back to article Brit cops rapped over app that recorded 200k phone calls

Several police forces in Britain are being put on the naughty step by the UK's data watchdog for using a calling app that recorded hundreds of thousands of phone conversations and illegally retained that data. The Information Commissioner's Office (ICO) said today it was made aware in June 2020 that Surrey Police and Sussex …

  1. Anonymous Coward
    Anonymous Coward

    Commercial Facial Recognition Apps too...

    I wouldn't be surprised if police are doing the same with CCTV camera footage and standard commercial facial recognition apps, uploading images of 'friends' (potential suspects) to 'name' those in the CCTV stills/footage, and sort to content automatically.

    This in itself should be an ICO investigation, because it's something is that is clearly possible with the technology available, so it's likely been used, and it's totally unregulated and unauthorised use of the technology, because of the potential for false-positives.

    Why do these type of public disclosures always have to result in a complaint first, the potential compensation payments for this are massive.

    Regulators need to start getting pre-emptive, so this doesn't happen in the first place.

  2. Anonymous Coward
    Anonymous Coward

    ACR - I used that. It's one of the few (2) apps I actually paid for.

    Sadly crippled by the Chocolate Factory. Unless any regtards know better, there is now no call recording for Android (or iOS) ?

    PITA as it was one of the few reasons for using a mobile to make calls.

    Now running a VOIP app to allow call recording. Because it's always useful to head off the "you can't prove that" line of corporate denial with

    Me: "let's listen to your call recording"

    Them: "That could take up to 28 days, and we may not have recorded that conversation".

    Me: "No problem, let's listen to mine then"

    1. Little Mouse

      Re: ACR - I used that. It's one of the few (2) apps I actually paid for.

      IANAL, but I understand that in the UK it's perfectly legal to record telephone conversations without disclosing that you are doing so. There are limits to what you can do with those recordings, although if you make all parties aware beforehand ("This call may be recorded for Training & Monitoring purposes..."), then those limits are reduced.

      There's no legal basis for crippling this functionality in the UK (or in many other jurisdictions, presumably), but Google decided to force this change on the entire world just to play it safe.

      1. katrinab Silver badge

        Re: ACR - I used that. It's one of the few (2) apps I actually paid for.

        In the UK, it is legal provided one of the parties to the call is aware it is being recorded. If you are recording your own calls, then you are a party to the call and you know you are doing it, so it is legal. If you installed the software on a family member's phone, or an employee's phone, and they didn't know it was there, then it would be illegal.

        1. Stuart Castle Silver badge

          Re: ACR - I used that. It's one of the few (2) apps I actually paid for.

          You are right in a way. It *is* legal, but *both* parties need to be aware that they are being recorded, and the purpose of that recording.. This is why when you call some tech support or sales lines, before you even speak to a human, you are sometimes told that your call may be recorded for training purposes (or whatever purpose it may be used for).

          The Data protection regulations also require that the recordings be held securely, and only be stored as long as they are needed for., and stored within the European Union, or a country with equivalent Data Protection regulations.

          https://www.ereceptionist.co.uk/blog/legal-to-record-phone-calls-uk#:~:text=Yes%2C%20it%20is%20legal%20to,is%20for%20their%20own%20use.

          1. Anonymous Coward
            Anonymous Coward

            Re: ACR - I used that. It's one of the few (2) apps I actually paid for.

            Why not a link to the actual law ? Oh, because there isn't one. Not for *personal* uses. Which was what the PP was referring to.

            1. jollyboyspecial

              Re: ACR - I used that. It's one of the few (2) apps I actually paid for.

              Recording personal calls and recording business (or in this case police) calls are very different things.

              This story is about calls recorded by police officers and police employees in the course of their business and nothing to do with personal calls. So introducing a moan about not being able to record personal calls is entirely irrelevant.

              FWIW Google have not crippled call recording for the entire planet and even if they happed to have done so in your territory there are plenty of apps around which allow you to record calls.

              1. This post has been deleted by its author

              2. Anonymous Coward
                Anonymous Coward

                Re: ACR - I used that. It's one of the few (2) apps I actually paid for.

