Flock Safety privacy changes cut data retention from 30 days to seven and make search audits compulsory, after dozens of police abuse cases.
Flock Safety privacy changes cut data retention from 30 days to seven and make search audits compulsory, after dozens of police abuse cases.
Data should not be sold or used outside its 1 purpose. It should not be available to the original company at all to look at or have access to. Accessing data should only be allowed through court issued warrants and only on the devices in the proximity and time of the incident. As someone who is an admin to systems that deal with patient data information I can tell you without a doubt we dont even have access to this data, just the setup of everything else around it. It also has a full audit log of everyone who even views the data. This isnt anything new, they just decided to change the rules to see how far they can get away with doing whatever they want for personal gain.
You can ringfence it all you like and keep your MBAs entertained working out separation of responsibilities. But anyone with root can bypass any audit log. And someone always has root.
Despite its many flaws, the US needs GDPR-like regulations.
When GDPR was becoming big we adopted the standard over a year of figuring out what was needed to be done and implementing it. We wanted to be on top of it because we thought it would become the standard. So we are compliant and a US based company.