Serious data security breaches

George Foster made this Freedom of Information request to Greater Manchester Police

This request has been closed to new correspondence from the public body. Contact us if you think it ought be re-opened.

The request was successful.

George Foster

Dear Greater Manchester Police,

Over the last three years for which records are available:

1) how many instances have you recorded of serious data security
breaches by officers or civilian employees of your organisation
(usage of the terms "serious" and "data security breach" are
derived from guidance issued by the Information Commissioner e.g.
http://preview.tinyurl.com/5u69kz2). Please provide, if held,
information relating to what type of breach occurred (for instance,
inappropriate or unlawful access to PCN data).

2) what action if any was taken as a result?

3) how many instances led to your organisation notifying the
Information Commissioner of the incident/s in question?

Yours faithfully,

George Foster

Greater Manchester Police

Dear Mr Foster

I write in connection with your request for information dated 9th May
2011, which was received by Greater Manchester Police on 9th May 2011. I
note you require access to the following information:

As per email

Your request will now be considered in accordance with the Freedom of
Information Act 2000 (the Act). You will receive a response within the
statutory timescale of 20 working days as defined by the Act, subject to
the information not being exempt or containing a reference to a third
party.
In some circumstances Greater Manchester Police may be unable to achieve
this deadline. If this is likely you will be informed and given a revised
time-scale at the earliest opportunity.
There may be a fee payable for the retrieval, collation and provision of
the information you request. If this is the case you will be informed and
the 20 working day timescale will be suspended until we receive payment
from you. If you choose not to make payment then your request will remain
unanswered.

Some requests may also require either full or partial transference to
another public authority in order to answer your query in the fullest
possible way. Again, you will be informed if this is the case.
Should you have any further inquiries concerning this matter, please write
or contact The Information Access Team, on telephone number 0161 856 2529

Kind regards

Information Access Team

From: George Foster <[FOI #70907 email]>
To: FOI requests at Greater Manchester Police
<[Greater Manchester Police request email]>
Date: 09/05/2011 12:40
Subject: Freedom of Information request - Serious data security breaches

--------------------------------------------------------------------------

Dear Greater Manchester Police,

Over the last three years for which records are available:

1) how many instances have you recorded of serious data security
breaches by officers or civilian employees of your organisation
(usage of the terms "serious" and "data security breach" are
derived from guidance issued by the Information Commissioner e.g.
[1]http://preview.tinyurl.com/5u69kz2). Please provide, if held,
information relating to what type of breach occurred (for instance,
inappropriate or unlawful access to PCN data).

2) what action if any was taken as a result?

3) how many instances led to your organisation notifying the
Information Commissioner of the incident/s in question?

Yours faithfully,

George Foster

-------------------------------------------------------------------
Disclaimer: This message and any reply that you make will be
published on the internet. Our privacy and copyright policies:
[2]http://www.whatdotheyknow.com/help/offic...

Please use this email address for all replies to this request:
[FOI #70907 email]

Is [Greater Manchester Police request email] the wrong address for Freedom
of Information requests to Greater Manchester Police? If so please
contact us using this form:
[3]http://www.whatdotheyknow.com/help/contact

If you find WhatDoTheyKnow useful as an FOI officer, please ask
your web manager to suggest us on your organisation's FOI page.
-------------------------------------------------------------------

This e mail carries a disclaimer, a copy of which may be read at:

http://www.gmp.police.uk/mainsite/pages/...

References

Visible links
1. http://preview.tinyurl.com/5u69kz2
2. http://www.whatdotheyknow.com/help/offic...
3. http://www.whatdotheyknow.com/help/contact

Greater Manchester Police

1 Attachment

  • Attachment

    0001 00203711 Corr 31EXTENDED REPONSE TIME LETTER 20110608 150650 01.DOC.doc

    49K Download View as HTML

Dear Sir,

Please find attached correspondence in relation to the above request.

Kind regards
Corine Phipps
Information Access Officer
This e mail carries a disclaimer, a copy of which may be read at:

http://www.gmp.police.uk/mainsite/pages/...

Greater Manchester Police

1 Attachment

Dear Sir,

Please find attached a response for the above request.

Kind regards
Corine Phipps
Information Access Officer

This e mail carries a disclaimer, a copy of which may be read at:

http://www.gmp.police.uk/mainsite/pages/...

Dear Corinne

Thanks for your response.

In my original request I suggested that examples of serious
breaches might be "inappropriate or unlawful access to PCN data" (I
meant to say PNC - as in Police National Computer).

