All posts by Paul Stradling

Tech News : WhatsApp’s Vanishing Photos & Videos

Facebook’s WhatsApp is rolling out its new ‘View Once’ feature whereby photos and videos disappear from the chat after they’ve been opened.

Privacy and Space-Saving

WhatsApp says that the feature gives users more control over their privacy because “not everything we share needs to become a permanent digital record” and suggests that ‘View Once’ is ideal for something like a photo of something sensitive like a Wi-Fi password or similar.

WhatsApp also points out that with many phones, taking a photo means it takes up space and this may not be necessary for something like “photo of some new clothes you’re trying on at a store, a quick reaction to a moment in time.”

How It Works

Users can choose to select photos or videos as ‘View Once’ and once sent, the recipient will see that they are marked with a new “one-time” icon. Once viewed, the message appears as “opened” and the media is not saved to the recipient’s Photos or Gallery. After the ‘View Once’ photo or video message has been opened once by the recipient it is erased from the chat or, if the photo or video isn’t opened within 14 days of it being sent, the media will expire from the chat anyway. The sender can’t view a photo or video again that they’ve sent as View-Once.

Also, photos or videos that were sent or received with View-Once can’t be forwarded, saved, starred, or shared, although it is possible to take a screenshot or screen recording of the media before it disappears or to take a photo or video of the media with a camera or other device.

Disappearing Messages

Back in November 2020, WhatsApp announced the launch of its ‘disappearing messages’ feature where users have the option to automatically delete chats between the sender and recipient after 7 days. At the time, WhatsApp said “most of what we send doesn’t need to be everlasting,” and that “Our goal is to make conversations on WhatsApp feel as close to in-person as possible, which means they shouldn’t have to stick around forever”.  WhatsApp also emphasised the feature would help users maintain privacy and give them “peace of mind,” as well as keeping the app light.

Criticism

The new View-Once feature has been criticised by child protection advocates such as the National Society for the Prevention of Cruelty to Children (NSPCC) because, coupled with the end-to-end encryption of the app, the view once feature could give those involved in child sexual abuse greater protection from detection.

What Does This Mean For Your Business?

The addition of the ‘disappearing messages’ feature last year and now the ‘View Once’ feature means that Facebook has ensured that WhatsApp is able to have very similar features to its rival Snapchat which, for example, has a “Stories” feature allowing users to post videos and photos to their profile which then disappear after 24 hours. The disappearing messages feature (which also works in Instagram) and View Once feature are also part of Facebook’s ongoing plan to integrate and make Messenger, WhatsApp, and Instagram interoperable in the near future. Also, for WhatsApp users, these new features may feel as though value is being added to the app and this could help to retain the loyalty of existing users and improve some practical aspects of the app (saving space on users’ phones), so that users feel more in control as well as bringing a feel-good factor about privacy. These factors are likely to be valued by business users and are ways to help keep this very successful free app up-to-date and relevant to current user needs.

Featured Article : Have Computers Reached Their Limit?

Many tech commentators have noted how the stagnation in computing has led to ‘Moore’s Law’ being challenged, but has the shrinking of transistors within computer chips really hit a wall and what could be next for Moore’s Law?

What Is Moore’s Law?

Moore’s Law, named after Intel co-founder Gordon Moore, is based on his observation from 1965 that transistors were shrinking so quickly that twice as many would be able to fit into a micro-chip every year, which he later amended to a doubling every two years. In essence, this Law should mean that processing power for computers doubles every two years.

The Big Problem

The big problem is that technical challenges to Moore’s Law have led to a slow-down period that now appears to be challenging the validity of the Law itself. For example, the growth of the Internet and the IoT, plus mass digitisation and a reliance upon technology in the developed world all mean that economic growth within industry, science, medicine and more now rely upon computers/devices and connections to be faster, cheaper, and more widely available. Limitations in chip manufacture and just how much improvement can now be made in terms of performance and power consumption and fitted into ever-smaller spaces in chips could, therefore, be a huge threat to progress and innovation in many aspects of life.

The Challenges

The challenges to Moore’s Law that many tech commentators have noted are that:

– Technology companies may be reaching their limit in terms of fitting ever-smaller silicon transistors into ever-smaller spaces, thereby leading to a general slowing of the growth of processing power.

– Big computer chip manufacturers like Intel have delayed the next generation of smaller transistor technology and increased the time between introducing the future generations of their chips. Back in 2016 for example, Intel found that it could shrink chips to as little as 14 nanometres, but 10 nanometres is going to be a challenge that would take longer to achieve. Intel, for example, is taking five years, rather than two, to make its latest ‘process node transition’.

