Archive for the 'Open Government' Category

Freedom of Information: Designation of Additional Public Authorities

Tuesday, December 18th, 2007

NOTES TO USERS

It is most helpful if you direct your comments specifically to the consultation’s questions, although we also welcome more general comments.

Introduction

This paper sets out for consultation proposals for increasing (subject to further consultation) the types of public organisations from which the public can access information. The consultation is aimed at:

  • public authorities working with organisations that are not covered by the Freedom of Information Act 2000;
  • those organisations carrying out public functions that are not currently covered; and the general public and others interested in access to public information in England, Wales and Northern Ireland.
  • members of the public

(Did not include standard formalities re stakeholders - which does not include ORG - and observing consultations code of practice criteria)

The proposals

1. The Freedom of Information Act 2000 (the Act) came into force on 1 January 2005. The Act makes provision for the disclosure of information held by public authorities. This contributes to the Government’s aim to strengthen the connection between citizens and the state. The Act aims to enable greater transparency, accountability and engagement, for example by providing more information about how taxpayers’ money is spent or by providing the context for better informed public debate.

2. The Act applies to over 100,000 public authorities. These include central government departments, local authorities, schools, colleges and universities, the health service, the police and a range of other public authorities. Those to which the Act applies are required to have a publication scheme, which sets out what information they routinely make available and how, and to answer requests for information in a timely manner. There are three categories to which the Act applies:

  • persons or organisations listed in Schedule 1 to the Act, either by name or by a description (such as ‘any government department’)
  • companies which are wholly-owned by a public authority
  • persons or organisations ‘designated’ by the Secretary of State as public authorities for the purposes of the Act.

The Act terms these persons or organisations ‘public authorities’. This paper uses the term ‘public authority’ to mean a person or an organisation covered by the Act. In the rest of the paper we discuss the coverage of organisations; however individuals who hold a specific office, for example the Auditor General for Wales, can also be covered in the same way.

3. There are clearly defined criteria for an organisation to be listed in Schedule 1 to the Act. Broadly speaking:

  • the body must be established under the Prerogative, or legislation, or
  • by a Minister, government department, or by the Welsh Ministers; and
  • appointments to the body or office must be made by the Crown, a Minister, a government department or the Welsh Ministers.

Organisations that meet these criteria are periodically brought within the scope of the Act by orders made under section 4. If a company is wholly-owned by a public authority, then it is automatically covered by the Act.

4. No organisation has yet been designated by the Secretary of State for Justice as a public authority for the purposes of the Act (the third category in paragraph 2).

5. The experience of the first years of FOI suggests that the Act is working well and has been successfully implemented across more than 100,000 public authorities. Now is the time to review the coverage of the Act, based on this experience, although the Government recognises that this experience may not directly translate to the private and voluntary sectors.

6. Section 5 of the Act enables the Secretary of State to designate two types of person or organisations as public authorities: those which:

  • appear to the Secretary of State to exercise functions of a public nature, or
  • are providing, under a contract made with a public authority, any service whose provision is a function of that authority.

The Secretary of State makes a designation by making what is called a section 5 order. Section 5 is a residual category: that is, a section 5 order cannot cover any organisation that could be listed in Schedule 1 to the Act by the making of a section 4 order, or is already covered by virtue of being wholly-owned by a public authority.

7. Section 7 of the Act requires that any section 5 order must state the functions or services provided under contract for which an organisation is designated. The Act will not apply to any other information held and therefore will not necessarily cover all the work carried out by an organisation. There will be some organisations all of whose functions could be designated under section 5 because they perform only functions of a public nature. In other cases the application of section 5 will be more limited.

8. It is possible in some situations for a section 5 order to designate a class of organisations rather than listing individual organisations. For example, it might be considered appropriate to designate as a class those contracted to run prisons under Part IV of the Criminal Justice Act 1991, rather than listing each individual contractor. This would help reduce the number of orders needed and ensure greater consistency of coverage.

9. The Secretary of State must consult with each organisation, or with representative organisations, before designation can take place. In addition, Impact Assessments would have to be carried out before designating any private bodies.

10. Once this consultation period is completed, the responses will be analysed and policy proposals formulated. In accordance with the Act, representatives of the relevant organisations will then be consulted further. Depending on the responses to the consultations, the Government would hope that any initial section 5 order could be brought into effect by the end of the next Parliamentary session.

Part 1: The case for reviewing coverage of the Act

11. The Government believes that there are good reasons for reviewing coverage of the Act:

  • some organisations receive large amounts of taxpayers’ money to carry out functions of a public nature but are not currently subject to the Act. In fulfilling those functions it would seem appropriate that they be subject to the same scrutiny as public authorities within the scope of the Act. To include such organisations within the scope of the Act would increase transparency in the distribution and expenditure of public funds;
  • some organisations have contracts to carry out important work that would otherwise be done by the public authority they contract with. For example, prisons run by HM Prison Service are currently covered by the Act but prisons operated by private contractors are not. The prisons provide similar services and apply similar standards regardless of whether they are run directly by the state or privately under contract;
  • access to information about a particular service may vary across the country if in some areas it is provided by a public authority, such as the local authority, and in other areas it is provided under contract by a private company or by a charity or voluntary organisation in receipt of a grant;
  • the coverage of the Act is narrower than that of the Environmental Information Regulations 2004 (EIRs). The EIRs apply to almost all the public authorities that are listed in Schedule 1 to the Act, as well as organisations that are under the control of these public authorities and are responsible for developing, managing, regulating or inspecting the environment on behalf of the public. It may be appropriate for some of the organisations that are covered by the EIRs also to be covered by the Act;
  • some non-public authorities consider that they carry out work of a public nature and would readily accept that they should be included within the scope of the Act.

12. The Government also believes that in considering how and when to extend coverage of the Act, a balance needs to be struck to ensure that the advantages of openness are considered alongside the potential impact on organisations to be covered. It will need to take account of reasons against extending coverage of the Act to at least some of the organisations to which section 5 could potentially apply. In particular:

  • any review needs to take account of FOI costs and the potential effect on the cost of provision of services and the willingness of businesses to contract to deliver services in the future. The requirements of FOI could have particular implications for smaller organisations as they may have less capacity to absorb extra costs. Evidence from organisations already covered shows that complying with the requirements of the Act places additional financial and administrative burdens on the public authorities. While some costs may be offset, for example by charging for the provision of information through publication schemes and through charging for disbursements, this would not cover the majority of the set-up and running costs of FOI;
  • the Government is committed to supporting the voluntary and community sector in its provision of public services and to reducing unnecessary burdens, in particular on small businesses, and so does not wish to regulate unnecessarily.

13. The Government considers it important to balance the potential benefits of increased information access against the impact on the delivery of public services, on businesses and on the voluntary and community sector. Any decisions on section 5 orders will need to be made on a case-by-case basis in the context of the overall policy objectives. The potential impact would be discussed in the required consultation with the suggested organisations or their representatives and analysed in an Impact Assessment.

14. In considering whether to extend the application of the Act to organisations with functions of a public nature or to public service contractors, the Government has considered a number of alternatives to using section 5 orders to increase information access. The options considered for the use of section 5 orders and for alternatives are set out below, with some of the considerations needing to be taken into account.

Option 1: take no action at this time. If no changes were made to the scope of the Act, the statutory right of access to information would continue to be limited to information held by those public authorities currently covered by the Act. There would be no new rights of access to information from other organisations providing public services under contract or which have functions of a public nature. As noted above, some such organisations are significantly involved in delivering public services but are under no general obligation to provide information about these activities. This may be thought anomalous and inconsistent with the objectives underlying freedom of information.

