Data losses by DWP & its contractors for 2018.

The request was partially successful.

Dear Department for Work and Pensions,

There appears to have been an increase in data losses by the DWP and its contractors on social media. These losses predominantly seem to be associated with sensitive processing.

RFI1: How does the DWP document data losses associated with sensitive processing?

RFI2: How does the DWP investigate data losses related to sensitive processing?

RFI3: How many data losses have there been within the DWP and its contractors in 2018 involving sensitive personal data / sensitive processing?

RFI4: Has the DWP notified the Information Commissioner in respect of any data losses in 2018? If so how many times has it done so?

For the avoidance of doubt the data losses included in this RFI include the DWP and its contractors.

Yours faithfully,

John Slater

DWP freedom-of-information-requests, Department for Work and Pensions

This is an automated confirmation that your request for information has
been accepted by the DWP FoI mailbox.
 
By the next working day your request will be forwarded to the relevant
information owner within the Department who will respond to you direct. 
 
If your email is a Freedom of Information request you can normally
expect a response within 20 working days.
 
Should you have any further queries in connection with this request do
please contact us.
 
For further information on the Freedom of Information Act within DWP
please click on the link below.
 
[1]http://www.dwp.gov.uk/freedom-of-informa...
 

show quoted sections

References

Visible links
1. http://www.dwp.gov.uk/freedom-of-informa...

DWP CSO FOI, Department for Work and Pensions

1 Attachment

Dear Mr Slater

Please find attached response to your recent Freedom of Information request.

Kind Regards

DWP Central FoI Team

show quoted sections

Dear Department for Work and Pensions,

Please pass this on to the person who conducts Freedom of Information reviews.

I am writing to request an internal review of Department for Work and Pensions's handling of my FOI request 'Data losses by DWP & its contractors for 2018.'.
Thank you for your prompt response, it is appreciated.

Citing S.31 and S.24 for RFI1 & RFI2 is not credible. Disclosing how the Department documents data losses will have no credible impact on the prevention of crime or national security. The same can be said for explaining how the DWP investigates data losses. I assume that there is a standard process for doing this. Disclosing this cannot possible aid people with malicious intent as I am not asking about the controls and protections the Department has in place to prevent data losses. I ask the Department to think again.

In respect of RFI3 & RFI4 I was able to find that “In 2017-18 no personal data incidents were formally reported to the Information Commissioner’s Office “. However, my request was broader than this. It is possible that the Department notified the Commissioner on an informal basis. Please confirm the number of times, if any, that the Department did this.

In respect of RFI3 the annual report does not include the requested data. Please provide it without further delay. The Department should be aware that it must disclose the data it holds for a given time period even if it is not held for the whole period requested.

I’m afraid that I am unclear about the Department’s application of S.22. On one hand the Department is claiming it doesn’t hold the requested information and them it immediately claims it is intended for future publication. I’m afraid the Department cannot engage S.22 on this basis.

In respect of RFI3, the requested data is not included in the annual report so S.21 is not engaged. Please disclose the requested data without further delay.

In respect of RFI 4 it isn’t credible that the Department doesn’t know how many times it has reported data losses to the ICO within the requested time period. Please disclose the information.

The Department hasn’t come close to being able to engage S.22 for RFI3 and RFI4 for the time period requested. In addition S.22 requires a public interest test and this has not been mentioned.

A full history of my FOI request and all correspondence is available on the Internet at this address: https://www.whatdotheyknow.com/request/d...

Yours faithfully,

John Slater

DWP freedom-of-information-requests, Department for Work and Pensions

This is an automated confirmation that your request for information has
been accepted by the DWP FoI mailbox.
 
By the next working day your request will be forwarded to the relevant
information owner within the Department who will respond to you direct. 
 
If your email is a Freedom of Information request you can normally
expect a response within 20 working days.
 
Should you have any further queries in connection with this request do
please contact us.
 
For further information on the Freedom of Information Act within DWP
please click on the link below.
 
[1]http://www.dwp.gov.uk/freedom-of-informa...
 

show quoted sections

References

Visible links
1. http://www.dwp.gov.uk/freedom-of-informa...

DWP CSO FOI, Department for Work and Pensions

1 Attachment

Dear Mr Slater

Please find attached response to your recent Internal Review request.

Kind Regards

DWP CSO FoI Team

show quoted sections

Looking for an EU Authority?

You can request documents directly from EU Institutions at our sister site AskTheEU.org . Find out more .

AskTheEU.org