Kingdom Services Group "Non Encrypted Body Worn Cameras"

M Mounty made this Rhyddid Gwybodaeth request to Torfaen Council as part of a batch sent to 17 authorities

This request has been closed to new correspondence from the public body. Contact us if you think it ought be re-opened.

Roedd y cais yn llwyddiannus.

Dear Torfaen Council,

I recently observed enforcement officers working for Kingdom Services Group Limited using PR5 Body Worn Cameras (not encrypted). To that end, could you answer the following questions.

1. Could you confirm that the Enforcement Officers employed by Kingdom Services Group Limited, who are working on behalf of your council as authorised officers are no longer using Pinnacle PR5 Body Worn Cameras, which are not encrypted to protect the Personal Identifiable Information obtained from members of the public during the issuance of a Fixed Penalty Notice?

2. Could you confirm the number of Fixed Penalty Notices issued by Kingdom Services Group Limited using a PR5 Body Worn Cameras since 25th May 2018?

3. could you break the answer from question 2 down into paid, cancelled, written off and unpaid FPNs?

4. Although, all devices which are being used to record personal identifiable information should be encrypted as per GDPR 2016. If Kingdom Services Group are refusing to upgrade their body-worn cameras to the encrypted model, could you send me a copy of the Data Protection Impact Assessment (DPIA) which clearly shows the risks of having an un-encrypted body worn camera and the measures in place to protect the personal identifiable information of the general public who come into contact with the council's authorised officers working on behalf of Kingdom Services Group Limited?

5. Did you know that the files on a PR5 camera can be accessed from any computer?

6. Did you know that Kingdom officers take these cameras home at the end of each shift, therefore data can be removed and manipulated?

7. Did you know Kingdom have had three separate data breaches in the past 3 months with regards to the loss of PR5 cameras?

8. Did you know that you (the council) are joint controllers under GDPR 2016 and the council would also incur a large fine if a breach is proven?

9. This is the link to a data breach involving Kingdom at Anglesey Council and the council was deemed to be the data controller by ICO even though Kingdom lost the notebook.

https://www.dailypost.co.uk/news/north-w...

If my questions above are not answered fully or the fact Kingdom's officers have issued Fixed Penalty Notices since 25th May 2018 using PR5 cameras is denied. I will submit all of my evidence to the press, Information Commissioners Office and Ombudsman.

Yours faithfully,

M Mounty

Call Torfaen, Torfaen Council

Thank you for taking the time to email Torfaen County Borough Council.

 

Please be aware that your enquiry is being addressed and a reply will be
sent within 10 working days.

 

Did you know that you can report issues and request information via our
website at [1]www.torfaen.gov.uk or make reports and requests by
downloading our Mobile App.

 

By registering your email address, you will be able to track progress of
your enquiry from start to finish.

 

The Mobile App is available on Apple, Android and Windows devices and can
be found by typing Torfaen into the search function in the relevant App
Store.

 

'

dangos adrannau a ddyfynnir

YMWADIAD: Mae'r wybodaeth sy'n gynwysedig yn yr e-bost yma a) yn eiddo i
Gyngor Bwrdeistref Sirol Torfaen; a b) yn gyfrinachol. Fe'i bwriedir ar
gyfer y derbynnydd yn unig. Os nad chi yw’r sawl y cyfeiriwyd hi ato, ni
ddylech ddadlennu, copïo na dosbarthu'r wybodaeth neu ei defnyddio i
weithredu. Os derbyniwch yr e-bost yma fel camgymeriad, gadewch i ni wybod
ar unwaith drwy ffonio ++44 (0) 1495 766366, a danfonwch yr e-bost yn ol
gydag unrhyw atodiadau. RHYBUDD: Gwnewch yn siwr bod gennych ddiogelwch
feirws digonol cyn agor neu ddatgysylltu unrhyw ddogfen sydd yn atodiad
i'r e-bost hwn. Mae’r Cyngor yn croesawu gohebiaeth yn Gymraeg a Saesneg.
Cewch ateb Cymraeg i bob gohebiaeth yn Gymraeg ac ni fydd yn arwain i
unrhyw oedi. Mae data personol sy'n cael ei brosesu gan y cyngor yn cael
ei wneud yn unol â'r gofynion sydd arnom ni o dan y Rheoliad Diogelu Data
Cyffredinol (RhDDC) (UE) 2016/679. Am fwy o wybodaeth ar sut yr ydym yn
gwneud hyn gwelwch ein Hysbysiad Preifatrwydd

References

Visible links
1. http://www.torfaen.gov.uk/

FOI, Torfaen Council

2 Atodiad

18/732: FREEDOM OF INFORMATION REQUEST

 

Thank you for your email dated 27/08/2018 requesting information under the
Freedom of Information Act (2000). Please note any FOI requests should be
sent to the FOI team at [1][email address]

 

I have logged your email and will deal with your request in order that we
can respond to you within the statutory deadline of 20 working days.

