back to article Private ID scans leave fetish club-goers feeling exposed

A security clampdown at a London club provides a troubling glimpse of the extent of privatised monitoring brought about by government policy. A Reg reader drew our attention to complaints that visitors to fetish club Torture Garden must now hand over personal details before they are allowed to enter. Our follow-up …

COMMENTS

This topic is closed for new posts.

Page:

  1. Anonymous Coward
    Black Helicopters

    secure my arse!

    As someone who works in a related industry in terms of membership management systems I have never come across a secured database that our conversion team could not crack.

    For around $20 you can buy software that will expose passwords for every database product on the market.

    So what if they lock the box up, doesnt mean that others dont have access to it when its unlocked. For example a staff member who wants to open there own club simply USB sticks the database and Bob's your uncle hes off.

    Black helicopters as we know who will be losing the data

  2. Dave Bell

    Target for tonight

    I don't expect anything illegal to be happening at these events, but the police have routinely been against unconventional sexualities. Sometimes they've had better reasons to want to keep some control.

    I'm not sure I'd trust the police on this, or a third-party club management operation. I've been to big events with some pretty solid identifying of attendees. But I've been identified as part of the community, because people know me, not because I've had to satisfy some requirement to wave an ID over a sensor.

    No way am I going to flaunt my sexuality, or my bad puns, anywhere near this sort of security. I don't trust the set-up, and that's an essential. I want to feel safe, and this just wouldn't do that.

  3. Anonymous Coward
    Flame

    Slippery slope

    This is a slippery slope going towards what they have in America. They are that shit scared of serving someone under the age of 21 and losing their license that everyone needs id in a lot of establishments. Common sense has been removed from the process, I was going into a nightclub in Hawaii once and a friend of mine who lives locally told be that everyone needs ID or they won't get in, here were guys in their 50's who had to show ID, amazing. Once I left my passport in my hotel and ordered a beer with my food at some restaurant in Hollywood and they flat out refused to serve me alcohol even though I am obviously in my thirties - fucking crazy morons !

  4. Secretgeek
    Joke

    ...'through the back door.'

    Snigger.

    I'm so childish.

  5. Stephane Mabille
    Thumb Down

    Clubs

    Hi,

    Beside the obvious privacy reasons, there are clear commercial objections too:

    SEOne, like other places is "rented" (not totally true as, if I'm right, they are still running the bars (and its income)) by organisers to have THEIR event. In the party business the customers details are very valuable. Most promoters will be very reluctant to have to provide them to the club owner.

    Luminopolis (former Synergy project) used to take place at SEOne, has been temporarily suspended until a comparable venue (large, with enough rooms for the indoor festival) for the ID requierement... They have a large number of NGO stalls presents including NO2ID, so the choice was obvious.

  6. Anonymous Coward
    Flame

    Stasi

    Another fantastic idea by our (secret) police...

    - You are going to a techno party, you'll have to be a drug user and expect a warrant within 48 hours

    - You are going to a gay club, don't worry it's in your file

    - You are going to a punk concert, you are a dangerous anarchist

    - You are going to arab music, left wing, or basically anything not sponsored by the BNP/Met you are a dangerous terrorist and need to be arrested/deported/tortured/beaten up.

    * The latest is also valid if you are Newspaper seller (Journalist are only subject to arbitrary arrest (for the moment - we are working on it))

  7. Nick L

    SE1.gov.uk

    Ah, I remember it when it was just an underground car park which was rented out for parties.

    then it became a proper underground club - The Drome. Memories of many happy nights there ...

    then it became a mainstream club - SE1

    and now it's just another arm of the government.

    Thanks for the warning guys, I'll know not to go to any events at SE1 any more.

  8. Ryan
    Thumb Down

    Yet another case of the .gov chipping away at my livelihood

    As the manager of a pub and club I can say whole heartedly that the government is trying to shut down all forms of public drinking.

    The smoking ban has damaged us in a huge way (the pub side of things more than the club. Also this isn't a place for a pro/anti smoking argument so stop right there people). My club and pub is wonderfully violence free as it is aimed towards the rock/alternative side of things who are more interested in getting drunk and rocking out rather than your average chav who enjoys nothing more than a bit of knuckle dragging and bashing people in the face. Yet when I renewed my entertainment licence last year I was told to install CCTV in the entire premises or the licence wouldn't be granted despite the fact we have to call the police maby 4 times a year and thats usually when we have some chavs visiting the kebab shop over the road about the same time the club kicks out.

