London's King's Cross facial recognition cams under regulator lens
The UK Information Commissioner's Office (ICO) is looking into the facial-recognition system installed by real estate developer Argent LLP in London’s King's Cross area, media reports heated up the debate on illegal snooping.
The ICO has announced that it will inspect how the system placed in the area is operated in order to make sure that no data protection laws were being violated.
The Financial Times reported first about the use of live face-scanning system across the 67-acre site around King's Cross station in London.
"Scanning people’s faces as they lawfully go about their daily lives, in order to identify them, is a potential threat to privacy that should concern us all. That is especially the case if it is done without people’s knowledge or understanding," said information commissioner Elizabeth Denham in an announcement.
"I remain deeply concerned about the growing use of facial recognition technology in public spaces, not only by law enforcement agencies but also increasingly by the private sector. My office and the judiciary are both independently considering the legal issues and whether the current framework has kept pace with emerging technologies and people’s expectations about how their most sensitive personal data is used," she added.
London mayor Sadiq Khan wrote to the developer enquiring about its use of facial-recognition systems, the BBC reported.
"King’s Cross station’s use of facial recognition technology highlights the potential threat to personal privacy that today’s advanced technologies can bring. This technology is being used to track tens of thousands of people in one of the busiest stations in London. Ultimately, it raises the question – how much surveillance is too much?" asked David Emm, principal security researcher at Kaspersky
The real estate developer has not disclosed the scope and term of the system or the use of the data collected. Media enquiries from the FT, the BBC, and the Register received a staple reply from the company PR.
"These cameras use a number of detection and tracking methods, including facial recognition, but also have sophisticated systems in place to protect the privacy of the general public," it said.
"Facial recognition and video surveillance are covered by a complex web of regulations which isn’t easy to navigate," said Tamara Quinn, partner at law firm Osborne Clarke.
"Under the GDPR, use of biometrics, such as facial recognition systems, is covered by stricter safeguard than ordinary personal data. For many companies, this means that they may need to get consent from every person scanned and prove that these individuals were fully informed and have given consent freely, without pressure or being penalised for not participating," she added.
"It is completely understandable that the general public will want to know why they are being monitored, and for what purposes," said Jason Sierra, sales director for Seven Technologies Group. "However, with facial recognition technology, they are not being monitored in the traditional sense. They are being detected and analysed but then ignored as a threat."
"This is a huge potential threat to people’s personal freedom, and it’s evident that no one has given consent to the capture of their personal features in this way. Kings Cross may insist that the collection of such data is being done purely for "public safety" and to give its customers the ‘best possible experience’, but it's unclear what benefit is offered by collecting such granular data," noted Emm.
The ICO investigation announcement comes on the heels of the Biostar 2 fiasco. The global biometrics services vendor, of which the London metropolitan police is a customer, had left data -- including data including fingerprints, facial recognition details, face photos of users, unencrypted usernames, passwords and personal details of employees -- unprotected.
Kings Cross also faces a similar issue, said Emm.
"Like all data, it will be of value and therefore desired by cybercriminals. So, if this data falls into the hands of the wrong people, the outcome could be catastrophic. At the end of the day, we can change our passwords, but we can’t change our facial or other physical features, and businesses should be transparent on exactly how this technology could be used before unleashing it on an unsuspecting public."
