Enforcing jurisdiction
United Kingdom · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.

Surrey Police – Reprimand (United Kingdom, 2023)

Reprimand
Information Commissioner's Office3 April 2023United Kingdom
unknown
Reprimand

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Surrey Police faced a reprimand for using an app that recorded phone calls without informing the people involved. This raised concerns about privacy and fairness, especially since many recordings included conversations with victims and witnesses. The app has been removed, and the recordings were mostly destroyed, highlighting the importance of transparency in handling personal data.

What happened

Surrey Police used an app that recorded all incoming and outgoing phone calls without informing users.

Who was affected

People whose phone conversations with police officers were recorded, including victims and witnesses.

What the authority found

The Information Commissioner's Office found that the app's use was likely unfair and unlawful, as users were not informed their calls were being recorded.

Why this matters

This reprimand emphasizes the need for police and other organizations to be transparent about data collection practices. It serves as a reminder that even public bodies must respect privacy rights.

Recorded legal citations
Art. 5(1)(a) GDPR
Art. 6(1) GDPR
National Law Articles
AI-identified
Section 170 DPA 2018

Source checks

Linked-source text retrieved.

Automated check recorded — 16 October 2026.

Processing notes: articles corrected, national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

In June 2020, the ICO became aware that staff members across both Sussex Police and Surrey Police had access to an app that recorded all incoming and outgoing phone calls. 1,015 staff members downloaded the app onto their work mobile phones and more than 200,000 recordings of phone conversations, likely with victims, witnesses, and perpetrators of suspected crimes, were automatically saved. The ICO considered it highly likely that the app captured a large variety of personal data during these calls and it considered that the processing of some of this data was unfair and unlawful. Police officers that downloaded the app were unaware that all calls would be recorded, and people were not informed that their conversations with officers were being recorded. The app has now been withdrawn from use and the recordings, other than those considered to be evidential material, have been destroyed.

Outcome

Reprimand

A formal reprimand: the DPA found a violation and issued a formal censure.

Related Enforcement Actions (0)

No other enforcement actions found for Surrey Police in UK

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

3 April 2023

Authority

Information Commissioner's Office

About this data

Source: official_ico
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Surrey Police - United Kingdom (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: