General Data Protection Regulation (GDPR): what the public sector needs to consider

Graphic design image: three padlocks in front of a futuristic city.

By Steven McGinty

In March, the Information Commissioner’s Office (ICO) published the results of a survey into local government information governance as part of their preparations for the General Data Protection Regulation (GDPR), which comes into force on 25 May 2018.

Although the ICO notes that many local authorities have good data protection policies, there are still councils where work needs to be done. The survey findings include:

  • A third of councils do not undertake Privacy Impact Assessments (PIAs)
  • 26% of councils do not have a data protection officer
  • 50% do not require data protection training before accessing systems

Under the new GDPR the above findings could constitute a breach, and result in the ICO taking action against the offending council. Recently, the ICO fined Norfolk County Council £60,000 (under the Data Protection Act) for failing to dispose of social work case files appropriately.

What impact will Brexit have on the GDPR?

The UK Government has finally triggered article 50 of the Lisbon Treaty, starting the process for leaving the European Union (EU). However, this does not mean that the UK will escape the European Commission’s GDPR. Digital minister, Matt Hancock, has confirmed that it is in the UK’s best interests to ensure the ‘uninterrupted and unhindered flow of data’, stating that the GDPR would be fully implemented into UK law, even after we leave the EU.

Is the public sector exempt from the GDPR?

There have been reports that some public sector bodies believe that they are exempt from the GDPR. This assumption is based on the regulation’s special conditions and derogations, which allow member states to restrict the GDPR’s scope to safeguard the public interest (some countries, such as Denmark, already have exemptions for public sector bodies). Additionally, fining a public sector body has also been viewed as making little sense – taking from one public sector budget and placing it in another.

However, both of these assumptions are flawed. As the GDPR has been designed to enhance the rights of EU citizens, it would be against the spirit of the regulation to introduce blanket exemptions for the public sector. And it is certainly not unheard of for regulators to fine public bodies, such as the recent Norfolk County Council case, or the Hampshire County Council case in August 2016, where the council was fined £100,000 by the ICO for leaving social care case files in a disused building.

How does the GDPR differ from the Data Protection Act?

The GDPR has been described ‘as the most important change in data privacy regulation in 20 years’, providing greater rights to citizens and harmonising data privacy laws across Europe. However, to achieve this, new requirements have been placed on organisations. These include:

  • Personal dataArticle 4(1) of the GDPR includes a broader definition of ‘personal data’ than previous legislation. It states that any information relating to an individual which can be directly or indirectly used to identify them is personal data. Specifically, it refers to ‘online identifiers’, which suggests that IP addresses and cookies may be considered personal data if they can be easily linked back to the person.
  • Privacy by designThe concept of ‘privacy by design’ is not new, but Article 23 of the GDPR makes this a legal requirement. In essence, it means that public sector bodies will have to consider data protection at the initial design stage of product development. This could involve adopting technical measures such as pseudonymisation – the technique of processing personal data in such a way that it can no longer identify a particular person.
  • Data Protection Impact Assessments (DPIAs) – As the ICO’s research highlights, a third of councils do not undertake any form of privacy impact assessment. From May 2018, public sector organisations will have to carry out DPIA’s for certain activities such as introducing new technologies and when processing presents a high risk to the rights and freedoms of individuals. In the latter case, organisations will need to consult the ICO to confirm they comply with the GDPR.
  • Appointment of a Data Protection Officer (DPO)Article 35 of the GDPR states that public bodies must have a designated Data Protection Officer. This can be an existing employee, as long as there is no conflict of interest, or a single DPO can represent a group of public sector bodies. As the ICO research suggests (26% of councils do not have a DPO), this is one of the main areas where councils need to improve.
  • Data portability– Public sector organisations must ensure that personal data is stored in a ‘structured, commonly used and machine readable form’, so that individuals can transfer data easily to other organisations. For instance, suitable formats would include CSV files.
  • Strengthening subject access rights– Individuals can now request access to their data for no cost and must be responded to within 30 days (this is a change from the Data Protection Act which requires a £10 fee and there is 40 days to respond). For complex cases, this can be extended by two months. However, individuals must be notified within one month and be provided with an explanation. These requests could prove time consuming and costly for public sector bodies, and as such, supports the case for introducing digital services that allow individuals access to their data.
  • Right to be forgotten – The right to erasure (its official name) allows individuals to ask an organisation to delete all the information held on them – although this would not apply if there was a valid reason to hold that data. This principle was established in the high profile case involving technology giant Google.
  • Failing to comply and breaching the GDPR – When there is a breach, public sector bodies will have an obligation to inform their national regulator (the ICO in England) “without undue delay and, where feasible, not later than 72 hours after having become aware of it.” These requirements could present challenges for public sector bodies, who are often engaged in providing vital public services with limited resources. However, policies will have to be introduced to ensure breaches can be reported promptly, particularly as the new penalties for data breaches are significant, with public sector bodies liable for fines of up to €10,000,000. In addition, individuals also have the right of redress and may seek compensation if they feel their rights have been breached.

