How data leaks can bring down governments

Swedish Parliament building

By Steven McGinty

In July 2017, the Swedish Government faced a political crisis after admitting a huge data leak that affected almost all of its citizens.

The leak, which dates back to a 2015 outsourcing contract between the Swedish Transport Agency and IBM Sweden, occurred when IT contractors from Eastern Europe were allowed access to confidential data without proper security clearance. Media reports suggested that the exposed data included information about vehicles used by the armed forces and the police, as well as the identities of some security and military personnel.

The political fallout was huge for Sweden’s minority government. Infrastructure Minister Anna Johansson and Interior Minister Anders Ygeman both lost their positions, whilst the former head of the transport agency, Maria Ågren, was found to have been in breach of the country’s privacy and data protection laws when she waived the security clearance of foreign IT workers. In addition, the far-right Sweden Democrats were calling for an early election and Prime Minister Stefan Löfven faced a vote of no-confidence in parliament (although he easily survived).

However, it’s not just Sweden where data leaks have become political. Last year, the UK saw several high-profile incidents.

Government Digital Service (GDS)

The UK Government’s main data site incorrectly published the email addresses and “hashed passwords” of its users. There was no evidence that data had been misused, but the GDS recommended that users change their password as a precaution. And although users did not suffer any losses, it’s certainly embarrassing for the agency responsible for setting the UK’s digital agenda.

Scottish Government

Official documents revealed that Scottish Government agencies experienced “four significant data security incidents” in 2016-17. Three out of four of these cases breached data protection legislation.

Disclosure Scotland, a body which often deals with highly sensitive information through its work vetting individuals’, was one organisation that suffered a data leak. This involved a member of staff sending a mass email, in which email addresses could be viewed by all the recipients (a breach of the Data Protection Act).

Murdo Fraser, MSP for the Scottish Conservatives, criticised the data breaches, warning:

These mistakes are entirely the fault of the Scottish government and, worryingly, may signal security weaknesses that hackers may find enticing.”

Hacking parliaments

In the summer of 2017, the UK parliament suffered a ‘brute force’ attack, resulting in 90 email accounts with weak passwords being hacked and part of the parliamentary email system being taken offline. A few months later, the Scottish Parliament experienced a similar sustained attack on parliamentary email accounts. MPs have suggested Russia or North Korea could be to be blame for both attacks.

MPs sharing passwords

In December 2017, the Information Commissioner warned MPs over sharing passwords. This came after a number of Conservative MPs admitted they shared passwords with staff. Conservative MP Nadine Dorries explained:

My staff log onto my computer on my desk with my login every day. Including interns on exchange programmes.”

Their remarks were an attempt to defend the former First Secretary of State, Damian Green, over allegations he watched pornography in his parliamentary office.

Final thoughts

The Swedish data leak shows the political consequences of failing to protect data. The UK’s data leaks have not led to the same level of political scrutiny, but it’s important that UK politicians stay vigilant and ensure data protection is a key priority. Failure to protect citizen data may not only have financial consequences for citizens, but could also erode confidence in public institutions and threaten national security.


The Knowledge Exchange provides information services to local authorities, public agencies, research consultancies and commercial organisations across the UK. Follow us on Twitter to see what developments in policy and practice are interesting our research team. 

Smart citizens, smarter state: from open government to smarter governance

 

By Steven McGinty

Last year, a poll by Ipsos Mori found that only 16% of the British public trust politicians to tell the truth. Although scepticism is healthy for a democracy, these figures are significantly lower than in 1986, when 38% of the public trusted MPs “to place the needs of the nation above the interests of their own political party

The British Social Attitudes survey attributes this decline in public confidence to the 2009 MPs’ expenses scandal. However, a more general dissatisfaction with institutions (the media, the police, and financial institutions) – who have all had their own scandals – may also be a factor.

With this decline in trust, it’s not too surprising that the British public are calling for greater transparency and more ‘open government’.

What is open government?

According to Professor Beth Simone Noveck’s book, ‘Smart Citizens, Smarter State: The Technologies of Expertise and the Future of Governing’, open government involves moving away from a ‘closed-door model’ of governance to one where government institutions connect with people and organisations from a diverse range of backgrounds. This includes citizens, academics, voluntary organisations and the commercial sector.

Examples of citizen involvement

The commercial sector has already benefited from greater citizen involvement. For instance, Facebook, which relies heavily on its 1.44 billion monthly users to generate content, is valued at over $300 billion. This is three or four times more than traditional US media companies such as CBS and Viacom. Netflix, a global streaming service for movies and TV series, also sought to benefit from outside talent by offering a million dollars to researchers who could improve their ability to make recommendations for their subscribers.