– With chip complexity doubling every other year, the scalability of new chips design innovations is a challenge in itself.

– Chip manufacture has been disrupted and there is now a global chip shortage which is having huge knock-on-effects across many industries e.g., car plant shutdowns due to chip shortages.

The Effects

The knock-on effects of these challenges to Moore’s Law are that:

– There now appears to be a slowing of computer innovation that some say could have a detrimental effect on new, growing industry sectors such as self-driving cars.

– Big tech companies are finding it more difficult to keep improving their data centres.

– The rate of improvement of supercomputers has been slowing in recent years and this may have had a negative impact on the research programs that use them.

– Computers are being challenged in how they can work for (and keep up with) the demands of business.

– Mobile devices, which use chips other than Intel’s, may also have the brakes put on them slightly as they now also rely, to a large extent, on the data-centres to run the apps that their users value.

The Target

The target for chip manufacturers is finding new ways to reach staggeringly small, 2nm chips that can still deliver performance and are energy efficient, in large enough numbers to meet world demand by 2026.

Ways Forward

Some of the possible ways forward and technical solutions being worked upon and introduced  to prolong the life of Moore’s Law include:

– Changing transistor designs e.g., to Gate All Around (GAA), also known as nanoribbon or nanosheets (horizontally stacked nanosheets). This extension of the FinFET concept produces transistors that look like cylinders with a gate coat all around, thereby getting around challenges like variability and mobility loss.

– New storage technologies such as Spin Transfer Torque (STT-RAM), and new logic technologies such as transistor lasers, Domain Wall Logic, or Spin Wave, could help to prolong the life of Moore’s Law, but may not be ready in time.

– Using numeric analysis, graph analysis, and spectral graph theory techniques. For example, researchers at Stevens Institute of Technology have used numerical matrices (known as eigenvalues and eigenvectors) to develop algorithms that make it easier to understand the relationships between billions of different chip components. This, in turn, has enabled the development of software tools such as Graph Spectral Sparsifier (GRASS) which chip designers can use to simplify the chip design process so that an integrated circuit with billions of elements to be analysed in just a few hours.

– Using atomic or molecular-level etching and deposition to more precisely target and treat areas of chips, thereby improving yield and throughput in chip manufacture.

– Using liquid cooling in data centres. For example, Microsoft has recognised that it has now come up against the slowdown of Moore’s Law as transistor widths have shrunk to atomic scales and are reaching a physical limit, whilst the demand for faster computer processors for high performance applications such as AI has accelerated. This has meant that more electric power is now being put through the small processors used in Microsoft’s data centres, thereby increasing the heat they produce. According to Microsoft, this means that air cooling is no longer enough to prevent the chips from malfunctioning. The demands of a huge increase in the numbers of Teams users during lockdown and the need to maintain sustainable and energy efficient data centres have also contributed to Microsoft’s decision to try liquid cooling. Microsoft has, therefore, adopted a new system of two-phase immersion cooling which involves immersing servers in tanks filled with an engineered fluid (from 3M) which has dielectric properties (i.e., it is an effective insulator), thereby allowing the servers to operate normally while fully immersed in the fluid. The liquid boils at 122 degrees Fahrenheit (90 degrees lower than the boiling point of water) and this boiling effect, generated by the work the servers are doing, takes the heat away from the computer processors whilst the low-temperature boil enables the servers to operate continuously at full power without risk of failure due to overheating. The second phase of this two-phase process refers to the vapour rising from the tanks making contact with a cooled condenser in the tank lid, thereby changing it back to liquid that rains back onto the immersed servers, creating a closed-loop cooling system. The result is the ability to continue the Moore’s Law trend at datacentre level as well as reducing power consumption.

– AI designing chips. For example, a recent Google research paper has described how a deep reinforcement learning approach to chip ‘floorplanning’ has led to AI generating chip floorplans that are superior or comparable to those produced by humans. The researchers used a deep reinforcement learning approach, coupled with an edge-based graph convolutional neural network architecture to design the next generation of Google’s artificial intelligence (AI) accelerators, and this method enabled the AI to learn from past experience in chip floorplanning and to become better and faster at solving new instances of the problem. The researchers found that in just under six hours, instead of the months it would have taken for human engineers, the AI design method automatically generated chip floorplans that are superior or comparable to those produced by humans in all key metrics, such as power consumption, performance, and chip area. Also, the researchers believe that in addition to AI’s success in designing chips for AI, more powerful AI-designed hardware is likely to fuel advances in AI itself, thereby creating a kind of symbiotic relationship between the two fields.

