To ask Her Majesty's Government what action they are taking further to the findings in the report by the Information Commissioner's Office Department for Education: Data protection audit report, published on 7 October, that the Data Protection Officer of the Department for Education is not meeting the requirements of Articles 37 to 39 of the General Data Protection Regulation.
23 December 2020
I refer the noble Lord to the answer I gave on 24 November 2020 to Question HL10194.
The department mandates the “Responsible for Information” course provided by Civil Service Learning. We are reviewing the current training requirements. The department has been working closely with the Information Commissioner’s Office (ICO) since the audit was undertaken in February 2020 to address all the recommendations. We will be publishing a formal response in January 2021, which will include an update on the training offering for the department.
Ofsted have been present at briefings on the audit the department has given to the data protection Arm’s Length Body Network. The formal response to the ICO audit will also be available to Ofsted.