What should public sector bodies be focusing on?

Although May 2018 may seem a long time away, the ICO research suggests some local councils (and the wider public sector) need to make several changes to ensure compliance with the GDPR.

Most importantly, organisations need to start reviewing the new regulation and considering how it applies to them. Evidence of a clear strategy – including the appointment of a Data Protection Officer, the use of privacy impact assessments, and staff training – will go a long way towards demonstrating an organisation’s intent to comply with the GDPR.


Follow us on Twitter to see what developments in public and social policy are interesting our research team. If you enjoyed this article, you may also be interested in: 

Government Transformation Strategy 2017 to 2020: has it been worth the wait?

Whitehall, London

By Steven McGinty

On 9 Feb 2017, and after over a year of delays, the UK Government finally published the Government Transformation Strategy 2017 to 2020.

It’s been a long time since the Government Digital Strategy was published in 2012. Therefore, it’s understandable that politicians, industry leaders and media commentators have been frustrated by the lack of a new strategy in 2016.

In January 2017, Iain Wright MP, chairman of the Business, Energy and Industrial Strategy Committee (BEIS) warned that the UK risked being left behind and losing its competitive advantage in the digital economy because of its ‘absence of clarity and strategic focus’.

Similarly, Stephen Metcalfe, chairman of the Science and Technology Committee, wrote a letter to digital minister Matt Hancock highlighting his disappointment at the lack of a government digital strategy.

However, now that the Government Transformation Strategy is here, what does it say and will it have a lasting impact?

A brief overview

According to Ben Gummer, Minister for the Cabinet Office and Paymaster General, the Government Transformation Strategy is:

“The most ambitious programme of change of any government anywhere in the world, by a government that has already done more to transform itself than any other.”

It sets out the government’s aim to build on the success of the 2012 strategy, and to not only focus on improving the citizen experience but to change the way services are delivered. The strategy states that the government will achieve this by transforming:

  • Whole citizen-facing services – ensuring an improved experience for citizens, businesses and users within the public sector
  • Full government departments – enabling organisations to deliver policy objectives more flexibly, improving citizen experience, and working more efficiently
  • Internal government – supporting the collaboration of government departments and delivering digitally-enabled change more effectively

However, the majority of the strategy is structured around five main objectives:

Business transformation

Government departments have made significant progress over recent years.  The strategy explains that lessons have been learned through this service transformation process, and that there is now cross-government agreement on the key areas that transformation must focus on. These include bringing policy development and service design closer together and recognising that government services are delivered through a variety of channels (online, telephone and face-to-face).

Grow the right people, skills and culture

Since 2012, government departments have been recruiting digital, data and technology specialists to improve their digital capability. However, the strategy accepts that the public sector is working in a competitive market and that recruiting and retaining staff is likely to remain a challenge. Embedding a new culture is also identified as an important enabler of change, with several goals highlighted, including increasing civil servants’ knowledge of digital and improving digital experts’ understanding of government.

The Digital Academy, which was formed in 2014 by the Department for Work and Pensions (DWP), will be transferred (by the end of 2017) to the Government Digital Service (GDS) to create nationwide training opportunities for civil servants.

Build better tools, processes and governance for civil servants

Civil servants vary widely in how they work, including the digital technologies they use and their approach to policy development. The new strategy explains that the government will create a better working environment by developing common and interoperable technologies that can be shared across government and adopt a more agile working environment.

Make better use of data

Data is vital for providing services that meet the needs of citizens. However, the strategy emphasises that the government must earn the public’s trust in managing data safely, securely, and ethically.

Create shared platforms, components and reusable business capabilities

The government has already had some success in introducing shared platforms, such as GOV.UK – a publishing platform which brought together over 300 government agencies’ and arm’s length bodies’ websites within 15 months. The strategy outlines the steps to be taken to encourage the development of new technologies, including leaving large single contracts with IT firms – a practice which is deemed a barrier to providing better technologies for civil servants – and purchasing from a wider variety of suppliers, such as SMEs.

From digital to transformation

It’s important to note that the strategy’s title has changed: from a digital strategy to a transformation strategy.

