We don't know whether the most recent response to this request contains information or not – if you are P Rourke please sign in and let everyone know.

Kingdom Services Group "Data Breach and GDPR"

P Rourke made this Freedom of Information request to Ealing Borough Council

This request has been closed to new correspondence from the public body. Contact us if you think it ought be re-opened.

We're waiting for P Rourke to read recent responses and update the status.

Dear Ealing Borough Council,

1. As Joint Controllers of the data being processed for the Environmental Enforcement contract with KSG (KSG), can you confirm that either you or KSG reported the breach (within 72hrs) of Kingdom's "Bonus Spreadsheet for 2018" being available online for anyone to observe? The spreadsheet was not password protected. It also contained the names of all the council's working with KSG and all of their employee names and FPN totals for each day (no security whatsoever).

2. As Joint controllers of the data being processed for the Environmental Enforcement contracts, can you confirm that either you or KSG formally informed all of their employees (authorised council officers), whose names were on the spreadsheet?

3. Could you confirm that all the Body Worn Cameras being used to collect personal identifiable information from members of the public have been encrypted as per the GDPR (2016). KSG use Body Worn Cameras supplied by Pinnacle. The PR5 model is not encrypted and cannot be used to collect personal identifiable information. Therefore, they must be using the PR6 model. Could you confirm the model being used for your contract?

4. Can you confirm that all officers employed by KSG have been trained in accordance to DPA 1998 and GDPR (2016) and that you have seen the signed training records for this training?

5. Can you confirm that all the officers employed by KSG, authorised to enforce littering offences on behalf of the council have been fully vetted and have valid DBS check, which the council have seen?

Could you confirm KSG have a Data Protection Officer/department and the contact email for this person/department.

Could you provide me with a copy of the following documents/policies which will have been updated in accordance with the General Data Protection Regulations (2016), the regulations came into force on 25th May 2018. Therefore, all of the documents will have been updated.

1. A copy of your Data Sharing Agreement with KSG for the delivery of Environmental Enforcement Services and a variation to this agreement to show the inclusion of GDPR (2016).

2. A copy of the Data Protection Impact Assessment for The Environmental Enforcement Services delivered by KSG on behalf of the council, which will show the inclusion of GDPR (2016). This assessment will include all systems used for processing Personal identifiable information e.g. systems, Body Worn Cameras, Handheld Computers and officer notebooks.

3. A copy of the Body Worn Camera Policy being adhered to by the officers employed by KSG working on behalf of the council. Also the previous version of this policy before adhering to the GDPR (2016).

4. A copy of the data retention policy being used in accordance with GDPR (2016) for the Environmental Enforcement contract with KSG.

Yours faithfully,

P Rourke

foirequests, Ealing Borough Council

4 Attachments

Dear P Rourke,

 

Please find attached response to your recent Freedom of Information/EIR
request.

 

If you are dissatisfied with the handling of your request, you can request
an internal review. 

Details of the Freedom of Information complaints process can be found at:

 

[1]http://www.ealing.gov.uk/info/200640/fre...

 

Your request for an internal review should be submitted to us within 40
working days of your receipt of this response.  Any such request received
after this time will only be considered at our discretion.

 

If you remain dissatisfied by the outcome of the Internal Review you have
the right to submit your complaint to the Information Commissioner at:

 

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire SK9 5AF

 

Kind Regards

 

Information Governance Team (FOI/EIR)

 

Ealing Council

Freedom of Information

3rd  Floor, North East

Perceval House

14-16 Uxbridge Road

London W5 2HL

Tel: (020) 8825 5000

 

[2]cid:image003.png@01D40E1B.DABC5AF0

 

 

show quoted sections

References

Visible links
1. http://www.ealing.gov.uk/info/200640/fre...

foirequests, Ealing Borough Council

6 Attachments

Dear P Rourke,

 

Please find attached response to your recent Freedom of Information/EIR
request.

 

If you are dissatisfied with the handling of your request, you can request
an internal review. 

Details of the Freedom of Information complaints process can be found at:

 

[1]http://www.ealing.gov.uk/info/200640/fre...

 

Your request for an internal review should be submitted to us within 40
working days of your receipt of this response.  Any such request received
after this time will only be considered at our discretion.

 

If you remain dissatisfied by the outcome of the Internal Review you have
the right to submit your complaint to the Information Commissioner at:

 

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire SK9 5AF

 

Kind Regards

 

Information Governance Team (FOI/EIR)

 

Ealing Council

Freedom of Information

3rd  Floor, North East

Perceval House

14-16 Uxbridge Road

London W5 2HL

Tel: (020) 8825 5000

 

[2]cid:image003.png@01D40E1B.DABC5AF0

 

 

show quoted sections

References

Visible links
1. http://www.ealing.gov.uk/info/200640/fre...

We don't know whether the most recent response to this request contains information or not – if you are P Rourke please sign in and let everyone know.