No GDPR Penalties For UK Swann 'Spying Hack'

By: Charles Rollet, Published on Nov 20, 2018

The UK’s data protection agency has closed its investigation into Infinova-owned Swann Security UK, the ICO confirmed to IPVM, deciding to take “no further action” after customers unintentionally received video from different users in separate incidents earlier this year.

These data breaches received substantial media attention in June/July 2018, such as:

This took place after the arrival of the GDPR - broad new European privacy regulations which include the prospect of heavy fines for such incidents.

In this note, we examine what happened, the UK’s response to IPVM, and what the GDPR implications are for manufacturers and sellers of IoT devices such as video surveillance.

*** **’* **** ********** agency *** ****** *** investigation **** ********-********** ******** **, *** *** ********* to ****, ******** ** take “** ******* ******” after ********* *************** ******** video **** ********* ***** in ******** ********* ******* this ****.

***** **** ******** ******** substantial media attention ** ****/**** ****, **** as:

**** **** ***** ***** the ******* ** ******* - ***** *** European ******* **************** ******* *** ******** of ***** ***** *** such *********.

** **** ****, ** examine **** ********, *** UK’s ******** ** ****, and **** *** **** implications *** *** ************* and ******* ** *** devices **** ** ***** surveillance.

[***************]

What ********

** ****,*** *** ************ *** ** *** staffers *** ***** * Swann ****** ******* ********* video **** * ********’* kitchen ** *** ********** app. *** *** ***** a **** ******* ********, this **** ** ***, when * ********* ***** customer ********** ** ******* of ********* ***** **** an ******* ***.

***** ***** **** ********, blaming *** ***** ** a ************* ***** *** the ****** ** ********* login *********** ***** **** for **** *******.

** * ******** ****,** *** ******* **** PenTestPartners“************ ******** ***** ***** from *** ****** ** another” ** *****’* ***** service, ********* “********* ****** to ******’* ******.” ***** also ***** **** *****, which *** *** ****** in ******'* ******** *********** being ********.

ICO ************

** *** **, ****** the **, * ****** national ****** – ************** ************’* ****** ** ICO- ******** *** **** protection *******. ** ************ the ***** ******** ******** reported ** *** *** for ******* ******, ********* IPVM **** **** **** the **** *** **** dropped:

*** **** ********* ***** Communications (******) ******* *** been ****** **** ** further ******. *** **** of ********* ***** ****** to *********** *** ********** low *** ** **** satisfied *** ******* *** identified *** *** ************ sufficient ******** ***** ***** commencing *** *** *************

GDPR ********** *****

***** **** ******** **** place ***** *** ************** on *** ** ** the **’* *** **** privacy *****, *** ****, which ****** *** **.

*** ********* **** ***** violations ** **** ********** such ********* **’* *************** “******* ******** **** are *** **** ********** without *** **********’* ************ to ** ********** ****** of ******* *******.”

************* *** *********** ***** have ******* ***** ****** hefty **** ********* ** they *** ******** ** breaches, ***** ********** ******** ** ** ** 40 ******* ***** ** 4% ** ********* *******.

How ***** ******* **** *********

*******, *** ***’* ******** not ** ******** ***** shows ****, ** ***, fears ** ******** *** eye-watering **** ***** *** EU ***** ************ ********* are *********.

*** **** ****** ***** significant ****** ** ******** governments **** ** ***** to ******** ******* ** not ** ****** *********.******* ** **** ************** *** ****** *** “intentional,” ******* ***** *** a “******* ** **** measures ** ******** *** damage ***** ********,” *** whether ***** *** * “lack ** ************* **** authorities”.

** ****** *** ***** and *********** **** ***********, Swann *** **** ** avoid ********* **********.

GDPR ************

************* ****** *** **** this **** ** ******** that *** **** ** toothless. ***-**** ********* ****** possible, ***** * *** factor **** ****** ** Swann’s ***** *** **** the ****** **** ******** a *** ******, **** of **** ***** *** complaints *** ************ ** allowed ************ **.

