---

Correction to Written Answers

Subsequent to written answers I gave on 29 January, 11 March and 2 April 2008, to parliamentary questions on data-handling, I would like to inform the House that further investigation has revealed additional information. The response to the Hon. Member for Chipping Barnet (Mrs. Villiers) (Question 175768), [ 29 January 2008, Official Report, column 197W], should have included reference to three further instances of data being accessible overseas: First, the Vehicle Operator Services Agency has an IT contract with Siemens covering the computerisation of the MOT scheme. The Siemens data centre is based in the UK and all operational data are stored in the UK. However, some of the data were processed by Siemens staff in India on a controlled basis for the purpose of correcting and updating software code. The data were not transferred to a physical storage device outside of the UK, and the data could not be saved, amended or copied to any device in India. The information that was potentially viewable on this basis was as follows:"information relating to the construction/specification and the registration mark of all vehicles in Great Britain that are subject to the MOT scheme. This does not include""any details in relation to the registered keeper of the vehicle;""details of 65,500 nominated testers under the MOT scheme comprising individual's name, home address, date of birth, telephone number and driving licence number; and""details of 16,500 individuals authorised examiners under the MOT scheme comprising individual's name, business address, business telephone and fax number." Siemens were instructed to revoke all access to operational data from India in relation to the MOT computerisation system on 12 June 2008. Separately, the central Department has a contract with Siemens for a public enquiry service that uses a system provided under contract by RightNow Technologies. That company back up the information transporting the data electronically via an encrypted channel to their Disaster Recovery Centre in Chicago where it is held in an unencrypted form in a physically secure environment. A further unencrypted tape backup is maintained by Iron Mountain in a vault in New Jersey. The information includes business contact details of DfT staff, and details of calls and callers' names and telephone numbers for queries that have been referred to the DfT internal team for answer. Finally the central Department uses an online survey site hosted by SurveyMonkey.com., a US company whose site is hosted in the United States. This facility has been used by the Department to conduct surveys including staff surveys. Personal information relating to DfT staff included name, workplace address, qualifications and employment experience. It was also used by VOSA to get feedback on staff events such as their annual conference. The response to Question 179889 from the hon. Member for Pendle (Mr. Prentice),[11 March 2008, Official Report, columns 211-13W] should have included: In addition to Fujitsu Database Administrators, IBM Database Administrators also have direct access to the Driver and Vehicle Licensing Agency's (DVLA) registers. Finally, in response to Question 197148 from the hon. Member for Carmathen East & Dinefwr (Adam Price), [2 April 2008, Official Report, columns 1010-11W] the following should have been included: The central Department uses an online survey site hosted by SurveyMonlcey.com., a US registered company whose site is hosted in the United States. This facility has been used by the Department to conduct surveys including staff surveys. Personal information relating to DfT staff included name, workplace address, qualifications and employment experience. It was also used by VOSA to get feedback on staff events such as their annual conference.