The Cabinet Office, responsible for disseminating good practice in data security throughout central government, says that it has never been independently audited for compliance with data protection principles in documents obtained under a Freedom of Information request, and seen by SC magazine.