    We for the last 4 years have always refused entry to the club without photo ID (Driving licence/Passport) which is one of the main reasons we don't get too much violence as we know that anyone that does cause trouble has ID on them for if/when we hand them over to the police. The thought of holding onto any data from my punters is abhorrent to me, my only concerns are the safety of my customers and of my licence by not serving underage kids.

    Don't even get me started on the noise limiters they are trying to introduce... and as someone said, clubs are supposed to be a bit rowdy, for me that goes for live music and a good pub if I want a quiet night I'll bugger off down some resturaunt/bar combo.

  9. Eduard Coli
    Unhappy

    Welcome to Airstrip One

    It's ugly brinkmanship.

    First it's clubs like this then when you want to enter your house.

    Then there is the inner circle, who will be excluded from IS checks, royals, nobles, judges, police, etc.

    What kind of dirt will company xyz who installed the system be able to sell?

    Bend over so the Home Office can insert the camera and microphone.

  10. Chris King
    Coat

    It's not just a data protection issue...

    Why bother stealing the scanned data, when you can pick someone's pocket and lift their actual passport, driving licence or whatever ID they had to use to get into the club in the first place ?

    (Unless everybody's using fake ID to get in ?)

    Mine's the one with the anti-RFID lining, thank you...

  11. Anonymous Coward
    Black Helicopters

    What qualifies as an ID?

    I might just go into the internet mail-order ID business. Send me your name, DOB, address, and whatever information you want to appear on your ID, along with a sworn statement attesting to the veracity of your claims and fifty quid, and I'll mail you an 'Officicial' Simplified Universal Card - Identification, Total (SUC-IT)

    Use that card as "proof" to facilitate registration for official IDs, club entrances, and the like.

    Now I just need to register "Offcicial Identification Co."

  12. Richard Neill

    who do the @#*&%* Met think they are?

    Really, it's time we made these policemen realise they are the SERVANTS of the people, not our masters. The police must not have the power to require others to demand ID; furthermore, it should actually be illegal for the clubs to do so.

  13. John Smith Gold badge
    Flame

    Anyone remember mandatory CCTV as a "Licensing condition?"

    If this is not a "Members" club then its a venue with (I presume) a slightly more specific dress code than most.

    If a true members club the only ID would be to confirm the person coming in has the same details as their membership list.

    And BTW. This restriction seems to be on the venue, not the club promoters. It would seem the right thing to do is for the promoters to find a new venue.

    I've thought about going but will now be passing it up. The difference between a club and a members club would likely be lost if anyone is known to have been there.

  14. Anonymous Coward
    Black Helicopters

    Doesn't this actually BREAK the Data Protection Act?

    AFAIK, you must be informed of the purpose for what your information is recorded, the information may not be used for other purposes, you have right to your information and they should not collect more than is strictly required for the purposes indicated - and you have to be informed of your rights pertaining to this information.

    1 - were visitors informed for what EXACT purpose the info was collected? I don't think so. It will make one hell of a queue, and long queues will make for many people who go elsewhere.

    2 - as no purpose was formally stated, hello breach #2. Fines, anyone?

    3 - it would be soooo much fun if everyone asked for what is held on the database. Sure, you have to part with 10 quid (I would actually complain to the Information Commissioner because it's too expensive for just a copy of your license) but if everyone does it you have a denial of service attack - they have only 40 days. Imagine this happens in volume every time the system is used, especially if the Commissioner decides it's not worth 10 quid a throw. The y would eventually lose track which results in complaints and fines. And the human effort costs money too. And they can't ban you for askin because that again infringes on your rights.

    4 - I have yet to be convinced it is actually required to STORE the information. Check it for underage, fine - it's a massive fine if they miss one, but why store it? For who? For what purpose? To save the government spending money on a man doing inspection? F*ck that - if they want to know they're welcome to put some effort in, that why you pay a premise license fee after all.

    5 - hello breach #3 - not as much as a brochure (which costs money - another nail in the coffin).

