Government faces questions after review of 11 major UK data breaches

MP asks why all recommendations have not yet been implemented and why the review itself was kept secret for almost two years

The government is facing calls to explain why it has yet to implement all the recommendations from a 2023 review into a spate of serious public sector data breaches, including the exposure of Afghans who worked with British military, victims of child sexual abuse and 6,000 disability claimants.

On Thursday ministers finally published the information security review, which was triggered by the 2023 leak of personal data of about 10,000 serving officers in the Police Service of Northern Ireland.

A lack of controls over ad hoc downloads and exports of aggregations of sensitive data.

The release of sensitive information via wrong recipient" emails and failure to use bcc properly.

Hidden personal data emerging from spreadsheets destined for release.