§ Mr. Cohenasked the Chancellor of the Exchequer what arrangements operate for the logging of those who have access to (a) computer and (b) manual files kept by his Department on individuals; and if he will describe the procedures in operation for both categories.
§ Mr. BrookeSpecific guidelines on security of automatically processed data in Government Departments are observed. They are contained in "Protection of Information in Computer Systems" and "Central Government Code of Practice No. 21", issued by the Central Computer and Telecommunications Agency, which give recommended procedures to safeguard data in computer installations. Copies of these guidelines have been placed in the Library of the House.
Manual records are maintained in a number of areas in the Treasury. Access to records of individuals employed in the Department is restricted to the head of the Department and to the staff within the establishments and organisation group and personnel sections in locations.
The superannuation division of the Treasury makes pension awards to civil servants employed in a number of Departments. The manual records maintained by the division may only be accessed by the head of the pension awarding section and his staff.
Manual files containing pay and related information for employees of some 65 Government Departments are held at Chessington computer centre. Access to the files is limited to staff in the pay office directly concerned with the accounts. Where exceptionally other authorised people need access, eg Audit, movement of the file is recorded. Manual files despatched from the Centre are directed only to known authorised individuals in customer departments.