|
Mrs Tessa Stirling
Historical & Records Division
Cabinet Office
Hepburn House
Marsham Street
London SW1P 4HW
November 11, 2002
Dear Mrs Stirling,
Open government code: request for internal review
Thank you for your letter of July 12 enclosing details of many of the secondments to the Cabinet Office, and the letter sent to secondees in connection with my request. I am grateful for this response, which I recognise represents a move to a more open approach.
However, although you have released information about those secondees who have agreed to being identified, the names of several who have not consented has been withheld. I would like the decision to withhold these names to be reviewed under the open government code.
The decision has not been explained by reference to any code exemption, or any provision of the Data Protection Act:
- If the department is relying on the code's privacy exemption I question whether this disclosure would be "an unwarranted invasion of privacy" (exemption 12). In any event, this exemption is subject to the code's public interest test which I believe would justify disclosure in this case.
- If the department is relying on the Data Protection Act, it does not appear to have addressed the points set out in my letter of March 28 which (a) explained why we believe that disclosure without consent would not contravene the Act (b) enclosed a letter from the Information Commissioner supporting this view and (c) attached a letter from the Treasury also accepting this view, and explaining that they have decided to publish the names of their secondees, without consent because "it is legitimate to put this information into the public domain, without consent, in pursuit of a policy of openness, accountability and transparency".
- If you are relying on some other ground (such as the policy set out in the Cabinet Office's Civil Service Corporate Management and Reform unit's disclosure statement 1) I suggest that you are not entitled to do so under the code.
Under the Cabinet Office's present approach, secondees are allowed to dictate whether they can be identified. Their wishes are apparently respected regardless of any public interest in openness and regardless of whether there is any affect on their privacy.
The policy allows secondees to prevent their names being released (a) even if they have already been publicly identified as secondees, or (b) if the seconding organisation asks them do so for its own reasons, though they themselves may have no objection to being identified. The organisation might believe that by keeping a low profile it will avoid potentially embarrassing questions about a possible conflict of interest.
But it is precisely in such cases where the department most needs to be open. If a particular secondment is found to represent a possible conflict of interest, perhaps calling into question the integrity of the department's actions, it will be expected to account for itself. Code exemption 12 and DPA Schedule 2 would allow it to identify the secondee in these circumstances. Yet the department's own policy would prevent this happening, allowing the secondee to veto disclosure, even to Parliament. The public interest in accountability has been completely ignored.
The department's letter to secondees says that in future new secondees will be asked whether they consent to disclosure before they join the department "and their response will be included in their contract". I recognise that this is intended to facilitate disclosure, but what will happen if the secondee refuses consent? Will the department be contractually bound not to reveal that he or she is a secondee? That would be an grossly disproportionate restriction, given the negligible privacy interest involved.
The shortcomings of the approach are revealed by the fact that some staff have refused to be named despite being publicly identified as secondees already. For example:
- one of the KPMG secondees who has not agreed to be identified is named on the Cabinet Office's own web site.2
- a secondee from Wolverhampton City Council has withheld consent despite being identified as on secondment to the Office of the E-Envoy on several web sites.3, 4
This is a predictable outcome of a policy which gives the individual's preference absolute priority regardless of the circumstances.
The Data Protection Act
I believe secondees could be identified, regardless of their consent, without breaching the Data Protection Act and that this would in general be fair in DP terms and justified under both paragraph 5(c) and paragraph 6(1) of Schedule 2 of the Act.
(1) For this disclosure to be unfair secondees would have to have been led to believe that their identities as secondees would be concealed. There is no such suggestion in the Cabinet Office Interchange Good Practice Guide or the model contract used for secondees which it contains.5
Secondees are brought in to government because of the private sector perspective or expertise that they can bring to the department's work. Their external affiliations are no doubt routinely disclosed to civil service colleagues and others, since it explains why they are there at all. I cannot see how it would be unfair to the secondee to make this information more widely known, particularly as it does not relate to their personal or family lives. Published reports of the Performance and Innovation Unit, for example, list the names of secondees who have worked on them, suggesting secondees are likely to realise that they will be identified.
To comply with the fairness requirement, surely all that is required is to inform the individuals in advance of any disclosure and give them the opportunity to point to any specific prejudice to their interests that might result.6 So long as the department's final decision takes account of such representations, it would have acted fairly in DP terms.
(2) The disclosure would also have to be justified under Schedule 2 of the DPA. The schedule sets out 6 broad grounds under which disclosure might be justified - 5 of which do not require the individual's consent. As you know, the Treasury has accepted our view that disclosure is justified under paragraphs 5(c) and 6(1).
(3) Paragraph 5(c) permits disclosure where this is necessary for the exercise of a government department's functions. The Interchange Good Practice Guide makes clear that "Individuals attached to departments under the Interchange Initiative should ensure that in the course of their duty there is no conflict of interest that will cause embarrassment either to their organisation or to the department or agency. This is particularly important for secondments." There is clearly scope for conflict of interest where secondees hold positions that may give them an advantage in securing contracts for their employers, shaping government policy or influencing regulatory decisions affecting their organisations. I enclose an article from the Guardian of July 1 this year which raises concerns about the secondment programme. Any suggestion of unnecessary secrecy is bound to foster suspicion about this exercise, whether or not it is justified. Openness in itself may not be enough to allay such concerns, but it is certainly a precondition - that is, it is "necessary" within the meaning paragraph 5(c) of Schedule 2.
It must also be damaging to the department's own interests to blur the distinction between career civil servants and temporary secondees from commercial bodies, to the point that the public do not know who is responsible for government policy or who they are dealing with when they contact a department. Someone making representations to a department about the conduct of a regulated private body needs to know that they are not actually talking to an employee of that body; a business providing confidential information to a department needs to know that it is not sharing the information with one of its competitor's staff. Such concerns suggest why transparency is necessary in the department's own interests.
(4) Paragraph 6(1) permits disclosure where this is necessary for the applicant's, or the public's, legitimate interests and is not unwarranted by any prejudice to the rights, freedoms or legitimate interests of the individual concerned.
The first half of this equation - the public interest in disclosure - is acknowledged in the recent Civil Service Corporate Management and Reform unit's policy which states:
"It is important (for reasons of transparency) that information concerning inward secondees is available to third parties. The general public has a right to be able to check that the government is not taking on secondees who are for some reason unsuitable or who will encounter a conflict of interest during the course of their work".
Do the secondees have any legitimate interest in confidentiality strong enough to outweigh this public interest? To justify withholding information under paragraph 6(1) there must be some detriment in the individual's "particular case". This might be a reasonable belief that to be named would expose someone to risk of attack, impede their recovery from illness, prejudice their effectiveness in a job that requires "undercover" activity, damage their employment prospects or cause them to be shunned by friends or colleagues.
There is no suggestion in your letter of July 12 that is the case. The enclosures suggest that secondees have merely been asked to say whether or not they want their names to be released - not whether they believe that disclosure would harm them. Revealing that someone has been seconded to work at a high level in government will enhance, not damage, their reputation. In the absence of evidence to the contrary, the balancing act under paragraph 6(1) must come out in favour of disclosure.
For similar reasons, I do not believe that this disclosure would be an "unwarranted invasion of privacy" under the code, still less one that outweighed the public interest in openness.
The second data protection principle requires that data should not be 'further processed' for any purpose incompatible with the purpose for which it was originally obtained. The Interchange Good Practice Guide stresses the need to avoid conflict of interest in the secondment process. This disclosure is intended to further that objective.
The new policy
The department's letter to secondees of 30 April explains that the new approach reflects the recent CSCMR policy on the identification of secondees. Although the policy is a step forward, it still has significant shortcomings.
(1) The letter says that under the new policy "in future, whenever a request is received it will, in the interests of transparency, be presumed that the information requested should be disclosed". It then goes on to say "It is only intended to release the names of individual secondees who have agreed that they are content for us to do so". In what sense can there be any presumption in favour of disclosure, if in practice this information cannot be disclosed without the individual's consent?
(2) The letter states that the only exceptions to the presumption in favour of disclosure will be "where there is a 'public interest' objection to disclosure, or where disclosure would not be in accordance with the terms of the Data Protection Act". Neither of these tests can be satisfied merely by asking the secondees whether they are prepared to be identified.
(3) The CSCMR document is not correct in stating that "Under the terms of the DPA, DepartmentsÉare at liberty to name individuals if they feel it is in the public interest and that they have the full agreement of the individual and the organisation they are seconded from". This is wrong on two counts (i) departments need either consent or public interest grounds - not both; (ii) the suggestion that the organisation's consent is needed is wrong and will seriously mislead those operating the policy. The organisation's views are irrelevant to any decision under the DPA, which protects the rights of individuals, not employers.
(4) The CSCMR document correctly states that where consent is refused "those considering the request will have to look at whether any of the other requirements set out in Schedule 2 are fulfilled." However, the department has ignored this advice.
I hope therefore that you will reconsider the decision to withhold the names of Cabinet Office secondees who have not agreed to be identified.
Yours sincerely,
Maurice Frankel
Director
Endnotes
- CSCMR, "Interchange and Disclosure of Basic Information concerning Inward Secondees".
- This is Audrey MacDougall who was seconded from KPMG to the Performance and Innovation Unit. The Cabinet Office web site identifies her as a member of the PIU team which produced a report entitled: "In Demand: Adult Skills for the 21st Century" published in November 2001.
http://www.cabinet-office.gov.uk/innovation/2001/workforce/team.shtml
- The Society of Information Technology ManagementÕs website says: "Fahri ZihniÉis Senior Vice-President and Education Officer for SocitmÉFahri is seconded to the Office of the e-Envoy in the role of Local Government Advisor. In addition he is Chief ICT Officer at Wolverhampton City Council and a monthly columnist for Computing."
http://www.socitm.gov.uk/Public/events/conference/default.htm
- See: http://www.isaca.org.uk/central/Past_Events/ag020123.htm
- Available from: http://www.interchange.gov.uk/formspub.htm
- This might even be done by a contractual term, eg "(a) in accepting this secondment you recognise that it is the department's normal policy to identify secondees, their organisations and their functions and that we may disclose such information about you; (b) if you believe that this would cause you any particular detriment (for example, by prejudicing your safety) you should tell us; (c) we will take any such representations into account before proceeding with any disclosure."
|