4 ms·

>For example, the Northern California Regional Intelligence Center has 29,114 accounts, and each one includes a full name; rank; police department or agency; em

>For example, the Northern California Regional Intelligence Center has 29,114 accounts, and each one includes a full name; rank; police department or agency; email address; home address, ... So that means that anyone with access to the system can get the home addresses of all their co-workers that also have accounts on the system? Why would all this personal information be associated with an account of this type? This isn't an HR database.

GaryNumanVevo 6y ago
Honestly that's the most interesting part (at least until people sift through the data more) of this story. Why the heck are they storing sensitive data on what appears to be a CMS for e-commerce site?
- driverdan 6y ago
  Home addresses aren't considered sensitive information. If you own your home that information is public. Cops read people's addresses (and SSNs) out over the radio all the time for anyone to hear. I'm not saying I agree with this, privacy should be protected better, but that's the US.
  - mschuster91 6y ago
    > Home addresses aren't considered sensitive information. I wonder what will happen once the first protesters line up at cop houses or pranksters bombard them with spam and fake pizza orders. Not that I'd condone wasting pizza, but in many cases change only happens when the people in power have problems.
  - 5555624 6y ago
    Home addresses are "Public PII" under 2 CFR § 200.79 - Personally Identifiable Information (PII), as opposed to "Protected PII." A lot of places don't make the distinction. (We do a semi-annual PII Audit and don't make the distinction.)
  - GaryNumanVevo 6y ago
    I'm fairly up on GDPR, but no idea when it comes to public officials
ableal 6y ago
> can get the home addresses of all their co-workers When mammoths roamed the earth, there was this "phone book" thing listing the full name and address of anyone with a phone line in the city, except for unlisted numbers (those could be had by request).

GaryNumanVevo 6y ago

Honestly that's the most interesting part (at least until people sift through the data more) of this story. Why the heck are they storing sensitive data on what appears to be a CMS for e-commerce site?

driverdan 6y ago
Home addresses aren't considered sensitive information. If you own your home that information is public. Cops read people's addresses (and SSNs) out over the radio all the time for anyone to hear. I'm not saying I agree with this, privacy should be protected better, but that's the US.
- mschuster91 6y ago
  > Home addresses aren't considered sensitive information. I wonder what will happen once the first protesters line up at cop houses or pranksters bombard them with spam and fake pizza orders. Not that I'd condone wasting pizza, but in many cases change only happens when the people in power have problems.
- 5555624 6y ago
  Home addresses are "Public PII" under 2 CFR § 200.79 - Personally Identifiable Information (PII), as opposed to "Protected PII." A lot of places don't make the distinction. (We do a semi-annual PII Audit and don't make the distinction.)
- GaryNumanVevo 6y ago
  I'm fairly up on GDPR, but no idea when it comes to public officials

ableal 6y ago

> can get the home addresses of all their co-workers When mammoths roamed the earth, there was this "phone book" thing listing the full name and address of anyone with a phone line in the city, except for unlisted numbers (those could be had by request).