Option 2: self-regulation by relevant organisations. Organisations that meet the conditions of section 5 of the Act would be encouraged to provide information about their public activities on a voluntary basis instead of being required by a section 5 order to make information available in accordance with the Act. One possibility would be to draw up a Code of Practice for private organisations that are providing public services. If such a code could be agreed and generally observed, this might provide the benefits of increased access to information while minimising disruption and regulation of private organisations. The key questions that would need to be addressed are how far and how consistently organisations could be expected to abide by any non-statutory guidance and whether any sanctions could be brought to bear on organisations that failed to do so. Anecdotal evidence suggests that while some such organisations are already choosing to make information available, others are unwilling to do so.

Option 3: build information access obligations into contracts with organisations delivering public services. This would provide for some form of information access in relation to services provided under contract, but would not be an option in relation to organisations exercising functions of a public nature in their own right, rather than under contract. Information could be supplied either directly from the contractor or by requiring the contractor to send information to the public authority that would then be accessible from them under the Act. This is likely to be less burdensome to the contractor than being designated as a public authority. Standard clauses could be produced to include conditions and exemptions similar to those found in the Act. These could be adapted to meet the individual needs of the organisation providing the service. However, there would then be the risk of inconsistency in the level of information access from different contractors. That risk would be exacerbated if it were decided to introduce such obligations only into new
contracts (since reviewing all contracts already held by public authorities would be time consuming and costly). We would need to consider whether such contracts should be enforceable not just by the public authority, but also by members of the public seeking access to information. Another
disadvantage of this option would be that enforcement would take place ultimately through civil claims for breach of contract, rather than the enforcement machinery contained in the Act.

Option 4: introduce a single section 5 order covering a specified set of organisations. This option would increase public access to information from specific organisations that provide public services while leaving others outside the ambit of FOI. It would allow for FOI coverage to be extended only to those organisations in respect of which the government was satisfied that the benefits of information access outweighed any negative impacts. Possible criteria for identifying the most appropriate organisations to be covered by any section 5 orders are discussed in more detail in Parts 2 and 3 of this paper. It would of course be feasible to introduce further section 5 orders in future, but under this Option there would be no specific expectation on the Government to do so in the short term.

Option 5: introduce a series of section 5 orders so as progressively to widen coverage of the Act over time. This option would provide for progressive extension of the coverage of
FOI. Designation of new public authorities could be implemented in waves by means of successive section 5 orders. Organisations could be brought within the ambit of the FOIA in order of priority; this would also allow for evaluation of the benefits of each order before any new order was made.
Rigorous impact assessment would be needed to ensure that the benefits of access to the information held by any organisation or class of organisations outweighed any negative impact, for example on their ability to work effectively.

Sharing Personal Information (ICO)

Friday, August 24th, 2007

TO ADD YOUR OWN COMMENT OR VIEW OTHER COMMENTS, CLICK ON THE BLUE BAR. THIS SERVICE IS IN BETA - PLEASE ALSO FEEDBACK ON BUGS AND SUGGESTED FUNCTIONS.

Framework code of practice for sharing personal information

Content

About the Code

Code of practice recommended content:
1. Deciding to share personal information
2. Fairness and transparency3. Information standards
4. Retention of shared information
5. Security of shared information
6. Access to personal information
7. Freedom of Information
8. Review

Appendix 1 –Other relevant guidance from the Information Commissioner.

About the Code:

Why a framework code of practice?

The Information Commissioner’s first statutory duty is to promote the following of good practice in the handling of personal information. ‘Good practice’ means practice that appears to the Commissioner to be desirable, having regard to the interests of individuals and the organisations that process personal information about them. Good practice includes, but is not limited to, compliance with the requirements of the Data Protection Act 1998.

The Commissioner has produced this framework code to help organisations to adopt good practice when sharing information about people. The framework code is intended to be of use to all organisations involved in information sharing. Using the framework code will help organisations to ensure that they address all the main data protection compliance issues that are likely to arise when personal information is being shared. This in turn should help front-line practitioners to make well-informed decisions about sharing personal information.

The benefits of using the framework code of practice

The framework code breaks down compliance with a fairly complex piece of legislation into a series of logical steps. These should be easy for you to follow in practice, even if you’re not a data protection expert. Organisations will face different compliance issues, and may adopt their own approaches to dealing with them. However, using the framework code should help organisations to develop a common understanding and a consistency of approach.

Producing your own code of practice, and using it, will help you to establish good practice an to comply with the law. It will also help you to strike the balance between sharing personal information and protecting the people it’s about. This should engender the trust of the public and ensure that they understand, and participate in, your information sharing initiatives. Following a good quality code of practice will also give your staff the confidence to make well informed decisions, reducing the considerable uncertainty that can surround information sharing.

Ultimately, the following of good practice will make your information sharing more effective and will enhance the reputation of your organisation in the eyes of the people you handle information about.

What do we mean by ‘information sharing’?

There are two main sorts of information sharing. The first involves two or more organisations sharing information between them. This could be done by giving access to each others’ information systems or by setting up a separate shared database. The second involves the sharing of information between the various parts of a single organisation, for example between a local authority’s various departments. The content of the framework code should be relevant to both sorts of information sharing.

The framework code is for use primarily in circumstances where information is being shared on a routine, systematic basis. However in some cases information is shared in a more ad hoc way. For example, a teacher might decide to share information with a social worker because there is concern about a particular child’s welfare. The framework code is not intended for use in circumstances like that, although professionals may still find it useful.

How to use the framework code of practice.

This framework should be used by organisations that want to produce their own codes of practice for sharing information. It says what content a code of practice should have if it is to support good practice in the sharing of personal information. Organisations using the framework code must populate it with their own detailed content, reflecting their own business needs. Where a number of organisations are working collaboratively on an information sharing project, it is important that any codes of practice do not contradict each other or overlap confusingly. In many cases it is best to have a single code of practice that all the organisations involved in the information sharing comply with.

We recognise that different organisations have different needs, depending on the sort of information sharing they’re involved in. Some of the framework’s content won’t be relevant to some organisations. We expect a considerable degree of flexibility in how the framework is used. For example, some organisations will use it to produce a stand-alone document, whilst others may want to integrate some or all of its content into their existing policies and procedures. The content of this document could also be used as a checklist for an organisation to evaluate its existing policies and procedures.

The Information Commissioner will endorse a code of practice based on the framework provided it addresses all its substantive content. For a code to be meaningful it must be adhered to in practice. In order to provide an endorsement we would normally expect an organisation to agree to our auditing compliance with its code.

Drawing up a code and following its recommendations in practice cannot guarantee compliance with the Data Protection Act 1998. However, adherence to a properly drafted code of practice would constitute a significant step to achieving compliance with the Act.

Each part of the framework code begins with a clear statement of what the Act requires. However, some of the content of the framework code goes beyond the strict legal requirements of the law. We have done this as part of our statutory duty to promote good practice in the handling of personal information.

Code of practice recommended content:

1. Deciding to share personal information

The law:

Any information sharing must be necessary. Any information shared must be relevant and not excessive.

Your code of practice should:

1. Set out why you want to share personal information.

2. Provide for a realistic appraisal of the likely effect of the sharing on the people the information is about, and of their likely reaction to it.

3. Describe the information that you need to share to achieve your objective and the organisations that need to be involved.