I am very surprised if your organisation does not consider
inappropriate or unlawful access to a database containing sensitive
personal data to be a serious breach. Please could you confirm that
that is the case?

Additionally, please provide information for the last three years
held by your organisation on incidents involving inappropriate or
unlawful access to PNC data (or any other similar manual or
electronic data). Preferably I would like to know the nature of the
incident and the outcome of any investigation or action taken as a
result.

Feel free to treat this either as a new or a modified request.

Yours sincerely
George Foster

Greater Manchester Police

Dear Sir,

I can only confirm that in relation to your recent FOI request, that no
information was held for the requested period. The additional questions
below, will be logged as a new request and will be responded to in due
course.

Kind regards

Corine Phipps
Information Access Officer

From: George Foster <[FOI #70907 email]>
To: [email address]
Date: 20/06/2011 15:34
Subject: Re: Response for FOI request ref: GSA2037-11

--------------------------------------------------------------------------

Dear Corinne

Thanks for your response.

In my original request I suggested that examples of serious
breaches might be "inappropriate or unlawful access to PCN data" (I
meant to say PNC - as in Police National Computer).

I am very surprised if your organisation does not consider
inappropriate or unlawful access to a database containing sensitive
personal data to be a serious breach. Please could you confirm that
that is the case?

Additionally, please provide information for the last three years
held by your organisation on incidents involving inappropriate or
unlawful access to PNC data (or any other similar manual or
electronic data). Preferably I would like to know the nature of the
incident and the outcome of any investigation or action taken as a
result.

Feel free to treat this either as a new or a modified request.

Yours sincerely
George Foster

show quoted sections

Greater Manchester Police

Dear Sir,

Your Ref: GSA2795-11- For the below FOIA request.

Please provide information for the last three years
held by your organisation on incidents involving inappropriate or unlawful
access to PNC data (or any other similar manual or electronic data).
Preferably I would like to know the nature of the incident and the outcome
of any investigation or action taken as a
result.

I write in connection with your request for information dated 20.06.11,
which was received on 20.06.11 by Greater Manchester Police. Your
request will now be considered in accordance with the Freedom of
Information Act 2000 (the Act). You will receive a response within the
statutory timescale of 20 working days as defined by the Act, subject to
the information not being exempt or containing a reference to a third
party.
In some circumstances Greater Manchester Police may be unable to achieve
this deadline. If this is likely you will be informed and given a revised
time-scale at the earliest opportunity.
There may be a fee payable for the retrieval, collation and provision of
the information you request. If this is the case you will be informed and
the 20 working day timescale will be suspended until we receive payment
from you. If you choose not to make payment then your request will remain
unanswered.

Some requests may also require either full or partial transference to
another public authority in order to answer your query in the fullest
possible way. Again, you will be informed if this is the case.
Should you have any further inquiries concerning this matter, please write
or contact The Information Access Team, on telephone number 0161 856 2529

All replies to this email should be directed to the Freedom of Information
email address.

Kind regards
Corine Phipps
Information Access OfficerThis e mail carries a disclaimer, a copy of
which may be read at:

http://www.gmp.police.uk/mainsite/pages/...

Greater Manchester Police

2 Attachments

Dear Mr Foster

with reference to your recent Freedom of Information request to Greater
Manchester Police, re unlawful access to PNC, please find attached your
response:

Many thanks for your enquiry. Please direct any response to the following
email [Greater Manchester Police request email]

kind regards

Philip A Humphreys
Information Access Officer
Information Management Branch
Greater Manchester Police
Tel : 0161 856 2511
Ext : 62511

*Not Protectively Marked*
This e mail carries a disclaimer, a copy of which may be read at:

http://www.gmp.police.uk/mainsite/pages/...

Dear Philip

Thanks for your helpful response. I'm sorry it's taken me a while to say thank you.

Yours sincerely

George Foster

Greater Manchester Police

I am out of the office until 09/08/2011.

Please telephone 0161 856 2529 (internal 62529) or email
[Greater Manchester Police request email] or [email address] if your
query is urgent, thank you.

Note: This is an automated response to your message "Re: Freedom of
Information GSA 2795/11" sent on 05/08/2011 19:31:42.

This is the only notification you will receive while this person is away.

This e mail carries a disclaimer, a copy of which may be read at:


http://www.gmp.police.uk/mainsite/pages/...

Looking for an EU Authority?

You can request documents directly from EU Institutions at our sister site AskTheEU.org . Find out more .

AskTheEU.org