Parliamentary Search

Written question asked by Lord Clement-Jones (Liberal Democrat) on Monday, 11 December 2023, in the House of Lords. It was due for an answer on Wednesday, 27 December 2023. It was answered by Lord Sharpe of Epsom (Conservative) on Wednesday, 20 December 2023 on behalf of the Home Office.

Home Office: Amazon Web Services

Question

To ask His Majesty's Government whether the contract between Amazon Web Services and the Home Office, agreed on 30 November, includes the guarantees, references or legally required elements for a processing contract under section 59(5) of the Data Protection Act 2018, or the requirements of the statutory code of practice for police vetting to permit lawful processing of law enforcement personal data; if so, what form they take; and whether law enforcement personal data are excluded from the contract if such safeguard provisions are not required.

Answer

The supplier has no access to any of the data hosted in the AWS cloud. Certain Policing services are hosted in this environment which are assured and approved for this use. The extent of the processing of personal data covered in the contract is the provision of storage.

The nature of the data stored is entirely under the control of the Home Office and, due to the security controls in place, AWS has no knowledge of what is stored, nor is it provided with instructions on the nature of the processing. By design, the contract does not contain details that would that are not necessary to disclose to AWS for it to be bound by a contract that provides the necessary protections to personal data. The Information Commissioner’s Office is aware of this approach. AWS has no access to any personal data under the controllership of policing or the Home Office.

Secondary information

Type
Written question
Reference
HL1049
Session
2023-24
Subjects
Contracts Data protection Data processing Home Office Amazon Web Services
Link
View this Written question on www.parliament.uk