What Does This Mean For Your Business?

Many smaller businesses that are less directly reliant upon the most-up-to-date computers may not be particularly concerned at the present time about the challenge to Moore’s Law, but all businesses are likely to be indirectly affected as their tech giant suppliers struggle to keep improving the capacity of their data-centres, and chip manufacturers struggle with the challenges of chip shortages coupled with the technical difficulties of designing and creating smaller chips with the right levels of performance fast enough.

Many see AI and machine learning as the gateway to finding innovative solutions to improving chip design and computing power, but these also rely on data centres and other areas of computing that have been challenged by the pressure on Moore’s Law.

A more likely way forward might be that chip designs will need to be improved and highly specialised versions will need to be produced, and Microsoft and Intel have already made a start on this by working on reconfigurable chips. Also, the big tech companies may need to collaborate on their R &D in order to find the way forward in increasing the rate of improvement of computing power that can ensure that businesses can drive their products, services, and innovation forward.

Tech Insight : What Is Zero Trust?

With mobile computing, software-as-a-service (SaaS), and now remote working moving the focus of IT security away from the traditional perimeter, this article takes a brief look at what a ‘Zero Trust’ approach is and how it can help.

More Complex Security Demands

The belief among many IT security experts is that a traditional perimeter-based security approach may no longer be enough to cope with the more complex IT security requirements that a widening scope of computing and threats have brought.  Additional authentication strategies are now needed.

First

The term ‘Zero Trust’ in relation to IT security was first used back in 2010 in a report by analyst firm Forrester when it was noted that there had been a big increase in the number of enterprises using the public cloud and that the security ‘perimeter’ was changing.

Zero Trust

The Zero Trust approach to IT Security (as highlighted by James Walsh of Fieldfisher) has the following characteristics:

– It is a data-centric model i.e., protecting data from both internal and external threats rather than just relying on the old ‘castle and moat’ style perimeter security (address and location layer).

– It works on the understanding that although as many precautions are being taken as possible, the modern reality is that is not a case of “if” an attacker gets through, but “when”.

– Rather than the old “trust, but verify” approach, the Zero Trust approach is “never trust, always verify” i.e., trust is never granted implicitly but must be continually evaluated / all network traffic and nodes are considered untrustworthy until proven otherwise.  This means that any device must pass authentication and security policy checks to access any corporate resources.  It also means controlling this access only to the extent required.

– Zero Trust is not simply an approach. For it to work effectively, it requires compatible and connected policies, practices, software, and hardware that can create a whole, secure Zero Trust ecosystem.

Managing

In managing the device, user, and trust level, the Zero Trust approach uses:

– Managing the monitoring and compliance of all endpoint devices (understanding the threats), including BYOD (Bring Your Own Devices), through unified endpoint management.

– Having one single sign-on point (SSO) where a single version of a user ID meets a single-entry point where the user credentials must be fully validated before accessing the business systems, as well as logging access in and out of the system.

– Multifactor authentication (MFA) being used to establish a user’s credentials and using a single factor is no longer an option. MFA could include a security key, biometrics, a trusted device, and more.

Benefits

Some of the main benefits of Zero Trust include:

– Administrators can get an accurate inventory of infrastructure (i.e. which users, data, apps, and services are present) in the corporate infrastructure. This contributes to performance planning as well as security.

– The monitoring and alerting gives a better ability to quickly detect and respond to cybersecurity threats. Examples of tools used for monitoring in a Zero Trust framework include security information and event management systems (SIEM) for centralised logging capabilities and IT infrastructure threat detection and response tools.

– Improved user experience thanks to (for example) single sign-on (SSO) limiting the number of passwords needed and requiring a user to authenticate only once to gain access to everything they need.

– Reducing the potential for gaps in the security infrastructure thanks to a universal security policy that is created once and then implemented from end to end throughout the organisation.

– Making it easier and more flexible to move apps, data and services because with Zero Trust, app and data security policies are centrally managed and automation tools migrate the policies where they are required.

Components of a Zero Trust System

An example of the components of what is required for a Zero Trust network, in this case, NIST (US Government), include:

– A policy engine (PE) and policy administrator (PA) at the centre (in tandem or as part of the same software) to decide whether machines or web traffic are safe and granting or revoking access. The PE uses external data sources to help make its decisions.

