Duncan’s blog

March 7, 2009

Glenrothes by-election missing register – inquiry report published

Last month it was reported that the Glenrothes by-election register of electors had gone missing, despite a statutory obligation to keep it for a year after the election. The inquiry into its disappearance has published its report (PDF). If you’re interested I’d recommend you read the PDF, because it contains much more information than any of the news reports, which don’t seem to go beyond the executive summary.

The report’s author, Bill McQueen CBE, is very clear to stress that there is no evidence or suggestion of foul play.

“Human error and management failure” are to blame. In particular, it seems to have been slightly bad luck that the basement they decided to store the files in was also being cleared out of old furniture and confidential waste by contract workers during November – January.

“A failure to store the registers in a more secure location” is cited, which is a clear breach of the Data Protection Act. I hope that the Information Commissioner will now issue an Enforcement Notice against the Scottish Courts Service.

The Returning Officer‘s staff delivered all the papers from the election on the 18th and 26th November. Most of that was in labelled black bags, but the register of electors was hand-delivered in a box to the Office Manager at the Kirkcaldy Sheriff Court. This was “because the documents in this box were likely to have to be accessed to respond to requests from candidates”. Despite this, “Sheriff Court staff were clear that any box of registers received in the general office would have been quickly moved and stored in the basement along with the election black bags”.
FAIL!

The SNP had put in a preliminary request on the 19th November, asking for the cost to get a copy of the register. Surely knowing that, a week later when you get the documents they’re looking for, you might think to yourself “this could be handy, I’ll keep it here in the office” instead of dumping it in the basement.

The failure to respond to SNP Councillor John Beare‘s request for over two months is particularly telling:
“A court officer … accepted responsibility for the task but ascribed it a lower priority than her core court duties. She worked part-time … and because of pressure of work and annual leave periods, did not seek to complete the task until late January.”
“there was no system in place … for her managers to monitor ad hoc duties such as this…”
“Councillor Beare received no acknowledgement to his letter of 19 November and … he made follow up phone calls to enquire about progress on 10 December, 14, 20, 23 and 29 January. He received responses that the officer dealing with his request was out of the office and that messages would be passed on and calls returned, but they were not.”

Anyone who’s worked in the public sector will recognise all the above as being quite common. Lack of management oversight, part-time workers hard to get in contact with, requests for information or minor tasks being overlooked for months, messages not passed on, etc.

Apparently one reason she’d put the task off was she thought she’d have to open 95 envelopes and count up the names to calculate the cost for Councillor Beare. However the costing system had changed, meaning it would have taken her seconds instead of hours to carry out the initial request. The Sheriff Clerk was aware of this, but hadn’t passed on the information to the staff member who would be doing this.
FAIL!

The use of bin bags to store all this information is maybe less than ideal. It’s no wonder that, when dumped in the corner of a basement, these might be mistaken for genuine rubbish to be dumped.
glenrothes by-election ballot papers

The register of postal electors has been re-constructed from available data by the Returning Officer. The postal votes were probably the most contentious issue for the SNP, given postal turn-out was much higher than anticipated. I expect they will by now have received a copy of this register, and are hopefully satisfied it was all legit.

The report as a whole is worth reading, and top marks to the author and his team for putting it together reasonably quickly (I expected something might come out after six months, by which time everyone would have forgotten it).

February 4, 2009

Glenrothes by-election register missing, presumed dead

It’s been widely reported that the Sheriff Court in Kirkcaldy has managed to lose the official electoral register from the Glenrothes by-election in November last year. The register lists all the names of who voted, at which polling stations (but not how they voted), and is meant to be kept for a year, and made open for inspection. The SNP made repeated requests to see it, starting in November shortly after the election, and it’s taken until now for the Sheriff’s office to admit they don’t have it.

SNP MSP Tricia Marwick said:

It is almost beyond belief that a by-election which attracted media coverage throughout the UK, which delivered a surprise result and had a much higher turnout than anticipated now has no records to show who actually voted.

I have no evidence of foul play. I sincerely hope not. But the turnout at this by-election surprised everyone and the result was a surprise.

Without coming straight out and saying it, it sounds to me like she’s hinting that the election might have been rigged; without the register they’ll never know. Lindsay Roy say they’d be happy for a recount, because the ballot papers haven’t been lost. However there’s no way of telling who voted without the register, so the ballots could have been rigged by registering multiple false names on the electoral register (for instance).

The Courier are reporting Marwick’s statement slightly differently:

Asked if she suspected foul play, she said, “No I do not. Nor do I believe it was a fair election“.

Of course that implies some level of Machiavellian plotting from all involved; the Labour politicians not only managing to pinch the election, but also to collaborate with someone in the sheriff court to steal and destroy the evidence. Incredibly unlikely, it’s almost guaranteed to be pure incompetence on the parts of someone in the courts. Sounds like the register’s been chucked into their secure paper disposal bucket.

On the other hand, this is just yet another public sector loss of important data, and the Information Commissioner should issue an enforcement notice against the Scottish Courts Service. Not just for the loss, but also the lateness in admitting they’d lost it.

Some sources:

Also reported in The Spoof: Mugabe: Brown an ‘Excellent Student’

Mr Mugabe said, “Mr Brown has been an excellent student, for a colonialist. He quickly learned the rules of ‘Banana-Republic’ electioneering and, with my help, he ensured that Glenrothes, [population of 47,000] had 1.2 million registered postal voters, all of whom voted Labour“.

:-)

January 30, 2009

MSPs’ expense claims: Data Protection Registrar

After looking at how MSPs were claiming expenses for their websites, I decided to see if there were any other interesting facts to be gleamed from the MSP Allowances search form.

One of the categories they can claim for is Data Protection Registration, and reassuringly, 94 claims were made for this in financial year 2007-2008. I say claims, because only 93 MSPs claimed but Bill Wilson claimed twice, in February 2007 and November 2007. I’m not entirely sure how a claim for February 2007 can appear in results for a financial year that started in April 2007.

However there are 129 MSPs, which means 36 didn’t claim for this expense. When you register as a Data Controller, you have to pay £35 annually. So those 36 MSPs haven’t registered, or have incorrectly claimed the £35 expense in a different category, or have paid the fee but just not claimed for it.

So, can we find out which MSPs haven’t registered with the Information Commissioner?

Conveniently, the ICO has a search form for the Data Protection Public Register. Typing in MSP will give you almost 80 names straight away. To find the rest it’s a case of plugging in the names. Some have variations on how they’ve spelled their name, but eventually I got down to a list of eight names I couldn’t find:

Name Party Constituency
Andy Kerr Labour Party East Kilbride
Bruce Crawford Scottish National Party Stirling
Elizabeth Smith Conservative Mid Scotland and Fife
Jim Mather Scottish National Party Argyll and Bute
Joe Fitzpatrick Scottish National Party Dundee West
Margaret Curran Labour Party Glasgow Baillieston
Nicola Sturgeon Scottish National Party Glasgow Govan
Nigel Don Scottish National Party North East Scotland

It might be that these MSPs have registered under a different name that I’ve not searched for, or there’s been a typo when the details have been entered into the system.

Let’s cross-check those eight names against the list of names who claimed expenses, and see which of those eight have claimed:

  • Andy Kerr, January 2008
  • Bruce Crawford, November 2007
  • Elizabeth Smith, January 2008
  • Joe Fitzpatrick, October 2007
  • Margaret Curran, January 2008
  • Nicola Sturgeon, June 2007
  • Nigel Don, October 2007

So they all claimed except for Jim Mather. I’m going to give them the benefit of the doubt, and assume they are correctly registered with the ICO, and for some reason I’m just not having any luck finding them on the Data Protection Public Register.

MSPs, MPs, MEPs and Councillors are basically obliged to register as Data Controllers. Some information I’ve found on the ICO site confirms this:

Organisations or individuals that process personal information covered by the Act may need to notify the Commissioner about their processing. A description of the processing activities is placed on a public register of notifications. These organisations or individuals must also comply with eight data protection principles which together form a framework for the proper handling of personal information. Individuals whose personal information is processed have rights under the Act, for example, to a copy of the information that is held about them.

When elected members represent residents of their ward, they are likely to have to notify in their own right, for example, if they use personal information to timetable surgery appointments or take forward complaints made by local residents.

The Data Protection Act contains a number of criminal offences including:
When someone is required to notify and does not do so. For example, a councillor who holds computerised records of constituents’ details for casework purposes, would commit an offence if they had not notified this use of personal information.

Someone should be checking these eight MSPs to make sure they have been correctly registered with the ICO. If you are a constituent of any of these MSPs, you might want to use the excellent WriteToThem.com to ask your MSP what name they have registered with the Information Commissioner.

Theme: Rubric. Blog at WordPress.com.

Follow

Get every new post delivered to your Inbox.