DWP sending sensitive data with passwords

Government staff in the Department of Work and Pensions (DWP) have been sending out sensitive data in packages containing passwords that provide access to the information.

An internal email to DWP staff outlining the poor security practices was leaked to influential political blog Dizzy Thinks.

"Staff are… forwarding the data and password on together, which defeats the purpose of the security measure entirely," the email reads.

After HM Revenue and Customs lost the details of 25 million families last year, civil servants were told all information sent between departments had to be password protected with passwords sent separately.

"We have carried out a major review of procedures around the transfer of data to ensure the security of customer information. We expect all managers to monitor the application of our security controls and ensure that the correct action is taken in all cases," said a spokesman for the DWP.

See also:

Lose data and you go to jail

Act amendments could mean jail terms for losing or trading in data  08 May 2008

Privacy watchdog plans spot checks

Information Commissioner's Office will begin inspections by the end of the year  30 Apr 2008

Privacy watchdog to get new powers

Office will be given ability to spot check central government  22 Apr 2008

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!