Data Handling Procedures in Government: Interim Progress Report
David Hansen
ukcrypto at chiark.greenend.org.uk
Sat, 19 Jan 2008 11:36:57 -0000
On 18 Jan 2008 at 21:11, Peter Tomlinson wrote:
> > _http://www.cabinetoffice.gov.uk/reports/data_handling.aspx_
> I'm not convinced.
Agreed. It looks like the usual smug waffle to me. However, thanks to
David for drawing it to our attention.
As with the Home Office I wonder if those who wrote the slogan on the
first page managed to keep a straight face while composing it.
Paragraph 35 talks of "activity", while I am more interested in
results.
Paragraph 37 asserts that, "To deliver public services effectively and
efficiently, information needs to be shared between different parts of
Government.", yet fails to offer any evidence to back up this
assertion.
Paragraph 38 asserts that, "Government has always regarded personal
data of citizens as a critical asset akin to the most sensitive
financial and other information handled within Departments.", which is
obviously nonsense as we can see from the mass media.
If I believed Paragraph 42, "As a first step, Government should commit
to enhanced transparency with Parliament and the public about action to
safeguard information and the results of that action.", it would be a
step forward. However, they will undoubtedly continue with the same
smug waffle as they always do. An "assurance" in a report will not
reassure anyone with the remotest clue, though such an "assurance" may
allow officials and party politicians toclaim that they have "done
something" while in reality they have only caused activity rather than
results.
Paragraph 45 starts off well, "Similarly, the Government should commit
in principle to the introduction of new sanctions under the Data
Protection Act for the most serious breaches of its principles."
However, the authors immediately negate that sentence with the
following, "Such proposals will have to take account of the need not
only to provide high levels of data security, but also ensure that
sensible data sharing practices can be conducted in an environment of
legal certainty."
Paragraph 46 uses many words to say very little.
> [I] doubt that things will get much better until the ICO has
> both the teeth and the resources to police this area.
I'm not convinced. The current bod shows little desire to police
information properly and many of his staff appear entirely
disinterested. Any revolution in this regard would probably need to
include taking the lot of them out and lining them upagainst a wall, to
encourage their replacements to be rather more dilligent.
> The really annoying thing is that I'm convinced that the intention at
> the top is for service delivery to be done properly.
I have a simple approach when evaluating the claims of those at "the
top".
Things occasionally go wrong, but if things consistently go wrong then
I become increasingly disbelieving about the assertions of those at
"the top" and wonder what they really want to happen.
--
David Hansen, Edinburgh
I will *always* explain revoked encryption keys, unless RIP prevents
me
http://www.opsi.gov.uk/acts/acts2000/00023--e.htm#54