Skip to main content

Departmental Data Protection

Volume 486: debated on Tuesday 13 January 2009

To ask the Secretary of State for Wales what percentage of contractors and suppliers to his Department has reported compliance with the Government's security standards following publication of the report, Data Handling Procedures in Government, and the accompanying document, Cross-departmental Actions: Mandatory Minimum Action, on 25 June 2008. (245306)

The Wales Office does not directly use external suppliers or contractors to carry out its responsibilities. The Wales Office is provided with its IT and support services by the Ministry of Justice, who place an obligation on all of their contractors to provide IT and data management systems that meet Government security standards.

To ask the Secretary of State for Wales how many contracts his Department has which allow contractors to store personal data of UK citizens overseas; for which contracts this applies; in which countries the data for each contract is held; and how many people have their data stored overseas in the case of each such contract. (245334)

To ask the Secretary of State for Wales when his Department appointed a senior information risk owner in accordance with the report, Data Handling Procedures in Government and the accompanying document Cross-departmental Actions: Mandatory Minimum Action; and what grade the person holds within the Department. (245372)

The responsibility of Senior Information Risk Owner was transferred to the newly-created post of Head of Corporate Services in November. The postholder is a member of the Department's Management Board.

To ask the Secretary of State for Wales what percentage of the IT systems in his Department is fully accredited to the Government's security standards. (245377)

The Wales Office's IT services are provided by the Ministry of Justice. These IT systems are fully accredited to Government standards.