Northern Ireland

Independent ‘end-to-end review’ to examine PSNI data breaches

Police Service of Northern Ireland Chief Constable Simon Byrne (Liam McBurney/PA)
Police Service of Northern Ireland Chief Constable Simon Byrne (Liam McBurney/PA) Police Service of Northern Ireland Chief Constable Simon Byrne (Liam McBurney/PA)

The chair of the Northern Ireland Policing Board has announced that an “independently-led end-to-end review” of the circumstances surrounding recent PSNI data breaches has been commissioned.

It comes after personal data on all serving members of the PSNI was mistakenly published earlier this month in response to a Freedom of Information request.

Details of the 9,483 people released included the surname and first initial of every employee, their rank or grade, where they are based and the unit they work in.

The Police Service of Northern Ireland has confirmed the list is in the hands of dissident republicans, who continue to target officers.

Police officers and their representative organisations have spoken out in recent weeks over concern for their safety.

Earlier this week a man appeared in court in Co Antrim charged with two terror offences relating to the data breach.

A number of other data breaches have since come to light, including the loss of a police officer’s laptop and notebook which contained details of 42 officers and members of staff after the items fell from a moving vehicle last week.

Chief Constable Simon Byrne appeared before the Policing Board today, his second meeting since the major breach came to light.

He left the premises of the oversight body in Belfast without taking questions from media.

Mr Byrne later issued a statement via social media saying he “recognises the gravity of the situation and challenges ahead”.

Northern Ireland Policing Board chair Deirdre Toner (Liam McBurney/PA)
Northern Ireland Policing Board chair Deirdre Toner (Liam McBurney/PA) Northern Ireland Policing Board chair Deirdre Toner (Liam McBurney/PA)

Earlier, Ms Toner said Mr Byrne “retains the confidence of the board”, but described exchanges as “crunchy”.

“It’s been a long day,” she told reporters after the meeting, adding that a “wide range of issues” were discussed.

“It was constructive, proactive. Yes, it was certainly crunchy. There’s no doubt about that.

“This breach and the subsequent breaches have damaged the reputation of the service and impacted the confidence of officers, staff and others in the service’s ability to protect personal information.”

Ms Toner said the independent review of the circumstances of the data breaches will be led by City of London Police Assistant Commissioner Peter O’Doherty.

It will look at process and actions leading to the breach and if any organisational, governance or management issues allowed it to happen.

Ms Toner said it will identify any action required to prevent further breaches and build more robust risk mitigation systems.

She said: “The review team have been tasked to have an initial report back to the board within one month. A final report is expected by the end of November and will be made available for public release.”

She said these measures are essential to “help rebuild trust and confidence” in the PSNI.

The board will put in place monitoring measures to ensure “effective implementation of the recommendations” of the review.

Ms Toner added: “While much remains to be done, the board acknowledges the comprehensive response that has been mobilised and delivered by the PSNI.”

Read more:

  • Who are the PSNI - an explainer
  • What is the Policing Board?

It will look at the process and actions leading to the breach and if there were any organisational, governance or management issues that allowed the breach to happen.

Ms Toner said it will identify any action required to prevent further data breaches and build more robust risk mitigation systems.

She said: “The review team have been tasked to have an initial report back to the board within one month. A final report is expected by the end of November and will be made available for public release.”

She said these measures were essential to “help rebuild trust and confidence” in the PSNI.

The board will put in place monitoring measures to ensure “effective implementation of the recommendations” which stem from the review.

Read more: 

  • Patrick Murphy: Politicians and the Policing Board have failed the PSNI and the public
  • How will PSNI reassure officers and civilian staff after confirmation that their personal information is now in the hands of dissident republicans?

Ms Toner added: “While much remains to be done, the board acknowledges the comprehensive response that has been mobilised and delivered by the PSNI.”

The chair of the Northern Ireland Policing Board has said the Chief Constable “retains the confidence of the board” but said conversations with Mr Byrne were “crunchy”.

Ms Toner said: “These data breaches will be a standing agenda item on the monthly public and private accountability sessions with the Chief Constable for as long as is necessary so that progress on dealing with all the consequences from the breaches – including support mechanisms and risk assessments for police officers and staff – can be tracked and assessed.

“The Chief Constable retains the confidence of the board to lead the service and the senior team in the wide-ranging programme of work which has been initiated to address all aspects of the data breaches to ensure appropriate support mechanisms are in place for police officers and staff.”

Speaking after the meeting, she said “it’s been a long day”, adding that a “wide range of issues” were discussed.

“It was constructive, proactive. Yes, it was certainly crunchy. There’s no doubt about that.”

Ms Toner added: “The Chief Constable’s continued leadership has not been called into question by the board at this time.

“That’s the position of the board at this point in time.

“It’s not that confidence can change, and as I said it’s not an open cheque book, as we say.

“But we need to focus on systems now, not on individuals.”

PSNI data breach: Chief Constable 'recognises the gravity of the situation'

Chief Constable Simon Byrne has said he “recognises the gravity of the situation and challenges ahead” following a major data breach.

In a statement after attending a meeting of oversight body the Northern Ireland Policing Board, Mr Byrne said he gave an update on the service’s immediate response, the criminal investigation and “approach to begin recovery”.

“It was a constructive meeting,” he said.

“I recognise the gravity of the situation and the challenges ahead.

“The independent review led by Assistant Commissioner O’Doherty, City of London Police, will provide answers to the questions.

“The service executive team and I are grateful for the support of the board.

“I would also reiterate my thanks to officers and staff who continue to serve the public around the clock.”