    Gents, if this stuff pisses you off you should simply start gaming the system. Read up on the laws and hit every weakness. Obligations must be met - fine, ask for your rights in volume. BS is being told during collection - tell them where exactly they can measure biometrics (risk: may be followed up at an BDSM club) and leave. Cash is king - if the system starts costing too much in lost business and compliance obligations it will soon go. And it should.

    This stuff only works because you agree to it. Sure, you may miss a party. Is that really a hard choice: one party or slowing down the completion of the UK panopticon?

    Don't talk, do.

  15. Anonymous Coward
    Anonymous Coward

    Club

    "Club

    By Anonymous Coward Posted Friday 24th April 2009 11:43 GMT

    It is a club, clubs have members, members have to prove they are members on entering. It is exactly the same when I go to Riley's. What am I missing?"

    It is not a private members club which requires members details to be held and guests to be signed in. This is a night club event. No one has to present ID and have that ID recorded in a night club.

    The issue is, particularly for a club of this sort, that the personal information is abused.

    I will tell you now, the Labour government would love to get their hands on that data, particular for people into bondage and other what they would describe as sexual perversions.

    It's only a matter of time, the Police would be instructed by the home secretary to raid individuals homes on the false pretext of looking for signs of child abuse.

    All sorts of people will be targetted, those that have government security clearance that attend fetish, bdsm related events will be targetted and probably lose their jobs over it.

    This is an infringment of civil liberties and must be stopped.

  16. Anonymous Coward
    Anonymous Coward

    Surely if TG had any sense...

    Then it would move its events to another venue which doesn't have this ID system requirement? Wouldn't the licensee have given TG advance notice of this new requirement so that TG could consult with its clientelle rather than have them turn up and find themselves faced with "No ID handover, no entry!"

  17. Tom

    How long before

    They decide that all the scanners should link up to a central database?

  18. n
    Unhappy

    "the law?...we are the law"

    Yes i was scanned/scammed.

    I went to an ordinary nightclub near Leicester square for the first time and they asked for ID, the bouncer looked at it as is normal, then stepped to the side behind another bouncer who shielded from view (they would say secured)the device, and then he dropped it through a small dark device like a letterbox, then handed it back.

    Nobody said to me they would be scanning it, doing icr on it, running facial recognition software on it, then pimping all the data.

    There were no signs anywhere saying they would be doing this to me.

    It was all a bit sneaky.

    And once its done, it's done. You can't ask for your data back. You can't expect to ask the bouncer to discuss the finer points of the data protection act !

    The staff on the inside also had some questionable behaviour also, but i don't want to put anyone off their dinner!

    I fear for my data in the hands of these goons.

    It feels like you have been data-raped before you even step into the club....what a real mood killer on the night.....next stop....cloakroom charge wallet-rape.......wonder if the drink is reasonably priced?....bend over sunshine...you'll get the hang of this sooner or later...

  19. Alexander Hanff
    Stop

    Registered with ICO under DPA?

    Anyone else managed to find a registration as a data controller for SEOne Club?

    I have searched by name, address and postcode, but so far I have not managed to find a registration in ICOs database. Are SEOne Club owned by another company or something?

    Of course if one doesn't exist, then SEOne Club have broken the law and personally it is my opinion that the law police should be seen as complicit.

  20. The Fuzzy Wotnot
    Unhappy

    Obvious what will happen

    The club will decline as members decide to take their interests elsewhere, somewhere most likely with far less safety regulations and someone will get seriously injured, with no hope of legal redress.

    So the next thing will be that we now have to submit personal details in order to enter any entertainment establishment, music clubs, pubs, bars, even the local pub beer garden! Welcome to the UK in the 21st century, just like all those sci-fi movies predicted our wonderful Utopia would be, yeah Brazil and Blade Runner!

    Do yourselves a favour if you want to see someone poke fun at the absurdity of the government's ideas, get the latest Mark Thomas DVD ,Serious Organised Crime, someone showing how absolutely pathetic this government really is. The quicker Brown gets booted the better, we might 5 mins peace before the next mob start screwing up, just like Gordo.

  21. Andrew Fraser
    Joke

    Paranoia, the real life game

    You seem unhappy citizen.. Would you like some drugs?

