Your data, safe in Tory hands
The last six months or so have been marked by the constant drip of criticism from the Tories that following Governmental departments having lost various pieces of people’s personal information that this leads directly to the ‘Labour can’t be trusted with your data’ mantra.
How apt then that it should be that on the eve of polling for what’s probably one of the most hotly contested by-elections in years that the Tories should manage to e-mail off the personal data including names, addresses, telephone numbers, voting intentions and socio-economic groups of 8,575 key voters in Crewe and Nantwich to some foreign journalists.
Apart from the obvious breach of data protection legislation of taking such sensitive data outside of the internal political party structure it does beg the question why they would see fit to simply e-mail such information around in th first place? Were they using encrypted e-mails or was it some whipper snapper sitting in front of their Hotmail account?
There will of course be some very serious questions that need answering to the Information Commissioners office tomorrow morning of which I’d just like to add this extra one.
Although not all of the recipients have been named, one that has is the Isle of Man based Manx Radio. Now for those not disposed of the knowledge of the geo-political status of that little island between us and Ireland it has an almost unique status being a rather nice cushy little tax haven for certain individuals.
To achieve this status it has to lie outside of both the EU and the EEA.
Now for those who know their onions regarding data protection registration there are some important clauses (actually they’re called ‘prinicples’) in the registration that is filed with the Information Commissioners office.
We of course need the answer to a question first. Under who’s jurisdiction in terms of the data controller for the Tories is said data?
According to the Information Commissioner’s Office there is no registration for anything like a local Crewe and Nantwich Conservative Association and this being a by-election where national parties step into the breach we can only assume that the national Tory party is in charge and here’s their registration:
Registration Number: Z5909711
Date Registered: 23 November 2001 Registration Expires: 22 November 2008
Data Controller: THE CONSERVATIVE PARTY
Address:
CCHQ
25 VICTORIA STREET
LONDON
SW1H 0DL
While we’re at it, here’s the statement of purposes for the use of data under their control, long I know but the important bit is at the end of each statement of purpose:
Purpose 1
Staff Administration
Purpose Description:
Appointments or removals, pay, discipline, superannuation, work management or other personnel matters in relation to the staff of the data controller.
Data subjects are:
Staff including volunteers, agents, temporary and casual workers
CANDIDATES
Data classes are:
Personal Details
Family, Lifestyle and Social Circumstances
Education and Training Details
Employment Details
Financial Details
Racial or Ethnic Origin
Political Opinions
Trade Union Membership
Physical or Mental Health or Condition
Sources (S) and Disclosures (D)(1984 Act). Recipients (1998 Act):
Data subjects themselves
Current, past or prospective employers of the data subject
Suppliers, providers of goods or services
Employment and recruitment agencies
Transfers:
None outside the European Economic Area
Purpose 2
Advertising, Marketing & Public Relations
Purpose Description:
Advertising or marketing the business of the data controller, activity, goods or services and promoting public relations in connection with that business or activity, or those goods or services.
Data subjects are:
Staff including volunteers, agents, temporary and casual workers
Members or supporters
CANDIDATES
Data classes are:
Personal Details
Family, Lifestyle and Social Circumstances
Political Opinions
Sources (S) and Disclosures (D)(1984 Act). Recipients (1998 Act):
Data subjects themselves
Suppliers, providers of goods or services
Political organisations
Transfers:
None outside the European Economic Area
Purpose 3
Administration of Membership Records
Purpose Description:
The administration of membership records.
Data subjects are:
Staff including volunteers, agents, temporary and casual workers
Members or supporters
CANDIDATES
Data classes are:
Personal Details
Family, Lifestyle and Social Circumstances
Political Opinions
Sources (S) and Disclosures (D)(1984 Act). Recipients (1998 Act):
Data subjects themselves
Suppliers, providers of goods or services
Political organisations
Transfers:
None outside the European Economic Area
Purpose 4
Canvassing Political Support Amongst the Electorate
Purpose Description:
The seeking and maintenance of support amongst the electorate by the data controller.
Data subjects are:
Staff including volunteers, agents, temporary and casual workers
Members or supporters
Complainants, correspondents and enquirers
Relatives, guardians and associates of the data subject
CANDIDATES
Data classes are:
Personal Details
Family, Lifestyle and Social Circumstances
Political Opinions
Sources (S) and Disclosures (D)(1984 Act). Recipients (1998 Act):
Data subjects themselves
Suppliers, providers of goods or services
Political organisations
Transfers:
None outside the European Economic Area
Purpose 5
Consultancy and Advisory Services
Purpose Description:
Giving advice or rendering professional services.The provision of services of an advisory, consultancy or intermediary nature.
Data Controllers further description of Purpose:
ADVICE TO INDIVIDUALS WHO MAY APPROACH CONSERVATIVE ASSOCIATIONS
Data subjects are:
Members or supporters
Complainants, correspondents and enquirers
Data classes are:
Personal Details
Family, Lifestyle and Social Circumstances
Political Opinions
Sources (S) and Disclosures (D)(1984 Act). Recipients (1998 Act):
Data subjects themselves
Suppliers, providers of goods or services
Transfers:
None outside the European Economic Area
Purpose 6
Fundraising
Purpose Description:
Fundraising in support of the objectives of the data controller.
Data subjects are:
Staff including volunteers, agents, temporary and casual workers
Members or supporters
Data classes are:
Personal Details
Family, Lifestyle and Social Circumstances
Political Opinions
Sources (S) and Disclosures (D)(1984 Act). Recipients (1998 Act):
Data subjects themselves
Suppliers, providers of goods or services
Political organisations
Transfers:
None outside the European Economic Area
Yes, that’s right. ‘None outside the EEA’ which is rather a bugger when you send your data to someone in the Isle of Man isn’t it?
I think a nice little e-mail to the Information Commissioner’s Office is in order. Just being helpful like…
admin on May 22nd 2008 in Tory Bashing

