Government still failing on data protection

The government has again been found wanting in its handling of data

The UK government is still failing its citizens on basic data protection issues, according to new research by online identity firm Garlik.

The company submitted 30 Freedom of Information requests between September and November this year to all major government departments and offices.

Only three departments confirmed that they had correction policies and procedures in place in accordance with the Data Protection Act (DPA).

Only two, the Driver and Vehicle Licensing Agency and Department for Transport, have had independent audits to demonstrate DPA compliance, according to the research.

Garlik chief executive Tom Ilube explained that a typical public database can have error rates of around 10 per cent, meaning that a large government database could hold erroneous data on several million individuals.

"The government's complacent attitude to managing and correcting our personal data is all the more shocking in light of the 176 public data losses that have occurred this year alone," he said.

"As we head towards ever larger government databases it is crucial that the government deals more effectively with error rates, and handles data in a way that maximises accuracy and prevents future breaches."

Garlik called on all government departments controlling large databases to appoint a chief privacy officer to take direct accountability for personal information within that department.

The firm also called for regular, independent audits of all departments to test for compliance with the DPA, and said that departments should put in place written procedures to manage, monitor and report on the accuracy of the personal information they hold.