Integration of roles? Implementing new information laws in UK public organizations
In April 2002, a government report Privacy and data-sharing recommended that public organizations appoint Chief Knowledge Officers to integrate information-handling issues into decision-making processes. In the space of five years, a role that had previously been ascribed to clerical-level Data Protection Officers has changed out of all recognition. Significant legislation has been enacted including: a revised Data Protection Act 1998; the Human Rights Act 1998; the Freedom of Information Act 2000; and statutes concerning the interception and retention of communications data. Consequently, public sector organizations - such as local authorities, universities, health authorities and the police - have had to re-evaluate information-handling procedures, together with the roles and responsibilities of those employed in such posts. This article examines the steps public organizations are taking to meet such challenges. Results of studies using a questionnaire survey of public organizations, interviews with experts and 18 case studies are provided. In addition to increases in status of post holders, key observations include improved procedures for handling data subject access requests, enhanced staff training, and informing the public how their personal information is processed. The article concludes with recommendations for improved information-handling.
privacy data-sharing data protection public sector information specialists research