WRITTEN ON September 1st, 2009 BY William Heath AND STORED IN Data nitwittery, Foundation of Trust, Identity, Transformational Government, What do we want?

This in from Scotland

Public sector organisations should avoid creating large centralised databases of personal information and keep clear audit trails of how identity data is used, under new proposals published today.

Leads into their consultation on privacy (see below).

The draft privacy principles are worth repeating:

# Proving identity or entitlement: people should only be asked for identity when necessary and they should be asked for as little information as possible
# Governance and accountability: private and voluntary sectors which deliver public services should be contractually bound to adhere to the principles
# Risk management: Privacy Impact Assessments should be carried out to ensure new initiatives identify and address privacy issues
# Data and data sharing: Organisations should avoid creating large centralised databases of personal information and store personal and transactional data separately
# Education and engagement: Public bodies must explain why information is needed and where and why it is shared

Why is it the Scots in Edinburgh understand this, but the Scots who run Whitehall resist it so strongly?

Comments are closed.