Information relating to enforcement notices issued to the National Identification Bureau

Chris Baldwin made this Freedom of Information request to Information Commissioner's Office

This request has been closed to new correspondence from the public body. Contact us if you think it ought be re-opened.

Information Commissioner's Office did not have the information requested.

Dear Information Commissioner’s Office,

I request the following information to assist me in the preparation of academic research:

1. How many enforcement notices, pursuant to the Data Protection Act, were issued against the National Identification Bureau at Scotland Yard between 1 January 1984 and 22 May 1995 in respect of alleged data breaches involving the criminal record data held on the nominal index of the Police National Computer?

2. How many of the above notices related to inaccurate criminal records information held on the nominal index of the Police National Computer, contrary to the 5th data principle?

3. If any such enforcement notices were issued, what was the final resolution in these?

4. How many of the notices referred to in Q.1 related to criminal record data held on the nominal index of the Police National Computer for longer than is necessary (as prescribed by the police code of conduct/'weeding rules' or otherwise), contrary to the 6th data principle?

5. If any such enforcement notices were issued, what was the final resolution in these?

6. How many of the notices referred to in Q.1 related to a failure to take appropriate security measures against unauthorised access to the criminal records held on the nominal index of the Police National Computer, contrary to the 8th data principle, so that criminal records data was allegedly passed to private investigators/inquiry agents?

7. If any such enforcement notices were issued, what was the final resolution in these?

8. How many of the notices referred to in Q.1 related to a failure to take appropriate security measures against unauthorised access to the criminal records held on the nominal index of the Police National Computer, contrary to the 8th data principle, so that criminal records data was allegedly used by police officers and/or others authorised to access this data for purposes other than those specified by the registered data user?

9. If any such enforcement notices were issued, what was the final resolution in these?

Thank you in advance for your assistance. I look forward to your response.

Yours faithfully,

Chris Baldwin

AccessICOinformation, Information Commissioner's Office

Thank you for contacting the Information Commissioner’s Office. We confirm
that we have received your correspondence.

If you have made a request for information held by the ICO we will contact
you as soon as possible if we need any further information to enable us to
answer your request. If we don't need any further information we will
respond to you within our published, and statutory, service levels. For
more information please visit [1]http://ico.org.uk/about_us/how_we_comply

If you have raised a new information rights concern - we aim to send you
an initial response and case reference number within 30 days.

If you are concerned about the way an organisation is handling your
personal information, we will not usually look into it unless you have
raised it with the organisation first. For more information please see our
webpage ‘raising a concern with an organisation’ (go to our homepage and
follow the link ‘for the public’). You can also call the number below.

If you have requested advice - we aim to respond within 14 days. 

If your correspondence relates to an existing case - we will add it to
your case and consider it on allocation to a case officer.

Copied correspondence - we do not respond to correspondence that has been
copied to us.

For more information about our services, please see our webpage ‘Service
standards and what to expect' (go to our homepage and follow the links for
‘Report a concern’ and ‘Service standards and what to expect'). You can
also call the number below.

For information about what we do with personal data see our [2]privacy
notice.

If there is anything you would like to discuss with us, please call our
helpline on 0303 123 1113.

Yours sincerely

The Information Commissioner’s Office

Our newsletter

Details of how to sign up for our monthly e-newsletter can be found at
[3]http://www.ico.org.uk/tools_and_resource...

Twitter

Find us on Twitter at [4]http://www.twitter.com/ICOnews

 

References

Visible links
1. http://ico.org.uk/about_us/how_we_comply
2. https://ico.org.uk/global/privacy-notice/
3. http://www.ico.org.uk/tools_and_resource...
4. http://www.twitter.com/ICOnews

Information Commissioner's Office

7 August 2018

 

Case Reference Number IRQ0772425

 

Dear C Baldwin
 

Acknowledgement of request – FOIA

 

Thank you for your recent request for information. We received your
request on 2 August 2018.

