“Skills gaps will challenge ability to handle FoI requests in the public sector” suggests Iron Mountain study
According to a study conducted by Iron Mountain, organisations in the public sector are struggling to balance demands for transparency with the need to protect data. While an overwhelming 96% of public sector bodies claim to be prepared for all Freedom of Information (FoI) requests, and 88% state that their responses fully comply with data protection laws, one third (or 35%) of respondents admit that skills gaps are putting this situation at risk.
To conduct its market research, Iron Mountain spoke to senior executives1 responsible for information management and digital transformation in a wide range of public sector bodies. The research uncovered “a landscape of contradiction” as organisations insist they can cope with FoI requests, but are at times compromising sensitive and confidential records as a result.
Examples of such behaviour include a council sending out the names and National Insurance numbers of 1,800 benefit claimants in response to an FoI request about housing and an ambulance service revealing the religious beliefs of its 2,800 staff in response to an unrelated request from a local radio station.
The Iron Mountain study also found other areas that could reduce an organisation’s ability to respond effectively and securely to FoI requests. In 61% of those organisations questioned, documents are regularly lost internally or misfiled, while the closure or relocation of public sector offices has compromised the accessibility of important information for half (51%, in fact) of those surveyed.
“The trials of transparency are proving a real, if somewhat unacknowledged challenge for professionals operating within the public sector,” asserted Phil Greenwood, director at Iron Mountain. “The number and nature of related data breach incidents speak for themselves. Freedom of Information is an important and worthwhile right, and one that open democracies can be justifiably proud of. We just need to make sure that responses are handled with care, accountability and responsibility so that individual data protection rights are not compromised.”
Greenwood added: “Among other things, this requires professional information management and support, skills training and effective policies and guidelines. The ICO issued its advice a year ago, and yet the incidents are still happening. It’s high time we all worked together to render such occurrences a thing of the past.”
1Information Management in the UK Public Sector (Colman Parkes for Iron Mountain). The study questioned 150 senior information management, transformation, IT, procurement and record management executives in central Government departments, executive agencies, non-departmental Government bodies and arms-length bodies