4. Outline the relevant statutory provisions, if your organisation is legally required, or permitted, to share information or is prevented from doing so.

5. Address any issues that might arise as the result of sharing confidential or sensitive information.

6. Say whether individuals’ consent for information sharing is needed and if so, how to obtain consent and what to do if consent is withheld.

7. Give advice on finding alternatives to using personal information.

Points to remember:

1. Before you start sharing information you should decide and document the objective that it is meant to achieve. Only once you have done this can you address other data protection compliance issues, for example deciding what information is relevant.

2. This process is often termed a ‘privacy impact assessment’. It should assess any benefits that the information sharing might bring to society or individuals. It should also assess any negative effects, such as an erosion of personal privacy, or the likelihood of damage, distress or embarrassment being caused to individuals. It should determine ways to avoid or minimise the unwarranted detrimental effects on individuals.

3. Only relevant information may be shared. Another organisation should not be allowed to have access to all the information you hold. You should work out which information items may be shared and who with. This should be reviewed regularly to prevent the sharing of information that is not relevant to achieving your objective. Where you are sharing information internally, for example within a local authority, the same considerations apply. If only certain departments are involved in providing the service that the information sharingis intended to support, only those departments should have access to the information.

4. Some organisations are required by law to share information for certain purposes, for example as part of a local crime reduction partnership. In such cases you must be clear about what information you are required to share and in what circumstances. If you are unclear about this you should seek legal advice. Other organisations are permitted to share information, for example where this is necessary for a local authority to carry out its functions. In some cases an organisation may be expressly prohibited from sharing the information they hold. Such organisations must be clear about the nature of any such prohibition. Again, if necessary, legal advice about your powers should be obtained.

5. The threshold for sharing confidential or sensitive information is generally higher than for sharing other forms of information. This is because the unnecessary or inappropriate sharing of this sort of information is more likely to cause damage, distress or embarrassment to individuals. Some information is so sensitive, for example that contained in a health record, that in normal circumstances a patient’s explicit consent must be obtained if you want to share or use it for a purpose other than healthcare.

6. Sometimes data protection law only requires that the individual knows about the sharing of information, it is not always necessary to obtain his or her consent for this. However, if you decide that you do need consent, this must be specific, informed and freely given agreement. A failure to object does not constitute consent. Most importantly, the individual must understand what is being consented to and the consequences of giving or withholding consent. If you are relying on consent to share information about a person, you must stop doing so if consent expires or is withdrawn. You must be clear with members of the public about the role that consent plays in your information sharing. In this context, consent is not genuine unless its withdrawal leads to the information sharing being stopped.

7. It is not justified, in data protection terms, to share information that identifies people when anonymised or statistical information could be used. This sort of approach can help to protect personal privacy whilst still allowing organisations to carry out their functions. In some planning contexts, for example, it may only be necessary to use general demographic information about people living in certain areas, rather than identifiable individuals’ names, addresses and dates of birth.

2. Fairness and transparency

The law:

Personal information shall be processed fairly. When you obtain information from a person the
processing won’t be fair unless:
you say who you are, unless this is obvious
you say what purpose the information will be processed for
you provide any other information necessary to enable the processing to be fair.

Your code of practice should:

1. Give guidance on the drafting of ‘fair processing notices’.

2. Advise on ensuring notices are actively provided or, at least, freely available to the people you want to share information about.

3. Ensure that ‘fair processing notices’ give a genuinely informative explanation of how information will be shared and that they are updated when necessary.

4. Provide for ways of dealing with requests for further information and enquiries from members of the public

5. Help to ensure that explanations are given of the circumstances in which information may be shared without the individuals’ knowledge or consent

Points to remember:

1. Fair processing notices, or ‘privacy policies’ as they are sometimes known, are intended to inform the people the information is about how it will be shared and what it will be used for. This means that notices have to be drafted in a way that the people it’s aimed at will understand. Drafting notices for children and others whose level of understanding may be relatively low requires particular care. You should avoid legalistic language and adopt a plain-English, readable approach. Ideally, your code of practice should contain examples of model fair processing notices.

You must decide whether a single fair processing notice is sufficient to inform the public of all the information sharing that your organisation carries out. In some cases it would be good practice to produce a separate fair processing notice for a particular information sharing initiative. This would allow much more detailed and specific fair processing information to be provided. In other cases a more general notice could suffice.

2. A fair processing notice is meaningless unless people can read it and understand it. At least, you should make sure your fair processing notice is readily available. You should try, though, to actively provide fair processing notices to people, for example when you hold meetings with them or send out a letter. You should normally provide ‘fair processing’ information when you first obtain information about a person.

Where you intend to share confidential or particularly sensitive information you should actively communicate your fair processing information.

3. Information sharing arrangements can be quite complicated, with different sorts of information being shared between various agencies. However, you have to give a comprehensive and accurate description of what information is being shared and who it’s being shared with. An information sharing arrangement can change over time, for example where a public body is placed under a new statutory duty to share information to deal with a particular problem. This requires the public body to periodically review its fair processing information to ensure that it still provides an accurate description of the information sharing being carried out.

It can be useful to adopt a ‘layered’ approach to providing fair processing information. This involves having a relatively simple explanation backed up by a more detailed version for people who want a more comprehensive explanation. This can be done fairly easily in online contexts.

4. Sometimes people will have queries about how information about them is being shared, or may object to this. It is good practice for organisations to have systems in place for dealing with enquiries about information sharing in a timely and helpful manner. The analysis of queries and complaints should help you to understand public attitudes to the information sharing you’re carrying out, and to make any necessary improvements.

5. This can only happen in limited circumstances, for example where telling someone about the disclosure of information would lead to a crime going undetected or to an individual suffering harm. However, you should be prepared to be open with the public about the types of circumstance in which information may be disclosed without their knowledge or consent.

3. Information standards

The law:

Information shall be adequate, relevant, not excessive, accurate and up to date.

Your code of practice should contain:

1. Procedures for checking that information is of good enough quality before it is shared.

2. Methods for making sure that shared information is recorded in a compatible format.

3. Methods for checking periodically that shared information is of sufficient quality.

4. Procedures for ensuring that any information that is being shared is relevant and not excessive.

5. Methods for making sure that any problems with personal information, e.g. inaccuracy, are also rectified by all the organisations that have received the information.

Points to remember:

1. It is good practice to check the quality of the information before it is shared, otherwise inaccuracies and other problems will be spread across information systems. In general, any plan to share information should trigger action to ensure that inaccurate records are corrected, irrelevant ones weeded out, out of date ones updated and so forth.

2. Different organisations may record the same information in different ways. For example, a person’s date of birth can be recorded in various formats. This can lead to records being mis-matched or becoming corrupted. Before sharing information you must make sure that the organisations involved have a common way of recording key information, for example by deciding on a standard format for recording people’s names. If a common standard for recording information cannot be established, a robust means of conversion must be deployed.

3. Only once you have a clearly defined objective, for example the delivery of a particular service, can you make an informed decision about the information that is necessary to carry out that objective. You should be able to justify the sharing of each item of information on the grounds that its sharing is necessary to achieve the objective. You must not share information if it is not necessary to do so. It is good practice to periodically review the information sharing and to check that all the information being shared is necessary to achieving your objective. Any unnecessary sharing of information should cease. However, in some contexts it is impossible to determine with certainty whether it is necessary to share a particular piece of information. In such cases, experience and professional judgement must be relied on.

