Data Protection.

Dáil Éireann Debate, Tuesday - 30 September 2008

Tuesday, 30 September 2008

Questions (202, 203)

Ruairí Quinn

Question:

308 Deputy Ruairí Quinn asked the Minister for Health and Children the policies in place to secure portable electronic data devices in her Department; if those policies have been published; if so, the locations where they can be viewed; if a system of whole disk encryption has been rolled out to all laptops in her Department; the date by which she expects a satisfactory security policy on portable electronic data devices to have been implemented; and if she will make a statement on the matter. [32407/08]

Written answers

Minister for Health and Children (Deputy Mary Harney)

My Department has developed a range of security policies and staff advisories in relation to the security of electronic information and in particular personal or sensitive data. Where appropriate these policies are on the Department's intranet. Encryption of existing laptops is nearing completion and all new laptops will be encrypted as a matter of course. The Department has also begun the implementation of USB security management software to ensure data are encrypted on USB and other portable devices. It will take several months to roll out this facility to all users. My Department is participating in the Working Group on the Protection of Personal Data set up by the Department of Finance and will be implementing recommendations from this group.

Ruairí Quinn

Question:

309 Deputy Ruairí Quinn asked the Minister for Health and Children the number of Department owned computer desktops or laptops or other data devices, such as blackberries and memory keys, reported lost, missing or stolen from her Department to date in 2008; the number of same later recovered or found; the number still missing; if sensitive or private data was compromised; and if she will make a statement on the matter. [32422/08]

Minister for Health and Children (Deputy Mary Harney)

To date in 2008 there has been one item of ICT equipment reported lost, missing or stolen. This relates to a Blackberry which was stolen from a member of staff. It has not been recovered. I understand the device was password protected and that no sensitive or private data were compromised with the loss of this equipment.