However, it’s not just about the commercial sector. Galaxy Zoo, an online citizen science project, has been very successful thanks to its pool of ‘citizen scientists’, who help translate raw information into useful scientific knowledge. In its first year, the project created 50 million ‘classifications’. To date, the project has published 48 articles using the data classified by volunteers.

Benefits of open government

In her book, Professor Noveck includes an example of how government might reduce reoffending. She explains that to initially understand the problem data scientists are required to interpret the data. Legal scholars, practitioners and victims’ groups are also needed to help understand the practical realities of the criminal justice system.  Using this scenario, she describes how professionals, such as psychologists and social scientists could design pilot projects to reduce reoffending.

Professor Noveck argues that increasing openness could provide greater insights and a more legitimate form of government. She suggests that open government has the potential to restore trust in public institutions.

Failure of open government

In 2010, the Coalition Government consulted the public on its programme for government. The website received a total of 9,500 official responses; although no government policies were changed as a result.

At the time, The Guardian described this as a failure, and Simon Burall, Director of Involve, a group advising bodies on consultation, warned that

You have to give the government some credit for trying to do this, but badly designed consultations like this are worse than no consultations at all. They diminish trust and reduce the prospect that people will engage again.”

Although a proponent for more open governance, Professor Noveck concedes that government initiatives to involve citizens, like the one introduced by the previous UK government, have failed.  She claims that the ad-hoc nature of these programmes and the long standing culture of closed-door practices present major barriers.

Smarter governance

Therefore, Professor Noveck advocates a move towards, what she calls, ‘smarter governance’. In essence, this means that institutions should look to target and match specific people with the right opportunities – which is now possible thanks to ‘technologies of expertise’. Well known platforms such as LinkedIn allow individuals to be found based on their particular skills. And online learning platforms such as the Khan Academy provide ‘badges’ to indicate the mastery of skills.

In the UK, the app GoodSAM, which evolved from London’s Air Ambulance service, is designed to alert approved medical professionals when an emergency is nearby, so that potentially lifesaving treatment can be administered.

In the US, the New York Police department maintains a database of its employees’ abilities, ranging from language skills to hobbies, such as yoga or beekeeping. The department takes the tasks of collating skills very seriously, with all new recruits completing a form as part of the human resources process. Having this knowledge allows senior officers to make better use of their staff abilities, and provide a better service.

Conclusions – “More Minecraft, less statecraft”

Professor Noveck concludes her book by calling for positive steps to ensure that institutions not only listen to advisory boards and formal committees, but also include the citizen experience and wider expertise. She recommends that there should be a diverse range of conversations between government and its citizens, and that reinventing the processes of decision making should be a matter of urgency.


The Idox Information Service includes a traditional library service offering a range of physical books, documents and reports.  The book, ‘Smart Citizens, Smarter State: The Technologies of Expertise and the Future of Governing’, by Professor Beth Simone Noveck, is the latest addition to our collection, and can be borrowed by Information Service members.  If you would like to subscribe to the Information Service please contact us at AskTheResearchTeam@idoxgroup.com

 

Involving young people in local political systems and decision-making

15765630046_2552d75021_o

Image from Flickr user UK Parliament via Creative Commons

Our latest briefing focuses on the involvement of young people in political processes and decision-making. You can download the briefing for free from the Knowledge Exchange publications page.

While the media was focused on young people’s participation in politics at the national level during the recent General Election campaign, in this briefing we take a step back and look at the involvement of young people in local political processes and decision-making.

Research by the IPPR in 2013 found that alongside those from lower socioeconomic backgrounds, young people are the group least likely to vote at elections. At the local level, research by the National Centre for Social Research for the Joseph Rowntree Foundation has found that young voters are even less likely to turn out for local (and European) elections.

Our briefing highlights a range of reasons suggested by existing evidence as to why young people have low levels of engagement with political systems and decision-making. These include:

  • A lack of trust in politicians and their parties.
  • A focus on policies that do not directly impact on their lives.
  • Today’s generation of young people do not see voting as a civic duty.

Also highlighted are the reasons why it is so important that more is done to encourage young people to engage with political and decision-making processes. These range from legal factors (children and young people have the legal right to have a say in all matters that affect them, according to Article 12 of the United Nations Convention on the Rights of the Child) to examples of positive contributions that children and young people have made in the shaping of local services.

The briefing includes advice on how organisations including councils can help to encourage and facilitate young people to become more involved in formal decision-making processes. This includes tips on practical considerations (e.g. venues, timing of meetings), safeguarding issues and how best to communicate with young people.

A number of examples of good practice are identified, including Dorset County Council’s Youth Inspectors scheme. Established in 2009, the project aims to enable young people to learn about and influence local services in their area.


 

The Knowledge Exchange specialises in public and social policy. To gain an insight into the commentary it offers, please explore our publications page on the Knowledge Exchange website.

To find out more on how to become a member, contact us.