Privacy regulator warns MPs over shared passwords - BBC News
The Information Commissioner's Office says it is making enquiries about MPs giving staff their logins.
The MP Nadine Dorries wrote on Twitter that all her staff had her login details

The UK's data privacy regulator has cautioned MPs about sharing work computer passwords.

It follows tweets by three Conservative Party MPs over the weekend claiming that they had provided their staff with access to their login details.

Sharing passwords is not a breach of the UK's Data Protection Act.

But the law says that "appropriate" security measures concerning personal data must be in place and that those with access must be properly vetted.

"We're aware of reports that MPs share logins and passwords and are making enquiries of the relevant parliamentary authorities," the Information Commissioner's Office said in a tweet of its own.

"We would remind MPs and others of their obligations under the Data Protection Act to keep personal data secure."

It added a link to a guide outlining the types of safety measures that should be enforced.

The issue was raised by Nadine Dorries - the member of parliament for mid-Bedfordshire - who posted on Saturday evening that her team logged into her computer using her login details "everyday".

This Twitter post cannot be displayed in your browser. Please enable Javascript or try a different browser. View original content on Twitter The BBC is not responsible for the content of external sites. Skip twitter post by Nadine Dorries This article contains content provided by Twitter. We ask for your permission before anything is loaded, as they may be using cookies and other technologies. You may want to read Twitter’s cookie policy, external and privacy policy, external before accepting. To view this content choose ‘accept and continue’. The BBC is not responsible for the content of external sites.

She had made the point in order to cast doubt over claims that First Secretary of State Damian Green must have been responsible for viewing pornography allegedly found on his computer. The minister denies the accusation, but has faced calls to resign.

Nick Boles - MP for Grantham and Stamford - followed up saying that he had shared his password with his four members of his staff, so they could deal with letters and emails from constituents.

This Twitter post cannot be displayed in your browser. Please enable Javascript or try a different browser. View original content on Twitter The BBC is not responsible for the content of external sites. Skip twitter post 2 by Nick Boles MP This article contains content provided by Twitter. We ask for your permission before anything is loaded, as they may be using cookies and other technologies. You may want to read Twitter’s cookie policy, external and privacy policy, external before accepting. To view this content choose ‘accept and continue’. The BBC is not responsible for the content of external sites.

And Will Quince - who represents Colchester - said that he had given his login to his office manager, adding that he did not always lock his machine to allow other team members access.

This Twitter post cannot be displayed in your browser. Please enable Javascript or try a different browser. View original content on Twitter The BBC is not responsible for the content of external sites. Skip twitter post 3 by Will Quince MP This article contains content provided by Twitter. We ask for your permission before anything is loaded, as they may be using cookies and other technologies. You may want to read Twitter’s cookie policy, external and privacy policy, external before accepting. To view this content choose ‘accept and continue’. The BBC is not responsible for the content of external sites. End of twitter post 3 by Will Quince MP

The House of Commons Staff Handbook explicitly states that its employees must not share their passwords, but the rule does not appear to cover logins of the MPs themselves.

Even so, some politicians have stressed that they do keep their details private.

This Twitter post cannot be displayed in your browser. Please enable Javascript or try a different browser. View original content on Twitter The BBC is not responsible for the content of external sites. Skip twitter post 4 by Peter Grant MP This article contains content provided by Twitter. We ask for your permission before anything is loaded, as they may be using cookies and other technologies. You may want to read Twitter’s cookie policy, external and privacy policy, external before accepting. To view this content choose ‘accept and continue’. The BBC is not responsible for the content of external sites.

This Twitter post cannot be displayed in your browser. Please enable Javascript or try a different browser. View original content on Twitter The BBC is not responsible for the content of external sites. Skip twitter post 5 by Melanie Onn MP This article contains content provided by Twitter. We ask for your permission before anything is loaded, as they may be using cookies and other technologies. You may want to read Twitter’s cookie policy, external and privacy policy, external before accepting. To view this content choose ‘accept and continue’. The BBC is not responsible for the content of external sites.

Security experts have expressed concern about the suggestion that password-sharing is commonplace among MPs and their staff.

Troy Hunt blogged about a variety of alternative ways to share access to emails and other documents without providing full access to a computer's contents.

And the consultant Graham Cluley suggested: "it should worry us all if the very people who are tasked with legislating on internet privacy and security issues are proving to be so utterly clueless".