Norfolk police said it has taken “immediate steps” to remove data tracking tools that shared sensitive information about crime victims with Facebook.
It follows an outcry after it was revealed that data about people reporting sexual offences, domestic abuse and other crimes has been passed on via an embedded tool called a Meta pixel which was being used on the police website.
Information about content viewed including advice pages for crimes including rape, assaults, stalking and fraud was sent despite the online form for victims and witnesses to report offences apparently being “secure”.
READ MORE: Norfolk Police embroiled in Facebook data sharing scandal
Norfolk and Suffolk Constabularies said the tracking tool had been used on its websites for “recruitment purposes” but was now being removed after the “wider implications” became apparent.
It comes after victims’ charities and privacy experts said the sharing of the information with the internet giant was a “shocking breach of trust” that threatened to undermine confidence in the police.
The data protection regulator the Information Commissioner's Office said the use of the tools, first reported in The Observer, raised “real privacy concerns”.
“These sites are aimed at victims and witnesses of crime who expect their information to be treated with particular care,” it said.
Mark Richards, an online privacy researcher, said that using ad pixels in this context was “like asking someone to report a crime when there’s a stranger in the room”.
READ MORE: Roys of Wroxham hit by suspected ransomware attack
A spokesman for Norfolk and Suffolk police said: “We use data tracking tools on our two websites for recruitment purposes.
“However, recognising the wider implications we have taken immediate steps and asked our website service providers to remove the relevant Meta pixel.”
It said it was working with providers to ensure the use of cookies and pixels on soon to be launched new police websites were “compliant with information standards and are only included on relevant web pages where necessary”.
A spokesman for Meta, which operates Facebook, said its policies were that advertisers should “not send sensitive information” and its system is “designed to filter out potentially sensitive data it is able to detect”.
Comments: Our rules
We want our comments to be a lively and valuable part of our community - a place where readers can debate and engage with the most important local issues. The ability to comment on our stories is a privilege, not a right, however, and that privilege may be withdrawn if it is abused or misused.
Please report any comments that break our rules.
Read the rules here