UK Information Commissioner reprimands Thames Valley Police for releasing witness details
June 13, 2023 |
Data breaches through the release of personal information by government and organisations is all too common. It commonly happens when documents are released without properly being reviewed and redacted. A typical example is releasing medical records which contain details of third parties. Police which collect mass of information in investigations can release information which identify witnesses. And this is what happened in the United Kingdom when the Thames Valley Police released details which led to suspected criminals learning the address of a witness. This resulted in the Information Commissioner’s Office issuing a reprimand to Thames Valley Police (TVP). This forced the witness to moved house.
As is often the case the ICO found that TVP did not have appropriate steps, such as training, in place to ensure officers were aware of guidance around disclosure and redaction. There was also insufficient oversight of the process in releasing information.
The story has been reported by the BBC in Thames Valley Police officer sentenced for data breach which provides:
A Thames Valley police officer, who emailed secret information on court case witnesses and gangland shootings to his father, has been ordered to do 150 hours of unpaid work.
Matthew Oaten previously pleaded guilty to three counts of computer misuse and two of disclosing personal data.
Winchester Crown Court was told he may have been trying to impress his father, a former police inspector.
PC Oaten was also ordered to pay £1,000 towards prosecution costs.
“Breach of trust”
Thames Valley Police said it was now pursuing a case of alleged gross misconduct against the officer, who is currently suspended from his post in Banbury.
The court was told the force has had to inform the victims about the data breach and faces having to pay thousands of pounds in compensation.
Oaten, of Goodwood Close, Bicester, sent his father the real names and personal details of victims who were giving evidence under false identities in a high-profile child exploitation trial, and emailed details of an ongoing investigation into gangland shootings in the Oxford area.
The 30-year-old officer also illegally checked police files on two previous girlfriends, one of whom was being investigated for leaving her children home alone while she attended a swingers’ party.
Gregory Fishwick, defending, said his client’s behaviour may have been “simply bravado”, an attempt to show off to his father, Russell Oaten, the current chairman of the Dorset branch of Crimestoppers.
Passing sentence, judge Mr Justice Teare said: “These offences were committed in breach of trust, they undermine the confidence the public has that police records will be only used for legitimate police purposes.”
