Service providers and PII

Response to this request is long overdue. By law, under all circumstances, Westminster City Council should have responded by now (details). You can complain by requesting an internal review.

Dear Westminster City Council,

1. Do you use an external IT service provider/Managed Service Provider (MSP)?
- Yes
- No

2. Does your provider/MSP serve as a processor of your Personally Identifiable Information (PII)?
- Yes
- No

If No, thank you for your time.
If Yes, please see below:

3. Does your contract/Service Level Agreement (SLA) with the provider(s) have clear provisions for the allocation of responsibilities in the event of a data breach?
- Yes
- No

4. Have you revisited your original contract(s) to ensure compliance with the General Data Protection Regulation (GDPR)?
- Yes
- No

5. Does the contract/SLA define the time frame in which a security breach at the provider must be reported to you?
- Yes
- No

6. Do you have policies in place for privileged account management?
- Yes
- No

7. Has your service provider/MSP suffered a data breach involving your organisation’s PII in the last 12 months?
- Yes
- No

8. If yes, how long did it take for them to notify you?
- <30 minutes
- 31 mins – 1 day
- 1 – 2 days
- 2 – 3 days
- More than 3 days

Thank you for your time.

Yours faithfully,

Gabby Dunne

Westminster City Council

Information request
Our reference: 7792133

--------------------------------------------------------------------------

 
Dear Sir/Madam
 
Thank you for contacting Westminster City Council's Information Management
Team. 

Your query will be allocated for response, and someone will contact you
within 5 working days to confirm the details of your request and whether
it is subject to a fee. 

Please see the Westminster City Council website for further information on
Data Protection policies
- [1]http://www.westminster.gov.uk/services/c...

Kindest regards, 
 
Information Management Team
Westminster City Council
5 Strand
London
WC2N 5HR
[email address]
 
NOTE: Please do not edit the subject line when replying to this email.

References

Visible links
1. http://www.westminster.gov.uk/services/c...

Westminster City Council

Information request
Our reference: 7792133

--------------------------------------------------------------------------

 
Dear Sir/Madam,
 
Freedom of Information Act 2000
 
Thank you for your request for information that was received on 16 July
2018.
 
Request summary
Dear Westminster City Council,
1. Do you use an external IT service provider/Managed Service Provider
(MSP)?
- Yes
- No
2. Does your provider/MSP serve as a processor of your Personally
Identifiable Information (PII)?
- Yes
- No
If No, thank you for your time.
If Yes, please see below:
3. Does your contract/Service Level Agreement (SLA) with the provider(s)
have clear provisions for the allocation of responsibilities in the event
of a data breach?
- Yes
- No
4. Have you revisited your original contract(s) to ensure compliance with
the General Data Protection Regulation (GDPR)?
- Yes
- No
5. Does the contract/SLA define the time frame in which a security breach
at the provider must be reported to you?
- Yes
- No
6. Do you have policies in place for privileged account management?
- Yes
- No
7. Has your service provider/MSP suffered a data breach involving your
organisation's PII in the last 12 months?
- Yes
- No
8. If yes, how long did it take for them to notify you?
- - 31 mins ' 1 day
- 1 ' 2 days
- 2 ' 3 days
- More than 3 days
Thank you for your time.
Yours faithfully,
Gabby Dunne 
 
 
We are dealing with your request under the Freedom of Information Act 2000
and we aim to send a response by 13 August 2018.
 
The Freedom of Information Act 2000 may restrict the release of some or
all of the information you have requested. We will carry out an assessment
and if any exemptions apply to some or all of the information then we
might not provide that information to you. We will inform you if this is
the case and advise you of your rights to request an internal review and
to complain to the Information Commissioner's Office.
 
We will also advise you if we cannot provide you with the information
requested for any other reason together with the reason(s) why and details
of how you may appeal (if appropriate).
 
Yours faithfully,
 
 
Westminster City Council
Email: [1][Westminster City Council request email]
Web: [2]www.westminster.gov.uk
 
NOTE: Please do not edit the subject line when replying to this email.

References

Visible links
1. mailto:[Westminster City Council request email]
2. file:///tmp/www.westminster.gov.uk

Dear Westminster City Council,

It is past the deadline for when I should, by law, have a response to this. Please get back to me promptly, either to answer my questions or ask for clarification on anything.

Yours sincerely,

Gabby Dunne

Looking for an EU Authority?

You can request documents directly from EU Institutions at our sister site AskTheEU.org . Find out more .

AskTheEU.org