4. It is good practice to check from time to time whether the information being shared is of good enough quality. For example, a sample of records could be looked at to make sure the information contained in them is being kept up to date. It is a good idea to show the records to the people they are about so that the quality of information on them can be checked. Although this may only reveal deficiencies in a particular record, it could indicate wider systemic failure that can then be addressed.

5. The spreading of inaccurate information across a network can cause significant problems for individuals. If you discover that you have shared inaccurate information, you should not only correct your own records but ensure that the information is also corrected by others holding it. You need to have procedures in place for dealing with situations where there are disagreements between organisations about the accuracy of a record. In some cases, the best course of action might be to ask the individual him or herself whether their record is correct.

4. Retention of shared information

The law:

Personal information shall not be kept for longer than is necessary.

Your code of practice should:

1. Specify retention periods for the different types of information you hold, including retention times for the various items held within a record.

2. Provide for the periodic review of retention periods, based on assessment of business need.

3. Set out any legal requirements or professional guidelines relevant to the retention or disposal of the information you hold.

4. Ensure that any out of date information that still needs to be retained is not permanently deleted is safely archived or put ‘offline’.

5. Specify whether information supplied by another organisation should be deleted or returned to its supplier.

6. Provide a mechanism for ensuring that your retention procedures are being adhered to in practice.

Points to remember:

1. Automated systems can be used to delete a specific piece of information after a pre-determined period. Such a facility is particularly useful where a large number of records of the same type are held.
Considerations for judging retention periods include:
the current and future value of the information for the purpose for which it is held
the costs, risks and liabilities associated with retaining the information
the ease or difficulty of ensuring the information remains accurate and up to date.

2. You should review your retention policy in the light of operational experience. If records that are being retained are not being used, this would call into question the need to retain them.

3. For example, there are various legal requirements and professional guidelines relating to the retention of health records.

4. There is a significant difference between permanently, irreversibly deleting a record and merely archiving it. If you merely archive a record or store it ‘offline’ it must still be necessary to hold it and you must be prepared to give subject access to it and hold it in compliance with the data protection principles.

5. The various organisations sharing information should have an agreement about what should happen once the need to share the information has passed. In some cases the best course of action might be to return the shared information to the organisation that supplied it without retaining a copy. In other cases, for example where the particular issue that information sharing was intended to deal with has been resolved, all the organisations involved should delete their copies of the information.

If information you hold should be deleted, for example because it no longer serves a useful purpose or has a statutory retention period that has been exceeded, you must make sure that any organisation that has a copy of the information also deletes it. It might be possible to anonymise the information, in which case it can be retained indefinitely.

6. A good way to do this is to periodically audit the personal information you hold to ensure that information is not being retained for too long or deleted prematurely.

5. Security of shared information

The law:

Personal information shall be protected by appropriate technical and organisational measures.

Your code of practice should:

1. Describe ways of evaluating the level of security that needs to be in place.

2. Set out standards for the technical security arrangements that must be in place to protect shared information.

3. Describe the organisational security arrangements that must be in place to protect shared information.

Points to remember:

1. Your key consideration should be to ensure that your security is adequate in relation to the damage to individuals that a security breach could cause. More sensitive or confidential information therefore needs a higher level of security. However, rather than having different security standards for different pieces of information, it might be easier to adopt a ‘highest common denominator’ approach, i.e. to afford all the information you hold a high level of security. A good approach is for all the organisations involved in information sharing to adopt a common security standard, e.g. ISO17799 or ISO27001.

2. A difficulty that can arise when information is shared is that the various organisations involved can have different standards of security and security cultures. It can be very difficult to establish a common security standard where there are differences in organisations’ IT systems and procedures. Problems of this sort should be addressed before any personal information is shared. It is the responsibility of the organisation providing the information to be shared to ensure that it will continue to be protected by sufficient security once other organisations have access to it.

3. Different organisations may have different cultures of security, and considerations similar to those outlined in the point above apply. Again, it is important that any relative weaknesses in an organisations’ security are rectified, for example by carrying out inter-organisational training, before any personal information is shared between them. Where an organisation employs another organisation to process personal information on its behalf, a contract must be in place to ensure the information remains properly protected.

6. Access to personal information

The law:

Individuals have a right of access to information about them.

Your code of practice should:

1. Set out ways for making sure people can gain access to information about them easily.

2. Provide alternative ways for giving people access to their records.

3. Describe ways of making sure that a person gets access to all the information he or she is entitled to.

4. Give guidance on advising the public about the uses, sources and disclosures of information about them.

5. Provide guidance about relevant exemptions from the right of subject access, i.e. cases where information will be withheld from a person who makes a request for access.

Points to remember:

1. Where information is being shared between a number of organisations it can be difficult for people to work out how to gain access to all the information that’s held about them. It is good practice to provide a single point of contact for people to go to when they want to access their information, and to make people aware of this facility.

2. Organisations are required by law to give people access to information about them. A fee of £10 can be charged and access must be given within 40 calendar days. However, it is good practice to provide faster, cheaper ways for people to gain access to information about them. This could be done by showing people their records when you come into contact with them or by setting up facilities to allow records to be viewed securely online.

3. When personal information is shared between several bodies it can be difficult to determine what information is held. It’s very important, therefore, that organisations sharing information adopt good records management practices, to allow them to locate and provide all the information held about a person in the event of an access request being made.

4. When a request for personal information is made, the organisation is required by law to also describe the purposes for which the information is held and its recipients, i.e. who it is disclosed to. This part of the right of subject access is particularly important in the context of information sharing. You are also required to provide the individual with any information you have as to the information’s source. In some cases information about someone may have been provided by another individual. This might be the case, for example, where a child’s social work file contains information provided by a concerned neighbour. In cases like that, information about the source should normally be withheld.

5. Whether or not an exemption applies depends on the information in question, and in some cases on the effect that releasing the information would have on the individual. However, organisations dealing with a particular type of record are likely to find that they wish to rely on the same exemptions in respect of the access requests they receive. If this is the case, it would be useful to provide detailed advice to staff about how a particular exemption, or exemptions, work. It is good practice to be as open as possible with the public about the circumstances in which you will withhold information from them. In some cases this will not be possible, for example where telling a person that you hold exempt information about them would prejudice the purposes of law-enforcement by ‘tipping off’ an individual that he or she is being investigated.

7. Freedom of Information

The law:

The Freedom of Information Act 2000 gives everyone the right to ask for information held by a public authority, to be told whether the information is held, and, unless exempt, to have a copy of the information.

Your code of practice should:

1. Encourage the inclusion of material about information sharing in your FOI publication scheme.

2. Give advice on providing assistance to members of the public who make requests for a mixture of personal and non-personal information.

Points to remember:

1. Most, if not all, public sector bodies involved in sharing information are covered by the Freedom of Information Act. This means they are required to include various information that they hold in their FOI publication scheme. It is good practice to include the ‘paperwork’ relating to information sharing in the publication scheme, including any relevant code of practice. There is a strong public interest in members of the public being able to find out easily why information is being shared, which organisations are involved and what standards and safeguards are in place.

2. Often people will make requests for information that cover both personal and non-personal information. For example, a person may request information about them that is being shared between various agencies and information about those agencies’ policies for sharing information. Data protection and freedom of information may be dealt with by separate parts of your organisation, and a hybrid request may have to be dealt with under both pieces of legislation. However, it is good practice to be as helpful as possible when dealing with requests of this sort, especially as members of the public may not understand the difference between a data protection and an FOI request.

(This framework code of practice does not contain recommendations about the handling of mainstream freedom of information requests. The Information Commissioner has published comprehensive advice about this elsewhere.)

8. Review

You should keep your information sharing procedures under review, and should update your documentation when necessary. Codes of practice and other documentation can soon become out of date, given the rapid changes that can take place in an organisation’s information sharing practices.

In particular, you should check whether:

1. Your fair processing notices still provide an accurate explanation of your information sharing activity.

2. Your procedures for ensuring the quality of information are being adhered to and are working in practice.

3. Organisations you are sharing information are also meeting agreed quality standards.

4. Retention periods are being adhered to and continue to reflect business need.

5. Security remains adequate and, if not, that any security breaches have been investigated and acted upon.

6. Individuals are being given access to all the information they are entitled to, and that they are finding it easy to exercise their rights.

7. Your FOI publication scheme is being kept up to date.

Appendix 1 – Other relevant guidance

from the Information Commissioner, available at www.ico.gov.uk

Sharing personal information: Our approach. (A general position paper on information sharing.)

The use of personal information held for collecting and administering Council Tax.

Data sharing between different Local Authority departments.

The use and disclosure of information about business people.

The Crime and Disorder Act 1998: data protection implications for information sharing

Sharing information about you. (Gives advice to the public about information sharing.)

If you would like to contact us please call 08456 306060, or 01625 545745
if you would prefer to call a national rate number.
e: mail@ico.gsi.gov.uk
w: www.ico.gov.uk

August 2007

Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF

Effective Consultation

Thursday, August 9th, 2007

TO ADD YOUR OWN COMMENT OR VIEW OTHER COMMENTS, CLICK ON THE BLUE BAR. THIS SERVICE IS IN BETA - PLEASE ALSO FEEDBACK ON BUGS AND SUGGESTED FUNCTIONS.

  • asking the right questions
  • asking the right people
  • listening to the answers

BASIC INFORMATION

Basic information regarding this consultation

To: Anyone with an interest in responding to government consultation exercises, from those who regularly respond to the Government’s consultations to those who might be interested in doing so. These might include business organisations, voluntary and charitable sector organisations, campaigning bodies, trades unions, citizens, etc.

Duration: From 14/06/2007 to 28/09/2007

Enquiries to: Ian Ascough, 020 7276 2175 or

Consultation.Policy@cabinet-office.x.gsi.gov.uk

How to respond: In writing: Cabinet Office, 4th Floor, 22 Whitehall, London SW1A 2WH
By email: Consultation.Policy@cabinet-office.x.gsi.gov.uk

Additional ways to feed in your views: This consultation exercise is accompanied by an online discussion space which can be found via http://www.consultations.gov.uk

The Cabinet Office will also organise regional events where the future of Government consultation policy will be discussed. If you are interested in participating in such events, please contact Ian Ascough via the address or phone number above.

Government response: The Government will publish a response to this consultation exercise by 30/11/2007 t http://www.cabinetoffice.gov.uk/regulation/

FOREWORD

Foreword by Hilary Armstrong MP, Minister for the Cabinet Office and Social Exclusion

Consultation helps. It helps public bodies make better-informed decisions on matters of policy. It helps them improve public-service delivery. And it helps improve the accountability of these bodies to the public, to business and to civil society. Government is most credible when it listens and shows that it is listening to the customers of public services, the country’s experts, businesses, charities and NGOs and those who are most directly affected by the Government’s actions.

There are many ways in which Government can listen and learn effectively, from informal contacts with interested parties to formal policy forums. And in recent years, many departments have gone the extra mile, using online tools, regional events, citizens’ juries, and so on. Through the many available communication channels, Ministers and officials in Government departments have broadened their engagement with stakeholders, fostering a more inclusive approach to policymaking and improving the evidence on which proposals are grounded.

The Consultation Code has been in place since 2001 and has spread best practice across Government, facilitating effective stakeholder engagement in relation to formal, written consultations. This paper looks to the future of consultation policy; it asks how Government can improve its consultation work so that we truly get to hear the views of those who use public services, those who might be affected by changes to policy or new legislation, and the country’s experts. Please use this opportunity to tell us about your experiences of Government consultations, how consultation exercises could be improved and how we can ensure that the views of all those who should have a say in future
policies are heard. I look forward to hearing from you.

Executive summary

This consultation exercise, aimed at those with an interest in how the Government currently consults, forms the centre-piece of a review of consultation policy. It follows discussions within Government and with a number of external organisations with regard to how consultation exercises can be improved. This consultation exercise is intended to seek evidence on this topic from a wider range of stakeholders to help in the design of an updated consultation policy which will lead to better consultation practices across Government.

Consultation is an integral part of policy development whereby the Government seeks evidence, validates existing evidence and exposes preliminary policy analysis and options to scrutiny. The Government’s current policy on consultation is set out in the Code of Practice on
Consultation
(or see p26 of this document for the six criteria of the Code. This sets out the criteria for carrying out formal, written Government consultations. Observance of these criteria is monitored by Consultation Coordinators in departments and the Cabinet Office reports annually on observance of the first criterion of the Code – the “12-week criterion”.

This consultation document is in two parts. The first part discusses how Government currently consults and how this can be improved upon. It asks questions about what the principles for Government consultations should be and how fulfilment of these principles should be monitored. It also explores the relationship between consultation and impact assessment and discusses how departments should consult. Issues including awareness-raising, Government responses to consultations and consultation fatigue are also addressed.

In the second part of this consultation document three options for consultation policy are presented. These options have been designed to address, to varying degrees, some of the issues addressed in the first part of the document. They are intended to stimulate discussion and should not be regarded as an exhaustive list. Combinations of various elements from each option might also make for an improved consultation policy.

1 INTRODUCTION

Why are we carrying out this consultation?

1.1 This exercise is the centre-piece of a review of Government consultation policy.

1.2 Public engagement, including effective consultation on policy development and service design, is key to a healthy democracy. Moreover, by exposing preliminary policy analysis and options to scrutiny and listening carefully to the views of stakeholders, the Government can build up a broad evidence-base which allows for effective and efficient policymaking. Good consultations which truly reach those concerned, lead to better policies and reduce the risks of policies failing to meet their objectives and of unintended consequences.

1.3 The Code of Practice on Consultation, setting out how Government departments should consult, is now firmly embedded across Government. However, observance of the criteria in the Code is not an end in itself. It is now time to review the Code and to consider ways of supplementing or replacing the existing criteria so as to improve the quality and effectiveness of Government consultations and ultimately improve policy design.

1.4 The aim of this consultation, therefore, is to hear the views of those who regularly respond to Government consultations and those who may feel that Government consultations do not sufficiently engage them. The written consultation is being supplemented with consultation events across the country and an online discussion.
Taken together, these will help the Government bring its consultation policy up to date.

1.5 While the Code of Practice has achieved a lot since it was first introduced in 2001, it is not perfect. It has, for example, been argued that a 12-week, written consultation is sometimes, on its own, not enough; may
sometimes be superfluous to requirements; and is not always the most effective way of getting views from those who might be affected by what is being discussed or proposed. The Code does not fully address these issues. A consultation on a technical issue affecting only a small number of large companies is very different from one, for example, on schools policy where teachers, parents and children might need to be consulted. Again, the Code does not address such issues. In short, the most appropriate medium and the optimum amount of time required by potential respondents will depend on the policy area and on the stakeholders – something which is not reflected in current policy. These and other issues are addressed in this paper.