Jane Roberts, strategy director at Kable, suggests that this reflects the government’s realisation that digitisation is not a process with a defined end date, but a ‘constant dynamic ongoing process.’ Government, says Roberts, now understands that digitisation involves more than just moving services online, and that whole scale change is needed, from encouraging civil servants to work more collaboratively (including sharing cross-governmental data), to digitising back office processes.

In addition, Roberts also highlights the need for digital services to be designed to cope with this dynamic process. This includes supporting the integration of new technologies – particularly those related to the Internet of Things (the use of internet technology to connect everyday items) – and responding to increased citizen demand for greater control over their personal data.

What does it mean for local government?

The Government Transformation Strategy makes no comment on the challenges facing local government. However, London Borough of Camden councillor, Theo Blackwell, suggests that the strategy leaves scope for a ‘digital settlement’ to be developed between central and local government. He observes that the strategy:

leaves the door open for this discussion to be starting and concluded in short order, kickstarted by elected mayors and combined authorities in May 2017, and building on the groundwork of the last two years”.

Mr Blackwell also sets out what needs to be done to achieve this digital settlement:

  • Support the ‘coalition of the willing’, as well as improvement – encouraging local councils who have already made progress with digital transformation to work together, as well as helping struggling councils to improve;
  • Open platforms and a new market for start-ups – enabling the development of platforms and smaller start-up companies;
  • Shared Resource – developing partnerships between local councils and central government, which fund digital initiatives jointly.

Missed opportunity

The strategy has also received a significant amount of criticism for its lack of detail and limited commitments. Independent digital analyst, Jos Creese, has described the strategy as:

“…a mix of re-packaged principles and refreshed ‘transformational government’ themes, coupled with some new but not revolutionary ideas.

Creese argues that there is a general lack of pace with government programmes, such as with GOV.UK Verify – an identity assurance platform that allows people to prove who they are when using government services. And – unlike Theo Blackwell – Creese believes that the lack of collaboration between central government and the wider public sector is a missed opportunity (particularly as 80% of public services are outside central government). In his view, the strategy should have addressed some of the fundamental challenges facing local services, such as healthcare and crime prevention.

Final thoughts

Although the Government Transformation Strategy has received a mixed response since it was first published, there are certainly positives which provide hope for the future. Firstly, it was important that the strategy was finally published to provide a clearer indication of the government’s future direction.  Secondly, in the coming months, the government will have the opportunity to provide greater clarity, and set out how they intend to achieve the praiseworthy objectives of the strategy and realise the full potential of digital transformation.


Follow us on Twitter to see what developments in public and social policy are interesting our research team. If you found this article interesting, you may also like to read our other digital articles

Counting the cost of data protection failures in local government

A laptop keyboard with a padlock on it.

By Steven McGinty

In August, Hampshire County Council were fined £100,000 by the Information Commissioner’s Office (ICO) after social care files and 45 bags of confidential waste were found in a building, previously occupied by the council’s adults’ and children’s services team.

Steve Eckersley, the ICO’s head of enforcement, explained that this data protection breach affected over 100 people, with much of the information “highly sensitive” and about adults and children in vulnerable circumstances.  In his view:

“The council’s failure to look after this information was irresponsible. It not only broke the law, but put vulnerable people at risk.”

A widespread problem

In 2015, Big Brother Watch, an organisation which encourages more control over personal data, published a report highlighting that local authorities commit four data breaches every day. It found that between April 2011 and April 2014 there were at least 4,236 data breaches. This included, at least:

  • 401 instances of data loss or theft
  • 159 examples of data being shared with a third party
  • 99 cases of unauthorised people accessing or disclosing data
  • 658 instances of children’s personal data being breached

In the past year, local authorities have reported a 14% increase from the previous year in security breaches to the ICO. The figures show that 64% of all reported breaches involved accidentally disclosing data. This supports research which suggests that human error is a major cause of data protection breaches.

These statistics are both positive and negative for the ICO. Peter Woollacott, CEO of Huntsman Security, suggests that it could show that local government is becoming better at identifying security breaches. However, he also acknowledges that most organisations are subject to multiple attacks, with only some being detected.

Areas for improvement

In 2014, the ICO conducted nine advisory visits and four audits of social housing organisations. It found that improvements could be made in ten areas, including:

  • Data sharing – organisations regularly share personal data but few have formal policies and procedures to govern this sharing.
  • Data retention – few organisations have data retention schedules for personal data, which provide details on when records should be disposed of, although most only extend to physical records. Data protection legislation sets out that data must not be stored for ‘longer than necessary’.
  • Monitoring – there is little evidence that organisations monitor their compliance with data protection policies.
  • Homeworking – where organisations allow staff to work flexibly, it often wasn’t formalised.
  • Training – there are varying levels of data protection training found in organisations.

