§ John RobertsonTo ask the Secretary of State for Trade and Industry what assessment her Department has made of the data protection implications of the offshoring of the processing of financial details. [159125]
§ Ms HewittUnder the Data Protection Act, companies who control data remain responsible for how data are processed overseas on their behalf. They remain bound by the requirements of the Act, in particular its requirement for data to be kept secure. The method of transfer must include measures to ensure the security of the processing and security against breaches of the Act. Companies must also be open with individuals about how information they collect on them is intended to be used.