31–40 of 53 posts
I hope somebody combs through the data and uses it to publish embarrassing trip sequences for public officials and their families because that's the only way politicians and local officials are gonna even consider not supporting these kinds of boondoogle dragnet projects.
So who gets the 4% of turnover GDPR fine here? Or is it under the law enforcement exemption?
Is it a GDPR issue? You can't identify the driver from the number plate.
It might take a few years, but you can use this dataset in the future to understand who owned the vehicle at this time and reconstruct their movements.
Using collected information it's possible a computer can remember every journey you've ever taken; this car with this reg plate was here at this time at this place, and they did not have a valid tax/insurance at this time, or it could be useful during investigations
Earlier quoted context omitted.
Rather difficult to publish their results without admitting to a criminal offence..
is it a criminal offense to access an open website? if you had to use even a default password you could imagine it being improperly accessed,but if it's just open to the internet how is a criminal offence committed?
So who gets the 4% of turnover GDPR fine here? Or is it under the law enforcement exemption?
Is it a GDPR issue? You can't identify the driver from the number plate.
Earlier quoted context omitted.
is it a criminal offense to access an open website? if you had to use even a default password you could imagine it being improperly accessed,but if it's just open to the internet how is a criminal offence committed?
It's difficult question in the interpretation of the CMA; if you're not asked for a password do you know that you're unauthorized? https://www.cps.gov.uk/legal-guidance/computer-misuse-act
I imagine that depends. If your bank allows you access to another person's account by manipulating the URL, that presumably counts as a crime.
(Incidentally, this exact vulnerability has happened in the real world. https://news.ycombinator.com/item?id=2656837 , https://www.theregister.co.uk/2011/06/14/citigroup_website_h... )
Who gets to decide what "harm" is or whether anyone suffered "detrimental effects"? Surveillance is so common and normalized they don't consider the act of collecting so much information itself as a "detrimental harm".
What if that harm only presented itself years down the line? Maybe a creepy stalker who can synthesize mulitple data sets to reconstruct a person's movements or possibly use it against them some way (scammers and fraudsters are increasingly using all these leaked datasets to create a more accurate profile of an individual for more sophisticated attacks/targeting. Your name/address/mobile number must not and can not be considered PII since it's already been leaked probably ten's of times by now).
That's an incredibly shortsighted comment to try and justify developing a system with not even the most basic of security considerations.
I honestly just wish those same people were jailed for 50 years as a result, we'd see a LOT more consideration in the future if they were held personally liable.
Earlier quoted context omitted.
Is it a GDPR issue? You can't identify the driver from the number plate.
True, you can't directly identify the driver, but I would imagine the correlation between number plate and one or a very small number of individuals who have use of the vehicle is strong enough (in most cases) that it could be regarded as personal information.
It seems analogous to an IP address in that sense, and the courts have ruled that IP addresses are personal information.
I hope somebody combs through the data and uses it to publish embarrassing trip sequences for public officials and their families because that's the only way politicians and local officials are gonna even consider not supporting these kinds of boondoogle dragnet projects.
When I read your comment, I realized I intuitively view open access to surveillance systems like this as more desirable than limited access, and I don't know how to articulate that feeling. I'd consider myself privacy-conscious, however it is clear that this sort of open access further limits my "privacy." I wonder if privacy advocacy is more about aversion to certain power imbalances rather than privacy as an end it…
But privacy itself is also a claim against your neighbor: not only is it illegal for them to blackmail you, it is impermissible to obtain the grounds for that blackmail.
I'm perhaps more afraid of my neighbor than I am the government. Rapists are more often people you know, and all that.
Earlier quoted context omitted.
is it a criminal offense to access an open website? if you had to use even a default password you could imagine it being improperly accessed,but if it's just open to the internet how is a criminal offence committed?
I assume gdpr (and/or equivalent) is still law in the UK? If so, dealing with person data (traveldata + car registration should qualify) - without explicit consent is illegal, yes. Just storing the data would be illegal. (getting consent, and then not storing it securely would also be an offense).
As I understand it, under GDPR data controllers have a responsibility to take reasonable measures to secure the data. I believe failure to do so is a criminal offense.