The policy engine uses external data sources data that can include:

– Continuous diagnostic and mitigation (CDM) systems – providing information about (for example) the current security state, updating of a device’s OS and security software and more.

– Industry (and organisational) compliance checks.

– Threat intelligence feeds (e.g. about blacklists and malware).

– Activity logs that could flag up a potential risk.

– Data access policies for each individual and asset.

– Public key infrastructure (PKI) to validate certificates.

– Security information and event management (SIEM) systems. These provide security-related data that can also be used to improve the whole Zero Trust system.

– Other Zero Trust frameworks can use adaptations to existing technologies, e.g. device sandboxing, a device/agent gateway model, micro-segmentation, and more.

Challenges to Implementing Zero Trust

As with any big change in a company/organisation, moving over to Zero Trust has its challenges which include:

– Any legacy apps, tools and resources that are currently part of network and enterprise operations but aren’t easy to integrate with a Zero Trust system.

– Regulations are currently running behind the implementation of many Zero Trust systems and these will need to change.

– Achieving visibility and control in a network is a big challenge and many organisations don’t have a comprehensive view and are, therefore, still vulnerable through unpatched devices or users with too many privileges.  In the shorter term, a hybrid approach to Zero Trust is likely to lead the way to full implementation.

Examples

Examples of Zero Trust (ZT) security models in action include:

– The US federal government now operates a Zero Trust model.

– Cloud service provider Akamai Technologies (US) – to let employees securely access internal applications but keep end-user devices off the corporate network entirely.

Big Increase In Zero Trust Budgets – Especially Since The Pandemic

The results of a recent poll of more than 600 global security leaders, revealed in a report by Okta show that 90 percent of companies are now working on a Zero Trust initiative, up from 41 percent a year ago and that 82 percent of businesses in Europe have increased their budgets for Zero Trust.  The report also notes that the pandemic has made companies “more security conscious”, thereby motivating them to adopt zero trust.

Big Business For The Future

The large number of companies now adopting Zero Trust is reflected in the results of a new study conducted by Grand View Research Inc, which shows that the Zero Trust security market will be worth $59.43 billion by 2028, which represents a compound annual growth rate of 15 percent!

Resources and Links

Here are some links to a few useful resources and guides for Zero Trust IT security:

Microsoft’s guide to Zero Trust and Zero Trust principles: https://www.microsoft.com/en-gb/security/business/zero-trust

The National Cyber Security Centre’s guide to Zero Trust architecture design principles: https://www.ncsc.gov.uk/collection/zero-trust-architecture

A Zero Trust security cheat sheet: https://www.techrepublic.com/article/zero-trust-security-a-cheat-sheet/.

McAfee’s guide to Zero Trust architecture: https://www.mcafee.com/enterprise/en-gb/security-awareness/cloud/what-is-zero-trust.html

How to implement Zero Trust with real-life examples: https://searchsecurity.techtarget.com/feature/How-to-implement-zero-trust-security-from-people-who-did-it.

What Does This Mean For Your Business?

It is clear that mobile computing, the pace of technological change, the digital transformation, and massive increase in remote-working (fuelled by the pandemic), not to mention soaring cyber-crime figures have highlighted the need for a data-centred approach and a move away from the ‘moat and castle’ view of IT security.  Another good reason to opt for the Zero Trust approach is as a way of having a much better chance of avoiding the cost of a breach.  Not surprisingly, Zero Trust entered the European security market in 2019 and IT and Security Risk professionals as well as many businesses and organisations are now seeing it as the natural and practical way forward, hence the huge increase in businesses working on a Zero Trust initiative in the last year.

Featured Article : Featured Article: Why is Data Science … Big?

In this article, we look at what data science is, and what is driving its growth and value to businesses and organisations worldwide.

Data Science

Data science uses multiple disciplines, scientific methods, and processes (e.g. domain expertise, programming skills, data engineering, data preparation, data mining, predictive analytics, machine learning, data visualisation, and knowledge of mathematics and statistics, and more) as well as algorithms and systems to extract knowledge and insights from structured and unstructured data. Data science also apples knowledge and actionable insights from data so that the insights gained can add value and create actionable plans for companies and other organisations.

