Tories claim HMRC kept bank data on lost discs to save money

'Desensitising' data would have incurred EDS charge, says shadow chancellor

HM Revenue and Customs failed to “desensitise” the data on 25 million people that it lost in transit to the National Audit Office because removing bank details and other sensitive information would have required an extra payment to data management contractor EDS, the Conservative Party has claimed.

Prime minister Gordon Brown and his chancellor, Alistair Darling, have been under fire over the scale of HMRC’s data loss. Records of 25 million child benefit claimants and their children – including bank details and other confidential information – were on two computer disks lost in transit to the National Audit Office, the government's financial watchdog.

The government has blamed an unnamed junior official for sending the data out insecurely, in breach of HMRC’s procedures.

But the Conservatives claim a briefing paper by Sir John Bourn, the head of the NAO, says senior HMRC officials allowed sensitive data to be given to the NAO. The briefing document was sent to the chancellor and also provided to Edward Leigh, the Conservative MP who chairs the Commons Public Accounts Committee.

In the Commons yesterday, Leigh told MPs that Sir John Bourn, the NAO’s comptroller and auditor general, had requested only National Insurance numbers relating to child benefit claims. “It is clear that the [auditor general] specifically asked that all personal details, bank account details and all that sort of information should be removed before this was sent. That is the most important thing,” he said.

The Conservatives claim the briefing document confirms that a senior business manager at HMRC emailed the audit body in March to say the data would not be stripped down before being dispatched to the NAO.

Sir John Bourn’s briefing adds that the reason given in the email – which was copied to an HMRC official at assistant director level - was that desensitising the data would require an extra payment to EDS as it fell outside the scope of EDS’s data management contract.

Shadow chancellor George Osborne said: “These startling revelations from the NAO call into question the entire defence mounted by the prime minister of this catastrophic failure in his government. This was systemic failure not individual error by a junior official.”

Registration is free, and gives you full access to our extensive white paper library, case studies & analysis, downloads & speciality areas, and more.

He added “Gordon Brown needs to tell us the whole truth of why the security of all families in the country has been put at risk."

An NAO spokesperson confirmed that the audit body only requested NI numbers, child benefit numbers and children’s names in order to select a risk-based sample of cases to audit as part of anti-fraud work.

“We did not want bank account details, parents’ details or addresses,” he said.

The spokesperson would not confirm the contents of the briefing.



Email Updates

CIO Newsletters: Expert insight, advice and tools for technology, business, leadership and the CIO career.


Email this article to a friend or colleague:


PLEASE NOTE: Your name is used only to let the recipient know who sent the story, and in case of transmission error. Both your name and the recipient's name and address will not be used for any other purpose.


CIO White Papers

Legal risks of uncontrolled email and web use

Exploring the challenges facing IT Mangers today and vital steps to ensure safe internet an email use by employees.

The challenge of strategic alignment

Recent research also shows that many organisations give too much prominence to internally generated KPIs – controlling the controllable – rather than looking outwards at threats and opportunities on the horizon which can ultimately be far more influential on performance.

Six essential steps to successful IT centralisation

This report, based on the real experience of a recent centralisation project, is aimed at those involved in IT strategy within their organisation. It provides some practical insights for CIOs, CTOs, Heads of IT, IT Directors and those involved more closely with the service management function.

Managing email: Exploring common email management challenges (and how to overcome them)

We surveyed 157 IT professionals to understand the difficulties and opportunities faced by email managers. From this we were able to highlight some easy-to-manange solutions to their most pressing problems.


CIO UK - Business - Technology - Leadership

Differentiate your company with complete CRM

Focused on productivity and empowerment and leveraging the natural rhythms people work
What defines Complete CRM? How businesses can better engage customers and users, manage customer transactions, and analyse results to adapt and take advantage of changing business and economic circumstances.

DOWNLOAD

Oracle White Paper

IT Misuse Survey

Complete this survey and you could win a Nexus One.

CIO are running a short survey to discover how UK businesses are managing internet and email misuse in the Enterprise.

COMPLETE SURVEY

Virtualisation - The 'black hole' of security?

Covering the set of issues, ideas and perceptions discussed during a recently held debate about the effect of virtualisation techniques on organisational security. This paper provides a comprehensive account of all the subject matters debated and concludes with key takeaways and IDC recommended actions.

DOWNLOAD

Trend Micro



* *