The loss of the data cartridge was formally reported to senior managers in HMRC on 29 October 2007 and Ministers were first informed of the loss at the beginning of November 2007 by the former Chairman of HMRC.
I refer the hon. Member to the answer I gave on 28 February 2008, Official Report, columns 1937-38W, which explained that each HMRC business unit has appointed a data guardian to monitor its data handling and transfer arrangements. Support has already been provided to these data guardians in the form of awareness events, written material and access to HMRC security specialists. HMRC will continue to assess the data guardians’ ongoing training requirements.
HMRC is also currently part way through a programme of mandatory half-day data security training and awareness workshops. Current plans envisage every single member of the Department having attended a workshop before the end of June.
(2) what additional (a) funding and (b) staffing will be required to implement revised data security policies and procedures in HM Revenue and Customs following the child benefit data loss; and what (i) secure storage facilities and (ii) other measures will be required for that implementation.
All costs incurred to date have been contained within HMRC’s existing funding allocations. These costs have arisen from the range of measures HMRC has introduced since November 2007 to enhance its data security procedures, and are highlighted in Kieran Poynter’s final report published today. A copy of the report is available in the Library of the House.