03 May 2023
Your request
I am writing to request information under the Freedom of Information Act 2000.
Specifically, I am seeking information regarding your secure communication.
Please provide me with the following information:
1. What is your current email provider (e.g. Outlook or G-suite)?
2. Do you have a solution for secure email in place (Y/N)?
3. Who is your current email security provider (e.g. Egress)?
4. When is the contract up for renewal?
5. Typically what is the chosen duration of these contracts 12, 24, or 36 Months?
6. Name and contact details of the person responsible?
7. Current annual spend for this contract?
8. Current number of licences for this contract?
9. Did you purchase via a reseller (if yes, please specify who)?
Budget & procurement
10. Are you planning on assigning specific budgets for securing email communication in 2023?
11. Do you procure through the G-Cloud framework (if not, how do you procure & plan to procure secure email in the future)?
Our response
1. Outlook
2. Y
3. Egress & Office 365 OME
4. June 2023 for Egress and November 2024 for Office 365 OME
5. 12 months for egress and 36 months for Office 365
6. Lambeth Council can provide details at the Strategic Level only; this information is available on the Lambeth website below.
How Lambeth Council is organised | Lambeth Council
The email address follows the Lambeth standard logic of initialfirstnamelastname@lambeth.gov.uk
We are unable to give out individual phone numbers.
I can confirm that we have reviewed this part of your request and consider disclosure would breach the Data Protection Act 2018 and therefore engage Section 40(2): Personal Data to this request.
The definition of personal data is set out in provision 3 of the Data Protection Act 2018 as follows:-
(2)“Personal data” means any information relating to an identified or identifiable living individual
(3)“Identifiable living individual” means a living individual who can be identified, directly or indirectly, in particular by reference to—
(a)an identifier such as a name, an identification number, location data or an online identifier, or
(b)one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the individual.
We note this request asks for information which would allow an individual(s) to be identified.
I have considered whether it would be fair to disclose the information including whether disclosure would cause any unnecessary or unjustified damage or distress to the individual concerned; the individual’s reasonable expectations of what would happen to their information; and balancing the rights and freedoms of the data subject with legitimate interests.
In this case, I can confirm that it would not be fair to the individuals to disclose information about their names and emails as it could cause distress to the individuals.
I do not consider that the individuals would expect the Council to disclose any information which may allow them to be identified. Although I acknowledge the legitimate interest in disclosing general information relating to this request, I do not consider the legitimate interest overrides the rights and freedoms of the individual on this occasion.
In accordance with Section 17 FOIA this letter represents a Refusal Notice for this part of the request
7. Approx £8400 for Egress, Office 365 OME included in the M365 licenses
8. 910 Egress Licenses and 4100 Office Licenses
9. Egress (SCC), Microsoft (Computacenter)
10. No
11. We use various procurement channels, including G-cloud. Each procurement has a different procurement strategy, based on the outcomes needed.