Treasury written question – answered at on 22 May 2008.
To ask the Chancellor of the Exchequer pursuant to the Answer of 14 March 2008, Official Report, columns 721-22W, on departmental databases, which US-registered service provider has been engaged to manage certain aspects of personal data; and what types of personal information it has been engaged to manage.
National Savings and Investments have engaged US registered service providers as follows:
CACI—a wholly owned UK subsidiary of CACI Inc. A division of CACI has been engaged to help NS and I with analysis. This has included sending them customer name and address data along with account data.
Acxiom—a UK subsidiary of a US company. NS and I have in the past provided all account opening information, including but not limited to name, address and purchase amount to Acxiom for analysis. This work was taken over by a UK based provider in 2005.
S1—a US company based in Atlanta. Data processing covered by a Safe Harbour Agreement. S1 host the internet engine for the NS and I Direct ISA product. They hold customer information including but not limited to name, address, telephone number, NI number and purchase amount.
NS and I has a number of different contractors and due to the diverse nature of their requirements there are different levels of protection covered by their terms and conditions. As a minimum, their terms and conditions include compliance with the Data Protection Act, however higher risk contracts have more robust clauses.
Yes0 people think so
No0 people think not
Would you like to ask a question like this yourself? Use our Freedom of Information site.