No privacy breach by MITA chairman, says commissioner
Data Protection Commissioner says MITA chairman Claudio Grech has no access to sensitive personal data held by national IT agency.
The Data Protection Commissioner has found no breach of privacy in allegations brought forward by Labour MP Michael Farrugia against Claudio Grech, the chairman of the Malta IT Agency (MITA).
Commissioner Joseph Ebejer was asked by Grech to investigate claims by Farrugia that as MITA chairman he had access to sensitive data pertaining to every citizen, and this conflicted with his political involvement inside the Nationalist Party.
Farrugia claimed Grech's 'dual role' was "a danger to individuals' liberty when it comes to data protection."
But Commissioner Ebejer said in his conclusions to the investigation that Farrugia had supplied no further evidence to substantiate his claims. He also said that Grech, as chairman, had no access to personal information processed in MITA's databases.
Farrugia told Ebejer that Claudio Grech, a former head of secretariat to Investments Minister Austin Gatt, had negotiated the land deal with Dubai's Tecom Investments for the construction of Smart City Malta. He was later employed as chief executive of SCM, and also politically appointed as MITA chairman.
Farrugia said Grech was intimate with the Nationalist Party's IT systems and had declared he had coordinate all the party's electoral data with the PN's secretary-general.
Farrugia also referred to Grech's participation in last May's referendum campaign against divorce, and stated that he should not be involved in politics as chairman of a public authority.
In his conclusions, Ebejer said he had conducted inspections at MITA to see what access employees and the chairman had to the agency's databases, which include government ministries' and public companies' databases as well.
The Commissioner said that MITA's sole role when it comes to these databases is to host them, and any change to this data can only happen when approved by the data owner. "If a MITA official needs access to the database, this must be approved by a direct superior and MITA manager, and this request is also recorded in the MARVAL database. Even the chairman needs approval from the MITA manager."
Ebejer concluded that Grech had no access to personal information according to an inspection to the MARVAL database.