Vast Amounts of Data Generated and Collected

We now live in a data-driven society with more data being generated than ever before, with most of the data generated in only the last few years. It has been estimated that more than 2.5 quintillion bytes of data are generated every day.  The IDC predicts that by 2025, the total (and constantly growing) amount of digital data created worldwide be 163 zettabytes. Data science and the skills of data scientists have enabled companies to use this data to find new opportunities, make better “data-driven decisions”, and turn the insights from the data into added value and competitive advantage.

Drivers of Data Generation and Collection

The key drivers of data generation and collection include:

– The growth of the world’s internet population.  For example, just before the pandemic in 2020 (the pandemic has boosted Internet growth further) the internet had reached 59 percent of the world’s population (i.e 4.57 billion people with web access), a 3 percent increase from the previous year (DOMO), with 4.2 billion active on mobile and 3.81 billion using social media (social media companies are the biggest collectors of personal data).

– The growth of artificial intelligence (AI) and AI becoming more accessible to (and affordable for) businesses.  AI enables vast amounts of data to be analysed and insights to be found much more quickly and efficiently than ever before. Data scientists and their use of technologies and tools, such as AI, have enabled businesses to tackle and get value from their ‘big data’ (i.e. vast amounts of data they’ve collected) that’s proven too much of a challenge to tackle before.

– The growth of technical innovations like 5G wireless technology, making data collection and application easier and enabling further growth of the  Internet of Things (IoT) e.g. wearables, sensors, monitors, and scanners to collect information on a single network, thereby providing more data for data scientists to work with. In 2020 it was estimated that the number of IoT devices was thought to be anywhere between 30 and 50 billion worldwide which could generate more than 4 zettabytes of data in one year.

– The continuing rise of mobile technology has meant the growth of apps, most of which collect data.

– An accessible international marketplace due to the rise of the Internet and communications technology growth.

The Value of Data Scientists

Given that we are in a data-driven society, data science is now at the forefront of what some have called the fourth industrial revolution.  This is the reason why, as far back as 2012, the Harvard Business Review suggested that being a data scientist is the “sexiest job of the 21st century”.

The value of Data Scientists to companies and organisations is based on the fact that they can use their understanding of multiple scientific and technical disciplines to:

– Analyse data sets to produce actionable plans which, because they are based upon real-world data (i.e. data-driven) can be more successful.

– Use programming, machine learning, risk analysis, and research skills, to help make data comprehensible for everyone else on a team / present key data in a way that others can understand. This enables the value of other team members to be unlocked as they can make more informed and directed decisions and suggestions that help create value-adding and cost-reducing solutions and opportunities.

– Improve business processes to make operations and marketing more efficient and effective.

– Improve marketing by using data insights to increase data-driven personalisation and help businesses to take advantage of (and navigate) important patterns in business trends.

– Ask the right questions and identify data sources and their value, both of which are vital platforms on which to build business decisions.

– Help to set global data security standards.

Data Science and AI

Although artificial intelligence is a tool that can help to power data science operations, data science is not totally dependent on AI.  A data scientist uses their skills to make decisions about extract value from data, but they also need machine learning algorithms to help with and to speed up that process.

Examples

Examples of how data scientists have can positively impact industries include:

– Saving lives and improving processes and outcomes in the healthcare industry (30 percent of the world’s warehoused data is from the medical arena) e.g. developing AI-powered diagnosis models for cardiologists.

– Using data to innovate and improve safety and performance in the transport industry e.g., feeding into the development of autonomous vehicles (cars and aircraft).

– Using data analytics software to help with supply chain management e.g., FoodService Co. using a data-driven dashboard to save labour-hours and inventory reconciliation.

What Does This Mean For Your Business?

In our data-driven society, the data collected by businesses can hold insights that can be a source of value creation, reduced costs, innovation, and competitive advantage. Data scientists have the skills to unlock that value by using multiple disciplines and tools to spot patterns and trends that feed into the improvement of products and services, operations, and marketing. These insights can be transformative, and this explains why data science is a growing field that has become so valuable in all industries over such a short space of time.

Tech Insight : What Is Business Process Management?

In this article, we take a brief look at Business Process Management (BPM), how it works, and how it can add value.

What Is Business Process Management (BPM)?

BPM is also referred to as business process improvement (BPI), business process re-engineering, continual improvement process (CIP), and process improvement. BPM is the ongoing, continuous practice or discipline of improving and controlling the processes of the business using analysis and modelling.

Types

There are different types of BPM including document-centric (built-around a core, particular document), human-centric BPM (humans decide what happens after each step in the process), and Integration-centric BPM (based around the integration of different software systems).

