To ask the Chancellor of the Duchy of Lancaster what recent advice he has issued to departments on the storage of personal data on memory sticks or other portable data storage devices. (224294)

I refer the hon. Member to the Data Handling Report published on 25 June 2008, Official Report, columns 25-6WS, as well as the cross government mandatory minimum requirements in relation to personal data security.

The Data Handling Review states that where data has to be put onto removable media, departments should minimise the information transferred, use encryption and limit user access. References to this guidance can be found in paragraph 13 of the cross government mandatory minimum measures on the following Cabinet Office website; a copy of which has been placed in the libraries of the House.

http://www.cabinetoffice.gov.uk/~/media/assets/www.cabinet office.gov.uk/csia/dhr/cross_gov080625%20pdf.ashx