 

I will contact you further as soon as the relevant information is
available.

 

Yours sincerely

 

 

Rosie Seabourne BSc (Hons) Soc. Sciences

SENIOR BUSINESS SUPPORT OFFICER COMPLAINTS/FOI/ UWCH SWYDDOG CYMORTH
BUSNES CWYNION / RHYDDID GWYBODAETH

CHIEF EXECUTIVE’S SERVICE / GWASANAETH Y PRIF WEITHREDWR

TORFAEN COUNTY BOROUGH COUNCIL / CYNGOR BWRDEISTREF SIROL TORFAEN

Email / Ebost: [2][email address]

Phone/Ffon: 01633 647625

Fax/Facs: 01495 766331

[3]www.torfaen.gov.uk / [4]cid:image001.gif@01D25ADB.C2748700[5]Follow us
on Twitter / [6]cid:image002.gif@01D25ADB.C2748700[7]Find us on Facebook

This email is available in large print or Welsh upon request

 

'

dangos adrannau a ddyfynnir

YMWADIAD: Mae'r wybodaeth sy'n gynwysedig yn yr e-bost yma a) yn eiddo i
Gyngor Bwrdeistref Sirol Torfaen; a b) yn gyfrinachol. Fe'i bwriedir ar
gyfer y derbynnydd yn unig. Os nad chi yw’r sawl y cyfeiriwyd hi ato, ni
ddylech ddadlennu, copïo na dosbarthu'r wybodaeth neu ei defnyddio i
weithredu. Os derbyniwch yr e-bost yma fel camgymeriad, gadewch i ni wybod
ar unwaith drwy ffonio ++44 (0) 1495 766366, a danfonwch yr e-bost yn ol
gydag unrhyw atodiadau. RHYBUDD: Gwnewch yn siwr bod gennych ddiogelwch
feirws digonol cyn agor neu ddatgysylltu unrhyw ddogfen sydd yn atodiad
i'r e-bost hwn. Mae’r Cyngor yn croesawu gohebiaeth yn Gymraeg a Saesneg.
Cewch ateb Cymraeg i bob gohebiaeth yn Gymraeg ac ni fydd yn arwain i
unrhyw oedi. Mae data personol sy'n cael ei brosesu gan y cyngor yn cael
ei wneud yn unol â'r gofynion sydd arnom ni o dan y Rheoliad Diogelu Data
Cyffredinol (RhDDC) (UE) 2016/679. Am fwy o wybodaeth ar sut yr ydym yn
gwneud hyn gwelwch ein Hysbysiad Preifatrwydd

References

Visible links
1. mailto:[email address]
2. mailto:[email address]
3. http://www.torfaen.gov.uk/
4. http://www.twitter.com/torfaencouncil/
5. Follow Torfaen Council on Twitter
http://www.twitter.com/torfaencouncil/
7. Torfaen Council Facebook Page
http://www.facebook.com/torfaen

FOI, Torfaen Council

3 Atodiad

Dear Mr Mounty

 

18/732 FREEDOM OF INFORMATION REQUEST

 

Further to our acknowledgement of your request for information. I am now
in a position to provide you with a response.

 

Your email states:

 

I recently observed enforcement officers working for Kingdom Services
Group Limited using PR5 Body Worn Cameras (not encrypted). To that end,
could you answer the following questions.

 

1. Could you confirm that the Enforcement Officers employed by Kingdom
Services Group Limited, who are working on behalf of your council as
authorised officers are no longer using Pinnacle PR5 Body Worn Cameras,
which are not encrypted to protect the Personal Identifiable Information
obtained from members of the public during the issuance of a Fixed Penalty
Notice?

No

 

2. Could you confirm the number of Fixed Penalty Notices issued by Kingdom
Services Group Limited using a PR5 Body Worn Cameras since 25th May 2018?

Yes

 

3. could you break the answer from question 2 down into paid, cancelled,
written off and unpaid FPNs?

At time of writing:

• 219 Issued

• 118 Paid

• 62 payment due

• 19 written off

• 20 cancelled

 

4. Although, all devices which are being used to record personal
identifiable information should be encrypted as per GDPR 2016. If Kingdom
Services Group are refusing to upgrade their body-worn cameras to the
encrypted model, could you send me a copy of the Data Protection Impact
Assessment (DPIA) which clearly shows the risks of having an un-encrypted
body worn camera and the measures in place to protect the personal
identifiable information of the general public who come into contact with
the council's authorised officers working on behalf of Kingdom Services
Group Limited?

Please see attached copy of the Data Protection Impact Assessment.

 

5. Did you know that the files on a PR5 camera can be accessed from any
computer?

Kingdom ensure that all data is downloaded to a secure location at the end
of every patrol therefore reducing the volume of data on the hard drive to
a minimal amount.

 

6. Did you know that Kingdom officers take these cameras home at the end
of each shift, therefore data can be removed and manipulated?

Each camera is either personally assigned to an officer and is booked in
and out at the start and end of every shift. All staff are aware of the
sensitive nature of the footage contained on the camera and therefore the
security of the camera is paramount for the officer whilst on patrol.

 

7. Did you know Kingdom have had three separate data breaches in the past
3 months with regards to the loss of PR5 cameras?

No

 

8. Did you know that you (the council) are joint controllers under GDPR
2016 and the council would also incur a large fine if a breach is proven?

The GDPR forms part of the data protection regime in the UK, together with
the new Data Protection Act 2018 (DPA 2018).  We are aware that  the GDPR
 places obligations on the council to ensure contracts between controllers
and processors comply within the GDPR under Chapter 4 Article 24.

Concerning the question of breaches of information, the Council is aware
that fines can be imposed if a breach is proven under Chapter 8 Article
83.

 

9. This is the link to a data breach involving Kingdom at Anglesey Council
and the council was deemed to be the data controller by ICO even though
Kingdom lost the notebook.

 

[1]https://www.dailypost.co.uk/news/north-w...

 

Q9 does not require any information.

 

Information supplied in response to any Freedom of Information Act request
may be subject to copyright. A single copy of information supplied under
the Freedom of Information Act may only be used for personal,
non-commercial research or study, unless stated otherwise. It must not be
passed to others, copied or re-published in whole or in part without
permission from the copyright holder. Any copyright statement that forms
part of or in any way refers to the information provided must not be
altered or removed.

 

If you have any queries about this letter or are unhappy about the service
you have received in relation to your request and wish to make a complaint
or request a review, please do not hesitate to contact me in writing.

 

If you are not content with the outcome of your complaint, you may apply
directly to the Information Commissioner for a decision. Generally, the
Information Commissioner’s Office (Wales) cannot make a decision unless
you have exhausted the complaints procedure provided by this Council. The
Information Commissioner can be contacted at: The Information
Commissioner’s Office (Wales), 2nd Floor, Churchill House, Churchill Way,
Cardiff, CF10 2HH. Telephone 029 2067 8400 or Fax 029 2067 8399 or e-mail
[2][email address].

 

Yours sincerely

 

 

 

 

 

Rosie Seabourne BSc (Hons) Soc. Sciences

SENIOR BUSINESS SUPPORT OFFICER COMPLAINTS/FOI/ UWCH SWYDDOG CYMORTH
BUSNES CWYNION / RHYDDID GWYBODAETH

CHIEF EXECUTIVE’S SERVICE / GWASANAETH Y PRIF WEITHREDWR

TORFAEN COUNTY BOROUGH COUNCIL / CYNGOR BWRDEISTREF SIROL TORFAEN

Email / Ebost: [3][email address]

Phone/Ffon: 01633 647625

Fax/Facs: 01495 766331

[4]www.torfaen.gov.uk / [5]cid:image001.gif@01D25ADB.C2748700[6]Follow us
on Twitter / [7]cid:image002.gif@01D25ADB.C2748700[8]Find us on Facebook

This email is available in large print or Welsh upon request

 

'

dangos adrannau a ddyfynnir

YMWADIAD: Mae'r wybodaeth sy'n gynwysedig yn yr e-bost yma a) yn eiddo i
Gyngor Bwrdeistref Sirol Torfaen; a b) yn gyfrinachol. Fe'i bwriedir ar
gyfer y derbynnydd yn unig. Os nad chi yw’r sawl y cyfeiriwyd hi ato, ni
ddylech ddadlennu, copïo na dosbarthu'r wybodaeth neu ei defnyddio i
weithredu. Os derbyniwch yr e-bost yma fel camgymeriad, gadewch i ni wybod
ar unwaith drwy ffonio ++44 (0) 1495 766366, a danfonwch yr e-bost yn ol
gydag unrhyw atodiadau. RHYBUDD: Gwnewch yn siwr bod gennych ddiogelwch
feirws digonol cyn agor neu ddatgysylltu unrhyw ddogfen sydd yn atodiad
i'r e-bost hwn. Mae’r Cyngor yn croesawu gohebiaeth yn Gymraeg a Saesneg.
Cewch ateb Cymraeg i bob gohebiaeth yn Gymraeg ac ni fydd yn arwain i
unrhyw oedi. Mae data personol sy'n cael ei brosesu gan y cyngor yn cael
ei wneud yn unol â'r gofynion sydd arnom ni o dan y Rheoliad Diogelu Data
Cyffredinol (RhDDC) (UE) 2016/679. Am fwy o wybodaeth ar sut yr ydym yn
gwneud hyn gwelwch ein Hysbysiad Preifatrwydd

References

Visible links
1. https://www.dailypost.co.uk/news/north-w...
2. mailto:[email address]
3. mailto:[email address]
4. http://www.torfaen.gov.uk/
5. http://www.twitter.com/torfaencouncil/
6. Follow Torfaen Council on Twitter
http://www.twitter.com/torfaencouncil/
8. Torfaen Council Facebook Page
http://www.facebook.com/torfaen