Public confidence

Unsurprisingly, high-profile data breaches, such as the loss of 25,000,000 child benefit claimants’ details in the post by HM Revenue and Customs (HMRC), have left the public concerned about their data.

In October, a YouGov poll showed that 57% of people believed that government departments could not share personal data securely. And 78% of people didn’t believe or didn’t know whether the government had the resources and technology to stop cyber-attacks.

A poll by Ipsos Mori has also shown that 60% of the public are more concerned about online privacy than a year ago. The three main reasons given were: private companies sharing data; private companies tracking data; and the reporting of government surveillance programmes.

The cost of data protection failures   

The implications of failing to protect the public’s data are serious. Not only could local government be heavily fined by the ICO, but it could also have an emotional or economic impact on individuals if their data enters the wrong hands and is used maliciously (e.g. to commit an act of fraud).  However, there are wider issues for government.

At the moment, both local and central government are undergoing digital transformation programmes, digitising their own operations and moving public services online. Examples include social workers using electronic social care records and the public paying council tax or booking appointments through their local council’s website.

If the public buy into ‘digital by default’ (the policy of ensuring online is the most convenient way of interacting with government), then services could be delivered a lot more efficiently, resulting in significant savings. However, if the public are concerned over the security of their personal data, they may be less willing to consent to its use by government.

We’ve already seen this in some areas. In 2014, the Scottish Government announced plans to expand an NHS register to cover all residents and share access with more than 100 public bodies, including HMRC. This year, the Scottish Government attempted to bring into effect the ‘Named Person Scheme’, where every child in Scotland would be assigned a state guardian, such as a teacher or health visitor.

With both of these schemes concerns have been raised over privacy, including from the ICO in Scotland. The Supreme Court has also ruled against the Named Person Scheme, over the data sharing proposals.

Final thoughts

Local government needs to be robust in ensuring compliance with data protection legislation. The financial costs could be great for local government, but the bigger concern should be public trust. If councils fail to meet their legal obligations, they may find it challenging to implement policies that use public data, even if it brings the public benefits.


Follow us on Twitter to see what developments in public and social policy are interesting our research team. If you found this article interesting, you may also like to read our other data related articles. 

Digital Economy Bill – the impact of Brexit

By Steven McGinty

On the 18th March, the Queen’s Speech set out the government’s legislative programme for the year ahead. This included the Digital Economy Bill, a piece of legislation which aims to ensure the UK is a world leader in digital provision.

However, as former British Prime Minister Harold Wilson once said ‘a week is a long time in politics’. The UK has unexpectedly voted to leave the European Union (EU). The Prime Minister has stood down, leaving a leadership contest in the Conservative Party. And many are uncertain about the future direction of the country.

In this article, I’ll outline the Digital Economy Bill, highlight some of the early commentary, as well as comment on the new political landscape the Bill now finds itself in.

Digital Economy Bill

The Digital Economy Bill focuses on five main areas. These include:

Fast broadband

The Bill introduces a ‘Broadband Universal Service Obligation’, providing all citizens and businesses with the legal right to have a fast broadband connection installed (of at least 10Mbps initially). This is similar to the telephone landline obligation which currently exists.

There is also an emphasis on cutting the costs and improving the processes for building broadband infrastructure. However, at this stage, there is very little detail on how this might be achieved, apart from introducing a new Electronic Communication Code and making changes to the planning system.

Consumers

New powers will be given to Ofcom, the UK communications regulator, which will enable them to request data, such as broadband speeds data, which will help consumers in choosing a provider. The Bill also attempts to make it easier for consumers to switch provider and to receive compensation when things go wrong.

Data sharing

Public bodies will be given powers to share information in an effort to combat fraud, which costs the country billions every year. For example, the cost of tax fraud was estimated to be £15 billion in 2011. Other notable measures include encouraging the use of data to provide better public services and identifying and helping people with debts at an earlier stage.

Intellectual property rights

The new Bill recognises that it’s important to support digital industries by addressing the difference in online/offline copyright laws. In addition, the process of registering copyright should be easier and cheaper.

Unsolicited Marketing

Consumers will be given further protection against spam emails and nuisance calls.

Early commentary  

TechUK, industry body for the digital sector, has welcomed the new Bill, highlighting that if implementation is successful, the measures will play an important role in growing the UK’s digital economy. They do, however, note the need for careful consideration when making changes to the planning system and the Electronic Communication Code, alongside stressing the need to ensure changes to copyright law are technically feasible.