Why?

The goals of BPM should be to keep improving business processes to keep them in alignment with the goals of the business as the business and the business environment evolve. This will help to:

– Enable strategic clarity.

– Keep alignment of the firm’s resources and help executives to determine how to deploy, monitor, and measure those resources.

– Increase discipline in daily operations.

– Remove bottlenecks.

– Align business functions with customer needs, thereby improving marketing.

– Reduce costs and minimise errors and risk.

BPM and RPA

Whereas Robotic Process Automation (RPA) tools let companies configure software bots to capture and interpret applications and are a way to help automate monotonous, routine, and time-consuming tasks, BPM is the overall holistic approach to optimising and automating business processes. RPA is another tool that can be used as part of a company’s BPM strategy and, therefore, BPM and RPA could be thought of as being complementary.

How To Apply BPM

BPM should be based around outcomes and the process is based around 5 steps of the BPM lifecycle which are:

1. Design. This involves a review of current business rules and arriving at desired outcomes by taking account of the views of key stakeholders and management.

2. Model.

3. Execute.

4. Monitor.

5. Optimize.

BPM tools, such as BPM software enable businesses and organisations to use a proven, systematic approach to managing and optimising their business processes. Well-designed BPM software can also help IT specialists to construct business workflows and connect different systems.

Popular BPM Software Tools

Examples of popular BPM software include:

Kissflow – A platform to optimise, manage, and track all company work.

Nintex – The Nintex Process Platform enables standardising of workflows and automation of business processes.

Processmake – Low-Code BPM Software.

Busagi – Enterprise software for Business Process Automation on a low-code development platform.

Monday.com – Enterprise BPM platform.

Process Bliss – BPM software with a drag & drop process flowchart builder.

Other examples include Wrike, Forecast.app, Quixy, Orchestly, Process Street, ProWorkflow, Studio Creatio (free), Trisotech, IBM Blueworks Live, iGrafx, K2 Platform, Kintone (good for non-proftit organisations), Novacura, OnBase by Hyland, Pipefy, and Zoho Creator.

Examples

Real examples of how BPM has been used (from Kissflow and Nintex) include:

– Softbank Telecom using BPM software to create apps to enable authorities to quickly approve requests on their mobile phones, thereby improving upon the old, slow, and disjointed process of using spreadsheets and email for all processes.

– Davenport University (in the US) using BPM to automate the three processes of student course requisitions, academic scheduling, and transport coordination, thereby improving cross-departmental coordination, and operating more efficiently than the old processes which were reliant upon paper and manual intervention.

– New Belgium Brewing Co. using BPM to help it comply with new legislation by standardising and automating how it handled privacy requests from its California customers, thereby freeing up staff time to concentrate on brewing beer.

What Does This Mean For Your Business?

Using BPM (software and tools) can provide businesses with a systematic approach to managing and optimising their business processes which essentially helps businesses to be more efficient, work smarter, save costs, reduce risk and errors, become better at what they do, and eliminate many of the problems and bottlenecks that may have been preventing them reaching their goals and unlocking their true potential. Investing in BMP can deliver real benefits, add value, and improve competitiveness while giving managers more fuel to make better decisions.

Tech News : Computer Says “Guilty”

An error in the HM Courts and Tribunals Service computer system meant that 5,000+ defendants were wrongly assigned guilty pleas.

Accidental Criminal Convictions

The problem that led to 5,000+ people being wrongly given criminal convictions was an error in the computer system’s bulk amendment facility, which was used to update the cases of magistrates’ hearings that were adjourned due to the impact of the pandemic. The error meant that guilty pleas were copied onto cases that defendants were still contesting.

Where?

It has been reported that the error has affected cases related to magistrates’ courts in Westminster, Highbury, Wimbledon, Willesden, Thames, Uxbridge, Croydon, Bexley, and Bromley.

Example

As far back as last October, The Guardian newspaper questioned whether convictions on the Police National Computer were accurate after it uncovered an example of where a mistake appeared to have been made. At the time, a female defendant who had denied an offence related to a violent crime had a guilty plea entered on the PNC. This meant that she gained a criminal conviction which took her lawyers three months to correct, and led to HM Courts and Tribunal Service (HMCTS) writing to the defendant to apologise for the error.

Investigations by HMCTS following this example revealed that 5,231 individual defendants and 55 companies had actually been affected by the computer bulk uploads error.

