§ The Earl of Northeskasked Her Majesty's Government:
Given the coming into force of the Regulation of Investigatory Powers (Communications Data) Order 2003 on 5 January, what steps are being taken to ensure that private companies which act as intermediaries in the processing of data requests are fully conversant and compliant with the legal requirements of the Data Protection and Regulation of Investigatory Powers Acts. [HL941]
§ Baroness Scotland of AsthalTo the extent that any private company which, in offering a service to communications service providers and public authorities engaged in the disclosure and acquisition of communications data, processes personal data, that company should do so in compliance with the Data Protection Act 1998. The extent of any compliance with legislation, including the Regulation of Investigatory Powers Act, will depend on the business model adopted by the company.
89WA
§ The Earl of Northeskasked Her Majesty's Government:
Given the coming into force of the Regulation of Investigatory Powers (Communications Data) Order 2003 on 5 January, whether training of individuals as "single points of contact", is sufficiently advanced to ensure that the regime can operate satisfactorily [HL942]
§ Baroness Scotland of AsthalThe coming into force of the order has, for the first time, imposed regulation specifically on public authorities' acquisition of communications data. The police service, Her Majesty's Customs and the intelligence agencies undertake around 95 per cent of all communications data acquisition by public authorities. Training of their "single points of contact" is well established. Delivery of training to "single points of contact" in additional public authorities is underway. The Government believe it was important to put regulations in place and, over the next six to nine months, move away from untrained and unregulated officials dealing with communications data disclosures to trained ones working within a regulatory framework.
§ The Earl of Northeskasked Her Majesty's Government:
Given the coming into force of the Regulation of Investigatory Powers (Communications Data) Order 2003 on 5 January, what plans they have to ensure that training programmes for "single points of contact'" offered by private companies are fully compliant with the RIPA regime. [HL943]
§ Baroness Scotland of AsthalPrivate companies offering training are consulting with the Home Office in producing their syllabuses. Officials responsible for the development and implementation of Part I Chapter II of the Regulation of Investigatory Powers Act 2000 are participating in training events to review the training delivered and, together with police officers representing the Association of Chief Police Officers Communications Data Working Group, are previewing course materials. Training providers are90WA encouraged additionally to secure accreditation of their courses from academic and industry bodies.