Children’s Private Information: Data Protection Law Debate

Full Debate: Read Full Debate
Department: Department for Education

Children’s Private Information: Data Protection Law

Lord Harris of Haringey Excerpts
Monday 12th December 2022

(1 year, 11 months ago)

Lords Chamber
Read Full debate Read Hansard Text Watch Debate Read Debate Ministerial Extracts
Baroness Barran Portrait Baroness Barran (Con)
- View Speech - Hansard - - - Excerpts

I apologise; I am afraid that I will have to write to the noble Earl with the detail on that.

Lord Harris of Haringey Portrait Lord Harris of Haringey (Lab)
- View Speech - Hansard - -

My Lords, in her response to my noble friend, the Minister did not answer the key question. She told us the criteria that the department used for its use of data, but this was clearly the use of data to make money. Is that appropriate for a government department in respect of records that relate to children?

Baroness Barran Portrait Baroness Barran (Con)
- View Speech - Hansard - - - Excerpts

To be absolutely clear and for the avoidance of doubt, the department was not making money out of this. It was a previously legitimate user of the department’s data which changed its business model and breached its contract with the department to sell the data.

--- Later in debate ---
Baroness Barran Portrait Baroness Barran (Con)
- View Speech - Hansard - - - Excerpts

My understanding is that we relied on an existing advisory service at the time of the data breach and that those functions have now been brought in house. We have a dedicated data protection officer, who sets policy for the whole department.

Lord Harris of Haringey Portrait Lord Harris of Haringey (Lab)
- View Speech - Hansard - -

My Lords, can the noble Baroness expand on this third-party provider who changed their business model? How many contracts does that third party have with government in respect of other aspects of data?

Baroness Barran Portrait Baroness Barran (Con)
- View Speech - Hansard - - - Excerpts

My understanding is that that third-party provider is no longer trading.