The U.K. data watchdog warns that sharing images of shoplifters online or in store windows may violate their rights under GDPR laws.

Instead, shop owners are advised to share information with law enforcement or neighboring shop owners instead of the public. 

Dr. Kolochenko, CEO at ImmuniWeb, commented:

“While the growing anger of shop owners is perfectly understandable, the intervention of the ICO is reasonable and very timely to protect both shop owners and innocent people.

First, in some cases, people who are wrongly identified as shop lifters may suffer irreparable reputational damage if publicly named and shamed. Who and how will repair the eventual damage – including loss of income – remains unclear, let alone such subtle domains as loss of friendship or eroded reputation in local community. Moreover, cases are known when a real shop lifter resembled a local person, who was wrongfully accused and even arrested for shoplifting.

Second, some shop owners indeed go too far by either making overboard or extreme accusations, exposing themselves to civil and even criminal liability, in addition to possible violation of the UK GDPR. Having said this, publishing established facts and technical evidence of shoplifting – to the extent necessary to clear or prevent crime – may be warranted if done without emotions and uncorroborated accusations. In any case, shop owners should always have quick talk to their solicitor before taking such measures.

Finally, even when publicly named and shamed, most criminals will unlikely change their conduct, sometimes simply having no alternative to put some food on table but to commit crimes. Worst, some exposed shoplifters may decide to revenge by damaging the shop or even aggressing the shop owners or their clients. Therefore, a recourse to self-help should be carefully limited to the extent needed to prevent or clear crimes.”