Metropolitan Police Service – Reprimand (United Kingdom, 2026)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Metropolitan Police Service received a reprimand for sharing personal information about suspected shoplifters using a third-party platform without permission. This action raises concerns about privacy and how personal data is handled by public authorities. It serves as a reminder for organizations to follow data protection laws when sharing sensitive information.
What happened
The Metropolitan Police shared personal information about individuals suspected of shoplifting using unauthorized third-party platforms.
Who was affected
Individuals suspected of shoplifting whose personal information was shared without consent.
What the authority found
The Information Commissioner's Office reprimanded the Metropolitan Police for unauthorized use of personal data under the Data Protection Act 2018.
Why this matters
This reprimand highlights the importance of adhering to data protection laws, even for public authorities. It serves as a warning to other organizations about the risks of mishandling personal information.
Source checks
Secondary-source text retrieved.
Automated check recorded — 16 October 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Information Commission has issued a combined Reprimand and Enforcement Notice to the Metropolitan Police Service following findings of infringement of sections 35(1), 40 and 64(1) of the Data Protection Act 2018 relating to the unauthorised use of a third-party platforms to share personal information relating to individuals suspected of shoplifting offences.
Outcome
Reprimand
A formal reprimand: the DPA found a violation and issued a formal censure.
Related Enforcement Actions (0)
No other enforcement actions found for Metropolitan Police Service in UK
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
23 September 2026
Authority
Information Commissioner's Office
About this data
Cite as: Cookie Fines. Metropolitan Police Service - United Kingdom (2026). Retrieved from cookiefines.eu
Last updated: