Contribution
My Lords, I am very grateful to the Minister for taking the time to speak with me extensively before the Statement. I thank him and his colleague, the Secretary of State for Defence in the other place, for the tone they have adopted. I join the Secretary of State and my honourable friend the shadow Secretary of State James Cartlidge in their apology, on behalf of the British Government, to all those impacted by the data leak. It was a wholly unacceptable breach of data protection protocols and should never have happened.
This is a story of human error, an error of magnitude with profoundly grave and potentially tragic consequences, that was perpetrated by an MoD official and came to light only some 18 months or so after it occurred. Although as a Defence Minister I had no involvement in the issue, at that point in August 2023 the priority was to take all necessary steps as a matter of urgency to mitigate risk to life, hence the court’s involvement that culminated in the grant of a super-injunction. It was the political judgment of the last Government to seek the court’s intervention, and the decision of the court to grant a super-injunction clearly reflected how gravely the court regarded the risk to life. A court injunction is neither a cover-up nor political suppression of information; it is a court order.
No one should be under any misunderstanding about the potential consequence of this leak. If the Government had not sought the injunction, that data could have been disseminated globally through the media. This could have put the lives of countless Afghans at risk—people who helped Britain in our fight against al-Qaeda and the Taliban, who saved the lives of British troops and who are incredibly brave, selfless and committed individuals who put everything at risk, including their families, to help us. If the Government had not sought to prevent the information being disseminated, those Afghans, who gave so much, could have been captured, tortured and murdered. The previous Government would have abnegated their responsibilities if we had left these Afghans to suffer the consequences of this data breach. That is why it was right to seek the injunction and resettle those affected in the UK.
I might observe that, regardless of what Government were in power at the time, these measures were the correct ones to take in the circumstances existing at the time. Indeed, on taking office, the current Government did not seek to have the super-injunction lifted.
Although this was human error and not a political mistake, the political responsibility is to keep the situation under review. It was right that this Government should seek expert advice on whether it was now appropriate to seek to lift the super-injunction and, if so advised, to make the necessary application to the court. In that, the Government have the full support of these Benches.
I understand that the Minister will be limited in what he can say, but I have a few questions for him. Is he in a position to give the House any more details on how the leak happened? I would have thought that there would have been digital safeguards within the MoD that prevented an email with a sensitive attachment being sent to a random person outside the department. What processes were in place to prevent this happening, and why were they not effective? Secondly, can the Minister tell us what the repercussions were for the official who inadvertently sent the data outside formal channels? Finally, what systems have the Government now put in place to learn from this regrettable episode and ensure that everything has been done to prevent a recurrence? As ever, I look forward to the Minister’s response, and I once again thank him for the manner in which he has approached this matter to date.