INFORMATION, GOVERNANCE AND SECURITY Data Sharing capabilities and process

2 Information, Governance and Security Directorate Introduction  Technical Data Matching  Security Activities including ISSS accreditation  Scans and counts  Identification of vulnerable people to help the Government’s cross government welfare reforms

3 Security Activities  Ensuring data is secure  Security standards  Data Controller/Data Processor responsibility  Media Handling and Security  Security accreditation Information, Governance and Security Directorate

4 Information Assets IGS’s data Warehouse is one of the largest in Europe As at April 2011 Departmental and non-Departmental datasets include: State Pension; England, Scotland & Wales Prisoner Data; Disability Living Allowance; HMRC savings and earnings data; Carers Allowance, Royal Mail Address list; Child Benefit; NHS Prescriptions; Customer Information System; Student Loan Applications; Employment & Support Allowance; Employer Payroll data; Housing Benefit; Tax Credits; Industrial Injuries (Customer); Council Tax Benefit; Income Support; Job Seekers Allowance; Overseas Benefits; Pension Credit; Housing Benefit; plus numerous others. Information, Governance and Security Directorate

5 Data Matching Experience DWP  18 years of data matching  4.3 million inconsistency matches  circa £250M of weekly savings 2009/2010  £0.5BN future over payments prevented Information, Governance and Security Directorate

6

7 Data Matching Experience BBC – Digital Switch Over Scheme As a direct result of Information Delivery data-matching to identify potential recipients of assistance for the Digital Switchover Scheme, the significant milestone of in excess of 1,000,000 installations has now been reached. Work continues to supply data for the remaining 4 regions, working towards a projected finish of Dental Practice Board On behalf of the DPB we check an average of 40, 000 records fortnightly which results in the identification of approximately 6K incorrect claims, from persons incorrectly stating they were in receipt of a qualifying benefit to get a free prescription. Information, Governance and Security Directorate

8 Data Matching Experience Winter Fuels (Annual one off payment to people over 60) Our support to The Pensions Service meant that more than 11 million customers received a Winter Fuel payment, 2010/11 total benefit to customers was in the region of £2.7 billion. Cold Weather Payments In 2010/11 we received 374 triggers (payment requests) identifying eligible customers in postcode regions for a Cold Weather payment. This helped JobcentrePlus make £298 million of payments to eligible customers. Information, Governance and Security Directorate

9 Data Matching Experience Electoral Reform IGS are to be a foundational data validation function for the new Individual Electoral Registration Programme being lead by the Cabinet Office, due to go live in Information, Governance and Security Directorate

10 Troubled Families. Why Do this??  Government is spending approximately £9 billion per year on troubled families  £8 billion of this is spent purely reacting to the needs of, and problems caused by, these troubled families  Only approximately £1billion per year is spent on targeted interventions Information, Governance and Security Directorate

11 What will success look like for the Programme  Reduction in crime and anti-social behaviour  Children back in school  Parents back in work or progress to work  Big cuts in costs for the state Information, Security and Governance Directorate

12 How will DWP data sharing help?  The first part of the programme is the identification process  This will be led by local authorities who have been given an indicative number of troubled families  The identification process has four stages:- Information, Governance and Security Directorate

13 How will the identification process work? Information, Governance and Security Directorate Stage 1 LAs identify families committing high levels of anti- social behaviour and/or crime Stage 2 LAs identify families with children who are not attending school Stage 3 DWP checks the list of families for adults on out of work benefits Stage 4 LAs apply a local intelligenc e filter to determine their families

14 The new DWP data sharing power Following a plea from councils DCLG reached a groundbreaking agreement with the Department for Work and Pensions which, while strictly protecting confidentiality, allows DWP to share data with local councils in order to identify their troubled families. DWP Ministers agreed to create a new legal gateway under the regulations of the Welfare Reform Act Clause 132 of the Bill will permit any form of data sharing provided that the requirements of the Data Protection Act have been considered Information, Governance and Security Directorate

15 The new DWP data sharing power As the Troubled Families programme's funding starts in April, the DWP has agreed an interim measure to enable data sharing prior to the new regulations coming into force. For this period, DWP will use section 72 of the Welfare Reform and Pensions Act DWP will conduct an informal consultation with the ICO and the LGA. Information, Governance and Security Directorate

16 Data Protection Act ­8 Principles Most important for this programme;- ­Legal basis ­Proportionality test, what is the minimum information that can be shared to achieve a purpose or outcome ­Data storage, retention and destruction policy ­Authorised access for specific agreed functions Information, Governance and Security Directorate

17 Data Handling Protocol (DHP)  All new data shares need to be tested against the DHP.  Internal form to guide proposer through the process – DHP 001  Proposer (sponsor) within DWP is the responsible person to complete the form and gaining appropriate risk assessments Information, Governance and Security Directorate

18 How the Data Handling Protocol works Proposer consults local data sharing champion for advice Proposer follows the Data Handling Protocol guidance on the intranet and completes the filter questions on form DHP001 Proposer sends a copy of form DHP001 to the relevant expert domain as indicated on the DHP002. Legal Group inc PIA Legal Group inc PIA Data Share/ IGS Access Data Share/ IGS Access Departmental Security Programme Security (SARA) Business Security Expert Domains consider proposal, engage with proposer and gives advice on any outstanding risk or assurances required. Proposer collates evidence on DHP002 Proposer sends DHP002 to SRO SRO Responds to authorise data share (or not) Copy of SRO approved DHP002… Retained for audit purposes Sent to DWP DSAM IMD Proposer identifies a policy sponsor and SRO for the project (NB: sponsor and SRO can sometimes be the same person). Information, Governance and Security Directorate