************, *** ***** **** case **** ********* * precedent ********* ** ************* and *********** **** ** comes ** **** ********. It **** ***** *** importance ** ***** ********** and *********** **** *********** in **** ** * breach.

IPVM’s *** ********* ***** *** ********

*** *** ** ****************** ****’* **** ********* about ****** **************** **** ********** ** IFSEC ** ******.

*** ******-**** ************* ** Swann ******** *** ***** may ** ** ********** of ******* ******* ****** ** a ***** ** **** complaints***** ** ******** **** protection ******** – ******* factor ****** ******* **** manufacturers *** ***********’ *****.

Comments (7)

* ** ********* ** GDPR ********** *** ***** to ******* ** ********** like **** ******** *******.

*’** *** *** **** experience **** * ******* Smartcam **. 

*** ******** *** ***** the ***** ******* ****?

** **** * **** the *** * *** someone ****’* ****

****** **** * ****** app :)

** **** * **** the *** * *** someone ****’* ****

***** * ***** ******!

** ****** **** *** experience ICO, *** *** ****, **** will **** ** ** surprise *** ***** ** very **** * ******** flip-side. **** *** *** first **** ** **** in *** **'*, * plethora ** "*******" ******* setting ** ********* *** scamming ****** ** ****** into ****** *** ****** on *** ********** ***** fear ** **** ***** as *** ******* ** use ***** ********. *** they *** *** ** provide *********** **** *** ****** available ** *** ******, then ****** ******* *** myth ** ******** ***** and ************ **** ***** never **** **** ******** on ***** ******. **** were ***** ** * deterrent ** ** **** only ** *********** ***** of ****** ****** *** tangible ******.

*** **** *** *** to ****** **** ****, so ** ***** **** case **** **** **********. The ***** ******* ** GDPR *** *** ** a ******** ******** ** a **** ******. ** determines  *** *****, ****** and ****** ** ****** a ******** *** ******** to ** ****. ***** clear ****** ** **********, coupled **** ********** ******** actions *** **** ******** abuse ** *** **** harvested - **** ***** lead ** * ******** toward *** ****** *** available. *** ** *** ******** Swann *** * ******** minor ****** ***** ***** is **** ****** ** intent *** ** **** damage ** ******** **** integrity ** **********.

*** ** *** * ****** litigious ******* ** ***** matters - ** ******* it *** **** ** odd *******, *** ****** expected **** ** ********** of ********* *** *** and **** *** **** years. ******** - **** was ***** *** ** exclusively *** ****, *** the ******* ** **** is *** **** ****** interest ** **. ***** into ******* ************* **** ******** ** raw ******** **** ********* with ****** **** ***** Facebook, *****, ******* *** many ********** **** ******** ****** peoples *****, **********'* *** business ** * *********** effect *** *** *** a ****** **** ** what **** *** *** up ** **.

*** ********** ** **** Johns ********* **** ** rejected - **** ****** given *** ******* ** where *** "*****" **** place - * **** exhibition ************* *** ******** being **********. * ****** it's * **** *********, but ** ** ****** well ***** *** **** you **** ** *** appalling ******* *** ***** of **** ****** ***** elsewhere. **'* **** ********** considering **** ****** *** ICO *** **** *** be ********** ** ****, its * ***** **** better **** ******** ** place ******* ** *** EU ***** *** **** amount ** **** ********** and ***** ** *** only ***** *********** - but **** ******* ** the ** **** ****** where * ****** *********** ******** ***** **************'* **** ***** ** eyebrow ******* ** *** race ** *** *** of ********* *****.

Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Related Reports

Altronix Claims Tango 'Eliminates Electricians' on Oct 15, 2019
Power supply provider Altronix claims its new Tango power supply 'eliminates the need for an electrician, dedicated conduit and wire runs'. In...
Last Chance - Register Now - October 2019 IP Networking Course on Oct 10, 2019
Last Chance - Register Now - Fall 2019 IP Networking Course. The course starts next week. This is the only networking course designed...
Milestone Has Problems on Oct 01, 2019
Milestone has problems. While the company previously excelled in the shift to IP cameras, as IP has matured and competitive differentiation has...
Mobotix First CNPP CCTV Cybersecurity Certification Examined on Sep 05, 2019
Mobotix recently became the first video surveillance manufacturer to receive the CNPP cybsersecurity certification for its cameras, in which they...
Top Ways Security Integrators Improve Their Careers on Sep 03, 2019
With DIY products expanding and the future of integration debated, how do integrators stay sharp so they are not left behind? 180+ integrators...
UK Facewatch GDPR Compliance Questioned on Aug 27, 2019
Even as the GDPR strictly regulates biometrics, a UK company called Facewatch is selling anti-shoplifter facial recognition systems to hundreds of...
Critical Vulnerability Across 18+ Network Switch Vendors: Cisco, Netgear, More on Aug 26, 2019
Cisco, Netgear and more than a dozen other brands, including small Asian ones, have been found to share the same critical vulnerability, discovered...
Security Integrators Outlook On Remaining Integrators In 2025 on Aug 22, 2019
The industry has changed substantially in the last decade, with the rise of IP cameras and the race to the bottom. Indeed, more changes may be...
First GDPR Facial Recognition Fine For Sweden School on Aug 22, 2019
A school in Sweden has been fined $20,000 for using facial recognition to keep attendance in what is Sweden's first GDPR fine. Notably, the fine is...
Anyvision Facial Recognition Tested on Aug 21, 2019
Anyvision is aiming for $1 billion in revenue by 2022, backed by $74 million in funding. But does their performance live up to the hype they have...

Most Recent Industry Reports

Alarm Veteran "Demands A Criminal Investigation" Of UL on Oct 18, 2019
The Interceptor's Project pressure against UL continues to rise. Following Keith Jentoft's allegation that "UL Has Blood On Their Hands", Jentoft...
Camect "Worlds Smartest Camera Hub" Tested on Oct 18, 2019
Camect is a Silicon Valley startup that claims the "Smartest AI Object Detection On The Market", detecting not only people and vehicles, but...
Hikvision Global News Reports Directory on Oct 17, 2019
Hikvision has received the most global news reporting of any video surveillance company, ever, ranging from the WSJ, the Financial Times, Reuters,...
Camera Calculator V3.1 Release Improves User Experience on Oct 17, 2019
IPVM has released a new version of our Camera Calculator, V3.1, with significant user experience improvements, a new development plan, and an...
Securing Access Control Installations Tutorial on Oct 17, 2019
The physical security of access control components is critical to ensuring that a facility is truly secure. Otherwise, the entire system can be...
Access Control Course Fall 2019 - Last Chance on Oct 17, 2019
Register Now - Fall 2019 Access Control Course. Thursday, October 17th is the last day to register. IPVM offers the most comprehensive access...
US DoD Comments on Huawei, Hikvision, Dahua Cyber Security Concerns on Oct 16, 2019
A senior DoD official said the US is "concerned" with the cybersecurity of Hikvision, Dahua, and Huawei due to "CCP" (China Communist Party)...
Pelco Sarix Pro3 Camera Tested on Oct 16, 2019
Pelco has released their Sarix Professional Series 3 cameras, claiming "more security detail in challenging scenes with excellent low light and...
IPVM Camera Calculator User Manual / Guide on Oct 16, 2019
Learn how to use the IPVM Camera Calculator. The guide below includes instructions, images, gifs, and videos demonstrating and explaining the...
Altronix Claims Tango 'Eliminates Electricians' on Oct 15, 2019
Power supply provider Altronix claims its new Tango power supply 'eliminates the need for an electrician, dedicated conduit and wire runs'. In...