    Happiness is mandatory! Unhappiness is treason!

    Our scans indicate that you are partaking in subversive activities, and you have been flagged as a terrorist, please stay still while we execute you.

    Your Friend, the Computer err UK government

    If you Don't get the reference

    look here

    http://en.wikipedia.org/wiki/Paranoia_(role-playing_game)

    And here

    http://www.kuro5hin.org/story/2007/5/10/11618/3836

  22. Frederick Karno
    Unhappy

    ID theft

    Thge scanner might comply with as many regulations as you want but the security of the data being held for a so called 3 years ..............

    I am now on a 12 monthly basis going to write to all government departments and all companies that i deal with for an update on what data they hold on me through the freedom of information act .

    If enough people do this they will grind to a halt....

  23. Anonymous Coward
    Anonymous Coward

    JJR

    Fetishist are born free, but everywhere they are in chains!

  24. Anonymous Coward
    Alert

    Never fear...

    With the current economic situation the police and other big brother snoopers will shortly all have their finances cut to within an inch of their lives. They will then be spending all their time justifying their existence to government-appointed hatchet men anxious to deprive them of their staff and salaries in the name of "efficiency savings". This will leave them with no time to provide any sort of service to their "customers", never mind snoop on them.

    Many readers probably won't be old enough to remember that this is what happens during a prolonged recession, but eventually it does, believe me. Funding carnage in our less agreeable (and over-staffed) public institutions is now unavoidable - and not before time in my view.

    I'm particularly looking forward to the announcement that the national ID card scheme has been scrapped (to save money, obviously, although this will be denied) as this will signal the start of the real backlash against the big brother state.

    It's an ill wind... as they say.

  25. Graham Marsden
    Thumb Down

    @Kieron McCann

    "er, obvious solution - move it to a new venue"

    Brilliant, Kieron, why didn't anyone else think of that?

    Of course you'll already know just how easy it is to find a venue that's happy to host fetish events, that won't charge ridiculous rents and possibly a "per head" fee on top, that's accessible, that's not booked solid with other events...?

  26. Bob Dunlop

    Thanks for the warning

    As others have already said, thanks for the warning guys.

    Been to a few SEOne events in the past but guess I'll visit them no more.

    Don't want my details associated with any sort of marketing database.

    I have government photo ID, with home address verified by a physical police visit, but I'll only show that to someone for the purpose for which it was issued. That's not strictly true, I once used my shotgun certificate to gain access to a lap dancing club, bet that put a skew on the database.

  27. Anonymous Coward
    Black Helicopters

    @ "the law?...we are the law"

    No, what happened there was illegal, and you should follow this up with a formal complaint to the Information Commissioner. See previous email about ID registration being a potential breach of the Data Protection Act. The DPA 1998 does not (AFAIK) make any exceptions based on WHY the data is collected, the rules still apply.

    As a matter of fact, it's not "should" - it's MUST. You have no idea why they made a copy, you were not informed they were going to do it and the next time this happens you may consider calling the police as your natural assumption would then be (as it's unannounced and unmotivated) that they are busy with identity theft - a bit like credit card cloning.

    The resulting stink would be very entertaining to watch - there is no rule you have to mention your name, you're just tipping off the police :-).

    Honestly, as I said before, you guys are *waaaaaay* too meek. Revolt. Play the system so you throw spanners in it without them being able to do anything about it other than abandon it.

    Watch "V for Vendetta" (not to re-enact, it's rather OTT) as a sample of what you're heading for. The only difference is that that film appears to have been made with Thatcher in mind, but New Labour has turned out to be so much worse it will probably need a remake of that movie just to get it to be "future" again. The speakers: they're there. The marching army: see G20. Heck, in the movie they hadn't quite come up with CCTV yet. The tiran: a slimmer version of Gordon Brown, but just as ugly. The methods: remarkably similar other than letting loose a home made plague, but give them time.

    Act - given the bleating, you're sheep already. Baaaah.

  28. Anonymous Coward
    Stop

    Data Protection Act

    "A spokesman added that data is retained on the system for three years, in order to comply with the Data Protection Act."

    The Data Protection Act does not *require* them to hold the data for any amount of time.

    Quite the reverse, it requires that they they only hold it for a reasonable length of time for the purpose for which they have collected it.

