Skip to main content

Departmental Databases

Volume 476: debated on Thursday 22 May 2008

To ask the Chancellor of the Exchequer pursuant to the Answer of 14 March 2008, Official Report, columns 721-22W, on departmental databases, which US-registered service provider has been engaged to manage certain aspects of personal data; and what types of personal information it has been engaged to manage. (197147)

National Savings and Investments have engaged US registered service providers as follows:

CACI—a wholly owned UK subsidiary of CACI Inc. A division of CACI has been engaged to help NS and I with analysis. This has included sending them customer name and address data along with account data.

Acxiom—a UK subsidiary of a US company. NS and I have in the past provided all account opening information, including but not limited to name, address and purchase amount to Acxiom for analysis. This work was taken over by a UK based provider in 2005.

S1—a US company based in Atlanta. Data processing covered by a Safe Harbour Agreement. S1 host the internet engine for the NS and I Direct ISA product. They hold customer information including but not limited to name, address, telephone number, NI number and purchase amount.

NS and I has a number of different contractors and due to the diverse nature of their requirements there are different levels of protection covered by their terms and conditions. As a minimum, their terms and conditions include compliance with the Data Protection Act, however higher risk contracts have more robust clauses.