Data Protection

Dáil Éireann Debate, Tuesday - 22 September 2015

Tuesday, 22 September 2015

Questions (396)

Michael Lowry

Question:

396. Deputy Michael Lowry asked the Minister for Public Expenditure and Reform if all waste management service providers who were appointed to the framework for confidential shredding through the request for tenders to establish a multi-supplier framework for the provision of Waste Management Service Tender Document 16/01/2014 met all requirements outlined in the tender document; if he will confirm that all vendors who operate under Lot 6 of the tender process comply with section 1.8 Quality of the Confidential Material Shredding Proposal (details supplied); if he will confirm that all vendors and contractors comply fully with the Data Protection Acts 1988 and 2003 which insure codes of conduct issued by the Data Protection Commissioner are legally adhered to, inclusive of only registered data processors being legally allowed to process personal data for registered data controllers; if he will confirm that the three appointed framework members for confidential shredding have on-site capability to destroy sensitive data to shred No. 6 of EN 15713 which has Irish precedent; and if he will make a statement on the matter. [30647/15]

Written answers

Minister for Public Expenditure and Reform

The Office of Government Procurement notes that  pursuant to section 1.8 of the Request for Tenders, tenderers were required to "demonstrate their methodologies for handling confidential waste, including the pre and post shredding processes, collection and storage of confidential waste, confirmation of destruction. Tenderers were also requested to provide details of their proposals for providing full audit trails for these processes."

The Office of Government Procurement wishes to confirm that the service providers appointed to the OGP framework agreement for the provision of waste management services met all requirements outlined in the Request for Tenders and in relation to Lot 6, demonstrated their methodologies for handling confidential waste, including the pre and post shredding processes, collection and storage of confidential waste, confirmation of destruction in accordance with section 1.8 Quality of the Confidential Material Shredding Proposal.

The Data Protection Commissioner has confirmed that there is no requirement for Shredding Companies to register with their office.

The OGP framework agreement for waste management services operates on a mini-competition basis as and when individual contracting authorities require confidential material shredding services, the precise levels/standards of shred will be specified and whether shredding onsite is required and the successful service provider will be required to comply with these requirements.

Furthermore, the Office of Government Procurement's Request for Tender as issued on 16 January, 2014 was not prescriptive in relation to shred levels or whether shredding onsite is required, rather the Office of Government Procurement's Request for Tender document acknowledged the levels of shred available, but not those required under the specific mini-competitions.