Geoff French, chairman of the Enterprise M3 Local Economic Partnership, has also welcomed the advantages the new Bill could bring to business. He highlights that there are still too many urban and rural areas that have low broadband speeds, affecting the growth of the digital economy, as well as the innovation, productivity and competitiveness of the wider economy.

Brendan O’Reilly, Chief Technology Officer at O2 UK, suggests that the planning system needs to be streamlined to allow the expansion of the network. He explains that the process of deploying a mast can take up to three years from start to finish. To emphasis his point, he contrasts the situation in the UK with that in South Korea, where three months to deployment of a mast is considered a long time. And although the new Bill may provide for this change, he highlights the need for collaboration between government and industry, and to think more of ‘UK plc’.

Landowners, however, have been less positive about the new Bill. Under new proposals, landowners would receive ‘compensation’ for masts located on their property; as opposed to the current system where they receive ‘market rate’. As Strutt & Parker telecoms specialist Robert Paul explains, this could mean landowners who used to receive £7,000-£8,000/year, would instead receive £200-£300/year, if classed as compensation. Mr Paul suggests that this could result in landowners taking their case to tribunals, with the result being expensive and time consuming legal challenges to the deployment of masts.

The elephant in the room – Techxit?  

Before the referendum result was announced, Ed Vaizey, UK digital economy minister, stated that there would be a ‘significant economic impact’ if we voted to leave the EU, with uncertainty affecting investment decisions in the UK.

Although it’s too soon to comment on whether this is the case, there has been some notable reaction since the UK voted to leave the EU. Firstly, Ed Vaizey has stated that progressing the Digital Economy Bill will not be delayed as a consequence of the result. However, unconfirmed reports (reported in the media) have suggested that the Bill may have to have its contents altered.

The Economist Intelligence Unit reports that the telecoms industry has been negatively affected by the result, with revenue forecasts being reduced from 29% to 23% by 2020. They highlight, though, that the Digital Economy Bill is still likely to contain regulation that supports increased investment, and that Brexit may even lead to a more favourable investment environment. Yet, the EIU also notes that other broadband targets, such as the elimination of rural ‘not-spots’ may be deemed less important.

At the moment, the reforms in the Digital Economy Bill are still on the agenda. But it’s not clear how future changes will affect its progress. For instance, issues such as the free movement of skilled professionals, the UK’s position in the single market, and the impact on investment for start-ups are all sources of uncertainty.

The Knowledge Exchange will monitor the Bill’s progress as it receives parliamentary scrutiny.


The Digital Economy Bill was introduced into Parliament on 5 July 2016.

Follow us on Twitter to see what developments in public and social policy are interesting our research team. If you found this article interesting, you may also like to read:

Rise of the Datavores … showing no fear of data, it takes skills

Datavores infographicPrevious work by NESTA highlighted companies with apparently no fear of data. They called them ‘datavores’. When making decisions about how to grow their sales, they rely on data and analysis over experience and intuition.

Does being data active have an impact?

According to a new NESTA report published this week Skills of the datavores: talent and the data revolution, those organisations which are more ‘data-active’ perform better than those that are not, as the infographic above illustrates:

  • Datavores are 10% more productive
  • But, only 18% of companies are datavores
  • If all “dataphobes” became “datavores” it would add a 3% uplift in productivity
  • Data-driven firms are 40% more likely to launch new products and services.

What does a skilled data workforce look like?

The research suggests that the biggest issue facing the industry is the lack of skilled data analysts/scientists, where demand has grown 41%. Businesses are using a combination of actions to solve this lack of supply of skilled people, including off-shoring the roles, recruiting best fit and using a combination of inhouse, on the job and external training to grow their own.

Many organisations are also developing inter-disciplinary teams to create a data literate workforce because the skills needed within a data scientist are so rare; as the report says, as rare as “unicorns”. Our own experience of recruiting a data scientist would support this.

The workforce which is emerging is one focussed on adaption and flexibility, based on data sciences across the board, such as qualitative researchers, mathematicians, statisticians, developers and business analysts. Within this mix of skills, the new workforce also needs to have a creative flair and business knowledge that enables them to use the data in the organisation’s best interest and to add value.

What does it mean for skills suppliers?

As an emerging profession, it is difficult to pin down the exact skills an employer needs which in turn makes it difficult for schools, colleges and universities to supply the right type of education. The accompanying policy briefing from NESTA and Universities UK, Analytic Britain: securing the right skills for the data-driven economy, makes a number of recommendations, highlighted in the infographic above, many of which focus on the skills suppliers.