The ICO

The error was referred to the Information Commissioner’s Office (ICO) by the Ministry of Justice in October and it has been reported that, after a comprehensive review, the correct ‘not guilty’ pleas were restored by mid-November.

Although an HMCTS spokesperson said that the issue was “temporary” and had been “promptly resolved” with no-one receiving an incorrect verdict or sentence, the ICO has said “People have the right to expect that organisations will handle their personal information… responsibly”.

What Does This Mean For Your Business?

Under UK GDPR, businesses are expected to comply with data laws and to act responsibly with the data of customers, employees, and other stakeholders or face some serious consequences (e.g. large fines and reputational damage).  Some businesses may, therefore, feel justified in criticising the police over the errors in their computer system which could have caused problems for thousands of people and for businesses. For example, it is possible that before the error was discovered, a criminal record check by a potential employer could not only have resulted in the candidate not getting the job due to a wrongly recorded conviction but may also have robbed the business of the hiring an otherwise great candidate who may have brought considerable skills to the company. There are also, of course, the potential the emotional and social effects to consider of a person being (wrongfully) assigned a conviction to consider.

Tech News : Half of Adults Unaware of Medical Records Sharing Scheme

A survey by consumer watchdog Which? has revealed that almost half of adults in England are unaware of plans for their medical records to be shared with a new NHS database.

What Data Sharing?

Back in May, NHS Digital launched its plan for sharing medical data from GP records in England. As part of the General Practice Data for Planning and Research (GPDPR) scheme, GP surgeries in England can automatically upload and share the medical records of every patient in England to an NHS Digital platform, unless the person has opted out.

Original Opt-Out Date Has Passed

Although the original opting-out date of June 23 has now passed, a campaign supported by medical professionals and MPs has acquired an extension period to an (as yet) unspecified final opt-out date after it was agreed that the scheme had not been publicised enough, and also, extra time was needed to work on the necessary privacy safeguards.

Confirmed By The Which? Survey

This lack of awareness of the scheme and its implications was confirmed by recent Which? survey where only 55 percent of the 1700 people surveyed said they had heard of it, and 71 percent of them said that the NHS hadn’t publicised it well.

Why Is The Data Being Collected?

NHS Digital says that the data is being collected to support the planning and commissioning of health and care services, such as the development of health and care policy, public health monitoring and interventions, and to help with research (e.g. analysing the long-term impact of COVID-19).

What Kind of Data?

The medical record data that’s being shared under the GPDPR scheme includes your sex, ethnicity and sexual orientation, physical, mental and sexual health, and lots of other data including referrals, diagnoses, test results, medications, allergies and immunisations.

What About Insurance Company Access?

One of the big concerns of those who are aware of the scheme is whether data (that could be linked to an identity) will be shared with insurance companies. However, it has been reported that data from the scheme will not be shared with marketing or insurance companies. Also, data shared in the scheme will be anonymised, thereby replacing some possible identifiers with unique codes making it more difficult to directly link details to an identity.

Still Possible To Identify A Person

The data, however, will not be completely pseudonymised which means that although it is unlikely that anyone can be identified from the data, it is still technically possible.  For example, software could be deployed to decode the data where there is a legal reason to do so.

What Does This Mean For Your Business?

Since the pandemic and the development of vaccines, many people may be feeling more sympathetic to the need for sharing data, perhaps their own, to be used for medical research and, as such, might be less worried than before about their medical data being shared.  That said, the thought of personal medical data being shared with companies that could use it for marketing (targeting) or by insurance companies to make judgments about eligibility or ramp up premiums is a worry for many, even though there are assurances in this case that marketing and insurance companies won’t be able to do this. The fact that the scheme requires opt-out rather than opt-in and that the opt-out date has long passed with half the population knowing about the scheme at all does feel as though it is something that is being sneaked in. That said, it’s worth noting that UK’s data protection laws already allow access to data when needed for research and scientific purposes. This story is also an example to businesses of the importance of communication, transparency, and giving plenty of information in plenty of time for any important changes to terms, services, or any other factors that customers feel are important, of value, or may influence (have influenced) their decision about choosing or continuing with services.

Tech Tip – Minimise All Windows Instantly With The Show Desktop Button

If you’d like to know a fast way to minimise all your open windows with one click in Windows 10, here’s how.

– Look at the bottom far right-hand side of the screen, to the right-hand side of the ‘notifications’ icon. You will see a tiny, vertical line.

– Click on the line and all your open desktop windows are instantly minimised.

– Click on the line again to restore/maximise all the windows.

