Government outsources IT to India to develop Benefit systems

[mertle]

http://www.guardian.co.uk/politics/2...enefits-system

I cant remember anybody mention it setup thread so mods want to change header.

Anyway despite grayling want assurences no foreign contracts India company building new IT.

I wont comment as long no rea data is used to test it fine. Installing it they should be properly vetted.

Last week the Observer disclosed that the government had secretly agreed that the personal data of 43 million drivers in the UK could be contracted offshore to India. Data from the Driver and Vehicle Licensing Agency, including addresses and registration plate numbers, along with credit card details, will now be accessible to staff outside the UK.

Hang on they selling our privacy of everything to foreigners who then could syphon this off god knows where for corruption.

I will urge all who paid by cards to change them Is cameron blinkering idiot. Well sell anything to cut costs bet his card details omitted his personal data.

Two weeks ago, it emerged that ministers had agreed to give Computer Sciences Corporation, the US company responsible for the NHS database, almost £1bn in health contracts.

Great now we making the world ric at our expence.

Why dont we put FIRESALE EVERYTHING MUST GO. Bargains gallore.

[admars]

this sort of thing goes on a lot, for example NHS. Company i used to work for did outsourcing, some to India. NHS data wasn't allowed to be stored overseas, however, it was ok for Indian users to use Citrix etc to connect to UK based servers, as long as they didn't print data, email it to their Indian based accounts etc!

[Russ]

Thread title amended so it now makes sense.

Originally Posted by admars

this sort of thing goes on a lot, for example NHS. Company i used to work for did outsourcing, some to India. NHS data wasn't allowed to be stored overseas, however, it was ok for Indian users to use Citrix etc to connect to UK based servers, as long as they didn't print data, email it to their Indian based accounts etc!

Sorry, but that is a common misunderstanding - it still counts as 'processing' even if it is just displayed on a screen (this was explained to me by one of the DLA Piper partners (law firm) who specialises in DPA & FOI at our recent training session on these subjects).

[Stuart]

I studied the DPA (both 1984 and 1998 editions) at Uni. While I did computer science, and not law, it was felt we would need to know at least some of the legal aspects of what we were doing.

Anyhow, what we were told was basically what Hugh said, and that the EU insisted on that clause in the DPA 1998 precisely to ensure that we would be protected in the event that companies (in this case, the government) attempted to get around the DPA by ensuring that the data was stored in the UK, but processed or used elsewhere.

[mertle]

Thanks mods for edit and thanks for the reply.

Worried about data security would assume safeguards made on that security.

Its little worrying to see card details could go outside uk with DVLA. Could this pave way for even A government department outsourced completely net result Swansea DVLA closured.

Who would be looking at our health records too.

Once sensitive and personal data beyond UK we dont know where it goes. Would thought coalition cared for its people.

I wonder if this actually breaches Data Protection Act.

---------- Post added at 22:54 ---------- Previous post was at 22:40 ----------

Originally Posted by Stuart

I studied the DPA (both 1984 and 1998 editions) at Uni. While I did computer science, and not law, it was felt we would need to know at least some of the legal aspects of what we were doing.

Anyhow, what we were told was basically what Hugh said, and that the EU insisted on that clause in the DPA 1998 precisely to ensure that we would be protected in the event that companies (in this case, the government) attempted to get around the DPA by ensuring that the data was stored in the UK, but processed or used elsewhere.

I did 98 one had to sign this due to work was involved in students records all that. Its mindfield to read but its there for Our protection for sure. Wonder if they still do spot checks or due cuts no longer viable.

What I seeing this likely breaches but cant remember specifics of the Act.

I am sure the careless stuff which went on through previous governments was also breach DPA. Things like laptop left in cab was one. Another remember was the famous comps sale with non formated data on it. Now I never heared if anything was done regarding DPA in these cases. Think one was army recruitment personal data of lads/lassies wanting to join. Very dangerious in rwrong hands. Theother cant remember the department may been DWP not sure.

Goalposts, moving, etc...

The OP is about systems development, where the test data is anonymised....

[BenMcr]

Originally Posted by mertle

I wonder if this actually breaches Data Protection Act.

If it did, that means any company that have offshore centres (no matter where they are) would be breaching it

But I doubt very much that is the case

[Peter_]

Originally Posted by mertle

I wonder if this actually breaches Data Protection Act.



What I seeing this likely breaches but cant remember specifics of the Act.

I seriously think that you should read the Data Protection Act as it is quite specific on this point and you have posted pap rather than taken the time to read it.


http://www.gss.co.uk/consultancy/dpa.gss

We are compliant with the Act but we outsource processing of our data to 3rd parties. What about them?

Whilst your data processing maybe outsourced, your responsibility to ensure that the data is handled in accordance with the requirements of the Act is not. Your organisation must take measures to ensure that any third party with whom your organisation shares data with is compliant with the Act.