The Department and its agencies have non-disclosure agreements with their contractors and contractual obligations for them to permit and facilitate any audit of personal data and IT equipment. Contracts include terms and conditions covering confidentiality, data protection and freedom of information.