Department for Work and Pensions (DWP) Central Freedom of Information Team [email protected]
Our reference: VTR 5248
Date: 23 December 2014
Dear Mr Wolf,
Thank you for your Freedom of Information (FoI) request received on 3 December 2014. You asked:
When did you give "DWP approved" status to the My Work Search website http://www.myworksearch.co.uk/ (MWS), as this is what is claimed here http://s29.postimg.org/owkqp2ml3/dwpaprroved.png here https://www.youtube.com/watch?v=eRY9wzLPJX4 and here http://vimeo.com/106135463 What is the criteria for being "DWP approved" and what DWP permission is required to publicise a website as "DWP approved"?
MWS is used for DWP back to work schemes, it's privacy policy says personal data (pd) "usage" can be shared with "Jobcentre Plus" (JCP) or a "a *third party" (see footnote), please provide information about what would be the legal basis of this pd sharing with JCP and whether this "usage" pd is shared on the basis of the JCP being a Data Controller or Data Processor under the Data Protection Act.
DISCLOSURE OF YOUR INFORMATION "Where your subscription has been provided by a third party, such as your previous employer or Jobcentre Plus, we will upon this third party’s request provide them with data on your usage of the service." as of 2/12/14 http://webcache.googleusercontent.com/search?q=cache:z- pejF_H7jcJ:www.myworksearch.co.uk/%3Fpage_id %3D29+&cd=1&hl=en&ct=clnk&gl=uk on 3/12/14 it was changed to "Where your subscription has been provided by a third party, such as your previous employer or a college or training provider, we will upon this third party’s request provide them with data on your usage of the service." http://www.myworksearch.co.uk/?page_id=29
Do you hold information which says which DWP providers are using MWS and whether it's use is with mandatory back to work schemes and 'work for benefit' schemes?
*Footnote: A third party can be a DWP contractor.
It might be helpful if I clarify that the Department provides approvals for individual welfare to work providers to use of software such as MyWorkSearch, therefore the Department does not give approval directly to MyWorkSearch itself. For a provider to obtain approval to use MyWorkSearch the Department must be assured that the DWP Security Standards have been met.
Currently the Department has issued approval to the following welfare to work providers to use MyWorkSearch:
Working Links approval issued 10 September 2014 to use MyWorkSerch for its Community Work Placement programme. Maximus approval to use MyWorkSearch in 26 September 2014 for the Work Programme.
DWP approved the use of MyWorkSearch by Maximus and Working Links on an individual basis. Any additional welfare to work providers wishing to use MyWorkSearch would be required to complete the DWP Security Plan Change Request Process.
Section 21 of the Freedom of Information Act allows us to direct you to information which is already reasonably accessible to you; the following is a link to .guidance issued to all providers, chapter 8 is about information security. Specifically paragraph 29-30 covers the DWP Security Plan Change Request Process. https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/ 260426/pg-chapter-8.pdf
The Department requires all welfare to work providers, their subcontractors and service delivery partners to operate appropriate, secure systems and processes for handling and storing participant information in line with DWP Standards and the Data Protection Act. Ensuring the security of all personal and sensitive information remains properly protected.
DWP is the Data Controller in regard to the contract and is responsible to the Information Commissioner for the security of information. We take data protection extremely seriously, and we require our providers (and their subcontractors and delivery partners) to apply the high standards that we ourselves apply.
Finally you asked about mandation, the Department does not specify the type of activities Work Programme participants should undertake. This gives Work Programme providers the flexibility to design an innovative and personalised approach to support each individual into sustained employment. Providers will decide whether an activity is mandatory or not in appropriate cases, ensuring that it is reasonable for the participant’s circumstances and will notify them in writing.
Customers who are mandated to undertake an activity by a Work Programme provider may incur a loss or reduction of benefit should they fail to comply without good reason. Further information regarding mandating customers to activities on the Work Programme can be found on the DWP website (Chapter 3a Work Programme Mandation).or via this link. http://www.dwp.gov.uk/supplying-dwp/what-we-buy/welfare-to-work- services/provider-guidance/work-programme-provider.shtml
If you have any queries about this letter please contact us quoting the reference number above.
Yours sincerely,
DWP Central FoI Team
Your right to complain under the Freedom of Information Act
If you are not happy with this response you may request an internal review by e-mailing [email protected] or by writing to: DWP, Central FoI Team, Caxton House, Tothill Street, SW1H 9NA. Any review request should be submitted within two months of the date of this letter.
If you are not content with the outcome of the internal review you may apply directly to the Information Commissioner’s Office for a decision. Generally the Commissioner cannot make a decision unless you have exhausted our own complaints procedure. The Information Commissioner can be contacted at: The Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow Cheshire SK9 5AF www.ico.org.uk/Global/contact_us or telephone 0303 123 1113 or 01625 545745