Issue - meetings

(i)       to instruct the Chief Officer – Data and Insights to circulate information to members providing examples of lessons learnt data in relation to data protection breaches; and

(ii)      to otherwise note the information provided about the Council’s information governance performance set out in sections 3.1 to 3.5 and in the Information Governance report at Appendix 1.

The Committee had before it a report by the Executive Director of Corporate Services which presented the annual report on the Council’s Information Governance Performance, including information about the changes implemented through the Council’s information assurance improvement plan.

The report recommended:-

that the Committee note the information provided about the Council’s information governance performance set out in sections 3.1 to 3.5 and in the Information Governance report at Appendix 1.

In response to a question relating to the number of care experienced Subject Access Requests and whether these would reduce, the Customer Services Manager advised that the numbers of requests were likely to continue for the next year.

In response to a question relating to who would notify the Information Commissioner’s Office (ICO) if there were any data protection breaches, the Chief Officer - Data Insights advised that the Data Protection Officer would work with the Service to risk assess the situation and would make the final decision and report to the ICO.

The Committee resolved:-

(i)       to instruct the Chief Officer – Data and Insights to circulate information to members providing examples of lessons learnt data in relation to data protection breaches; and

(ii)      to otherwise approve the recommendation contained in the report.