Digital Domain Audit: Currys plc

Target: Currys plc (London, UK; formerly Dixons Carphone plc) Domain: Digital (Digital / Technology) Date: June 2026 Scope: Currys plc’s own digital/data/cyber/surveillance/AI conduct re Israel. Products Currys merely retails are attributed to their own manufacturers/brands, not Currys corporate.

Enterprise Technology Stack & Vendor Relationships

In May 2024 Currys selected Accenture and Microsoft to deliver its core cloud technology infrastructure and to modernise, secure and simplify its technology estate; the work is delivered partly through Avanade, the Accenture–Microsoft joint venture.¹² Under the programme, nine of Currys’ existing data centres - housing more than 2,000 servers and over 200 applications - are being migrated to Microsoft Azure.²³ Currys also runs a long-standing IT services relationship with Infosys, with Group CIO Andy Gamble describing the retailer’s business strategy as “underpinned by technology” delivered in partnership with Infosys.⁴

Microsoft (US), Accenture (Ireland/US-listed), Avanade (US JV) and Infosys (India) are the disclosed prime vendors of Currys’ enterprise stack. All are US/EU/India-domiciled; none is an Israeli entity. No public evidence identified that Currys’ core enterprise infrastructure (ERP, cloud, integration, service management) is supplied by an Israeli-domiciled firm, or that any of these primes route Currys workloads through Israeli operations.¹²⁴

No public evidence identified of Currys deploying Oracle, SAP, Google Cloud, AWS or Salesforce as a primary enterprise platform; the publicly disclosed direction of travel is a consolidation onto Microsoft Azure.²³

Surveillance, Biometrics & Retail Technology

In 2024–25 Currys expanded a partnership with Auror, a cloud-based retail crime-intelligence platform, rolling it out across all 300+ UK & Ireland stores to record offences, share suspect data between stores nationally and support law-enforcement referrals.⁵⁶ The publicly described Currys deployment is the crime-reporting and data-sharing module only; the rollout announcement does not describe Currys enabling Auror’s facial-recognition product (“Subject Recognition”), which Auror launched separately for retail in late 2025.⁶⁷ Auror is headquartered in Auckland, New Zealand, founded 2012; its disclosed investors include Axon Enterprise (US), Reinventure (Australia), Movac and NZ Growth Capital Partners (NZ) - no Israeli investor or Israeli operating nexus is identified in public records.⁸ No public evidence identified that Currys operates live facial recognition in its stores, or that any biometric/loss-prevention system it deploys is supplied by an Israeli-origin vendor.⁵⁶⁷

Currys’ other disclosed in-store security technology is VoCoVo colleague-headset communications, rolled out across all UK stores from 2025 to improve staff safety against retail crime.⁹¹⁰ VoCoVo is a UK company headquartered in Oxfordshire.¹¹ Currys reported a 58% reduction in aggressive thefts during a focused safety programme combining these tools.⁶⁹

No public evidence identified of any Israeli-origin CCTV, video-analytics, biometric or behavioural-surveillance vendor in Currys’ own retail-technology stack.⁵⁹

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Currys’ disclosed cloud direction is migration onto Microsoft Azure, consolidating nine data centres and 2,000+ servers, to enable adoption of Microsoft AI services including Azure OpenAI Service.²³ Public sources describe a UK & Ireland / Nordics operating footprint; Currys trades as Currys in the UK & Ireland and as Elkjøp in the Nordics, with no disclosed operations in Israel.¹² No public evidence identified that Currys participates in any Israeli sovereign-cloud, government-cloud or defence-cloud programme, nor that Currys customer or operational data is hosted in Israeli data-centre regions.²¹² No public evidence identified of an Israeli cloud or data-residency provider in Currys’ infrastructure.

iD Mobile, Currys’ wholly-owned MVNO, runs its charging/monetisation on MATRIXX Software (US-headquartered) and operates over the VodafoneThree UK network following the 2025 Vodafone–Three merger.¹³¹⁴ No Israeli-domiciled platform or network supplier is identified in iD Mobile’s disclosed stack.¹³¹⁴

Defence, Intelligence & Security Sector Technology Relationships

Currys is a consumer-electronics retailer with no defence or intelligence line of business. No public evidence identified of Currys plc supplying technology, data, services or infrastructure to the Israeli military, Israeli intelligence agencies, the Israel Police, or any defence/security body connected to the occupation. No public evidence identified of Currys holding contracts with Israeli government or security entities, or participating in security-sector technology programmes of any kind.

AI, Algorithmic & Autonomous Systems

Currys’ disclosed AI programme runs on Microsoft Azure OpenAI Service, delivered via Accenture, Microsoft and Avanade, and is aimed at personalised product recommendations, post-sales/warranty experience, and building “a better long-term understanding of customers” from customer data.¹² CIO Andy Gamble has publicly discussed Currys’ generative-AI strategy as customer-experience and operations-focused.¹⁵ These are commercial retail-personalisation and customer-service applications running on US-vendor (Microsoft/OpenAI) models. No public evidence identified that Currys’ AI/algorithmic systems are built on Israeli-origin models, datasets, or AI vendors, nor that any Currys AI capability has a military, surveillance or dual-use application connected to Israel.¹²¹⁵

Technology Ecosystem & R&D Footprint

Currys’ disclosed technology/innovation activity centres on the Microsoft/Accenture modernisation programme and Infosys-supported delivery, run from its UK base.¹⁴ No public evidence identified of Currys operating an R&D centre, innovation hub, engineering office or technology subsidiary in Israel, nor of Currys funding, acquiring or partnering with Israeli technology startups. Currys’ disclosed operating geography is the UK & Ireland and the Nordics (Elkjøp); no Israeli presence is recorded.¹² No public evidence identified of Currys participation in Israeli accelerator, venture or innovation-authority programmes.

Civil Society Scrutiny & Regulatory History

Currys’ principal digital-conduct controversy is the 2017–18 Dixons Carphone / DSG Retail data breach. The ICO found that an attacker installed malware on 5,390 point-of-sale terminals across Currys PC World and Dixons Travel stores between July 2017 and April 2018, accessing the personal data of at least 14 million people and 5.6 million payment-card records, before detection.¹⁶¹⁷ The ICO cited “systemic failures” - inadequate software patching, no local firewall, lack of network segregation and absent routine security testing - and in January 2020 imposed the maximum £500,000 penalty available under the pre-GDPR Data Protection Act 1998.¹⁶¹⁷ The matter remained in litigation: a First-tier Tribunal allowed DSG’s appeal and remitted the case, and by February 2026 the Court of Appeal had confirmed DSG owed a duty to protect the data, with the case returning to the FTT.¹⁸¹⁹

This regulatory record concerns customer-data security failings, not any Israel nexus. No public evidence identified of civil-society, BDS, human-rights or regulatory scrutiny of Currys plc relating to Israel, the occupied Palestinian territories, surveillance complicity, or digital ties to Israeli state or military entities. Currys does not appear on the principal BDS/ethical-consumer Palestine boycott lists reviewed, and no public statement by Currys on Israel/Palestine was identified.²⁰

End Notes