- Enforcing jurisdiction
- United Kingdom · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Metropolitan Police Service – Reprimand (United Kingdom, 2026)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Information Commissioner's Office reprimanded the Metropolitan Police Service for improperly sharing personal information about suspected shoplifters. This action highlights the need for all organizations, including police, to handle personal data responsibly. It serves as a reminder that even public services must follow data protection rules.
What happened
The Metropolitan Police Service shared personal information about individuals suspected of shoplifting using unauthorized third-party platforms.
Who was affected
Individuals suspected of shoplifting whose personal information was shared without authorization were affected.
What the authority found
The Information Commissioner's Office issued a reprimand for violating sections of the Data Protection Act 2018 related to unauthorized data sharing.
Why this matters
This reprimand illustrates that public organizations are not exempt from data protection laws and must ensure they handle personal information properly. It encourages all organizations to review their data-sharing practices.
Source checks
Secondary-source text retrieved.
Automated check recorded — 16 October 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Information Commission has issued a combined Reprimand and Enforcement Notice to the Metropolitan Police Service following findings of infringement of sections 35(1), 40 and 64(1) of the Data Protection Act 2018 relating to the unauthorised use of a third-party platforms to share personal information relating to individuals suspected of shoplifting offences.
Outcome
Reprimand
A formal reprimand: the DPA found a violation and issued a formal censure.
Related Enforcement Actions (0)
No other enforcement actions found for Metropolitan Police Service in UK
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
23 September 2026
Authority
Information Commissioner's Office
About this data
Cite as: Cookie Fines. Metropolitan Police Service - United Kingdom (2026). Retrieved from cookiefines.eu
Last updated: