Police National Computer

John Redwood Excerpts

Monday 18th January 2021 Commons Chamber

[Kit Malthouse]

The hon. Gentleman has given me a long series of questions, which I shall try to answer as efficiently as I possibly can. Once the error became clear to the team, they escalated it up through the Home Office, first of all on Monday, and then through Wednesday into ministerial and other offices, in accordance with normal protocols.

As to the scale of the data, while the figure of 400,000 has been quoted, that is an accumulation of the various bits of information that may or may not have been deleted. As I said, a number of bits of information may apply to one individual, so the number of individual records on the PNC that might be affected could be smaller, but we will not know exactly until later this week, once the programme that is being analysed has come to an end.

As for when the script was introduced, that was indeed six weeks prior to what is called the weeding date, which is when the deletion was due to take place. That is standard practice, to load the script into the system some weeks before it is due to run. It did not run until the Saturday, when the error within it became immediately apparent.

As to the records that are affected, I am informed that the records that have been deleted are those that relate to people who were apprehended or put under investigation by the police. When there was subsequently a declaration of no further action to be taken, if there were prior convictions or offences on the police national computer, my information—what I have been told thus far—is that that those will remain. Only information relating to that specific incident, which was no further action, may or may not have been deleted. To a certain extent, that helps to mitigate some of the risk.

It is also worth pointing out that, as I said in my statement, there are other databases, both locally and those held nationally, such as IDENT the fingerprint database or the national DNA database, which may also be searched. The PNC draws its data from a number of other databases and when, because of our legal obligations, a deletion request is put on to the police national computer, it cascades deletions down through the other databases in accordance with the law. Those subsequent deletions were halted immediately, and that should help us, we hope, with recoverability of the dataset.

The hon. Gentleman asked about SIS II. That is indeed unrelated, and visa processing was suspended for approximately 24 hours. Everybody whose customer service threshold could not be met as a consequence of that was informed, but processing was resumed pretty quickly. We are assessing the impact on ongoing police investigations, while we analyse the report that has been run, which will give us the full picture of what has actually happened on the system.

Having said that, policing partners and the Home Office have put in place mitigations, not least informing other police forces—as Nav Malik did—that they should be making subsequent checks of their own and other databases, not least the police national database, which is a separate database from the police national computer and holds intelligence and other information.

On the national law enforcement data project, the replacement of the PNC, while that process has had its fair share of problems, it is fair to say we have undergone a reset. There is now a renewed sense of partnership working between the Home Office and the police, to make sure we get that much needed upgrade in technology correct.

The hon. Gentleman’s final point was about accepting the maintenance of data. He is absolutely right: we accept that it is very important that we, and indeed police forces and other governmental bodies that hold people’s personal data, do our best to maintain its integrity and to do so as faultlessly as possible. In these circumstances, we were attempting through this code to comply with our stringent legal obligations to delete personal data where it cannot be held by us or by other databases. Sadly, human error introduced into the code has led to this particular situation, which we hope is rectifiable. I am more than happy to keep the hon. Gentleman updated, as I did on Saturday afternoon, when I briefed him.

[John Redwood (Wokingham) (Con) [V]]

I thank the Minister, the Home Secretary and the police leadership around the country for the very professional way in which they have responded to a most unfortunate error, an error that none of them wanted or made personally. Will he give us a little bit more encouragement, however, because is it not the case that there are now many good ways to retrieve data that has been wrongly deleted? Might we be looking at a remedy for this in a few weeks’ time, when the computer experts have finished their job?

[Kit Malthouse]

My right hon. Friend is absolutely right that the initial assessment was some optimism about the ability to recover this data, not least because it is held in a number of areas. We will not have the full picture until we get to the end of this week, once we have analysed the report and, of course, looked at the data that we should have deleted but have not because of this error. However, he is quite right that we should be optimistic about that and recognise that all is not lost. There are other ways that this data can be cross-checked, in particular as part of a police investigation. We are working with our policing partners to ensure that they make full use of that, so that they can proceed as usual with their investigations.