Data trust has evaporated, review finds

Data security has damaged government's reputation on competence

Friday, 11, Jul 2008 12:01

The government should legislate to restore trust in its ability to manage personal data, an independent review has found.

Mark Walport, head of the Wellcome Trust, and information commissioner Richard Thomas say measures are "urgently needed" to reassure a public worried by a string of embarrassing data security failures.

The review recommends legislation bringing in "sharper" guidance to frontline staff and streamline existing legal complexities.

New laws would also strengthen the information commissioner's office by giving it sanctions and boosting its inspection powers.

Dr Walport said the case for change was "overwhelming".

"The law and its framework lack clarity. The technology enabling the collection and sharing of large amounts of personal data continues to advance. But public confidence in how personal information is safeguarded is evaporating."

The review says a culture change is needed to ensure the ways in which personal information is viewed and handled keeps pace with growing responsibilities.

"The risks in the information age are also very real, particularly if organisations are cavalier about sharing," Mr Thomas commented.

"The regulatory system governing data sharing needs to have much more bite – and reform is now long overdue."

Data security first damaged the government's reputation for competence last autumn when it emerged HM Revenue and Customs had lost the personal details of 25 million child benefit claimants.

A string of further revelations followed. Army applicants saw their details lost, the Driver and Vehicle Licensing Authority sent out surveys containing sensitive information to wrong addresses and, most recently, a joint intelligence committee assessment was left on a train in London's Waterloo station.