crucial moments, human&vehicle smart searching in recordings offers you great help.
  • Tried-and-True Safe Guard – This one-stop security solution can work with TVI, AHD, CVI, CVBS & IP cameras, the kit includes 1080P cams. The 8CH 3K lite DVR can hook up with 1080P@30fps or 3K/5MP@20fps cams. Therefore, you can also DIY it with other cameras in your home.
  • Reliable 24/7 Continuous Recording – With a pre-installed 1TB HDD(Support up to 10TB HDD), providing 24/7 surveillance recording for you. Upgraded H.265+ saves more storage space and uses less bandwidth, recording videos longer and smoother viewing.
  • Smart Dual-Light Effectively Guard Your Home – This newly upgraded security system offers you a crisp full color night vision, IR mode and color night vision switch flexibly. Once detect intruders, immediate pushes pop up on your phone, securing your peace of mind day&night.
  • Color Night Vision & IP67 Weatherproof – Built-in IR lights and white lights, these cameras can see up to 100ft in B&W night vision, full-color night vision up to 66ft. Rated IP67, these wired cameras can brave all weather, and stand from cold to hot.

The records included names and dates of birth. In a small number of cases, they also included home addresses. The figures describe people whose information was uploaded, not necessarily confirmed shoplifters or people who were charged with an offence.

What controls were missing

No formal approval for the technology

The MPS had not formally authorised the platform before it was used. That gap meant the service entered operational use without the organisation’s normal third-party approval controls.

Rank #2
Sale
aosu D1 Classic 4-Cam Kit, Security Cameras Wireless Outdoor, Solar Powered | No Subscription Required, 32GB Built-in Storage, 360° Auto Tracking, 2K (3MP) Full-Color Night Vision, Easy Install
  • One Unified Security System, Powered by 1st-Gen aosuBase: 32GB of local storage comes ready to use, holding about 120 days of loop recording. No subscription required. Connect up to 4 cameras to one base with a stable wireless connection and centralized local storage. Recordings saved to aosuBase are event-based, triggered by detected activity.
  • Multi-Cam Live View for All-at-Once Monitoring: Watch up to four live camera feeds simultaneously in the aosu app and monitor multiple areas on one screen without opening each camera individually. Live View is available through the aosu app only; the base does not support HDMI or TV output.
  • 360° Coverage with Pan, Tilt, and Smart Auto Tracking: Pan and tilt to see all around your property. When activity is detected, the camera automatically follows people and other movement to keep the action in view while recording, giving you a more complete view of what happens around your home.
  • 2K (3MP) Clarity with Full-Color Night Vision: Capture clear details in 2K and zoom in up to 6x for a closer look. Built-in spotlights enable full-color night vision, helping you see important color details like clothing and vehicles after dark. For more discreet monitoring, switch to infrared mode for black-and-white night vision without visible lighting.
  • Quick Setup with a Pre-Paired System: Connect aosuBase to your router's LAN port with the included Ethernet cable. Cameras connect wirelessly to aosuBase instead of your home Wi-Fi. The system comes pre-paired, so simply power on the cameras and complete setup in the app without pairing each camera one by one. The cameras are designed to work with the included aosuBase, and add-on cameras connect through the base as well.

No data-protection impact assessment before high-risk processing

The ICO found that the MPS had not completed a data-protection impact assessment before processing this type of information. A DPIA is intended to identify and reduce risks before a system handles personal data at scale or in a way that could significantly affect people.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Insufficient technical and organisational measures

The regulator also identified failures to implement appropriate technical and organisational measures. Those measures include governance, access controls, staff responsibilities, contractual protections, monitoring and checks that safeguards continue to work in practice.

Rank #3
Blink Outdoor 4 – Wireless smart security camera, two-year battery life, 1080p HD day and infrared night live view, two-way talk. Sync Module Core included – 3 camera system
  • Outdoor 4 is our most affordable wireless smart security camera yet, offering up to two-year battery life for around-the-clock peace of mind. Local storage not included with Sync Module Core.
  • See and speak from the Blink app — Experience 1080p HD live view, infrared night vision, and crisp two-way audio.
  • Two-year battery life — Set up in minutes and get up to two years of power with the included AA Energizer lithium batteries and a Blink Sync Module Core.
  • Enhanced motion detection — Be alerted to motion faster from your smartphone with dual-zone, enhanced motion detection.
  • Person detection — Get alerts when a person is detected with embedded computer vision (CV) as part of an optional Blink Subscription Plan (sold separately).

Which platform was involved?

The primary ICO materials do not name the vendor. They describe it as an unapproved third-party retail-crime intelligence-sharing platform. Claims that identify a particular supplier go beyond the named regulatory record.

What happened after the MPS discovered the issue

The MPS suspended use of the platform in September 2024. It reintroduced the service in January 2026 after adding stronger governance arrangements, staff training, formal contractual controls and a completed data-protection impact assessment.

