Improving Cyber Resilience

Baroness Finn Excerpts

Wednesday 21st May 2025 Lords Chamber

[Baroness Anderson of Stoke-on-Trent (Lab)]

The noble Lord raises an important point. The NAO report was clear in its criticisms of our structures, and we accept every recommendation of the report. We are working our way through them, which is why we will be bringing forward a government cybersecurity strategy this year—building on the work of the previous Government—to make sure that we are fit for purpose. On the updating of IT, I have just lived through the updating of the printer system in the Cabinet Office. I would suggest that we take a bit of time with the next one.

[Baroness Finn (Con)]

My Lords, in November last year, media reports confirmed that the GOV.UK One Login service had been adopted by 50 government services, and that was expected to reach 100 within the year. However, Computer Weekly has since reported on serious cybersecurity vulnerabilities. Given that One Login processes biometric data from millions of citizens, why have the Government refused to publish their data protection impact assessment, and can the Minister confirm whether the rollout will continue on that timescale?

[Baroness Anderson of Stoke-on-Trent (Lab)]

The noble Baroness raises a series of important questions. Given the detail of them, I will write to her, and make sure that I speak to relevant officials, so that she gets the answers that she seeks. On One Login, over 5 million people are currently using it to prove their identity, and the ID Check app has over 6.5 million downloads, and a 4.7 rating on all app stores. If there are questions to answer, I will make sure that we get her the answers.