Agenda item

Ian Gibbons presented the report which provided an update on the improvement programme which had been developed to address the findings identified by the voluntary audit undertaken by the Information Commissioner’s Office (ICO) in March 2015 on the Council’s information governance arrangements in the areas of records management, subject access requests and data sharing.

Issues highlighted in the course of the presentation and discussion included:

·       That the report to the Audit Committee built on the information already considered as part of the Annual Governance Statement;

·       That the matter is being considered seriously as it cuts across all areas of the council’s business;

·       How any serious breaches of data protection are identified and dealt with;

·       That some areas of good practice identified, but that there is scope for improvement;

·       The areas identified in the report for action included the establishment of Information Governance Board, chaired by a Corporate Director, that will implement actions arising from the ICO’s report and had a wider remit to continue to improve the area of Information Governance;

·       The need to enact cultural change to ensure individuals take responsibility for ensuring good information governance;

·       That improvements have already been made, including in the area of record management;

·       That a review of the suite of policies on information governance would be undertaken, in accordance with a good practice framework;

·       That a comprehensive training programme will ensure all staff are trained appropriately;

·       That the Information Governance team is being restructured and will now sit within the Corporate Service, bringing together the key officers and improving management’s overview of the issue;

·       How having clear accountability for Information Governance will be addressed and how information asset owners are identified;

·       That inviting the ICO in had shown that Council takes the area seriously; and

·       That Cllr Stuart Wheeler was the Cabinet Member responsible for this area.

Ian Gibbons stated, in response to an issue raised by Cllr David Pollitt, that training would involve key Councillors and that all members would be included, as appropriate, in further training; and that the ICO would review the progress made by the Council but would only return to visit if they felt there were concerns.

Ian Gibbons stated, in response to an issue raised by Cllr Stewart Dobson, that £50,000 had been identified, as a discrete cost, to resource the implementation of the programme arising from the review; and that further work, including the restructure of the Information Governance team, should be managed within existing budgets.

Ian Gibbons stated, in response to an issue raised by Cllr Steve Oldrieve, that a risk management approach would be taken to enable the Council to prioritise actions.

Ian Gibbons stated, in response to an issue raised by the Vice-Chairman, that whilst the Council had already been in contact with the ICO around some issues, it was optional for the Council to invite the ICO in to do a full review.

Ian Gibbons stated, in response to an issue raised by Cllr Mike Hewitt, that whilst Council did give some informal advice to Parish and Town Councils, they were their own legal entities and thus responsible for their own information governance issues. Additionally, The Baroness Jane Scott stated that Parish and Town Councils should look to WALC and NALC for formal advice in this matter.

Resolved

1.     To note the outcome of the ICO’s audit;

2.     To note the progress of the improvement programme that has been set up to address the findings identified by the ICO; and

3.     To receive a further report at the meeting on the 26 January 2016.