We will be considering your request under the Freedom of Information Act
2000. You can expect us to respond in full by 31 August 2018. This is 20
working days from the date we received your request. If, for any reason,
we can’t respond by this date, we will let you know and tell you when you
can expect a response.
 
If you have any questions please contact me using the IRQ case reference
number above or by replying to this email and leaving the subject field
unchanged.
 
Thank you for your interest in the work of the Information Commissioner's
Office.
 
Yours sincerely 
 

Sarah Whelan
Senior Information Access Officer
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire SK9 5AF
T. 0330 414 6322  F. 01625 524510  [1]ico.org.uk  [2]twitter.com/iconews
Please consider the environment before printing this email
For information about what we do with personal data see our [3]privacy
notice

References

Visible links
1. http://ico.org.uk/
2. https://twitter.com/iconews
3. https://ico.org.uk/global/privacy-notice/

Information Commissioner's Office

29 August 2018

 

Case Reference Number IRQ0772425

 

Dear C Baldwin

Thank you for your recent request for information. We received your
request on 2 August.
 
We have considered your request under the Freedom of Information Act 2000.
 
Your request
 
I require the following information to assist me in the preparation of
academic research:
1. How many enforcement notices, pursuant to the Data Protection Act, were
issued against the National Identification Bureau at Scotland Yard between
1 January 1984 and 22 May 1995 in respect of alleged data breaches
involving the criminal record data held on the nominal index of the Police
National Computer?
2. How many of the above notices related to inaccurate criminal records
information held on the nominal index of the Police National Computer,
contrary to the 5th data principle?
3. If any such enforcement notices were issued, what was the final
resolution in these?
4. How many of the notices referred to in Q.1 related to criminal record
data held on the nominal index of the Police National Computer for longer
than is necessary (as prescribed by the police code of conduct/'weeding
rules' or otherwise), contrary to the 6th data principle?
5. If any such enforcement notices were issued, what was the final
resolution in these?
6. How many of the notices referred to in Q.1 related to a failure to take
appropriate security measures against unauthorised access to the criminal
records held on the nominal index of the Police National Computer,
contrary to the 8th data principle, so that criminal records data was
allegedly passed to private investigators/inquiry agents?
7. If any such enforcement notices were issued, what was the final
resolution in these?
8. How many of the notices referred to in Q.1 related to a failure to take
appropriate security measures against unauthorised access to the criminal
records held on the nominal index of the Police National Computer,
contrary to the 8th data principle, so that criminal records data was
allegedly used by police officers and/or others authorised to access this
data for purposes other than those specified by the registered data user?
9. If any such enforcement notices were issued, what was the final
resolution in these?
 
Our response 
 
Searches have been completed and we do not hold information in regard to
enforcement notices issued to the National Identification Bureau at
Scotland Yard between 1 January 1984 and 22 May 1995 in respect of alleged
data breaches involving the criminal record data held on the nominal index
of the Police National Computer.  
 
Please find a link below to our retention and disposal policy which is
available on the ICO website, this provides information about the
retention and disposal of our records.
 
[1]https://ico.org.uk/media/about-the-ico/p...
 
Next steps
 
I hope this response is clear. If you would like me to clarify anything
about the way your request has been handled please contact me.
 
You can ask us to review the way we have handled your request. Please see
our review procedure [2]here.
 
Following our internal review, if you remain dissatisfied with the way we
have handled your request, there is a statutory complaints process and you
can report your concern to the regulator. I have included information
about how to do this separately.
 
Yours sincerely,
 

Sarah Whelan
Senior Information Access Officer
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire SK9 5AF
T. 0330 414 6322  F. 01625 524510  [3]ico.org.uk  [4]twitter.com/iconews
Please consider the environment before printing this email
For information about what we do with personal data see our [5]privacy
notice

 
 

References

Visible links
1. https://ico.org.uk/media/about-the-ico/p...
2. https://ico.org.uk/media/about-the-ico/p...
3. http://ico.org.uk/
4. https://twitter.com/iconews
5. https://ico.org.uk/global/privacy-notice/