    Why it is reasonably necessary to hold data about who attended a nightclub for three years is beyond me.

  29. Olipro
    Thumb Up

    Must install equipment as part of your license

    I don't run a club, but if I did... sure, I'll install the IDing equipment... but... oh look at that, the bloody IDing machine is on the fritz for the 300th night running (since we opened 300 nights ago), isn't that a shame, bouncers will just have to check the IDs manually.

  30. Anonymous Coward
    Anonymous Coward

    re: ID theft - that reminds me

    Actually, not a bad idea. There was a great story along these lines on the BBC world service a year or so ago. Some film maker/activist type made a movie out of clips from CCTV obtained under DPA rules. The deal was: the "actors" would go somewhere with CCTV, hang around a bit doing this and that making sure the cameras could see them. Later on they'd make a DPA request to whoever ran the security cameras for "any data held" on them, which the rules say includes CCTV footage. Once obtained, the footage was strung into some sort of narrative.

    The point of course was putting the security people on the spit. Most didn't have a clue what their obligations were, or tried to charge a small fortune for searching through and making copies of the "material". She put a lot of them right on that score and they were left with little choice. Needless to say it took up a lot of time for people who woud otherwise be barking "you can't do that" to photographers with "large" cameras.

    Sadly, I missed the start of the programme, so didn't get names or details and googling it hasn't helped much.

    Ever since, I've been thinking that a concerted, well organised mass campaign of CCTV disobedience based around such DPA requests for footage or whatever data they have could wreak absolute havoc, highlight the way data is being held and the poor implementation of the act.

    At the least, it would be a pleasurable and costly revenge on those who view everything as an opportunity to exercise petty power and harvest data for no good reason.

  31. Charles Smith
    Paris Hilton

    If you don't like it

    If you don't like continued expansion of intrusion by HMG and the police write to your local MP and complain. Remind them that you will hold them responsible for the destruction of freedom in this country. If each MP received those type of letters from say 100 unique people each week the concerns might start sinking through their layers of expenses fat.

  32. Anonymous Coward
    Anonymous Coward

    and what when they're also going to...

    Keep this data and use it with those other nice DBs so that when they come for your kids in the middle of the night (leaving the kid they were actually supposed to be picking up, similar name, four doors down) there will be 'proof' that you aren't fit to be a parent so they don't have to disclose their mess-ups and can pretend like it was really your child they were protecting instead of the sorry little mite that's still sitting alone at home after a week.

    'But you went clubbing THREE TIMES last month. THREE TIMES. And one of them was a gay club too, definitely not fit.'

  33. Anonymous Coward
    Alien

    @ anonymous coward

    Hmm. plenty of people posting here as AC. A quick reminder: You are not really anonymous on this forum. Just because you've posted as AC, doesn't mean that EL Reg doesn't know who you are.

    They (El Reg) still have to hand out your info to police requests (and I'm guessing that they are very interested in this site).

    You have been warned. Use throwaway accounts from non-verifiable ip's (low camera usage areas, internet cafe's with woefully lax security, anonymous proxy's, etc).

    o/

    (It's not whether you're paranoid. It's whether you're paranoid enough!)

  34. Anonymous Coward
    Unhappy

    Encryption

    Is the data encrypted when it stored on internal memory. Lets say they are being stored on a generic OEM hard drive. IDE/SATA/PATA etc.

    Passwords wont do anything. If the data is not encrypted. The password will only work with the software programmed for that machene. Take the drive out. And read the data. Voila!

    Or if it is flash based. Just lift the chips (Or wire up a reader) and rea the data that way.

    Learn2Security....

    I have seen these in the local shop. Id like to know how it can tell the difference between a real and fake ID. (Fake Driving License's are EASY to get hold of you know?)

    The only way is it can check UV or the hologram. But that must be prone to getting false answers.

  35. Anonymous Coward
    Boffin

    ICO. Security. What Security?

    Arnt the ICO supposed to be there to control the security of data held on us. Shouldnt they start on their own website?

    http://www.ico.gov.uk/global/search.aspx?keywords=%22%3E%3Cscript%3Ealert%28document.location%29%3C%2Fscript%3E&start=0&collection=ico

    Enjoy some XSS

  36. Anonymous Coward
    Pirate

    IRL Pr0n

    Im wondering. If we will come to a time when this is illegal. (Bondage)

    As how this type of porn is illegal in the UK. Wont the act in a club be too?