Scope of this consultation

1.6 It is important at the outset to set some parameters to the debate.

1.7 First, the Government is committed to maintaining a central consultation policy and does not plan to open this point up for discussion. Such a policy, undoubtedly, plays an essential role in maintaining a healthy democracy where public engagement is encouraged and enabled, and also helps bring about better public services and a better regulatory environment. The Cabinet Office is, however, open-minded at this stage as to the form this consultation policy should take in the future and wants to stimulate an open and broad debate on this matter.

1.8 Second, the Government’s current policy on consultation does not amount to a commitment to consult on everything and this will remain the case in future, irrespective of any changes made to the Government’s consultation policy as a result of this consultation exercise. It is right and reasonable that the Government sometimes takes policy decisions without any consultation: how and when the Government consults will depend on the circumstances in each case and, on some occasions, consultation will not be considered appropriate. For example, one would not expect the Government to launch a consultation on a policy that had been a manifesto commitment. However, further down the line, effective implementation will often depend on consultation with affected parties.

1.9 Third, it is the Government’s intention that Ministers will retain the discretion in future, irrespective of the outcome of this review, to consult but to consider it inappropriate or unnecessary to follow all of the best practice criteria.

1.10 Through discussions within Government and through various informal meetings with business associations and third sector organisations, the Cabinet Office has already heard many views on how Government currently consults; where there is room for improvement and the role that central policies and guidance might play in this. Also, the Government’s Office of the Third Sector has recently sought views formally on how Government can best listen to and work with the sector (see case study 6). This consultation seeks further evidence, building on what has already been learned, to feed into the design of a renewed cross-Government consultation
policy. We are asking for views on current practice and on three options for a revised consultation policy. These are intended to stimulate debate. However, respondents need not feel restricted by the structure of this paper or by the questions – views on other matters relating to Government consultations are also welcome.

Definitions

1.11 In addition to setting out the scope of this paper it is important to define some of the terms used in this document.

1.12 Consultation is generally considered to be a form of engagement that is appropriate when the policy process is already underway and there is an intention to make changes or deliver specific outcomes. It
therefore does not invite an open debate on very broad areas of public policy, nor does it empower those who participate with the final decision. However, things are not always clear-cut and there are cases where it may make sense to carry out some other types of public engagement, as well as consultation as part of one exercise. Some of the case studies in this document illustrate this and annex 2 discusses public engagement further.

1.13 Consultation should generally be seen as an integral part of policy development: consultations are an opportunity to seek evidence, validate existing evidence and expose preliminary policy analysis and options to scrutiny, so as to help the development of effective, efficient and proportionate solutions to a particular
issue.

1.14 Consultations are generally aimed at “stakeholders”. For the purposes of this exercise, the term is used in a wide sense, meaning those outside of central Government with an interest in the topics under discussion. These may be organisations or associations, companies or individuals who take an interest in, or who might be affected by the new policy, the policy change or the proposed legislation. In many cases, members of the public are interested in Government consultations even if they might not be directly or immediately affected by the topics under discussion. Getting involved in Government consultations can lead to deeper levels of engagement and the Government maintaining a relationship with those who want to remain involved in specific policy areas.

1.15 A fuller definition of the terms “consultation”, “public engagement” and “stakeholder” as well as some international examples of definitions can be found in annex 2.

What happens next?

1.16 This consultation exercise will be accompanied by an online discussion forum and by workshops. These will provide additional opportunities to discuss the issues addressed in this document and thereby supplement our evidence-gathering. If you would be interested in attending a workshop, please get in touch with the Cabinet Office using the contact details at the beginning of this document.

1.17 Following the close of this consultation, the Cabinet Office will analyse carefully all the responses received (formal written responses, online discussions and points made at events), and by 30 November 2007 on the Cabinet Office website publish a summary of the responses and state how these views are being taken on board in the design of an updated consultation policy.

2. Current Policy

2.1 The Code of Practice on Consultation was first published in November 2000 and outlined minimum standards for central Government departments and any of their agencies when they are carrying out national, written consultation exercises. A revised Code was published in January 2004 and came into force on 1 April 2004;
the accompanying guidance on the Code of Practice was also re-issued. The current Code is now firmly embedded in the practices of Government departments (see below).

2.2 The Code contains six criteria which apply to all public consultations. Departure from the Code requires clearance from the responsible Minister.5 The reasons for the deviation should be set out in the consultation document.

2.3 The first of the Code’s six criteria is perhaps the best known: departments should “Consult widely throughout the [policy development] process, allowing a minimum of 12 weeks for written consultation at
least once during the development of the policy”. This criterion is widely observed across Government. The Code does however acknowledge that, at times, it will not be possible for a consultation to last 12 weeks, e.g. when timetables are dictated by EU or other international processes or where there is a health and safety or
security dimension dictating fast action (criterion 1.5).

2.4 Stakeholders who regularly respond to Government consultations have argued that they generally need at least 12 weeks within which to provide their responses. Representative organisations, in particular, have suggested that they rely on the minimum period in order to confer with their membership and then draft a considered, detailed response to Government consultations. Meanwhile, some other stakeholder organisations have suggested that for certain consultations 12 weeks, e.g. on detailed, technical matters, is too long a period as this can delay what for these stakeholders can be important changes or updates in policy.

Question 1: Do you think the Government’s Code of Practice has led to an improvement in the way the Government consults and to improved policy outcomes?
Please illustrate your answer with any concrete examples you may have.

Question 2: Are 12 weeks generally the right amount of time for the formal, written element of Government consultations to last? Do you think that there are circumstances where a shorter or longer duration may be more appropriate?

Monitoring observance of the Code’s criteria

2.5 Under the current policy, departments are required to nominate Consultation Coordinators. These are officials who help policy teams with their consultations; raise awareness of the Consultation Code; help spread best practice; and monitor their department’s own effectiveness at consultation. In the majority of cases, Consultation Coordinators work in departmental Better Regulation Units or in Communications Teams. The onus is therefore, by and large, on departments to monitor their observance of the criteria and on policy teams to explain to the Consultation Coordinator any departures from the Code.

2.6 Departments are required to provide information regarding their consultations in the Better Regulation section of their annual departmental reports. The Cabinet Office produces annual reports on the whole of
central Government’s performance in relation to the Code (“Assessments of Performance”). These reports focus on the 12-week criterion but also highlight examples of best practice from the year. This information is provided to the Cabinet Office by departmental Consultation Coordinators. According to the report on consultations launched during 2005, the Government carried out 583 formal consultations, 80% of which lasted at least 12 weeks (the period for which departments should consult at least once during their policy development). The report on Government consultations launched in 2006 was not available at the time of going
to print. However, indications show that around 75% of these consultations lasted at least 12 weeks.

2.7 The Government considers this system of devolving responsibility and accountability to departments, with a lesser role for central compilation of key statistics and promotion of best practice by the Cabinet Office, to be a proportionate approach for the current policy on consultation. However, views on this are invited especially in regard to spreading best practice and promoting innovative and effective consultation.

Question 3: Is the system for monitoring and promoting performance of departments in relation to the criteria
in the current Code of Practice on Consultation right? What improvements could be made?