                I've just scoured the Play Store (in the UK) and noticed that all of the "apps" have some bad feedback - mainly about not working.

                A colleague has just noticed that his Samsungs inbuilt phone app (as promoted by Google) also doesn't do call recording.

                It's starting to look a lot like "mate said"

                1. jollyboyspecial

                  Re: ACR - I used that. It's one of the few (2) apps I actually paid for.

                  The Samsung phone app only does call recording in certain territories, just like Google

            2. Anonymous Coward
              Anonymous Coward

              Re: ACR - I used that. It's one of the few (2) apps I actually paid for.

              was he? I thought he quoted an imaginery _business_ exchange, about you said I said no you didn't?

      2. JimmyPage Silver badge

        Re: Google decided to force this change on the entire world just to play it safe.

        I bet it was more so that Google could monetise the feature at some point.

      3. Doctor Syntax Silver badge

        Re: ACR - I used that. It's one of the few (2) apps I actually paid for.

        There are limits to what you can do with those recordings, although if you make all parties aware beforehand ("This call may be recorded for Training & Monitoring purposes...")

        I suppose those whose calls the OP would want to record would already have made that announcement so just make sure that's included in your own recording.

  3. Tom Chiverton 1

    These are the sort of people I want to be reading all me WhatsApp, Signal, SMS etc. What could go wrong ?

    https://www.openrightsgroup.org/campaign/save-encryption/

  4. Doctor Syntax Silver badge

    The way the police force is telling it it just seems to have happened spontaneously.; nobody made a decision.

    Well, it may be true that nobody made and informed decision but that was lack of due diligence.

    It's no good just reprimanding the force although this is the appropriate procedure for a public body. The expectation should be that having been reprimanded the public body will take career-affecting disciplinary action against whoever landed them in that situation however far up the command chain that goes. And far up the command chain is very probably appropriate because that's where the organisational culture will have been set. Sacegoating wouldn't be appropriate Without consequences there's no assurance that things will be done right, just an assumption.

    The likelihood, of course, is that it'll be reported that whoever was to have been disciplined has retired.

    1. Eclectic Man Silver badge
      Facepalm

      The Tapes, the Tapes!

      200k telephone calls recorded and nobody noticed the log files filling up, and the backup tapes filling up?

      Oh, hang on, we've graduated from 1/2 inch reel-to-reel tape drives haven't we?

      As for anyone in a UK Police Force actually being disciplined, I mean, L O L, that's a good one, made me chuckle.

      1. This post has been deleted by its author

      2. ChoHag Silver badge

        Re: The Tapes, the Tapes!

        It was almost as good as the one about having backup tapes!

      3. NeilPost Silver badge

        Re: The Tapes, the Tapes!

        The article is a bit vague on the operational penetration of this.

        I’d take a guess it wasn’t on legacy Airwave handsets … and we all know where ESN replacement is is.

        So I’m curious what it was actually put on.

    2. Big Softie

      You are spot on and sadly this happens all the time...

      People employed to ride the publicly funded gravy train rarely if ever face the consequences of their misconduct and/or incompetence.

      In cases where there is a lot of public dissatisfaction the response is to launch a public which takes an inordinately long time and again costs the taxpayers a fortune. And the result is usually:

      - we're very sorry for the inconvenience

      - we know we have to do better

      - mistakes were made

      - lessons were learned

      Jobs are kept, bonuses are paid, and on we go...until the next ****-up

  5. jollyboyspecial

    "The police officers were themselves unaware that calls would be recorded and so were the people on the other end of the line"

    The police officers didn't know that an app with "call recorder" in the name would record calls? In which case plod are more stupid than most people think. However I think that in this case it's the regulator who is being dumb, I'm sure the police knew the calls were being recorded, but were ignorant of the fact that it would be a breach of more than one regulation. Ignorance is however no excuse in law - as I am sure PC plod is well aware.

    1. Dan 55 Silver badge

      In other words, this is what always happens.

      1. Police see a shiny thing.

      2. Police use the shiny thing with no guidance or framework whatsoever, trusting that...

      3. The Home Office will change the law as appropriate if it turns out there's some problem with the shiny thing when it's uncovered two years down the line.