    Anybody think the Gov wants the data to arrest a load or fetishers?

  37. Anonymous Coward
    Anonymous Coward

    Licensing Authority

    "It's all down to some PR happy local councillor looking to make a name for himself."

    I have the pleasure (dubious admittedly) of actually sitting on a Licensing Authority and it's usually the police or aggrieved neighbour who requests such onerous conditions in the hope of closing the establishment (whatever it is) down entirely.

    However, just because the police are requesting particular conditions doesn't mean they Authority has to agree. And even if the conditions are imposed, the applicant has an absolute right to appeal to the magistrates that the conditions are unnecessary or disproportionate to the problem they are supposed to fix.

  38. Anonymous Coward
    Flame

    SEOne

    Hi,

    Don't put the blame on SEOne... they have been told:

    Either you scan everyone ID or you close... if you invested in a business what would you do?

    Close it and fight for years against the Met? Open somewhere else and have the guys in blue "checking" you and your customers every week....

    It's comply or get out of business.

    It's (once again) the Met responsible here, not the SEOne owners.

  39. Anonymous Coward
    Anonymous Coward

    3 years data storage - personal injury?

    The website lists the reason for the 3 years of storage for the information being that the stature of limitations for personal injury claims is 3 years.

    I too have looked at the ICO website and searched for Packspring, SEOne and the postcodes of the club and holding company, and no Data Protection registrations are listed. Bearing in mind they probably already have CCTV installations - which would also require a DPA reg, one has to assume that the law they cite as being the reason for this, they are in breach of.

    Torture Garden also seems to be missing a DPA reg. But I don't think I'll report them.

  40. censored
    Flame

    I can see it now...

    "We've found that citizens are more than happy to carry ID in order to access bars and clubs. Many people can now see the benefit of a standard UK ID card, which would replace the various ad-hoc forms of ID at such venues, as well as enabling citizens to access goverment and financial services."

    In other words: if you'll prove your ID for a drink, you'll be happy to prove it for everything else too. Papers, please!

    IT'S SIMPLE. DO NOT USE BARS AND CLUBS OR ANY OTHER VENUE THAT DEMANDS ID FROM EVERYONE.

  41. n

    further detail re nightclub scanning all id's....

    re: my night club scan/scam:

    below is the nightclub and the scanning policy as explained on their web site.

    It is under the heading "age policy". But i want to point out that EVERY guest had id scanned no matter what age they were. "No ID, no entry policy".

    Does anyone know what "CLUBSCAN" is? Is it a brand name? or a Met policy?

    "Age Policy:

    ID REQUIREMENTS:

    Valid Passport

    Valid Photo Full Drivers License

    Valid Photo Provisional Drivers License

    International ID Card/Book

    These are the only forms of acceptable ID. Should you be asked to show ID & you are unable to provide one of the above items then you may be refused entry. Zoo Bar operates CLUB SCAN, all ID will be scanned."

    ref: http://www.zoobar.co.uk/location/

  42. Anonymous Coward
    Anonymous Coward

    ID at TG

    Ive just got back from another meeting with the SE1, police and council. The SE1 management and us put in a request to only keep the data for 31 days in the case of a serious incident. After 31 days the info will be deleted. This then falls in line with the same policy for CCTV footage at all clubs and Bars. Please note that at present this has been allowed for this Torture Garden event ONLY as the police and council took on board the concerns of a few of our customers.

    I think this shows you that there is no devious intent from the powers that be about trying to out bdsm/fetish party goers.

    I believe that SE1 and Southwark Council are now discussing to reduce it to 31 days for all events as there seems to be mixed messages coming from the ICO.

    Also SE1 and TG will not be using the info for any marketing, profiling etc.

  43. Anonymous Coward
    Black Helicopters

    Besides, their spokeswoman added: "It is up to individuals whether or not they visit a club."

    Which speaks volumes for the real motives of the Government. They'd love nothing better than to shut down all pubs and clubs and ban alcohol.

Page:

This topic is closed for new posts.