Consultation and Impact Assessment

2.8 Many consultation documents relate to or include an Impact Assessment. Impact Assessment is a continuous process to help the policymaker understand the various consequences of possible and actual
Government interventions in the public, private and third sectors. Impact Assessment is also a tool to enable the Government to weigh and present the relevant evidence on the effects of such interventions. Impact
Assessments are generally applicable to all Government interventions affecting the private sector, the third sector and public services, regardless of source (domestic or international). The link between Impact
Assessment and consultation is therefore essential in improving the Government’s understanding, and allowing stakeholders to challenge the Government’s understanding, of the impact of its proposals. The Government believes that publishing Impact Assessments as part of consultation exercises has improved the quality both of public consultations and of impact assessments themselves.

2.9 However, the Government believes that Impact Assessments and the way they are used alongside public consultations could be improved. The Government has introduced a new template for Impact Assessments and new guidance, with the intention of improving the analytical quality and quantification of Impact Assessments,
and of presenting key data in a more open and accessible fashion.

2.10 The recent reforms of Impact Assessment should improve the quality of public consultations on Impact Assessments, not least because stakeholders will be able to form a more immediate view of the quality and sufficiency of the analysis underpinning the consultation options. The new guidance on Impact Assessment stresses the importance of conducting informal and formal pre-consultation and consultation as the Impact Assessment is developed.

2.11 The Government is open to further ideas about how to improve the link between consultation and Impact Assessment. Should there, for example, be a stated policy for departments to seek input from key stakeholders at the time an Impact Assessment is being put together and policy options are being generated? Would it be
helpful to require or encourage departments to ask specific questions in their consultation documents about the quality of the accompanying Impact Assessments? How can the link between Impact Assessment and consultation be improved?

Question 4: Is the new approach to Impact Assessment sufficient to improve public consultation on the evidence base for Government policy-making? How could consultation policy improve consultation on Impact Assessments?

Consulting for the right reasons at the right time

2.12 There is a concern among some stakeholders that the Code’s list of criteria and emphasis on written consultation can lead to grudging compliance and a tendency to go through the motions, without policymakers having a genuine desire to listen and respond to stakeholders’ views.

2.13 Concerns have also been expressed that consultation sometimes take place at a relatively advanced stage of policy formulation, limiting a department’s room for manoeuvre and reducing the likely impact of stakeholders’ comments. The Code of Practice does not offer clear guidance to departments on the stage at
which formal consultation should happen. In part, this reflects the difficulty of defining appropriate criteria to cover a multitude of different circumstances; in part, it acknowledges the need to allow Ministers and policymakers the latitude to exercise their discretion, according to the particular issue with which they are faced. The Government does not believe that it is desirable to formulate rules on this point but would welcome views on whether it might be possible to identify and share good practice.

2.14 In other cases, consultation takes place at various stages throughout the policy development process, consulting first on the high-level topics, then consulting on options and finally consulting to seek input on
implementation of the chosen option. Different methods of seeking input can be more or less effective/appropriate depending on when in the policy development process input is being sought. Some stakeholders see this staged approach as best practice while others see it as contributing to consultation fatigue (see page 15).

2.15 At times, the Government has also broken down consultations on big issues into “bitesized chunks”. While at first sight this may seem sensible, there are potential negative aspects to this practice which some stakeholders have pointed out to the Cabinet Office. For example, this can obscure the totality of the costs, benefits and impacts associated with a particular proposal. Also, it might be thought that this approach suits the Government department’s resources rather than the users’ needs.

Question 5: When in the policy development process do you think the Government should consult stakeholders? Please cite any relevant examples when you feel you have been consulted at the right or wrong time.

7

Case Study 1: Consultation Guidelines in the Republic of Ireland
The Government of the Republic of Ireland has guidelines for consultation called “Reaching Out” which are intended for use by Government departments, public bodies and any other organisations that may wish to consult with stakeholders. These guidelines include advice on planning, methods of consultation and analysis of responses. They also contain a list of questions that officials should ask themselves when planning a consultation:

  • Are you clear on the purpose and objectives of your consultation?
  • Are you clear on the questions you want to ask in your consultation?
  • Have you identified all of the stakeholder groups and individuals that should be consulted?
  • Have you chosen the most appropriate and inclusive methods of consultation, including those that meet the needs of “non-traditional” stakeholders?
  • Have you allowed for sufficient resources for the consultation?
  • Have you considered all of your legal obligations?
  • Have you publicised your consultation in online and offline media?
  • Have you allowed sufficient time to give stakeholders an opportunity to consider the issues fully?
  • Have you planned how you will analyse the submissions received during your consultation?
  • Have you planned to evaluate your consultation process and to ensure any lessons learned are taken into account for the future?

Case Study 2: Consultation Policy and Practice in Sweden
In Sweden, the requirement to consult is enshrined in law: the 1974 Instrument of Government, one of the four fundamental laws on which the Swedish Constitution is based, states in Chapter 7, article 2, that “In preparing Government business the necessary information and opinions shall be obtained from the public authorities concerned. Organisations and private persons shall be afforded an opportunity to express an opinion as necessary.”

When extensive analysis is required before a proposal can be drafted, the Government may choose to appoint a special group, known officially as a Committee of Inquiry. These committees normally consist of relevant authorities, NGOs and other interest groups and political parties and it is not unusual for there to be up to 200 Committees in existence at any one time.

After a Committee’s report has been submitted to the responsible Minister, its contents are referred to the relevant authorities and to the public for consideration. They are given the opportunity to express their views on the conclusions of the inquiry before the Government formulates a legislative proposal.

3. Effective Consultation

How best to seek stakeholder input?

3.1 A concern expressed to the Cabinet Office prior to the launch of this consultation is that the Code of Practice, because of its strong focus on written consultations, may sometimes act as blinkers for policy teams.
Although the Code and accompanying guidance do discuss the limitations of written consultations for reaching certain groups, such as those whose voices are seldom heard in policy debates, and emphasise the value of other forms of consultation in reaching such groups, the six headline criteria of the Code do not cover this issue. It is, therefore, possible to abide by the spirit of the Code without carrying out any form of consultation prior to the written consultation and without supplementing the written consultation with any other kind of stakeholder engagement.

3.2 Moreover, the Code does not fully reflect the fact that an alternative form of consultation may, at times, be manifestly more relevant to the matter under consideration and those potentially affected by the proposals than a formal, written consultation exercise. Departments undertaking innovative forms of consultation get no credit for doing so under the current policy.

3.3 However, many departments do already supplement their written consultations with other means of seeking views on their policy proposals, clearly designing their activities around stakeholders, e.g. holding events to
discuss the issues at a level and in a locality suitable to the target audience. Some departments have internal guidance on this and provide staff with information on various methods that have been successfully used in the past, e.g. online consultations, focus groups and citizens’ juries.

Case Study 3: Defra asks stakeholders how they want to be consulted The Department for Environment, Food and Rural Affairs (Defra) piloted the use of surveys on consultation with animal health and welfare stakeholder organisations in the spring of 2006.10 The aim was to listen to stakeholder organisations not just about the issues on which Defra consults but also about the way Defra informs and consults them. The surveys were designed to encourage constructive suggestions. A summary of the survey results and proposed actions in response to these was sent to respondents so that they could check their preferences were registered.

Case Study 4: Your health, your care, your say, Department of Health
The “Your health, your care, your say” consultation,11 which closed on 4 November 2005, set out to improve community health and social care services for everyone. The recommendations put forward by the public and health care professionals during the consultation helped shape the resulting White Paper entitled “Our health, our care, our say” of January 2006.

The programme involved healthcare professionals and the public, including the homeless, people with learning difficulties and teenagers who are often not heard in consultation exercises. A number of events took place as part of the consultation process at which between 50 and 100 people had the chance to give their views on what they wanted from health and social care services in their everyday lives. Deliberative events aimed to involve people in the big decisions that affect their lives.