  6. Brian 3

    Does anyone else feel like the "used on 432 phones and 1024 officers downloaded the app" and it also says 1015 staff downloaded and used the app? So that would mean that it was used by 2471 phones/devices? All of them, recording everything?

    Why is the person who deployed this not responsible directly? It was an accident? That they didn't do their job properly and know the software they were deploying to thousands of staff? Whoever selected this program and no doubt RAMMED it through needs their own ramming.

    1. This post has been deleted by its author

  7. DS999 Silver badge
    Facepalm

    Wait, "police officers were themselves unaware that calls would be recorded"?

    Yes, I can see how installing and using an app on their phone called "Another Call Recorder" might confuse them over that issue!

  8. david 12 Silver badge

    Australia

    Australia and the Australian states have fairly strict restrictions on call recording, that don't seem to have any exemptions for the police. Apps like ACR are generically not legal.

    Yet when an acquaintance called a police station, the call was silently recorded, and available to the courts. There seems to be some kind of 'police exemption' here, precisely because conversations are with "victims, witnesses, and perpetrators of suspected crimes". ( I never found the legislation that authorizes it.)

    1. Anonymous Coward
      Anonymous Coward

      Re: Australia

      I have a fair bit of trouble seeing much wrong with the police recording calls to the station.

      It has long been recognised by those of use who regularly attend Mensa soirees, that calling the cops to report that some of your drugs were nicked (but luckily not the ones hidden in my guitar case), won't turn out well.

      It is clear that a an equity issue, the police should be obliged to provide a special toll free number for those who have a government issued, mentally challenged person ID.

      1. Brian 3

        Re: Australia

        You must be LEO affiliated to think that it should be in any way acceptable for law enforcement to break the law. If what you suggest is true, then why isn't there a statutory exemption in place in this regard? Citizen right mean precious little already, you think we should just stop pretending they exist at all?

  9. Anonymous Coward
    Anonymous Coward

    That’s odd

    I can see why they don’t fine public sector organisations, which would be pointless- but did anyone get fired (or even have their career aspirations dented a bit) for making this basic error?

  10. ZeiXi

    Legal or Not

    “save for those containing evidential material”

    If illegal to collect, shouldn’t it be illegal to use?

    1. Intractable Potsherd

      Re: Legal or Not

      It should, but (at least in the UK) it can be used. I wish the courts here would bring in something like the American "fruit of the poisoned tree" doctrine, though there is no sign of that happening.

      1. Red Eyes

        Re: Legal or Not

        You mean like Sec 78 PACE 1984

  11. LybsterRoy Silver badge

    -- The ICO could have issued a £1 million ($1.24 million) fine to both forces --

    Translation

    The ICO could have issued a £1 million ($1.24 million) fine to the tax payer

  12. MrGreen

    Is Anyone Surprised?

    Is anyone surprised the Police are using technology to record conversations when they’re recording you on video via CCTV and monitoring your internet activity?

  13. Zippy´s Sausage Factory
    Devil

    Of course they didn't lobby a big fine. That would mean a sudden hike in Council Tax, and in a predominantly Tory-voting area they wouldn't want to make people mad about that, would they?

  14. Plest Silver badge
    Facepalm

    Really?

    "Officers didn't know software was saving personal data..."

    Sure they didn't! Well maybe not your average plod as they're busy doing what they do but I'm pretty confident someone in the chain most certainly knew.

  15. StrangerHereMyself Silver badge

    Destroyed

    "It's no longer used and the recordings, save for those containing evidential material, were destroyed."

    Destroyed after they made a copy of the recordings and stashed them away in some S3 bucket with no security, only to be found by some nefarious hacker.

  16. Anonymous Coward
    Anonymous Coward

    Transcription of Calls

    I am deaf and unable to speak, so I use a service called UK Relay to make and receive phone calls. The beauty of it is that after each call I have a written record of what was said during the call which I can save.

  17. Anonymous Coward
    Anonymous Coward

    " unintentionally, it was enabled for all staff"

    Yea, right. If anyone believes that, I have a bridge to sell them.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like