Written answers

Tuesday, 22 September 2015

Department of Public Expenditure and Reform

Data Protection

Photo of Michael LowryMichael Lowry (Tipperary North, Independent)
Link to this: Individually | In context | Oireachtas source

395. To ask the Minister for Public Expenditure and Reform if he will provide a guarantee that all sensitive personal waste data is destroyed as per European Standard EN 15713:2009 and Irish data protection legislation; if he will confirm that all vendors and contractors who are used to destroy sensitive personal data adhere to Shred Grade No.5 of the EN 15713:2009 Standard achieved on-site at the client's location which was a condition of a recent tender by the Department of Social Protection (details supplied); and if he will make a statement on the matter. [30646/15]

Photo of Brendan HowlinBrendan Howlin (Wexford, Labour)
Link to this: Individually | In context | Oireachtas source

The Office of Government Procurement wishes to confirm that as a condition of appointment to the OGP framework agreement for the provision of waste management services all service providers are contractually obliged to be fully compliant with all relevant legislation regulatory requirements and best industry practice in the delivery of waste management services.

The Office of Government Procurement cannot speak to the requirements of individual units/Departments or their contracts or tender processes, however the Office of Government Procurement can confirm that all service providers appointed to Lot 6 (confidential material shredding) of the OGP framework agreement for the provision of waste management service are fully compliant with EN15713.  As and when individual contracting authorities require confidential material shredding services, the precise levels/standards of shred will be specified and the successful service provider will be required to comply with these requirements.

Photo of Michael LowryMichael Lowry (Tipperary North, Independent)
Link to this: Individually | In context | Oireachtas source

396. To ask the Minister for Public Expenditure and Reform if all waste management service providers who were appointed to the framework for confidential shredding through the Request for Tenders to establish a Multi Supplier Framework for the provision of Waste Management Service Tender Document 16/01/2014 met all requirements outlined in the tender document; if he will confirm that all vendors who operate under Lot 6 of the tender process comply with section 1.8 Quality of the Confidential Material Shredding Proposal (details supplied); if he will confirm that all vendors and contractors comply fully with the Data Protection Acts 1988 and 2003 which insure codes of conduct issued by the Data Protection Commissioner are legally adhered too inclusive of only registered data processors being legally allowed to process personal data for registered data controllers; if he will confirm that the three appointed framework members for confidential shredding have onsite capability to destroy sensitive data to shred No. 6 of EN 15713 which has Irish precedent; and if he will make a statement on the matter. [30647/15]

Photo of Brendan HowlinBrendan Howlin (Wexford, Labour)
Link to this: Individually | In context | Oireachtas source

The Office of Government Procurement notes that  pursuant to section 1.8 of the Request for Tenders, tenderers were required to "demonstrate their methodologies for handling confidential waste, including the pre and post shredding processes, collection and storage of confidential waste, confirmation of destruction. Tenderers were also requested to provide details of their proposals for providing full audit trails for these processes."

The Office of Government Procurement wishes to confirm that the service providers appointed to the OGP framework agreement for the provision of waste management services met all requirements outlined in the Request for Tenders and in relation to Lot 6, demonstrated their methodologies for handling confidential waste, including the pre and post shredding processes, collection and storage of confidential waste, confirmation of destruction in accordance with section 1.8 Quality of the Confidential Material Shredding Proposal.

The Data Protection Commissioner has confirmed that there is no requirement for Shredding Companies to register with their office.

The OGP framework agreement for waste management services operates on a mini-competition basis as and when individual contracting authorities require confidential material shredding services, the precise levels/standards of shred will be specified and whether shredding onsite is required and the successful service provider will be required to comply with these requirements.

Furthermore, the Office of Government Procurement's Request for Tender as issued on 16 January, 2014 was not prescriptive in relation to shred levels or whether shredding onsite is required, rather the Office of Government Procurement's Request for Tender document acknowledged the levels of shred available, but not those required under the specific mini-competitions.

Photo of Michael LowryMichael Lowry (Tipperary North, Independent)
Link to this: Individually | In context | Oireachtas source

397. To ask the Minister for Public Expenditure and Reform if all contractors and vendors who supply sensitive waste data disposal to Government Departments and offices are registered with Data Protection Commissioner Office; if these contractors and vendors can provide a certificate of registration of quality systems to I.S EN ISO 9001:2008 and provide evidence they can provide the provision of high quality security shredding on-site and off-site incorporating the shred size requirements of I.S EN 1573:2009 to suit the Department of Social Protection specific customer requirements of Shred No. 5 of I.S. EN 15713:2009 800 mm2 sized particles (details supplied); and if he will make a statement on the matter. [30648/15]

Photo of Brendan HowlinBrendan Howlin (Wexford, Labour)
Link to this: Individually | In context | Oireachtas source

The Data Protection Commissioner has confirmed that there is no requirement for Shredding Companies to register with their office.

The Office of Government Procurement cannot speak to the requirements of individual units/Departments or their contracts or tender processes, the Office of Government Procurement can confirm that all service providers appointed to Lot 6 (confidential material shredding) of the OGP framework agreement for the provision of waste management service are accredited to ISO9001 standard incorporating requirements of ISEN 15713:2009. The OGP framework agreement for waste management services operates on a mini-competition basis as and when individual contracting authorities require confidential material shredding services the precise levels/standards of shred will be specified and whether shredding on-site is required and the successful service provider will be required to comply with these requirements.

Comments

No comments

Log in or join to post a public comment.