Universities are both a supplier and user of these skills and have a unique opportunity to really enage with the market. The focus on metrics in both the proposed Teaching Excellence Framework and Research Excellence Framework means that universities themselves are in need of the same skills and have an opportunity to supply based on experience.

For universities these recommendations have a number of impacts, and data issues are increasingly at the forefront of policy thinking. Universities UK has reviewed how data analytics are taught across disciplines and reflects on the shortage of academic staff who are confident in teaching data analytics in this way and the varying skills of students entering higher education.

The pervasive nature of the data revolution explains why a variety of disciplines and skills are being brought together. No one can argue against the need for more and better data to improve policy making and business planning. Plenty of data is now being captured but not used, and in the words of John Lennon “you say you want a revolution” and “we all want to change the world” … data is changing our world significantly but are you equipped for it?


The Idox Information Service can help you access further information on the use of data science, and the skills needed. To find out more on how to become a member, contact us.

Download the Datavores Infographic.

Further reading on the topics covered in this blog and infographic*:

Skills of the datavores: talent and the data revolution

Are you a Datavore? Insights on the use of online customer data in decision-making

UK data capability strategy: seizing the data opportunity

Information economy strategy

Inside the Datavores: how data and online analytics affect business performance

Employer insights: skills survey 2015

Big data analytics: assessment of demand for labour and skills 2013–2020

UK corporate perspectives: new technologies – where next?

*Some resources may only be available to members of the Idox Information Service

Top 5 trends for public sector technology

The Word 'Digital' on metal

Image from Flickr user Ged Carroll via Creative Commons

By Steven McGinty

At the Idox Information Service, we like to keep up to date with the latest developments in public sector technology. Whether it’s what new digital services are on the market or which direction the government is heading in, we like to monitor everything that could potentially have an impact on our customers, as well as, of course, ourselves.

With the pace of change though, sometimes it’s a good idea to stand still and reflect. Therefore, we’ve decided to sit down, analyse the trends of the day, and produce our very own list of top 5 public sector tech trends.

Here’s what we’ve come up with:

Government as a platform

The recent election win by the Conservatives provides a certain level of continuity for the Government Digital Service (GDS). Over recent years they have been heavily involved in the implementation of ‘government as a platform’. They describe it as:

“a common core infrastructure of shared digital systems, technology and processes on which it’s easy to build brilliant, user-centric government services”.

The most high profile example of the government as a platform approach is the GOV.UK website. In 15 months the government has shifted from having over 300 government agency and arm’s length body websites to having information delivered through just one single website.

The GDS has also introduced GOV.UK Verify, a platform that allows citizens to prove who they are when using government services. At the moment, several government departments have signed up, including HM Revenue and Customs (HMRC), the Department for Environment, Food & Rural Affairs (DEFRA) and Department for Business, Innovation & Skills (BIS).

It is likely that government as a platform will continue, with new government departments and agencies moving onto GOV.UK and GOV.UK Verify. The Chancellor, George Osborne, also announced a greater role for the GDS in working with local government. The result could be a greater use of government as a platform principles in local government.

Government austerity

The issue of tackling the budget deficit was a major theme of the last election. It’s widely accepted that savings will have to be made if the government is to reach its goal of running a surplus by the end of the parliament.  The Local Government Association highlight that local authorities may be particularly affected, estimating cuts of approximately 9% next year. Although it will be interesting to see if a recent warning against further cuts, which has come from Conservative Councillors, will make a difference.

Either way, this will have an impact for technology. It could mean that councils will be looking to find technical solutions to create efficiency savings. We have also seen local authorities working more closely together and sharing services in order to drive down costs.

Data driven decisions (analytics)

The public sector has been using data collected from a variety of channels to provide more efficient and effective public services. Government services are being moved online and users are being encouraged to make this their first port of call.

For instance, Essex County Council has been using analytical and diagnostic methods from the commercial sector to map the ‘customer journey’. They applied this approach to the booking of Adult Learning courses, which requires customers to interact with a number of systems.

‘Open government’

In January, the Speaker’s Digital Democracy Commission published a report on how technology can be used to improve democracy in the UK. Some of the main proposals include:

  • Ensuring that Parliament is fully interactive and digital by 2020;
  • Introducing secure online voting for citizens by 2020;
  • Making sure that published information is freely available in formats suitable for re-use;
  • Using new technologies and social media to help explain the role of the Houses of Commons and increase public engagement.

Health and social care

Health and social care is a key area for technology. The policy of health and social care integration means that technical solutions are required to manage and share information.  Although this has been an issue for decades, the demand for greater savings has meant that this has become a real issue. It will also be necessary to meet new legislative requirements, such as the reporting requirements introduced through the Care Act.


