UPDATED: Privacy group hits out at ICO's handling of Google Street View case
Big Brother Watch calls on data protection watchdog to punish the search giant for failing to delete all the collected Street View data.
Big Brother Watch has responded to the latest twist in the Google Street View data collection saga by hitting out at the Information Commissioner's handling of the case.
As reported by IT Pro on Friday, search giant Google has admitted to Information Commissioner's Office (ICO) that it failed to destroy all of the payload data collected via unsecured Wi-Fi connections during its Street View operations.
The ICO has now asked Google to hand over the remaining data, and said the company's failure to delete it all could constitute a breach of the undertaking the firm was ordered to sign.
In a statement to IT Pro, Nick Pickles, director of privacy at civil liberties group Big Brother Watch, said Google should be punished for failing to delete the data.
"The ICO was wrong to insist that Google delete the data it captured [first time around], a decision that means we will never know the scale of the privacy intrusion they were guilty of," said Pickles.
"The company's failure to adhere to an agreement with the UK regulator should be punishable in itself, beyond any punishment for the initial breach."
He also took issue with the ICO's ability to act on data breaches, claiming the watchdog's "woeful lack of powers" means it has to rely on the companies it investigates to tell the truth.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"Google's behaviour has called into question if that really is a proper way to protect our personal data. It must be right to now demand a proper regulator with the powers and punishments to fully protect British people's privacy," added Pickles.
In a statement to IT Pro, an ICO spokesperson defended its decision to ask Google to delete the data first time around.
"Once the information had been collected, the best way of protecting individuals was for anything that might have been personal data to be deleted. [Google's] failure to secure deletion as promised is a cause for concern," said the ICO.
"We need to examine the additional data and decide on the necessary course of action before further deletion can take place. Once we have completed our work we expect to order deletion of the remaining information."
-
Manufacturers report millions in losses as downtime wreaks havoc on operationsNews UK manufacturers are losing up to £736 million every week due to downtime, according to new research, with outages lasting for several days on end.
-
Microsoft gives OpenAI restructuring plans the green lightNews The deal removes fundraising constraints and modifies Microsoft's rights to use OpenAI models and products
-
Scania admits leak of data after extortion attemptNews Hacker stole 34,000 files from a third-party managed website, trucking company says
-
23andMe 'failed to take basic steps' to safeguard customer dataNews The ICO has strong criticism for the way the genetic testing company responded to a 2023 breach.
-
AI recruitment tools are still a privacy nightmare – here's how the ICO plans to crack down on misuseNews The ICO has issued guidance for recruiters and AI developers after finding that many are mishandling data
-
“You must do better”: Information Commissioner John Edwards calls on firms to beef up support for data breach victimsNews Companies need to treat victims with swift, practical action, according to the ICO
-
LinkedIn backtracks on AI training rules after user backlashNews UK-based LinkedIn users will now get the same protections as those elsewhere in Europe
-
UK's data protection watchdog deepens cooperation with National Crime AgencyNews The two bodies want to improve the support given to organizations experiencing cyber attacks and ransomware recovery
-
ICO slams Electoral Commission over security failuresNews The Electoral Commission has been reprimanded for poor security practices, including a failure to install security updates and weak password policies
-
Disgruntled ex-employees are using ‘weaponized’ data subject access requests to pester firmsNews Some disgruntled staff are using DSARs as a means to pressure former employers into a financial settlement