Sign in Subscribe
Police departments

Government Faces Calls to Explain Delayed Implementation of Data Breach Review Recommendations

Strategic Insights

— 2 min read

The UK government has been urged to answer questions about its failure to implement all the recommendations from a 2023 review into serious public sector data breaches, including the exposure of Afghans who worked with British military forces, victims of child sexual abuse, and 6,000 disability claimants. The review, which was triggered by the leak of personal data of about 10,000 serving officers in the Police Service of Northern Ireland, found common themes in 11 public sector data breaches, including a lack of controls over sensitive data downloads and releases via "wrong recipient" emails. The government has implemented 12 of the 14 recommendations, but the Chair of the Science, Innovation and Technology Committee, Chi Onwurah, has expressed concern over the delay and secrecy surrounding the review.

Key Takeaways:

  • The government has failed to implement all the recommendations from the 2023 Information Security Review, despite calls for action from the Information Commissioner and the Science, Innovation and Technology Committee.
  • The review identified three common themes in public sector data breaches: lack of controls over sensitive data downloads, release of sensitive information via "wrong recipient" emails, and hidden personal data emerging from spreadsheets.
  • Chair of the Science, Innovation and Technology Committee, Chi Onwurah, has questioned the government's delay in implementing the review's recommendations and the secrecy surrounding the review.
  • The government has implemented 12 of the 14 recommendations, but the fate of the remaining two is unclear.
  • The Information Commissioner, John Edwards, has called on the government to implement the review's recommendations in full, saying that the public must be able to trust the government to keep their data secure.
  • The government has announced plans to upgrade digital infrastructure across the public sector, but the effectiveness of these plans remains unclear.

Statistics:

  • 10,000 serving officers of the Police Service of Northern Ireland had their personal data leaked in 2023.
  • 18,700 Afghans were affected by a database leak, leading to concerns about their safety under the Taliban.
  • 6,000 disability claimants had their data breached as a result of a public sector data breach.
  • 12 of the 14 recommendations from the 2023 Information Security Review have been implemented.
  • The review identified 11 public sector data breaches as part of its investigation.

Sources:

  • "Government faces calls to explain why all recommendations from 2023 data breach review have not been implemented", The Guardian, [link not provided]
  • "Afghanistan: UK data leak 'raises safety concerns for translators' ", BBC News, [link not provided]
  • Information Security Review, Cabinet Office, [link not provided]
  • Letter from Pat McFadden and Peter Kyle to Chi Onwurah, [link not provided]

Read more