Further Reading:

We regularly write about public sector technology, and how technology based solutions can help drive improvements in public sector service delivery. Other recent blogs include:

What technology brings to health and social care: a case study of Calderdale and Idox

 

By Steven McGinty

In the second of our articles on health and social care and technology, we‘re going to look at the advantages of using technology, as well as a case study of an innovative partnership between Calderdale Council and Idox.

The ‘Digital working, learning and information sharing’ strategy, developed in partnership with the adult social care sector, identifies three areas where technology would bring a number of benefits:

  • working directly with those who need care and their carers;
  • supporting the learning and professional development of staff;
  • organisational business support and information management systems.

The use of electronic notes, for instance, would be a simple step that would have a significant impact on homecare workers (highlighted in section 5 of the Burstow Commission report on the future of the home care workforce).  At the moment, care workers usually make handwritten notes and leave them in a book in someone’s home.  However, if care workers moved from handwritten notes to electronic notes, information could be shared more easily. This would mean that care managers and families would be able to monitor an individual’s care and conditions remotely.

Organisations have also seen the advantage of incorporating e-learning into staff development.  The Skills for Care ‘Digital capabilities in social care’ report found that 95% of organisations used e-learning courses to support staff development, particularly in administration-related areas, such as health and safety and fire training. For instance, instead of sending staff on full day training sessions, e-learning courses can be completed by staff in an hour, offering greater efficiency and flexibility.

However, the report also highlighted that social care related e-learning courses, which looked at issues such as dignity and respect, were of ‘variable quality’ and not able to compete with the experience of face-to-face and group learning. Therefore, it’s possible that an opportunity is being missed by education and training providers, as technology should be able to provide better solutions than the simple tick box exercises described in the report.

Interestingly, the report also suggests this might not be too far off, as one of the organisations revealed that they were looking at more interactive options and were currently working on a research project with a university in Greece, which focused on the idea of ‘gamification’.

One local authority that’s certainly tried to capitalise on the benefits of technology is Calderdale Council. The council has developed an innovative case management tool to support their day-to-day work, in areas such as child protection, looked after children, and fostering and adopting. Parveen Akhtar, Early Intervention Service Manager, at Calderdale Council explains that:

“The Child Social Care solution was created in partnership with schools, health and police. Providing an intuitive system to meet the requirements of front line social care practitioners, it enhances our ability to provide better services to families within our community.”

The Child Social Care solution creates a single view of a child through combining information from several sources into one record. This means that practitioners are able to create, access and share information easily and securely, supporting informed decisions and putting in place appropriate support for children and their families.

The system has a number of benefits and features, including:

  • improving multi-agency communication and response;
  • reducing the amount of time taken by practitioners to locate another agency involved in a child’s case;
  • enabling practitioners to access information remotely;
  • offering comprehensive performance and reporting tools for providing vital statistics;
  • providing the ability to monitor and track the progress that children and families are making.

Calderdale have teamed up with Idox, a specialist in providing technology, content and funding solutions to government, and are now offering their system to other local authorities. The partnership has already proven to be successful, with Calderdale and Idox providing their solution to councils in the Isles of Scilly and Leeds.

Over the coming years, health and social care will be facing ever greater demands with tighter budgets. For this reason, technology is going to be essential to support better outcomes and more efficient services.  It is therefore important that a strategic approach is taken concerning information technology, and that organisations look at its long term benefits, rather than the short term savings from cuts to investment.

The first article on health and social care and technology, “What’s preventing health and social care from going digital?”, can be found here.

Further reading:

 

What’s preventing health and social care from going digital?

Two women using a tablet computer.

Image by Innovate 360. Licensed for reuse under Creative Commons.

By Steven McGinty

In the first of two articles focusing on technology in health and social care, I will be looking at some of the barriers organisations face in adopting digital technologies. Financial pressures such as the reduction in public spending, as well as an ageing society, mean that health and social care will be expected to meet greater levels of demand with fewer resources.

The UK Government believes that the implementation of technology is the solution to helping the health and social care system become more efficient and more effective at delivering patient care. However, before health and social care can reap the benefits of technology, a number of barriers have to be broken down.

Information sharing challenges

Integration has been a main focus of health and social care in England, as well as the devolved administrations. If integration is to work successfully, different organisations must be able to share data securely. At the moment, data is recorded in a variety of ways across a number of different IT systems. We also have a situation where the main method for sharing data securely in local authorities, the Public Services Network (PSN), is not fully integrated with either the NHS in Scotland or England. Eddie Copeland, of the Policy Exchange, suggests that full integration of the NHS with the PSN should be seen as a priority.

