Question to the Department for Education:

To ask the Secretary of State for Education, pursuant to Answer of 15 November 2022 to Question 82174 on Gambling: Children, who authorised (a) the disclosure to Trustopia and (b) the contract terms of that disclosure; who was responsible for monitoring the management of that data; and whether disciplinary action has been taken following that incident.

The disclosure to Trust Systems Software UK Limited (trading name Trustopia) resulted from access given to a predecessor organisation that was a legitimate provider. The Department received a change of name request form and the amendment form which required Trustopia to sign a new learning provider agreement which set out terms of use for the Learning Records Service.

There is a dedicated team who manage the Learning Records Service. A signed copy of the agreement will be placed in the House of Commons Library in January 2023. The Department has worked closely with the ICO following this incident. Procedures for monitoring unusual activity have been strengthened, as have wider practices around Data Protection in the Department.

The Department’s legal advice at the time was not to pursue breach of contract pending the ICO investigation. The company has since ceased trading.