National Entitlement Card Management System - details

Dr John Welford made this Freedom of Information request to Scottish Government

This request has been closed to new correspondence from the public body. Contact us if you think it ought be re-opened.

The request was partially successful.

Dr John Welford

Dear Sir or Madam,

Having studied the March 2009 news item from the Improvement Service, ‘New National Entitlement Card Management System goes live’:
http://www.improvementservice.org.uk/new...

I would like to obtain answers to the following questions:

1. When was the introduction of the OneScotland Card Management System (CMS) originally debated in the Scottish Parliament?

2. Which is the relevant Act of the Scottish Parliament in which the associated legislation is described?

3. Could you provide me with a copy of the business case for the CMS?

4. Could you provide me with a copy of the Privacy Impact Assessment for the CMS?

5. Could you provide me with the Gateway Reviews for the project?

6. On 3 June 2008 Minister John Swinney said in the Scottish Parliament:

“The national entitlement card is not compulsory.

Local authorities and schools who use the card to access school meals must also provide an alternative method to access the service for those students who do not wish to carry a card. Alternatives include the use of a PIN number, use of name, class, etc.”
http://www.scottish.parliament.uk/busine...
(S3W-13320)

Is there a guarantee that the entitlement card will never be compulsory as a means of accessing services?

7. Does the CMS system make integral use of a database holding the Citizen’s Account details of each citizen?

8. If so, does this database already contain embryonic records for all native-born Scots, based on the UCRN (Unique Citizen Reference Number)? Or does it contain records only for those who have explicitly applied for a card?

9. Also, if there is a global Citizen’s Account database, what information fields (+ formats) are held in each record or in any associated central databases?

Yours faithfully,

Dr John Welford

Scottish Government

Dear Dr Welford

Thank you for your enquiry which I have received today.  I will try to
give a full response within 20 working days which is 17 June, due to
public holidays.  As I will need to obtain much of the information from
the Improvement Service there may be delays.  If this is the case, I will
let you know.

Best wishes

Frauke Sinclair

Head of Identity & Privacy Policy Branch

Efficiency and Transformational Government Division

Public Service Reform Directorate

3-H(South) Victoria Quay

Edinburgh

EH6 6QQ

T: 0131 244 2095

E: [email address]

show quoted sections

Scottish Government

Dear Dr Welford

Thank you for your request dated 18 May 2009 for information under the
Freedom of Information (Scotland) Act 2002 about the National Entitlement
Card scheme. We have now completed our search for the information you
request which has been supplied by the Improvement Service, who manage the
scheme, and which is set out below. You will see that a couple of
reports you request are available directly from the Improvement Service as
they are the information owners - they will send these to you on request.

If you are unhappy with this response to your request, you may ask us to
carry out an internal review, by writing to Dr Andrew Goudie, Director
General Economy, Scottish Government, St Andrew's House, Regent Road,
Edinburgh, EH1 3DG. Your request should explain why you wish a review to
be carried out, and should be made within 40 working days of receipt of
this letter, and we will reply within 20 working days of receipt. If you
are not satisfied with the result of the review, you then have the right
to make a formal complaint to the Scottish Information Commissioner.

Best wishes

Frauke Sinclair
Head of Identity & Privacy Policy Branch
Efficiency and Transformational Government Division
Public Service Reform Directorate
3-H(South) Victoria Quay
Edinburgh
EH6 6QQ

1. When was the introduction of the OneScotland Card Management System
(CMS) originally debated in the Scottish Parliament?

The National Entitlement Card (NEC) scheme is a local authority led
initiative across all of Scotland's 32 local authorities and the decision
to replace the card management system (CMS) - which the March 2009 news
item you refer to mentions - was an operational decision taken at local
authority level. The scheme does not involve new statutory functions and
local authority decisions such as this are not matters for debate by the
Scottish Parliament.

The `new' CMS refers to the original supplier, Charles Novacroft Ltd.
which supplied the `Innovator' card management system, having been
replaced by a new system supplied by the Sopra Group (in partnership with
Applied Card Technologies Ltd).

2. Which is the relevant Act of the Scottish Parliament in which the
associated legislation is described?

As stated in the answer to question 1, the decision to introduce the new
CMS was a local authority decision.

3. Could you provide me with a copy of the business case for the CMS?

The CMS is an integral part of the NEC scheme. The original business case
for the NEC scheme was commissioned by the 11 local authorities that
participated in the original NEC pilot project. Please contact the
Programme Director Jim Kinney directly for a copy of this document:
[1][email address].

4. Could you provide me with a copy of the Privacy Impact Assessment for
the CMS?

No Privacy Impact Assessment has been carried out for the CMS. However, a
privacy audit is planned for later this year. Once completed, a final
report of the privacy audit will be published on the Improvement Service
website.

5. Could you provide me with the Gateway Reviews for the project?

There is no Gateway Review for the CMS or NEC scheme. However, a Gateway
Review 0 (Strategic Assessment) was conducted for the overall Customer
First Programme in 2006. If you wish to obtain a copy of this Gateway
Review 0 report, please contact the Programme Director Jim Kinney directly
for a copy: [2][email address].

6. On 3 June 2008 Minister John Swinney said in the Scottish Parliament:
"The national entitlement card is not compulsory. Local authorities and
schools who use the card to access school meals must also provide an
alternative method to access the service for those students who do not
wish to carry a card. Alternatives include the use of a PIN number, use of
name, class, etc."
[3]http://www.scottish.parliament.uk/busine...
(S3W-13320) Is there a guarantee that the entitlement card will never be
compulsory as a means of accessing services?