Financial costs

The financial costs of rolling out new technology within an organisation can be significant. These costs can include the procurement of hardware and software, internet connections, and the training of staff. For organisations which are undergoing major budgets cuts, it may seem very difficult to justify the investment in technologies, even if there is the potential for savings in the future.

Management issues

The importance of technology in organisations can be underestimated by decision-makers. For example, according to Martin Ferguson, Director of the Society of IT Management (Socitm), the ICT challenges involved in introducing the new Care Act in England are not being given enough priority. He highlights that if organisations are unable to share information safely by April 2015, they risk failing to comply with new reporting regulations.

Local authorities can also have policies that restrict the use of technology. A recent Skills for Care report into the digital capabilities of social care found that local authorities are still wary of certain technologies, including cloud based systems, which can offer low-cost solutions, and social media, which can lead to savings for local authorities if used correctly.

The health and social care workforce

The Skills for Care report highlights that over 95% of staff feel they are confident in basic online skills. However less than a quarter of managers believe that they have staff with enough skills to make use of digital technology. This mismatch means that managers may be hesitant to introduce new technologies over fears that staff may have difficulties in using the technology, as well as the costs associated with staff training.

There is also a suggestion that social care staff may be resistant to the introduction of new technologies, due to concerns that introducing technology may over-complicate things and move the focus away from the patient. As we noted in a recent article on digital services within government, a key part of introducing any new technology is changing the mindset of staff and having effective leadership in place to champion it.

These are just some of the challenges associated with introducing digital technologies into health and social care. In a future article, we will look more at how technologies can be used within health and social care and the benefits they can bring to organisations. We also look at a case study of an innovative technology partnership between Calderdale Council and Idox, which is addressing the shared services agenda in social care.


Further reading:

 

How can the government unlock the potential of big data?

By Steven McGinty

Last May, the Open Rights Group announced that they were in discussions with the UK Government over their proposals to remove the barriers to data sharing and link up government databases. This would mean that thousands of government databases, containing information such as criminal records and even energy use, could be accessed by local councils, schools, the civil service and the police. It’s hoped that the sharing of data will allow the government to capitalise on big data techniques and provide better and more tailored public services.

However, several issues have been identified that may make widespread government data sharing challenging. These include:

  • a lack of prioritisation by local council and government leaders;
  • concerns over protecting the privacy of citizens;
  • a mistrust of government data handling;
  • the use of different systems and different standards by government bodies.

The Information Commissioner’s Office (ICO) reports that from April 2013 to March 2014 there were just over 1500 breaches of the Data Protection Act. Local authorities accounted for 234 of these breaches, coming second only to health organisations, who committed 551 breaches. In the last quarter of the year, the most common offences were disclosing personal information in error (175 incidents) and lost or stolen paperwork (74 incidents).

The ICO has also handed out several high profile fines to organisations in the public sector. For example, North East Lincolnshire Council was fined £80,000 for losing an unencrypted USB stick which held the personal and sensitive data of children. Similarly, Aberdeen City Council were fined £100,000 after a member of their staff accidently uploaded documents onto the internet, including personal information about social care cases.

The Improvement and Development Agency (I&DeA) released a report in 2010 on the role of data sharing in tackling worklessness. The report findings, still relevant today, highlighted the importance of developing data sharing systems that:

  • build in the need for data sharing into the design;
  • adopt clear and consistent definitions;
  • respect the privacy of individuals;
  • ensure data integrity.

Further, the report explained how anonymised personal data can be used to share data legally. For example, anonymised data (data which has had its identifiable information removed), has been used increasingly to provide local analysis across a number of areas, including health, crime and employment. Some examples include Eastleigh Ambition, which uses data to target and support vulnerable families, and Newham Council, who use a range of data, including Disability Living Allowance information to improve their understanding of changing populations and needs.

Working in partnership and using technological innovations has also provided solutions for data sharing issues. For instance, the Tyne and Wear City Strategy Partnership was established to purchase a shared customer tracking system to facilitate data sharing. The system has been rolled out in a variety of ways across the North East of England, with partners helping to make the system more user friendly. The system has been designed to ensure that consent is built in whenever data is shared. Users also have different levels of access depending on their organisation and on what they ‘need to know’, to ensure compliance with the Data Protection Act.

Although there have been some high profile cases of government data mishandling, it’s clear that data sharing will continue to increase, particularly as all levels of government look for more targeted services. Government and society will have to come to an agreement on how this should be done.


 

Further reading: