This site uses cookies. By continuing to browse this site you are agreeing to our use of cookies. Find out more.X

Documents reveal Cabinet Office never audited for DPA compliance

Share this article:

The Cabinet Office, responsible for disseminating good practice in data security throughout central government, says that it has never been independently audited for compliance with data protection principles in documents obtained under a Freedom of Information request, and seen by SC magazine.

 

The revelation comes as the government faces increasing pressure to restore public trust in the data security of central government by allowing independent scrutiny of its practices.

 

The Information Commissioner's Office (ICO) may be granted new powers following a public consultation which closed at the end of August. However, the main focus of the consultation by the Ministry of Justice (MoJ) is on intervention by ICO after a problem has come to light, rather than auditing day-to-day practices.

 

Under the proposals ICO could have the ability to launch “dawn raids” on government departments, entering a data controller's premises under a court warrant and compelling any person on the premises to provide information about the data protection practices of the organisation.

 

The consultation was designed to restore confidence in central government after HMRC lost two disks containing the personal details of millions of citizens in October 2007.

Despite huge publicity and investigations by the Treasury, Cabinet Office, and Independent Police Complaints Commission, HMRC has yet to put its house in order, Financial Secretary Jane Kennedy MP revealed in July 2008.

 

From October 2007 to June 2008, almost 2,000 breaches of security were reported, covering a wide range of circumstances, she said. The breaches were not actual thefts or losses and the high level of reporting reflects the increased awareness of staff, Kennedy said in a Commons statement.

 

The Ministry of Justice (MoJ) has itself recently come under the spotlight. Its annual report for the period 2007-2008 shows a breach occurred potentially affecting 27,000 confidential records held by an MoJ contractor. 

Share this article:

SC webcasts on demand

This is how to secure data in the cloud


Exclusive video webcast & Q&A sponsored by Vormetric


As enterprises look to take advantage of the cloud, they need to understand the importance of safeguarding their confidential and sensitive data in cloud environments. With the appropriate security safeguards, such as fine-grained access policies, a move to the cloud is as, or more, secure than an on-premise data storage.


View the webcast here to find out more

More in News

Banking Trojans target energy sector as APTs

Banking Trojans target energy sector as APTs

Banking Trojans are increasingly being used to launch advanced APT attacks, says IBM Trusteer, which has revealed a recent attack on several petrochemical companies in the Middle East using Citadel ...

Britain's small cyber security firms get £4m boost

Britain's small cyber security firms get £4m boost

Business secretary Vince Cable has launched a new £4 million government competition to help the UK's small cyber security businesses find new ways to combat the cyber threat.

GCHQ 'spied on Germany's Deutsche Telekom'; Germans sell spyware

GCHQ 'spied on Germany's Deutsche Telekom'; Germans sell ...

UK and US spies reported to spy on Deutsche Telekom in Snowden documents, while Germany's FinFisher accused of supplying surveillance software to repressive regimes.