Question
To ask Her Majesty's Government what is their response to the recommendation in the Rowntree report, Database State, that Government databases should be subjected to an independent review of their privacy impact and their overall benefits to society.
Answer
Departments are already required to conduct privacy impact assessments on all new projects which involve the collection of personal data. This measure, part of the mandatory requirements in the data handling review, has been agreed with the Information Commissioner's Office. The ICO has produced and subsequently updated guidance for both the public and private sectors on this. In addition, the Government accepted the recommendations of the Walport Thomas review for measures to strengthen enforcement of data protection and a data sharing code of practice to be published and maintained by the Information Commissioner who has independent oversight of data protection issues across the public and private sector. Both the data handling review (DHR) and the independent Walport Thomas review on data sharing, published in June and July 2008, respectively, recognised that there was a definite need for government to handle and share information to provide better and more efficient public services and to aid in the detection and prevention of crime but any intrusion into privacy must be appropriate and proportionate. Both of these reports can be read online at www.cabinetoffice.gov.uk/reports/data_handling.aspx and www.justice.gov.uk/reviews/datasharing-intro.htm respectively. The Joseph Rowntree Trust report presents no substantive evidence on which it bases its assessments of privacy impact. However, the Government take their data handling responsibilities seriously and will consider any concerns carefully, adapting existing safeguards where necessary. Copies have been placed in Libraries of the House