For casual enquiries this will include no more than a name and contact details, but for those who applied to join the forces more extensive personal data may be held. In some cases this will include personal information such as next of kin details, passport and national insurance numbers, drivers licence and bank details and national health service numbers. EDS assesses that it is unlikely that the device was encrypted because it was stored within a secure site that exceeded the standards necessary for restricted information. An investigation is being conducted by the MOD police. The MOD has set up a help line for those who may be affected by this incident, and for those individuals whose financial details may be involved, action has been taken through APACS (the Association for Payment Clearing Services) to inform banks so that the relevant accounts can be flagged for scrutiny against unauthorised access.
As a result of the review conducted earlier this year by Sir Edmund Burton, the MOD is clear about the crucial need to implement wholesale improvements in how we store, protect and manage the use of personal data. We are also clear that we need to effect a significant behavioural change among our people at all levels. We are currently engaged in a comprehensive programme to do all of this. The MOD is a large Department operating many complex data systems world wide, often at very short notice and under extreme conditions. This presents additional challenges and risks in the implementation of rapid changehowever we are determined to ensure that we effect that change.
We have pursued the task with urgency and commitment and in the process we have identified further opportunities for improvement. The progress that the Department has made to date is consistent with that required by the DHR timetable and the commitments we have made to the Information Commissioner. Some of the greatest challenges that we have had to overcome relate to incorporating stricter data handling standards into existing contracts and their related systems retrospectively.
We have undertaken a series of comprehensive reviews into our personal data holdings, looking wider than our personnel systems, and assess that we hold in excess of 200 million records. By the end of October, as agreed, all personal data held by MOD will be under the new governance regime required by DHR. This work relies heavily on reciprocal commitment from our key suppliers. Central to it is our continuing detailed census of storage as part of our commitment to good data management. In line with this, it is intended to reveal whether any storage devices cannot be accounted for. Such cases are treated very seriously with immediate action to investigate the loss, engage individuals who might be at risk of compromise and alert the Information Commissioner. This process led to the discovery of the missing hard drive at the EDS site in Hook.
The fact that this event, and another involving a suspected theft at Innsworth, has occurred on a high security site manned by cleared personnel illustrates the need continually to review and enhance our arrangements for personal data. This work relies heavily on reciprocal commitment from our partners.
The Information Commissioner's Office recognises that we may uncover further issues as we implement our assurance regime. This is a direct result of emplacing an
effective approach to data security. The implementation of our action plan remains on track to be compliant with the requirements of the Burton review by the end of March 2009 and likewise the requirements of DHR by October 2009. We will update the House as required.
The Secretary of State for Environment, Food and Rural Affairs (Hilary Benn): I have set the Government Decontamination Service (GDS) the following remit. This updates and replaces the remit originally set for the GDS when the agency was established in 2005. It provides a clearer and more focused statement of purpose for the service. It does not change the functions of the service but seeks to explain them better through setting the functions in the context of the services dual role of:
preparing for a crisis
responding to a crisis and supporting Departments and responsible authorities during the clean-up or recovery phase.
1.1 Establish and maintain a framework of contractors (specialist suppliers) which, in the event of a CBRN(1) or major HAZMAT(2 )incident, and using a call-off contract mechanism, can offer appropriate remediation or decontamination-related services (including sampling and monitoring, and waste management services to facilitate decontamination) for the built and open environment and transport assets, including critical national infrastructure.
1.2 To establish and maintain a programme of work to test, exercise and evaluate GDS and GDS framework capability against likely service requirement based on the appropriate Government policies and materials, using national and international technical information as appropriate.
1.4 Provision of advice and briefing on framework capability and capacity(3), and written guidance on associated remediation/decontamination issues to Departments, devolved Administrations, and responsible authorities.
1.6 To build up a library of the relevant knowledge (including reference material) and experience available to GDS, drawing on national and international information, which can be used by its officers, and others, to support the development of the framework and wider remediation work.
2.1 Act as expert advisors on the capability and capacity of the GDS framework contractors, their services and, where relevant, the different remediation or decontamination methodologies and technologies available through the framework;
2.2 To provide expert/scientific advice as necessary to relevant groups, including the STAC and recovery co-ordination group, on the consequences of the decontamination techniques used by the framework contractors, and on their capability/capacity and operating procedures to inform the consequence management strategy.
2.3 Help the lead responsible authority (or Agent) access the most appropriate framework services in order to ensure the efficient, effective and timely decontamination/remediation work is carried out. And to assist them in being an intelligent customer when setting up the appropriate contract or contracts;
2.5 Signposting alternative options where framework services have reached capacity, or where the decontamination service necessary does not require the level of capability available through the framework.
2.6 Providing, where required, appropriate briefing and assistance to central Government (including direct to the relevant Minister through the lead Government Department) on decontamination-related matters including capability and capacity of framework contractors and other known remediation or decontamination capability.
To provide an evaluated framework of specialist suppliers to meet the requirements arising from the UK national risk assessment process, utilising exercises to assess the capacity and capability of specialist Framework suppliers.
GDS will contribute to the central Government knowledge on national capability and capacity for the decontamination of buildings, infrastructure, mobile transport assets and the open environment.
Provide operational and tactical advice and guidance to central Government and other stakeholders, including local authorities.
GDS will develop its staff with both the capacity and capability to support the requirements arising from its remit.
Provide robust Corporate Governance in line with the Treasury Audit Committee handbook and the National Audit Office and Internal Audit recommendations.
(1)CBRNa deliberate act involving chemical, biological, radioactive or nuclear materials.
(2)Major HAZMATan accident, regardless of scale, involving chemical, biological, radioactive or nuclear materials where the incident is in excess of local capability and/or knowledge and authorities request GDS services.
(3)Where appropriate and subject to appropriate security restrictions.
The Prime Minister (Mr. Gordon Brown): I recently announced a series of changes to ministerial responsibilities. I have today placed in the Library of the House the Cabinet Office paper Machinery of Government: economy, business, climate change, energy and environment, which sets out these changes in more detail.