Data Protection.

Dáil Éireann Debate, Tuesday - 30 September 2008

Tuesday, 30 September 2008

Questions (404, 405)

Ruairí Quinn

Question:

516 Deputy Ruairí Quinn asked the Minister for Communications, Energy and Natural Resources the policies in place to secure portable electronic data devices in his Department; if those policies have been published; if so, the locations where they can be viewed; if a system of whole disk encryption has been rolled out to all laptops in his Department; the date by which he expects a satisfactory security policy on portable electronic data devices to have been implemented; and if he will make a statement on the matter. [32399/08]

Written answers

Minister for Communications, Energy and Natural Resources (Deputy Eamon Ryan)

My Department does not provide services to the public that would require processing or storage of sensitive personal information. Therefore the level of safeguards set for portable electronic and laptop devices has historically been considered appropriate for the type of user and the sensitivity of the information that might be contained on them. Accordingly, my Department does not have a formal policy in place to secure all types of portable electronic devices nor does it have a programme in place to carry out full disk encryption of laptop computers. The desirability of additional safeguards will however be considered as part of the annual ICT security review, which is due shortly.

Ruairí Quinn

Question:

517 Deputy Ruairí Quinn asked the Minister for Communications, Energy and Natural Resources the number of Department-owned computer desktops or laptops or other data devices, such as blackberries and memory keys, reported lost, missing or stolen from his Department to date in 2008; the number of same later recovered or found; the number still missing; if sensitive or private data was compromised; and if he will make a statement on the matter. [32414/08]

Minister for Communications, Energy and Natural Resources (Deputy Eamon Ryan)

There have been no reported losses of desktop PCs or memory keys in my Department to date in 2008. There have been two Blackberry devices lost, neither of which was recovered or found. There have been no reports that any sensitive data has been compromised by these losses. The level of personal information relating to members of the public processed within my Department is very small. The level of safeguards set for these devices has historically been considered appropriate for the type of user and the sensitivity of the information that might be contained on them. The desirability of additional safeguards will be considered as part of the annual ICT security review.