Tech News : Disinformation or Misinformation?

The new Online Media Literacy Strategy from the Department for Digital, Culture, Media, and Sport (DCMS) is aimed at supporting 170+ organisations to improve media literacy rates in the UK, and thereby help young people to spot disinformation.

As an aside, misinformation is information that is simply wrong, inaccurate or misleading (without necessarily having any intention to propagate the misinformation) whereas disinformation is a subset of it, i.e. information that is deliberately wrong, inaccurate or misleading.

As aside to the aside, mistrust and distrust are roughly the same in meaning (i.e. not to trust someone or something) although, according to Dictionary.com, distrust implies having evidence to support that feeling.

Disinformation Problem

The Strategy, which was promised in the government’s online harms white paper, is intended to help tackle the problem that many young people in the UK are not able to distinguish between disinformation/misinformation and truth in what they read online.  For example:

Ofcom figures show that 4 out of 10 UK adult internet users don’t possess the skills to critically assess content online.

National Literacy Trust research figures show that only 2 percent of children have the skills they need to identify misinformation, half of teachers (53.5 percent) think that the national curriculum doesn’t educate children with the literacy skills they need to identify fake news, and 2 in 5 parents (39 percent) don’t watch, listen to, or read news with their child at home.

Pandemic Highlighted Problem

The fact that many young people may have been deterred from accepting the COVID-19 vaccine and/or have believed misinformation and conspiracy theories about the origins and causes of the pandemic have highlighted the problem. For example, popular stories believed by some in the UK, highlighted in University of Cambridge research (Oct 2020) include that:

– COVID-19 was engineered in a Wuhan laboratory (22 percent believed it).

– The pandemic is “part of a plot to enforce global vaccination” (13 percent).

– 5G telecommunication towers worsen COVID-19 symptoms (8 percent).

Who and Why?

Back in October 2020, Cambridge’s Winton Centre for Risk and Evidence Communication + UK Cabinet Office: Go Viral!, studied correlations between certain beliefs and demographic categories and the perceived reliability of misinformation. They discovered that:

– High levels of trust in science equates to low levels of susceptibility to false information (across all nations).

– Better Numeracy skills are a predictor of greater resistance to misinformation.

– Being older is linked to lower susceptibility to COVID-19 misinformation.

– Identifying as more right-wing /politically conservative is associated with a higher likelihood of believing COVID-19 conspiracies.

– With COVID-19, a tiny increase (one-seventh) in how reliably misinformation is perceived leads to a much bigger (23 percent) drop in the likelihood that the person will agree to get vaccinated.

Ultimately, as summarised by the minister for digital and culture Caroline Dinenage last week, “False or confused information spread online could threaten public safety and undermine our democracy.”

Training Trainers

The newly announced strategy is to teach a wide variety of UK organisations to teach others to get a better understanding of the online world, and how to critically analyse the content they see, thereby helping them to spot misinformation.

Criticism and Challenges

Criticism or the strategy includes that:

– It is possibly an opportunity missed and is less of a strategy and more a shopping list of useful actions that mirror what’s gone before rather than charting new directions (says LSE’s Professor Sonia Livingstone).

– The strategy appears to blame the user for the problems of the digital world.

– The strategy may be weaker than it could be because it is linked to the Online Safety Bills, so focuses on reducing consumer harms rather than addressing the breadth and depth of the media literacy agenda.

Challenges for the strategy include:

– Exposure to misinformation and disinformation can be influenced by changes to algorithm design and content feeds, thereby meaning that tech companies have a part to play.

– Motivations for believing (and wanting to spread) misinformation are varied, can be complicated and, therefore, anti-vaxxer mentalities / ‘cult’ type and attitudes are difficult to break down and challenge, even with well-meaning teaching.

What Does This Mean For Your Business?

In terms of tackling health emergencies effectively, education and tackling misinformation are vital. Many young people have social media as their main source of news, so giving many other organisations the means to educate young people in how to critically evaluate what they read is well-meaning and could have a value for young people and society as a whole going forward, which in turn will have a value to businesses. However, social media and other platforms use algorithms, which also influence what is presented to young people, which means that tech companies have an important role and responsibility to play in tackling the problem. The problem of misinformation is being tackled to a degree on social media using e.g., fact-checking, and curated news services, but the issue of misinformation is wide, and it is debatable how much of an effect the new strategy will have upon it.  One of the strengths of the new strategy, however, is that it is leveraging the power of many other trusted organisations to help deliver it.