Folkestone & Hythe District Council have suffered another data breach via their YouTube Channel
The Cabinet member responsible for: Information technology, information access and security, RIPA.Customer service, is Cllr Ray Field (Ind) elected member for the Harbour Ward (Folkestone).
Information access and security is Ray’s responsibility. Its the Council’s responsibility as the Data Protection Officer. We hope those responsible will rectify the matter pdq.
FHDC Youtube site prior to taking video down
The YouTube video clearly reveals the identity and name of a Taxi Driver who was having his taxi licence reviewed. Cllrs were to consider whether any action should be taken against the Private Hire driver’s licence. This was to happen behind closed doors, using paragraph 2 of Part 1 of Schedule 12A to the Local Government Act 1972 which states:
-
‘Information which is likely to reveal the identity of an individual.’
Alas, the taxi driver’s name and face were clearly shown on the Council YouTube video of the meeting.
What the Council Officer says between 32 seconds – 36 seconds of the video is priceless.
-
“I think the chances of anyone, erm, being interested to watch it are slim…”
True. However, by 20:00 on Tuesday 27th, just 16 people had viewed the video. Not a great many. But, by the time the council act, the video would have been in the public domain close top 48 hours.
FHDC YouTube site after taking down the video
The Council have previously suffered 11 data breaches between Dec 2016 and Jan 2019. This latest event brings the known number to 12. In this time the council have had an average data breach once every four months.
In one of these previous data breaches the names of temporary staff, and their pay rates were disclosed, as well as, the identity of disabled pople, their addresses and how much they received financially. Others suffered as well.
Cllrs and Council officers have been informed of the data breach. It is up to them to inform the taxi driver, they’ve breached his privacy. Oh and lets not forget, they need to report to the ICO within 72 hours.
The Shepway Vox Team
Not owned by Hedgefunds or Barons