25 June 2008

IPCC publishes report into missing HMRC data CDs (short version)

The Independent Police Complaints Commission has found that the processes for data handling were woefully inadequate at HM Revenue and Customs' Child Benefit Office in Washington. But individual members of staff were not to blame for losing the missing Child Benefit data CDs.

The IPCC's investigation uncovered failures in institutional practices and procedures concerning the handling of data. It revealed the absence of a coherent strategy for mass data handling and, generally speaking, practices and procedures were less than effective.

The IPCC found that there was: a complete lack of any meaningful systems; a lack of understanding of the importance of data handling; and a ‘muddle through’ ethos.

Staff found themselves working on a day-to-day basis without adequate support, training or guidance about how to handle sensitive personal data appropriately. While an ongoing review of data procedures was being conducted within HMRC at the time of these events, it had not been finalised. Had this internal review received a higher priority, this incident may have been avoided.

The Commission is therefore referring the findings of the missing Child Benefit CDs to the Information Commissioner.

The IPCC is also publishing its report in full today.

IPCC Commissioner Gary Garland, who oversaw the investigation, said:

"Once the data loss was discovered, it is correct to say that steps were taken immediately to tighten security. A full review of practice and procedure has been carried out. Many reforms have taken place and are continuing as improvements are rolled out across the department. We hope that the momentum will be maintained."

'HMRC, Washington - IPCC independent investigation report into loss of data relating to Child Benefit' can be read on the IPCC web site at www.ipcc.gov.uk/final_hmrc_report_25062008.pdf or is available from IPCC, 90 High Holborn, London WC1V 6BH.

-ends-

Notes for editors:

The report is published in full but the names of individuals have been redacted.

A full press release can be found at: www.ipcc.gov.uk/news/pr_250608_missing_hmrc_data_cds

The full report can be found at: www.ipcc.gov.uk/final_hmrc_report_25062008.pdf

The IPCC has been responsible for handling serious complaints against and referrals of incidents from HMRC since April 2006. The inquiry was carried out by investigators from the IPCC's Wakefield office, which serves Yorkshire, Humberside and the North-east of England.

For Further Information Contact:

Richard Offer, IPCC Head of Media, on 020 7166 3214 or the out-of-hours duty press officer on 07717 851157.