Public Procurement: Data Offshoring

Lord Scriven Excerpts

Tuesday 8th October 2024 Lords Chamber

[Baroness Twycross (Lab)]

I think the security piece and the development piece can and should go in tandem, otherwise neither is sustainable. Three in every four people in England have already downloaded the app. This Government want to establish adoption through improved patient experience and system benefits, and to expand the services offer. This is part of making sure that more people can access the services they require.

[Lord Scriven (LD)]

My Lords, Microsoft gave a view to the Scottish Government in June this year that it could not guarantee that data held by public services on its Microsoft 365 and Azure hyperscale cloud infrastructure will remain in the UK. What mitigations are the Government looking at in the light of this statement by Microsoft?

[Baroness Twycross (Lab)]

I refer back to my initial Answer, which is that each contracting authority should carefully consider, and make risk-based decisions on, whether and where data can be offshored. We can get really hung up on offshoring, onshoring or where the data is stored, but we have to make sure that all data and cybersecurity are central to how we move forward with this type of procurement. This is why the Government are introducing a cybersecurity and resilience Bill, which will help ensure our cybersecurity for the future.