Jill Stephenson at Loch Duich Quintin Jardine in…

Jill Stephenson at Loch Duich Quintin Jardine in… - Scottish Review article by Kenneth Roy
Listen to this article

Jill Stephenson at Loch Duich
Quintin Jardine in Elie
Iain Macmillan in Gleneagles
Douglas Marr on Skye
Andrew McFadyen in Kilmarnock

Read More

R D Kernohan on Arran
David Torrance on Iona
Catherine Czerkawska at Loch Ken
Chris Holligan in Elie

Read More

Rose Galt in Girvan
Alex Wood on Arran
Andrew Hook in Glasgow
Alasdair McKillop in St Andrews

Read More

Sheila Hetherington on Arran
Anthony Seaton on Ben Nevis
Paul Cockburn at Loch Ness
Jackie Kemp in a taxi
Angus Skinner on Skye

Read More

The Midgie’s long-standing legal correspondent, Old Meldrum, reports on a curious occurrence at Kilmarnock Sheriff Court.
     According to Old Meldrum, the ‘Superintendent’ of the Faculty of Advocates has circulated the members as follows:
     Lady Members – Ladies Coat
     A navy Hobbs raincoat has been left in the female robbing room at Kilmarnock. If it belongs to you please let me know.
     Regards
     Irene

     Old Meldrum remarks in his usual dry fashion that it is not completely astonishing to learn that Kilmarnock Sheriff Court has been provided with a robbing room. The presence there of a Hobbs raincoat is perhaps more surprising.
      It only remains for the Midgie to lament the customary lack of a consoling apostrophe after the word Ladies.

Hobbs

Has anyone seen this coat? Did you rob it from the robbing room? If so, please fess up to The Midgie at the usual address

Window

Christmas Journey

On 19 December 1996, the broadcaster Ian Mackenzie (who died in 2006) embarked on a journey to what he called ‘the heart of dullness’. Between now and Christmas, we will publish short extracts from his account of the journey, which was published in SR.

I was spat out at Aberdeen into hail and slow-moving traffic on the A96 to Inverness. It was through a blurred windscreen I saw several signs saying ‘Castle Trail’ and my first Christmas lights of the day in Kintore. I was running out of steam now, so branched off after Inverurie to look at what my AA handbook said was a cheap hotel.
     The fact that I saw it in a blizzard may have had something to do with its spartan frontage and Dickensian windows suggesting a narrow bed with a crater, and gruel for supper. I chickened out and beat a retreat to busy Inverurie, but the hotel there had a Rotary feel, so I followed a sign to the Ardennan Country House Hotel.
     My heart sank a little: the ambience would be wrong; within easy commuting distance of Aberdeen, it would be all oil, dollars and a Jacuzzi full of barbecued Texans.
     I couldn’t have been more wrong. It was a plain building, entered at the side through what looked like a fire-door. Reception was a small desk overlooking two gaunt rooms, one a bar-dining room, the other a function room awaiting, by the looks of it, a function. It was all so plain I recognised my journey into the interior had begun.
     A rangy young man greeted me. A quiet room, I said, but is there a function? Yes, he said, but only for 60, and there’s no music. ‘It’s just a newsie’.
     The function room was under my functional bedroom. Their voices were the music; rolling like the North Sea or fields of tatties. Suddenly it all went quiet. I remembered my time in Buchan. They’re eating, I thought. When Highlanders eat, the conviviality escalates. In the north-east, your meat’s taken seriously.

More from Ian Mackenzie tomorrow

Revealed today: official

concerns about security

as Scotland’s surveillance

society takes hold

Open Secrets

Part II of a Scottish Review investigation

Kenneth Roy

Craig Miller

Craigmillar, Edinburgh
Photograph by Islay McLeod

In October 2007, HM Revenue and Customs lost two discs containing a copy of the entire child benefit database. It was a relatively early example of the fragility of apparently ‘secure’ systems and caused a certain amount of panic in the ranks of Scotland’s population profilers – the people in charge of the Scottish citizens’ database, then just past the conceptual stage.
     In view of the sensitivity of the questions about to be asked, the answers about to be recorded, the information about to be shared electronically by the approved ‘practitioners’ in government national and local, the health service and the police – questions as intimate as the sexuality of the client or patient – the panic was understandable. The integrity of the scheme depended on the safety of the database, and yet here was a major government department losing millions of records without breaking sweat.
     In June 2008, nine months after this unfortunate incident, Scotland’s ‘National Data Sharing Forum’ met in Edinburgh under the chairmanship of Philip Jones, chief executive of Dumfries and Galloway Council. If you have not heard of the National Data Sharing Forum, you lose no brownie points; it is one of the more obscure public bodies. Yet the membership of this advisory group is impressive: a director of social work, a director of public health, a deputy chief constable, a local authority chief executive, the principal reporter of the Scottish Children’s Reporter Administration, someone from the information commissioner’s office, the registrar-general for Scotland – in short, a cross-section of all those with a vested interest in the citizens’ database.

