AQW 1850/17-22

Mr Andrew Muir
Alliance Party
North Down

Tabled Date: 10/02/2020
Answered On Date: 13/02/2020
Priority Written: Yes

Question:
To ask the Minister for Infrastructure to detail (i) the extent and nature of the Just Park data breach reported on 07 February 2020; and (ii) what steps are being taken to rectify problems with Just Park.

Answer:

On 7 February 2020, JustPark was made aware of a data incident, where a Corporate Account client had been given elevated permission to their back office systems. The client used this elevated permission, which had been granted in error, to access data in respect of a number of parking sessions in a Belfast car park and for one other location outside Northern Ireland. No bank account information could be viewed and no data was released into the wider public domain. JustPark notified the Information Commissioner’s Office of this issue and after completing a pre report questionnaire, they were advised that a report was not required.

Justpark removed the elevated permission as soon as they identified the source of the problem and have put in place additional controls to prevent a repetition. My Department’s officials are in daily contact via conference calls with our parking enforcement service provider (NSL) and their sub-contractor, (JustPark), to monitor the service and deal with any issues raised relating to the JustPark app or the service provided to customers, and to ensure they are resolved quickly. I have asked for an urgent report on the incident and a review of the contract in place with JustPark to ensure that its terms and conditions are rigorously enforced.