The Ministry of Justice and its agencies, has one contract for an online training facility which is provided from the United States of America. The application holds the names and payroll references for approximately 4,000 staff who have completed an e-learning package. The company is a member of the United States Safe Harbor agreement, which ensures a similar level of data protection to that required by UK data protection law. All data transfers are required to comply with the Data Protection Act 1998.
The contract expires in April 2009. Options for the future are being considered with a view to ensuring the data will be stored in the UK after that date.
The Ministry of Justice’s senior information risk owner (SIRO) is the Director General of the Democracy, Constitution and Law Group who took over this responsibility in spring 2008, in advance of the Data Handling Review’s publication. Prior to her taking over the role, the Ministry of Justice’s SIRO was the Director General of Strategy.