Question to the Home Office:

To ask the Secretary of State for the Home Department, whether any confidential data was compromised by the recent cyber incident affecting the ACRO website; and if she will make a statement.

ACRO provides three main services to members of the public: Police Certificates, International Child Protection Certificates, and Subject Access / Record Deletion requests. All of these services continue to be offered to the public at this time with contact details for each product available from the existing URL. The website will be brought back online as soon as possible.

At this time ACRO has no conclusive evidence that any personal data has been affected by the cyber security incident. There does not appear to be any potential risk to customers’ payment information or to the information / certificates that ACRO sent to individuals following their applications.

The initial processing time for ACRO to process a Record Deletion application is currently between three and five working days. Applications are referred to the relevant police force which owns the data to make a decision on the application. Timings for these decisions are case-specific and dependent on the individual force.