Departmental Databases Adam Price To ask the Secretary of State for Defence pursuant to the Answer of 1 April 2008, Official Report, column 795W, on Departmental databases, if he will list (a) the companies and (b) the categories of personal information involved. Mr. Bob Ainsworth The Ministry of Defence, including its agencies, has contracted the following US-based companies to provide services involving the use, storage, processing or analysis of databases of personal information held by the Government on UK citizens, in each case the type of personal information is indicated, both in general terms and by Data Protection Act category. -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Company |Type of data |DPA category | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Human Resources Technologies Inc. (Virginia)|Information about Royal Navy members and the wider RN community |Personal data (non-sensitive)| -------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |SuperLetter.Com Inc (Florida) |Details about users (serving personnel and their family and friends) of e-bluey service|Personal data (non-sensitive)| -------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Galileo International LLC (Colorado) |Traveller details |Personal data (non-sensitive)| -------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |Carlson Wagonlit Travel (Minnesota) |Traveller details |Personal data (non-sensitive)| -------------------------------------------------------------------------------------------------------------------------------------------------------------------- My answer of 1 April 2008 referred only to the first of these service providers. Since then an in-depth exercise to carry out a review of the Department’s holdings of personal data has been completed and a further three service providers (SuperLetter.Com, Galileo and Carlson Wagonlit Travel) have been confirmed. The Department, including its agencies, has contracted with a number of UK based subsidiaries of USA registered service providers over the last five years. All those whose details are known centrally following the recent review exercise are listed as follows. ------------------------------------------------------------------------------------------------------------------------------------------------- |Company |Type of data |DPA category | ------------------------------------------------------------------------------------------------------------------------------------------------- |EDS UK Ltd. |Service personnel HR and training data. Service recruit and potential recruit data. |Sensitive personal data| ------------------------------------------------------------------------------------------------------------------------------------------------- | | | | ------------------------------------------------------------------------------------------------------------------------------------------------- |IBM UK Ltd. |MOD civilian HR data. |Sensitive personal data| ------------------------------------------------------------------------------------------------------------------------------------------------- | | | | ------------------------------------------------------------------------------------------------------------------------------------------------- |FitLinxx UK Ltd.|Fitness training programmes for RAF personnel and records workout sessions. |Sensitive personal data| ------------------------------------------------------------------------------------------------------------------------------------------------- | | | | ------------------------------------------------------------------------------------------------------------------------------------------------- |Rackspace Ltd. |Service personnel and family/friend data. Army and RN Cadet information. Civilian recruit information.|Sensitive personal data| -------------------------------------------------------------------------------------------------------------------------------------------------