UK.gov finally kills ContactPoint
A moment of silence
So, farewell then, ContactPoint, the database we never quite came to love. In the end, it was victim to straitened economic circumstances and lacking the courage of its own convictions.
According to a Department for Education announcement on 6 August, it was due to be taken to meet its cyber-maker at noon on 6 August. A statement from the DfE this morning confirmed this. ContactPoint has been switched off, never more to be accessed - at least not by local teams. Database deletion is due to commence within 24 hours of the shut-off. It should be permanently deleted within the next eight weeks, using government-approved processes and security standards (Information Assurance Standard 5 IAS5).
The problem at the heart of ContactPoint was a failure of will on the part of the government. Following a series of disasters in childcare, of which the Victoria Climbié case was one of the most significant, an official inquiry suggested a suggested systemic failure on the part of bodies entrusted with the care of children, including a failure to pass information between professionals.
One solution considered in the early days was the establishment of a national system which carried summary records of all children, noting any concerns expressed about them by a range of professionals. Such a "summary risk" database would have been intrusive, but it might possibly have identified patterns in concern that would not have been picked up without it.
However, objections to the implications of such a database prompted the first climbdown, and the gathering of so much information was quickly relegated to the "nice, but..." ideas bin. The database instantly shrank to little more than a glorified telephone directory of those who had contact with individual children.
We are still pressing the DfE to give us sight of the systems specification for the database. This has been consistently denied, on the grounds that such information might constitute a security risk. We await a response with interest.
The second issue was the number of people with access to the database.
The launch of the database was delayed three times because of security fears. The system itself came in for severe criticism from the House of Lords Select Committee on Merits of Statutory Instruments, and in a report compiled by the Foundation for Information Policy Research for the information commissioner.
Concerns were raised in respect of individuals involved in witness protection: there were fears that this would prove a goldmine for violent individuals tracking down vulnerable ex-partners.
So the number of individuals with access to ContactPoint was also reduced. For a long time, the Department for Children, Schools and Families talked about the low number (around 300,000) that would have access to ContactPoint.
They were then encouraged into into action by some sleuthing by The Reg. We discovered that the estimates being bandied about had not moved in almost two years (from the time when the project was first a gleam in government ministers' eyes) and calculated that if all those identified by the legislation as potentially needing access were given it, the figure rose to somewhere in the region of one million.
Our investigation prompted a parliamentary question, and a response sneaked out in the dying days of the 2007-08 parliamentary session suggesting the true figure would be in the region of 390,000, but could be as high as 480,000.
Just 15,000 have access at present.
Unfortunately, in solving one issue, the government created another. Minutes of police discussions on local implementation of ContactPoint highlighted concerns that access to ContactPoint would only be through a small number of designated operators in central control rooms. This solved the issue of over-broad access but did so at the cost of almost certainly ensuring the database would gain little exposure inside a key agency.
In the end, straitened times and a preference for a more targeted "signposting" approach sealed the system's fate, and the death sentence was pronounced in a letter (pdf) by Children's Minister Tim Loughton to the Association of Directors of Children's Services last month.
The development of ContactPoint appears to have cost around £230m - figures vary slightly according to source. There will also be some additional money spent supporting councils during the decommissioning phase.
There will also be knock-on effects of the electronic enabling of the Common Assessment Framework (eCAF), although for now this will continue to be rolled out.
Over a quarter of a billion pounds of public money has been dispensed on a non-project, and ContactPoint is no more. Whether the mainframe was quietly humming the tune of Daisy Bell to itself when they came to pull the plug is not known. ®
Sponsored: 2016 Cyberthreat defense report