Parking Meters & Hillingdon First Card

Dear Mr Grimshaw

I am writing in response to your Freedom of Information Request below.

In response to your request:

General Hillingdon First Information:

The data held on the card conforms to the LASSeO (Local Authority
Smartcard Organisation) profile E. You can view a map of the data
following this link:
http://www.itsoservices.org.uk/content/I...

Essentially the data on the card is:

- Service label, card number, forename, surname, display name, date of
birth (if known), DOB verified, card holder number, card expiry date,
resident flag.

The Hillingdon First card is managed through the council's existing
Customer Relationship Management (CRM) system and library system. The
card numbers are issued and managed by the Smart Connect card management
system through an interface with the CRM. Hillingdon contract Smart
Connect from Bracknell Forrest Borough Council.

When ordering a new card the data required for the card chip is
communicated from Smart Connect to Burall Infosmart Ltd, our bureau
service, who then encode the card chip, print and personalise the card
and post it out to the resident. Burall Infosmart Ltd then respond back
to Smart Connect to state the card has been produced and dispatched and
then destroy all data securely immediately after the card is
dispatched.

When a card is used in a library no data is exchanged with other
council sites, unless the librarian is ordering a new card or reporting
a card lost or stolen or that a resident has moved out of borough. In
these cases the card number is communicated to the CRM and the process
described above is followed to order a new card or hotlist a card.

When a card is used in a local shop to claim an incentive on offer, the
card is just shown visually at the point of sale. No data is exchanged
with any businesses participating in the loyalty discount scheme.

When a card is used on a parking machine or Harefield civic amenity
site access machine:

- parking application data stored on the card is service label, parking
indicator, parking scheme reference, last used date and time is updated
- data stored on the parking machine is a list of hotlisted cards
(cards blocked as reported lost / stolen). The hotlist is communicated
from Smart Connect to the parking management system to the parking
machines.
- when a card is used on a parking machine, the machine will validate
the card, check it has not recently been used and is being passed back
for another user, check that it is not hotlisted. The machine will then
communicate back to the parking management system the use of the card as
follows: card number, serial number, date / time, parking machine ID,
the cost of ticket issued (if issued), if the card was in passback, if
the card was on the hotlist, if the card was invalid for another
reason.
- This data is stored for 6 years
- The parking management system is a hosted system. It is hosted by
Metric Ltd who supply the parking machines. The database servers are
dedicated SQL Servers.
- Officers of the council who work in the Environment and Consumer
Protection Directorate have access to the parking management system
data, as well as Metric Ltd the suppliers. Please note that the parking
machines do not read the card holder’s first name, surname or date of
birth and so no personal information is communicated with the parking
management system. Smart Connect just communicates a list of anonymous
card numbers for the hotlist with the parking management system.
- Officers of the Council that manage the Hillingdon First scheme will
have access to the data on the CRM, library system, Smart Connect and
parking management system. It is possible for these Officers to identify
on which parking machine a card has been used and who the card is
registered to. These checks will be carried out to prevent abuse of the
Hillingdon First scheme, for example where someone is using a card to
get daily rate discounts for parking more than once a day.

All Hillingdon residents over 18 years old are entitled to a Hillingdon
First card. However, if a resident receives a Hillingdon First card but
they do not want to be part of the scheme, they can return the card to
the council and state this. Use of the Hillingdon First is a Hillingdon
resident's choice.

For your information please also find enclosed the Frequently Asked
Questions leaflet being sent out with the card.

Freedom of Information Team
Legal Services (3E 04)
London Borough of Hillingdon
Civic Centre
High Street
Uxbridge
UB8 1UW
01895 55(6923)

show quoted sections

12:57 >>>
Dear Sir or Madam,

I am seeking information in relation to the parking meters and
"Hillingdon First" card in general. I am specifically requesting
the following under the Freedom of information Act.

General "Hillingdon First" Information:

1. What data is stored on a Hillingdon First card? 2. What data
is
stored on the systems and servers? 3. Who has access to this
information? 4. What data is exchanged with businesses, council
sites and elsewhere when a card is used?

"Hillingdon First" & New Parking Meters

1. When the card is used on a new parking meter, what data is
stored or updated on the card? 2. What data is stored on the
meter?
3. What data is exchanged with the parking system? 4. Is a meter
ID
transmitted with any information? 5. How long is this data stored
for? 6. How is this data stored? 7. Who has access to this data?

Yours faithfully,

Mr Paul Grimshaw

show quoted sections

FOI/1197 Grimshaw

Dear Mr Grimshaw

We write in response to your request for information and apologise for
the delay in responding.

Please find our replies below:

On the card:
1. What is a service label?
http://www.scnf.org.uk/smartstore/lasseo...

2. What is DOB verified?
Binary data 0/1 flag for whether date of birth verified yes/no.

Parking Data (Card):
1. What is a Parking Indicator?
Binary data on the card chip i.e. parking service = yes or no

Parking Data (System):
1. What is the difference between serial & card number.
Card number is the number for the card holder that is encoded at card
bureau production stage.
For Serial number see
http://www.scnf.org.uk/smartstore/lasseo...

2. Why is a parking meter ID and Parking Scheme returned?
Parking meter ID so we know the machine used for the transaction.
Parking scheme means we can distinguish between areas or use at civic
amenity site or use for parking. It is configurable and not currently
used but may be in the future.

3. Why is the data stored for 6 years?
This is based on the current situation for retaining information about
Parking tickets. As the issuing of a ticket is a financial transaction
the general position is that records will be kept for 6 years. However,
this will be kept under review.

4. Why are checks carried out to prevent abuse not done automatically
by the system.
There are a number of security features built into the system as a
whole to prevent abuse and fraudulent use.

5. Apart from the daily rate discount, what other abuses will you be
checking for?
This is still to be determined.

Other:
1. How many members of the 'Environment and Consumer Protection
Directorate' are there?
Please can you clarify whether you would like to know how many staff
per specific department in Environment and Consumer Protection or just
in the Directorate.

2. How many 'Officers of the Council that manage the Hillingdon First
scheme' are there?
One

We hope that this provides you with the information that you require
and await hearing from you in order to provide a response to your
outstanding query.

Yours faithfully

Freedom of Information Team
Legal Services (3E 04)
London Borough of Hillingdon
Civic Centre
High Street
Uxbridge
UB8 1UW
01895 55(6923)

show quoted sections

Dear Mr Grimshaw

please accept my apologies for this oversight. For future reference it is helpful if you can include our reference number in your emails as this will assist us dealing in with follow requests/queries.

I understand that you were querying the two following points:

(Other #1) this phrase was used to explain who would have access to the system in a previous response (April 16th). How many people, in the entirety, will have access to this system and its data?
The technical answer is that we do not hold this information as there is not yet a set number of staff who would have access. However, only staff who need access to the system in order to perform their functions would have access to the system and then access would only be to the extent that they would need to perform their functions. i. e parking staff would only have access to parking information, and even then it would not be all parking staff, merely those that need access to perform their functions and only to the extent that it is necessary for those functions.

Parking Data #5. Can you confirm this is Cllr D Mills?
I understand that Cllr Mills is the Lead Cabinet Member, there is only one officer and that is the Hillingdon First Project Manager.

Richard Ingle

Freedom of Information Team
Legal Services (3E 04)
London Borough of Hillingdon
Civic Centre
High Street
Uxbridge
UB8 1UW
01895 55(6923)

show quoted sections

Dear Sir or Madam,

There has not been any response since the last clarification, I
would appreciate a response.

Yours faithfully,

Paul Grimshaw

show quoted sections