Multi storey carparks

​​Request 759767552  

The information for available spaces in multi storey carparks is published at 

https://sojpublicdata.blob.core.windows.net/sojpublicdata/carpark-data.json​​.​ What system collects this data and how is it published to Azure? 

Response 

The requested system information is exempt under Article 42 (a) (Law Enforcement) of the Freedom of Information (Jersey) Law 2011. 

Article 42 is a qualified exemption, therefore, a public interest test has been applied and is shown at the end of this response. 

Articles applied 

Article 42 - Law enforcement 

Information is qualified exempt information if its disclosure would, or would be likely to, prejudice – 

(a) the prevention, detection or investigation of crime, whether in Jersey or elsewhere; 

Public Interest test 

The following considerations were considered 

Public interest considerations favouring disclosure  

There is a general public interest in transparency and accountability regarding how public authorities manage digital systems, protect sensitive data, and ensure the resilience of government services. Disclosure may help: 

• Disclosure of the information would support transparency and promote accountability to the general public. 
• Support informed public debate on cybersecurity measures, digital resilience, and the allocation of public resources. 

Public interest considerations favouring withholding the information   

However, the information requested includes details that could be exploited by malicious actors to compromise digital systems. Disclosure would pose a real and significant risk of facilitating hacking attempts, including: 

• Revealing technical configurations, system vulnerabilities, internal protocols, or security controls that could be directly targeted. 
• Allowing hostile actors to infer the authority’s defensive capabilities, detection thresholds, or potential weaknesses. 
• Undermining the integrity, availability, or confidentiality of government systems, public services, or stored personal data. 
• Increasing the likelihood of cyberattacks that could disrupt essential services, cause financial loss, or compromise organisational security. 

Considering all considerations above, while transparency is important, the public interest in disclosure must be weighed against potential harm caused by the release of operational system information.  

The SPA has concluded that, on balance, the risk to prejudice the security of government systems by increasing the risk of hacking or cyber intrusion the public interest in maintaining the exemption outweighs the benefits disclosing the information.