Skip to content
ICO Issues Enforcement Notice to Met Police Over Data Sharing Violations

ICO Issues Enforcement Notice to Met Police Over Data Sharing Violations

First seen 15 Oct 2026, 10:35 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 16, 2026 at 09:38 UTC
  • •ICO found MPS unlawfully processed personal data without consent.
  • •Around 500 accounts were created on the unapproved Auror platform.
  • •MPS must enhance governance and oversight of third-party technologies.

The Information Commissioner's Office (ICO) reprimanded the Metropolitan Police Service (MPS) for unlawful data sharing via the Auror retail crime intelligence platform. Between March 2023 and September 2024, MPS personnel created approximately 500 accounts, with 375 actively used, despite the platform lacking formal approval. The ICO's investigation revealed that personal information of 179 individuals, including three minors, was uploaded without consent. The MPS failed to implement necessary safeguards and did not conduct a required data protection impact assessment. Although the platform was suspended in September 2024 and reintroduced in January 2026 with improvements, the ICO mandated further governance enhancements. The MPS must now strengthen its processes for third-party technology usage and provide updates to the ICO.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 5h ago How this analysis works

Timeline

2024-09-30
MPS suspended use of Auror platform
The Metropolitan Police Service halted the use of the Auror platform due to governance concerns raised by the ICO.
Localgovernmentlawyer
2026-01-15
Auror platform reintroduced
After implementing improvements, the MPS reintroduced the Auror platform for use in policing activities.
Localgovernmentlawyer
2026-10-14
ICO issues enforcement notice
The ICO issued a reprimand and enforcement notice to the MPS for governance failings related to the Auror platform.
Infosecurity-Magazine

More articles in this cluster (4)

Following this threat?

Track Auror Europe in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (16)

1 / 3

Common questions

What actions must the MPS take following the ICO's notice?
The MPS is required to strengthen its processes for assessing and approving third-party services and to provide periodic updates to the ICO.
What personal information was affected?
The ICO found that personal data of 179 individuals, including names, dates of birth, and some addresses, was unlawfully uploaded to the platform.
What improvements were made to the Auror platform?
Improvements included stronger governance arrangements, additional staff training, and the completion of a data protection impact assessment.