Issue - meetings

Data Protection Audit By the Information Commissioner's Office

Meeting: 12/09/2013 - Corporate Resources Overview & Scrutiny Committee (Item 31)

31 Data Protection Audit By The Information Commissioner's Office pdf icon PDF 28 KB

Additional documents:

Decision:

That the report and results of the Information Commissioner’s Office audit and the action plan to implement the recommendations made be noted.         

 

Minutes:

The Democracy & Governance Manager introduced a report to inform the Committee of the audit undertaken by the Information Commissioner’s Office (ICO) on Data Protection Compliance. 

 

He explained that the audit had been carried out in April 2013 and a report was received from the ICO in June 2013 with 38 recommendations of which 22 had been accepted, 14 partially accepted and two not accepted.  At the time of preparing the report, 11 recommendations had been implemented with a further four being implemented since.  The follow up process by the ICO will be based on an update from the Council of the agreed action plan signed off at Corporate Management Team level and this was to be submitted to the ICO by 17 January 2014. 

 

            Councillor Ian Dunbar queried whether the Committee could comment on the recommendations that had been proposed by ICO and amend if necessary.  The Democracy & Governance Manager said that the recommendations could not be amended as the timescale had been short and 36 of the 38 recommendations proposed had been agreed by the Council.  It was felt that the two which had not been accepted could be achieved in a different way to that suggested by the ICO.  A summary of the report was available on the ICO website. 

 

RESOLVED:

 

That the report and results of the Information Commissioner’s Office audit and the action plan to implement the recommendations made be noted.