EU must learn database lessons from UK lost records

2.00.00pm GMT Thu 22nd Nov 2007

Two leading MEPs responsible for major EU databases holding personal and biometric information have written jointly to the other EU institutions demanding that lessons be learned from the UK government's apparently negligent approach to data protection and security which led to the loss of records on 25 million people..

Baroness Sarah Ludford MEP, Liberal Democrat European justice spokeswoman and European Parliament 'rapporteur' on the EU biometric visa database (VIS), has joined with fellow MEP Carlos Coelho, responsible for the Schengen Information System, in writing to the European justice Commissioner Franco Frattini and the Portuguese Presidency. They demand that the EU creates "effective and enforceable data protection mechanisms" for these and other EU databases and ensures in particular that proper limitations and strict guidelines are placed on the creation of hard copies.

Sarah Ludford said:

"Not only the UK government but the EU as a whole need to ensure that lessons are learned from this monumental blunder at HMRC. We cannot allow lax security standards on access or copying of vast centralised databases to imperil the personal security of millions of people."

"EU data protection laws either need to be toughened up or accompanied by a strict training and auditing regime in which data protection supervisors must be given adequate resources and enforcement powers, both hitherto lacking in the UK."

"Most of us would think it was self-evident that private and sensitive information should not be slapped onto a CD and sent in the post; but the fact this can happen should ring alarm bells about whether a culture of neglect and complacency is widespread in the EU. The potential for serious financial, civil, and social problems cannot be understated."