Use of cloud analytics / extraction

Mae'r cais yn aros am eglurhad. Os Geena ydych chi, os gwelwch yn dda, mewngofnodi i anfon neges ddilynol.

Dear British Transport Police,
I am aware that companies are selling technologies to law enforcement that allow them to take vast quantities of personal data from cloud-based apps and accounts. You can read more [https://privacyinternational.org/long-re....

I make the following request for documents/information under the Freedom of Information Act:

1. Do you use mobile phone extraction technology that includes cloud analytics / cloud extraction capabilities e.g. Cellebrite UFED Cloud Analyser, Magnet Axiom Cloud or Oxygen Forensics Cloud Extractor

2. Do you have other technologies that allow you to access cloud-based accounts and extract this data.

3. Please provide a copy of the relevant Data Protection Impact Assessment.

4. Please provide a copy of the relevant local and/or national guidance/standard operating procedure/policy.

5. Please confirm the legal basis you rely on to conduct cloud analytics/extraction.

Yours faithfully,
Geena

Freedom of information, British Transport Police

Dear Geena,

Freedom of Information request ref: 85-20

Thank you for your request under the Freedom of Information Act 2000 (‘the Act’).

Your request was received on 14th January 2020 and will be processed in accordance with the Act.

Please quote the above reference number on any correspondence.

Yours sincerely,

Nick Smith
Information Governance Officer/
Swyddog Llywodraethu Gwybodaeth
Information Management Unit/Uned Rheoli Gwybodaeth
Capability and Resources/Gallu ac Adnoddau
 

British Transport Police, 3 Callaghan Square, Cardiff, CF10 5BT
Heddlu Trafnidiaeth Prydeinig, 3 Sgŵar Callaghan, Caerdydd, CF10 5BT
office/ffôn swyddfa: 02920 525 338
email/e-bost [BTP request email]
www.btp.police.uk
 
Unless otherwise stated above, this e-mail is considered OFFICIAL

dangos adrannau a ddyfynnir

Freedom of information, British Transport Police

Dear Geena,

 

Please could you confirm your full name?

 

Yours sincerely,

 

Katie Hulland

Information Governance Officer /Swyddog Llywodraethu Gwybodaeth

Information Management Unit / Uned Rheoli Gwybodaeth

Capability and Resources / Gallu ac Adnoddau

British Transport Police, 3 Callaghan Square, Cardiff, CF10 5BT

Heddlu Trafnidiaeth Prydeinig, 3 Sgŵar Callaghan, Caerdydd, CF10 5BT

DX 153042 Cardiff 36

Office / ffôn swyddfa 02920 525 338

Internal / ffôn mewnol 5525338

Email / e-bost [1][email address]

[2]www.btp.police.uk

 

 

Unless otherwise stated above, this e-mail is considered ‘OFFICIAL’

Oni nodir fel arall uchod, mae’r e-bost yma i’w gael ei ystyried ‘SWYDDOGOL’

 

dangos adrannau a ddyfynnir

Dear Freedom of information,

The ICO website states that Freedom of Information treats all requesters alike, so you should not normally seek to verify the requester’s identity. As someone who processes and logs requests myself, I have had many that do not disclose their full name.

What are your legitimate interests for requesting this data?

As you know, whatdotheyknow.com publishes all responses, I do not want my full name to be disclosed to the public. It is in my interests to keep my surname private, not to mention, a quick google of my full name will come back with nothing (believe me i've done it myself.) Therefore I see no legitimate interest in you requesting my full name, I did a dissertation on data protection and privacy and continue to have an interest in the subject.

I respectfully ask you to please respond to the request in line with the law.
Yours sincerely,

Geena

Gadawodd Stephen Keene-Elliott anodiad ()

WDTK's help page says that first name only shouldn't be used, where they talk about pseudonyms and the avoidance of using them:

'Use a different form of your name. The guidance says that “Mr Arthur Thomas Roberts” can make a valid request as “Arthur Roberts”, “A. T. Roberts”, or “Mr Roberts”, but not as “Arthur” or “A.T.R.”.'

Gadawodd Stephen Keene-Elliott anodiad ()

Furthermore, the ICO's guidelines say:
'21. For a request to be valid, the requester must provide enough of their real name to give anyone reading that request a reasonable indication of their identity.
22. This means that if the staff processing the request cannot identify the requester from the name provided, that request will be invalid.'
https://ico.org.uk/media/for-organisatio...

Freedom of information, British Transport Police

Dear Geena,

Thank you for your email.

For a request to constitute a valid request under the Freedom of Information 2000, it must be in writing, describe the information required and include the applicant's real name and an address for correspondence.

Further guidance on the Information Commissioner's definition of a 'real name' may be found at the following link: https://ico.org.uk/media/for-organisatio...

In line with ICO guidance, you have not currently submitted a valid FOI request.

I note that we have not mandated that you must submit this through the whatdotheyknow.com website. You are welcome to instead submit the request by email to [email address] if you do not wish to publish your name on a public portal.

Yours sincerely,

Simon Fuller
Data Protection & FOI Manager
Information Management / Uned Rheoli Gwybodaeth
Capability and Resources/Gallu ac Adnoddau
British Transport Police / Heddlu Trafnidiaeth Prydeinig
Mail / Bost: British Transport Police, Information Management, 2nd Floor,  3 Callaghan Square, Cardiff, CF10 5BT / Heddlu Trafnidiaeth Prydeinig, 3 Sgŵar Callaghan, Caerdydd CF10 5BT
www.btp.police.uk 

Unless otherwise stated above this e mail is considered ‘OFFICIAL’

dangos adrannau a ddyfynnir