This worrying thought is compounded by what follows in the minute – an acknowledgement that ‘there have been instances of data protection officers’ advice being ignored’.

     The shock waves from the loss of Britain’s child benefit database – remember, this was long before the present wave of enthusiasm for the somewhat larger loss of secret documents from the Pentagon, among other fruits of Wikileaks – were still being felt.
     SR has sourced the minute of the June 2008 meeting of the National Data Sharing Forum. It makes fascinating reading. The members discussed what the minute refers to tactfully as ‘the security breaches’ at HM Revenue and Customs before agreeing a strategy for dealing with a disaster potentially damaging to the credibility of Scotland’s emerging data-sharing project. It was agreed that staff should be ‘made aware of their responsibilities when it comes to data sharing and protection’. This was considered ‘vital’ to the success of the project, which had recently been launched in selected local authority areas.
     It is worth pausing here. ‘Made aware of their responsibilities’ – are we to take it that, before the loss of the child benefit database, staff handling the records of Scottish citizens had not been made aware of their responsibilities? This worrying thought is compounded by what follows in the minute – an acknowledgement that ‘there have been instances of data protection officers’ advice being ignored’ [my italics].
     Oh, really? Ignored in what way? How badly? With what results? On these questions, the minute is unforthcoming.
     SR has sourced the minute of a meeting of another body closely linked to the citizens’ database: the e-Care Programme Board. For the uninitiated (ie most of the citizens whose lives it will monitor), e-Care is the name given to the Scottish government’s ‘multi-agency information-sharing framework’ – another way of describing the profiling of an entire population through our access to essential public services such as health, social work, education and transport.
     e-Care is responsible (according to the Scottish government) for ‘implementing a framework which enables secure sharing of sensitive personal information’. Sensitive indeed: as we reported yesterday, the personal information will include questions of religious belief, country of origin, and current living arrangements, as well as sexuality. It would be difficult to imagine questions more sensitive than the ones being asked for the purposes of recording, and sharing, on the citizens’ database.
     But secure? We are assured that e-Care ‘maintains an audit of those accessing shared records’, that there is or will be a ‘Care Information Security Co-ordinator’, and that only those who have received ‘proper authorisation from their employing agency’ will have access to a database which will eventually contain the email addresses, marital status and employment details of up to five million people, a database which will include a dedicated note of anyone living alone.
     Given the ‘sensitivity’ of these records, how secure is secure? As secure as the Pentagon’s? In that case, it seems we’re in trouble.

‘CR [presumably Craig Russell] stated that he welcomed the opportunity to reflect on where we are and where we should go. If there were agreement on the direction of travel, we should go forward in a joint manner.’

     By October 2009, however, the loss of the entire child benefit database seems to have been forgotten – at least by the e-Care Programme Board at its meeting in Edinburgh. The meeting was chaired by George Brechin, the chief executive of NHS Fife, and was attended by Craig Russell (head of ‘efficient government delivery’ at the Scottish government), Paul Rhodes (programme director of e-Health), Mike Martin (head of ‘partnership, improvement and outcomes division’ at the Scottish government), Lesley Fraser (deputy director of ‘Safer Children, Stronger Families’ at the Scottish government, and Angela Leitch. This may be the same Angela Leitch who is now chief executive of Clackmannanshire Council.
     The meeting, far from being chastened by the experience of HM Revenue and Customs, was in bullish mood. It was minuted that those agencies choosing not to adopt the e-Care framework (ie the citizens’ database) ‘need to articulate the consequences of not adopting and to be able to explain how they will share information to achieve outcomes’. What was to happen to agencies which rejected the e-Care framework and declined to articulate the consequences? Their fate was unspoken.
     The minute includes a clarion call worth quoting:
     ‘CR [presumably Craig Russell] stated that he welcomed the opportunity to reflect on where we are and where we should go. If there were agreement on the direction of travel, we should go forward in a joint manner.’
     As the crew departs on this exciting journey in its joint manner, only one question remains: who is the driver? SR has studied the composition of both the National Data Sharing Forum and the e-Care Programme Board and found that no one on either of these bodies has been elected by anyone. As Scotland confronts the reality of the citizens’ database, with its alarming implications for civil liberties, the lack of immediate democratic accountability is astonishing.
     Where are the politicians in all this? Who, if anyone, in power knows what is going on? Who is prepared to make the people of Scotland aware of the citizens’ database – and defend it?

Tomorrow: Part III of Open Secrets

Kenneth Pic

Kenneth Roy is editor of the Scottish Review