The Minister replied that "the NEC is not compulsory" in response to the
question whether any local authorities or individual schools have made it
compulsory for students to use a Scottish national entitlement card to
access school meals.

There is no intention to issue NECs to the whole population but the cards
will be available to those who wish to have one. This will depend on what
services local authorities offer and whether they wish to use the NEC to
provide access to these services. Not all councils use the NEC to access
local services. It is necessary, however, to hold a NEC to access the
Scotland-wide concessionary travel schemes. As national schemes they
require a national card which is recognised by the different bus companies
and works as an electronic ticket across Scotland. It replaces the
numerous local cards which only worked in local areas.

7. Does the CMS system make integral use of a database holding the
Citizen's Account details of each citizen?

The CMS refers to the business applications that support the NEC scheme
and a database which holds simple records of cardholders and their contact
details. The database is split into two separate datasets. Firstly, a
dataset of personal details, the Citizen's Account i.e. the name, date of
birth and gender along with the contact details such as address, telephone
number, mobile number and email address along with the customer's
preferred method of contact. The second dataset holds the customer's card
details. This includes the card application number, the card number and
the date of issue plus any information relating to the reissue or
replacement of a card. Other fields on the card record contain product
code data such as library number or leisure number which are used to
encode the card or to encode a replacement card.

When an individual applies for a NEC they are given a 'card-only'
Citizen's Account which is used solely for administering the NEC scheme
i.e. contact details are held so that councils know where to reissue
lost/stolen/damaged cards. The NEC scheme also uses the address details
in the Citizen's Account to ensure that the card (or replacement card) is
sent to the correct address. The validation and verification process
for setting up a Citizen's Account also establishes a unique citizen
reference number (UCRN). This is used to confirm the date of birth to
prevent/detect duplicate or fraudulent applications and to automatically
update some of the personal details on the record.

Neither the card itself nor the Citizen's Account/CMS hold data about the
personal use of the card: it is the responsibility of the service provider
to manage such transactional data. For example, the library system in the
council stores its own data on library usage, similarly with the council's
leisure system or schools catering system. There is no need for this data
to be shared or stored in the CMS. Similarly, councils themselves have
their own access controls which establish who in the council is able to
access this data.

A cardholder can ask to see and request a copy of the data held about them
on the Citizen's Account/CMS in accordance with Data Protection
legislation.

8. If so, does this database already contain embryonic records for all
native-born Scots, based on the UCRN (Unique Citizen Reference Number)? Or
does it contain records only for those who have explicitly applied for a
card?

See answer to question 7. A record is only established on the CMS/CA
system when an individual applies for a NEC.

9. Also, if there is a global Citizen's Account database, what information
fields (+ formats) are held in each record or in any associated central
databases?

See answer to 7.

show quoted sections

Communications via the GSi may be automatically logged, monitored and/or
recorded for legal purposes.

References

Visible links
1. mailto:[email address]
mailto:[email address]
2. blocked::mailto:[email address]
file:///tmp/BLOCKED::mailto:[email address]
3. blocked::BLOCKED::http://www.scottish.parliament.uk/busine...
file:///tmp/BLOCKED::BLOCKED::http:/www.scottish.parliament.uk/business/pqa/wa-08/wa0603.htm

Dr John Welford

Dear Sir

I am grateful for the information which has been supplied thus far.

However, I would wish to receive a rather more definitive answer to my final question, viz:

“9. Also, if there is a global Citizen’s Account database, what information fields (+ formats) are held in each record or in any associated central databases?”

What I had expected to receive was a precise field-by-field data description of each element of a Citizen’s Account record (and any records in associated central databases). For example, something like:

Field 1: First name, 20 chars., alphabetic

Field 2: Middle initials, 4 chars., alphabetic

Field 3: Surname, 20 chars., alphabetic

etc.

In the case of the unique citizen reference number (UCRN), I would like to see its composition in terms of any subcomponents from which it is constructed.

Can this be supplied?

With regards

Dr John Welford

Scottish Government

I am back in the office on Monday 22 June and I will read my email on my
return.
Frauke Sinclair

show quoted sections

Communications via the GSi may be automatically logged, monitored and/or
recorded for legal purposes.

Scottish Government

Dear Dr Welford

Thank you for your email seeking further information about the National
Entitlement Card scheme.

The nature of the information you are seeking is about the operational
detail of the scheme and is not the type of information the Scottish
Government holds.  I have therefore been in touch with the Improvement
Service and they have advised me that if you contact the Customer First
Programme Director Jim Kinney direct, at:
[1][email address], he will seek to address your
outstanding questions.

Best wishes

Frauke Sinclair

Head of Identity & Privacy Policy Branch

Efficiency and Transformational Government Division

Public Service Reform Directorate

3-H(South) Victoria Quay

Edinburgh

EH6 6QQ

show quoted sections

Dr John Welford

Dear Mr Sinclair

Thank you for your further response. I am now following up the remaining information I require with Jim Kinney at the Improvement Service.

With best regards

Dr John Welford

sheila struthers left an annotation ()

This is only a small part of the overall plan. Read more here: http://www.home-education.biz/forum/gene...

The Children and Young People Bill currently going through the Scottish Parliament makes provision for universal data sharing without consent and intrusive surveillance of every child and associated adult, along with the imposition of a Named Person (other than a parent) on every child. A petition to raise awareness among the 129 MSPs (who appear to have missed the fact that children are now all deemed to be 'at risk of failing to meet state dictated outcomes') has been created here: https://www.change.org/en-GB/petitions/m...