Police National Computer — House of Commons, 2021-01-18
Topic: Law and Crime
Christopher Laurie Malthouse (Conservative, Centre-right): The hon. Gentleman has given me a long series of questions, which I shall try to answer as efficiently as I possibly can. Once the error became clear to the team, they escalated it up through the Home Office, first of all on Monday, and then through Wednesday into ministerial and other offices, in accordance with normal protocols As to the scale of the data, while the figure of 400,000 has been quoted, that is an accumulation of the various bits of information that may or may not have been deleted. As I said, a number of bits of information may apply to one individual, so the number of individual records on the PNC that might be affected could be smaller, but we will not know exactly until later this week, once the programme that is being analysed has come to an end As for when the script was introduced, that was indeed six weeks prior to what is called the weeding date, which is when the deletion was due to take place. That is standard practice, to load the script into the system some weeks before it is due to run. It did not run until the Saturday, when the error within it became immediately apparent As to the records that are affected, I am informed that the records that have been deleted are those that relate to people who were apprehended or put under investigation by the police. When there was subsequently a declaration of no further action to be taken, if there were prior convictions or offences on the police national computer, my information—what I have been told thus far—is that that those will remain. Only information relating to that specific incident, which was no further action, may or may not have been deleted. To a certain extent, that helps to mitigate some of the risk It is also worth pointing out that, as I said in my statement, there are other databases, both locally and those held nationally, such as IDENT the fingerprint database or the national DNA database, which may also be searched. The PNC draws its data from a number of other databases and when, because of our legal obligations, a deletion request is put on to the police national computer, it cascades deletions down through the other databases in accordance with the law. Those subsequent deletions were halted immediately, and that should help us, we hope, with recoverability of the dataset The hon. Gentleman asked about SIS II. That is indeed unrelated, and visa processing was suspended for approximately 24 hours. Everybody whose customer service threshold could not be met as a consequence of that was informed, but processing was resumed pretty quickly. We are assessing the impact on ongoing police investigations, while we analyse the report that has been run, which will give us the full picture of what has actually happened on the system Having said that, policing partners and the Home Office have put in place mitigations, not least informing other police forces—as Nav Malik did—that they should be making subsequent checks of their own and other databases, not least the police national database, which is a separate database from the police national computer and holds intelligence and other information On the national law enforcement data project, the replacement of the PNC, while that process has had its fair share of problems, it is fair to say we have undergone a reset. There is now a renewed sense of partnership working between the Home Office and the police, to make sure we get that much needed upgrade in technology correct The hon. Gentleman’s final point was about accepting the maintenance of data. He is absolutely right: we accept that it is very important that we, and indeed police forces and other governmental bodies that hold people’s personal data, do our best to maintain its integrity and to do so as faultlessly as possible. In these circumstances, we were attempting through this code to comply with our stringent legal obligations to delete personal data where it cannot be held by us or by other databases. Sadly, human error introduced into the code has led to this particular situation, which we hope is rectifiable. I am more than happy to keep the hon. Gentleman updated, as I did on Saturday afternoon, when I briefed him.