Rank #4
Sale
ANNKE 8CH H.265+ 3K Lite Wired Security Camera System,4X 2MP Cam, 1TB HDD
  • 【AI Motion Detection 2.0】Driving AI to the next level, human&vehicle detection and flexible detection area are more accurate than before. For quicker locating in crucial moments, human&vehicle smart searching in recordings offers you great help.
  • 【Tried-and-True Safe Guard】This one-stop security solution can work with TVI, AHD, CVI, CVBS & IP cameras, the kit includes 1080P cams. The 8CH 3K lite DVR can hook up with 1080P@30fps or 3K/5MP@20fps cams. Therefore, you can also DIY it with other cameras in your home.
  • 【Reliable 24/7 Continuous Recording】With a pre-installed 1TB HDD(Support up to 10TB HDD), providing 24/7 surveillance recording for you. Upgraded H.265+ saves more storage space and uses less bandwidth, recording videos longer and smoother viewing.
  • 【Smart Dual-Light Effectively Guard Your Home】This newly upgraded security system offers you a crisp full color night vision, IR mode and color night vision switch flexibly. Once detect intruders, immediate pushes pop up on your phone, securing your peace of mind day&night.
  • 【Color Night Vision & IP67 Weatherproof】Built-in IR lights and white lights, these cameras can see up to 100ft in B&W night vision, full-color night vision up to 66ft. Rated IP67, these wired cameras can brave all weather, and stand from cold to hot.

Those changes did not end the regulatory concern. The ICO said action was still necessary because the case raised wider questions about how the MPS governs third-party technologies, rather than only whether this individual platform had later been brought under control.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What the enforcement notice requires

The notice requires the MPS to make broader, continuing improvements rather than simply close this one incident. The required work includes:

Best Value
Blink Video Doorbell + Outdoor 4 – Wireless smart security cameras, head-to-toe HD view, two-year battery life. Sync Module Core included – 3 camera system + Video Doorbell
  • Video Doorbell is our second-generation smart security doorbell with up to two years of battery life, an expanded field of view, and improved security features for more peace of mind, no matter where you are.
  • Last longer with two-year battery life — Experience up to two years of smart security coverage on both devices with included AA Energizer lithium batteries and a Blink Sync Module (included with Outdoor 4).
  • See and speak from the Blink app — Experience head-to-toe HD viewing from Video Doorbell and 1080p HD live view from Outdoor 4 as well as infrared night vision and crisp two-way audio.
  • See more at your door with Blink Video Doorbell — Greet guests and watch packages get delivered, day and night, with head-to-toe HD view and infrared night vision. Use two-way talk to hear and speak through the Blink app.
  • Enhanced motion detection with Outdoor 4 — With our all-new Outdoor 4, enjoy a wider field of view and be alerted to motion faster with dual-zone, enhanced motion detection.
  • strengthening the process for identifying, assessing and approving third-party services that process personal information;
  • reviewing existing controls and improving governance arrangements;
  • increasing staff awareness of data-protection responsibilities;
  • regularly testing whether safeguards operate effectively; and
  • providing the ICO with periodic updates on implementation.

The notice therefore combines remedial governance work with continuing oversight. A reprimand is a formal regulatory action, while the enforcement notice imposes specific steps the organisation must take.

Why the case matters beyond the Met

Police forces routinely handle information that can affect people’s employment, reputation, safety and legal position. Retail-crime systems can appear operationally useful, but convenience does not remove the need to establish a lawful purpose, assess risks and control access before deployment.

David Doodson, the ICO’s Head of Investigations, said police forces hold large volumes of sensitive personal information and must have robust safeguards. He warned that innovation cannot outpace data-protection responsibilities and said organisations must assess risks, put safeguards in place and ensure effective oversight before introducing new systems or platforms.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The ICO said the action should send a message across policing and other sectors: new technology used to process people’s information must be lawful, transparent and governed from the outset. For public bodies, that means an informal operational need is not a substitute for procurement approval, a documented legal basis, a DPIA where required, contractual controls and staff accountability.

Key dates and figures

Item Detail
ICO announcement 14 October 2026
Enforcement-record date 23 September 2026
Platform use March 2023 to September 2024
Uploads covered by the ICO findings January to September 2024
Accounts created About 500
Accounts actively used for policing 375
People whose information was uploaded 179
Affected people under 18 3
Use suspended September 2024
Use reintroduced January 2026, after additional controls and training

What is established—and what is not

The ICO’s findings establish a governance and lawful-processing failure involving information about 179 people, including three minors. They do not identify the platform vendor in the primary record, and the published figures do not establish that every person listed was a shoplifter or that all records contained addresses. The case is about the MPS’s handling of personal information and its oversight of third-party technology.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.