Industry: Cyber Security
- IAM Product/ Project Manager
- Upto €80,000 plus benefits
IAM product/project manager is need for this expanding service provider to help develop their IAM (CIAM) strategy roadmap. This role will have two main functions, to work between the front end digital team and the backend IAM development team to ensure that the current deployment of the solution runs smoothly and is fit for purpose, the Second function is to look at the business’ future digital offerings and to understand how the IAM/CIAM solution will develop with the new digital strategy, you will be looking at the future technology and the ensuring the IAM solution is fit for purpose. The business is an agile environment and you will require agile experience. This is a great opportunity to help shape a key product within the future digital strategy of this expanding service provider. We are looking for someone with both IAM and strong product management experience Project management experience would be beneficial. If you are interested speak to Robert Anderton on 0044 (0) 7957 493501 and he will be able to discuss the role in more details IAM product/project manager is needed for this expanding service provider to help develop their IAM (CIAM) strategy roadmap. This role will have two main functions, to work between the front end digital team and the backend IAM development team to ensure that the current deployment of the solution runs smoothly and is fit for purpose, the second function is to look at the business’ future digital offerings and to understand how the IAM/CIAM solution will develop with the new digital strategy, you will be looking at the future technology and the ensuring the IAM solution is fit for purpose. The business is an agile environment and you will require agile experience. This is a great opportunity to help shape a key product within the future digital strategy of this expanding service provider. We are looking for someone with both IAM and strong product management experience Project management experience would be beneficial. If you are interested then speak to Robert Anderton on 0044 (0) 7957 493501 and he will be able to discuss the role in more details
- Cyber Incident Manager, Proactive planning and management. SC
Cyber Incident Manager, Proactive planning and management. Cyber incident Manager needed to join a large and complex business to help them prepare for a cyber related incidents. SC clearance will be required. Current or the ability to achieve. This role does not require specific current hands on technical Incident response experience, but this background would give a distinct advantage. The role has two key functions: to help the business prepare for an event and to steer them through when / if that happens. The Cyber Incident response managers role will include, but not be limited to; working with internal stakeholders to develop a security incident management plan along with its and supporting policies. Developing plans and implementing strategies on how incidents are detected, reported, assessed and responded to. Engaging with leadership teams both internal and external, proactively mapping out this large business to identify and engage the various other stakeholders and their teams. Build out and document incident scenarios and their processes, ensure incident management procedures are updated, playbooks and key training etc. You should have experience working with both internal teams and external suppliers. The role will also focus on liaising with the various teams to ensure the security incident response plan is delivered effectively. CCIM, GCIH, CIPR (NCSC-Certified Cyber Incident Planning & Response) Looking to interview immediately.
- SOC Manager. SC Clearance. Immediate opportunity.
Permanent SOC Manager. SC cleared / clearable, London / Birmingham. SOC Manager needed to replace a SOC contractor I placed into a client who is due to complete their assignment at the end of March. The ability to achieve SC clearance is essential. Looking for someone that is a blend of strategic stakeholder engagement with strong technical skills. The role will sit in a relatively new SOC environment. The position is to setup, implementation and management of resources to help with the initial and on-going stages of a new SOC. Experience engaging with and managing client stakeholder relationships as well as 3rd party relationships is critical. The role will involve; setting up, implementing and fine tuning the various initial stages of a SOC environment. Experience establishing and building out technical process / operational capability, managing of technical teams (analysts, engineers and architects, creation of policy / playbooks, fine turning is key. SPLUNK is the tooling of choice… Interviewing immediately. Set up a call with me today on https://calendly.com/chris-holt/arranged-call-with-chris-holt-soc-manager-role Direct contact details Chris.Holt@dclsearch.com or 07884666351
- Security engineer. Financial Services. UK. Permanent
CH7863 Security engineer. End User . Financial Services Security Engineer needed to monitor and manage a security suite of tools within an End User environment. The Security Engiener will be responsible monitoring, configuring, fine tuning, incident management and generally improving the security tool capability. Specific experience with CyberArk, Tripwire Log Center and Tripwire Enterprise is highly desirable). Current experience with Vulnerability management and penetration testing is highly desirable. Specifically the ability to effectively manage 3rd party pen tests. You will be working within a specialist security team reporting to the CISO. Experience working within an end user environment within financial services is highly desirable. Flexible location. This is an exclusive role to DCL Search & Selection. To book a call please use my Calendy link https://calendly.com/chris-holt/arranged-call-with-chris-holt-soc-role-