Electoral Commission: Data Breaches

Lord Bishop of St Albans Excerpts

Monday 4th September 2023 Lords Chamber

[Baroness Neville-Rolfe (Con)]

I am grateful to the noble Baroness for raising that point, not least since I raised it myself about 10 minutes ago when I was being briefed for this Question. There was some comfort to know, for today’s purposes, that it was not a cyber incident, but it was a very unfortunate security breach, linked, as she will know, to an FoI process error. We must learn from this. As I said in answer to the previous question, there is a combination of things that we must do to try to prevent this kind of thing ever happening again and to ensure that the impact is minimised, if and when there are breaches of the system. Obviously, that is what they are trying to do in relation to Northern Ireland.

[The Lord Bishop of St Albans]

My Lords, the stakes are very high when these data breaches take place, because they erode public confidence in allowing organisations to collect and use our private data. I am thinking in particular of the NHS, and its great reliance on data; if it can analyse and collect information, this could be of huge help in solving medical problems and curing diseases. To prevent these things in future, what is being done to ensure that the NHS computer system cannot be hacked and that people can have real confidence in it being allowed to collect their data?

[Baroness Neville-Rolfe (Con)]

I described the new, more resilient system that we have got. There is a big focus on cyber and cyberattacks; individual Government Ministers take that very seriously. We have set up a new system called GovAssure, which the Deputy Prime Minister announced in the spring, to make sure that different parts of the public sector are better prepared and able to deal with these points. The National Cyber Security Centre has been much strengthened—actually, it also does a very good job for outside organisations, as I remember from when I was involved in an NGO and on the Back Benches. We are making progress with these things. It is important that we use electronic data, as has already been said by several noble Lords. The key is to make people take the necessary steps—often personal steps—to ensure that systems are not opened up to hackers, attackers and hostile states.