They were used to talk about issues where members of the public may not have had a great deal of knowledge or information. These events gave people the chance to exchange ideas on important issues with each other and with people working in those services. Anyone who could not attend one of the listening events but wanted to contribute was able to do so online.

The events and the online survey gave more than 100,000 people the chance to put forward their
ideas.

Case Study 5: Her Majesty’s Revenue and Customs’ “Consultative Forums”

HMRC also consult with customers and their representatives through a number of consultative forums. These forums provide an opportunity for HMRC to consult with its customers on a wide range of issues. HMRC have reviewed the working of these forums and have considered their effectiveness, their customer focus and their relevance. As part of the review they have spoken to many people who attend these forums to find out their views and opinions.

HMRC have reviewed the terms of reference of all of the forums and have ensured that there is a streamlined structure with clear reporting lines. As part of the recently introduced HMRC Consultation Framework, HMRC have committed to reviewing the terms of reference of these forums every two years.

As a result of the review HMRC have also recently announced some changes to the arrangements, which they believe will improve the communication and accountabilities around the various consultative forums. HMRC now publish the full list of standing forums on the HMRC website as well as a brief description of the purpose of the various forums and all agendas and meeting notes.

Question 6: Do you think that more emphasis should be placed on alternative or supplementary approaches to consultation in a revised consultation policy? What supplementary approach or approaches would work best for you/your organisation?

Awareness-raising

3.4 Criterion 3 of the Consultation Code is “Ensure that your consultation is clear, concise and widely accessible”. Sub-point 3.4 states that “Efforts should be made to bring the consultation to the attention of all
interested parties. As well as using the internet you should consider publicising the consultation in ways most appropriate for the groups you wish to reach.”

3.5 In the run-up to this consultation, one representative association told us of their surprise at having been left off the distribution list of a recent consultation exercise, for which they considered themselves a key stakeholder. This body did, nevertheless, become aware of the consultation in good time as they regularly visited the websites of the Government departments active in their sphere of interest. There are many angles to this issue. Policy teams in departments need to have a clear understanding of who their stakeholders are and to engage with them, particularly when launching a consultation. These stakeholders also need to keep
Government informed when contact details change. Some departments have dedicated staff members to own the relationship with key stakeholders and so are regularly in touch with these people.

3.6 Government departments usually have, on their websites, an area dedicated to their consultation exercises where current and recent consultation documents can be downloaded. The Cabinet Office Better Regulation Executive website provides links to these. This page replaced in 2006 a Consultation Index which provided links to most on-going consultations. The decision was taken to end this service as it was not comprehensive and was not providing value for money. The DTI’s Small Business Service does provide an index, including summaries, of all the consultations that it thinks will be of interest to small and medium-sized enterprises. The idea of similar services, run by representative organisations or by Government, for other sectors could also be considered or encouraged, e.g. by the National Council for Voluntary Organisations or the Trades Union Congress. Alternatively, a private enterprise might offer a valuable service along these lines by indexing consultations of interest to certain groups of stakeholders.

Question 7: How do you generally become aware of Government consultations and how would you like to learn about upcoming and current Government consultations?

Reporting back to stakeholders following consultations

3.7 One of the perceived strengths of the current Code is that departments should report back within three months of the close of consultation exercises on the issues raised by respondents, the impact on policy
and the next steps in the policy development process. This serves several purposes such as ensuring Government departments take seriously the responses received, and aiding transparency and stakeholder confidence.

3.8 However, prior to the launch of this consultation exercise, business and third sector organisations complained that often they are unaware of Government responses to consultations that they have participated
in and that the responses they have seen are sometimes of poor quality. The Code of Practice does not offer much guidance on what these responses should look like or how they should be distributed or published. The guidance accompanying the Code goes into more detail but is not very prescriptive. On the consultation pages of most departmental websites, Government’s responses to closed consultations can be downloaded but perhaps this is not enough.

Question 8: How do you rate the feedback you have seen from Government departments following consultations
and what improvements or changes would you like to see in relation to reporting back?

Consultation fatigue

3.9 Central Government and its agencies currently launch around 600 consultations each year covering a very wide range of topics. The number of formal, written consultations per department varies greatly across Government. Larger departments such as the Department for Environment, Food and Rural Affairs and the Department for Trade and Industry launch many more consultations than smaller departments.

3.10 In the run-up to the launch of this consultation, organisations representing the private sector and the third sector raised the issue of consultation fatigue. These organisations stated that it was impossible or very expensive (as external assistance had to be bought in) to provide responses to all the written consultations produced by the Government that touched on areas of interest to them.

3.11 Part of the solution to this issue might be better coordination within and between Government departments. Working together could mean that departments would have a better understanding of the
existing relationships between other departments and organisations and groups. Greater coordination could then lead to some consultations being merged when they cover similar issues and are aimed at similar stakeholder groups.

3.12 Another way of reducing consultation fatigue might be to change the current emphasis on written consultations and, where appropriate, to adopt other procedures for listening to the views of, and garnering evidence from, stakeholders.

3.13 Consultation fatigue may also be attributable to poor design of consultations and weak Government responses to consultations.

Case Study 6: Consultation of the third sector
In Budget 2006, the Government announced a review of the future role of the third sector in social and economic regeneration in England to inform outcomes of the 2007 Comprehensive Spending Review.16 HM Treasury and the Cabinet Office in collaboration with the third sector carried out the largest ever consultation with the sector. It was designed to get ideas from all parts of the sector and especially from small, community-based organisations. Contributions were summarised in the interim report on the review published on 6 December 2006 as part of the Pre-Budget Report.

Nine regional events were attended by Ministers and 83 sub-regional events were held across England. These events were attended by people from many small, local community based-groups, charities, social enterprises, faith groups, and equalities organisations representing women, black and ethnic minority groups, disabled groups and Lesbian, Gay, Bisexual and Transgender communities. These listening events were held in both urban and rural areas, and there were themed events for particular sub-sections to ensure that all parts of this diverse sector had a chance to make their voices heard.

Parallel to this exercise, the Government also received over 250 written consultation responses.

In November 2006, Compact Voice awarded a commendation for excellence to HM Treasury and Cabinet Office for the consultation process. The second stage of the review consisted of an online dialogue and a series of round-table events with respondents from the first stage who were particularly expert or keen to be involved. The final outcomes of the review will be informed by both stages of the review and will be published as part of the conclusion of the Comprehensive Spending Review.

Question 9: Is “consultation fatigue” an issue for you? If so, why is this and how do you think this issue could be overcome?

Case Study 7: Your Voice in Europe
“Your Voice in Europe” is a European Commission website providing a variety of interactive tools such as online consultations and chat-rooms which allow citizens to contribute to the policymaking process in Europe. All consultations from any part of the European Commission are now supposed to be available through this service and the Commission states that over 10 000 citizens and businesses use this web portal every day.

Other Issues

Question 10:
Please feel free to give us any other views you may have about the effectiveness of current consultation policy, the future of consultation policy, the case studies in this paper and other examples from the UK or elsewhere.

5. Options

5.1 Over the next few pages you will find three possible options for an updated consultation policy. These have been designed to address, to varying degrees, some of the analysis offered above and comments made, over recent months, to the Cabinet Office about Government consultations.

5.2 Preliminary work suggests that there is no need to publish an Impact Assessment along