Thank you for your request under the Freedom of Information Act 2000. I can confirm that Essex County Fire & Rescue Service does hold this information.
Please see below the answer to your request.
Final Response:
I am writing to make a request for information under the Freedom of Information Act 2000.
If this request is too wide or unclear, I would be grateful if you could contact me as I understand that under the Act, you are required to advise and assist requesters. If any of this information is already in the public domain, please can you direct me to it, with page references and URLs if necessary.
1. What percentage of software applications are developed in-house vs. supplied by third parties (commercial software and open source components)?
a. Less than 10 percent
b. More than 10 percent, but less than 50 percent
c. More than 50 percent
A. Less than 10 percent.
2. What percentage of your software development organization has received data privacy related training?
a. Less than 10 percent
b. More than 10 percent, but less than 50 percent
c. More than 50 percent
The Service does not engage in software development.
3. In the past five years, has your organisation suffered a data privacy incident which would now be required to be reported under GDPR?
Current employees are not aware of privacy incidents that happened prior to December.
a. What processes were implemented to address shortcomings contributing to these incidents?
Within the past 18 months, our organisation has had to report a data breach to the ICO. We are still in the process of fully implementing the regulator’s recommendations.
4. Has your organisation suffered at least one data privacy incident which was reported under GDPR?
a. Yes
b. No
A. Yes
5. To which position(s) does your data protection officer report?
a. CISO
b. CRMO
c. CIO
d. CFO
e. CEO
The data protection officer does not report to any of the listed above.
Thank you for your interest in Essex County Fire & Rescue Service.