Solely 30% of Metropolitan Cops have accomplished obligatory information coaching
Simply 30% of Metropolitan Cops have accomplished the drive’s obligatory information safety coaching, the London Meeting has reported, amid a slew of information incidents on the drive.
The UK’s information regulator beforehand discovered severe flaws within the Met Police’s information safety coaching on 5 August 2026, when it issued the drive with a proper enforcement discover and reprimand over breaches referring to the sharing of unredacted paperwork.
In a single incident, an officer despatched data that exposed a sufferer’s new contact particulars to their alleged stalker, whereas in one other, an officer despatched a bulk electronic mail that disclosed the identities of individuals linked to a high-profile prison investigation the place people related to UK Parliament had been focused by somebody trying to collect compromising data.
Whereas the Info Commissioner’s Workplace (ICO) disclosed on the time that the Met’s “coaching completion charges stay low”, the precise quantity was not revealed.
Following this, in mid-August 2026, the Met was pressured to apologise for sharing the e-mail addresses of people that claimed they had been sexually abused by former Harrods proprietor Mohamed Al-Fayed, which it claimed occurred on account of “human error”.
Now, following questioning from Inexperienced Occasion London Meeting member Benali Hamdache throughout a Police and Crime Committee assembly, the Met has revealed that solely 30% of officers have accomplished their obligatory information safety coaching.
The revelation comes from Kenny Bowie, the drive’s director of technique and oversight, who informed London Meeting members that whereas the low uptake “wasn’t significantly good” and the determine wants “to be improved”, it was finally the non-public duty of particular person officers and their leaders to make sure compliance.
He added that though an organisation of roughly 40,000 individuals coping with tons of of hundreds of instances isn’t going to “solely eradicate human error”, a three-pronged strategy revolving round “private duty, a supervisory duty, and a form of technological layer on high of that” might help alleviate the difficulty.
On the know-how layer, he steered a system that might immediate officers when CC’ing non-Met officers and employees on e-mail chains.
Nevertheless, whereas Bowie admitted that compliance have to be achieved “as shortly as attainable”, and additional highlighted the possibly “corrosive influence” such breaches might have on victims coming ahead, he declined to place a timeframe on when substantial compliance will probably be achieved.
“There may be an crucial upon the Met Police to do that,” he mentioned, including that supervisors have to make the significance of information safety clear: “That must be pushed down by the pyramid”.
Responding to the low information safety coaching figures, Hamdache mentioned: “The Met have solely simply apologised for one more severe information breach involving the non-public data of the Al-Fayed victims. These are survivors who’ve already proven huge braveness in coming ahead and who trusted the police with a few of the most painful reminiscences they’ve.
“We’re now studying that the drive has been failing to satisfy primary requirements in obligatory information safety coaching,” he added. “That is unacceptable and falls woefully wanting the requirements the general public has each proper to anticipate from its officers.
“Each officer should full the obligatory information coaching as a matter of precedence, and I’ll proceed utilizing my voice on the London Meeting to push for this.”
Ongoing information safety points
There have been quite a few earlier cases the place the ICO discovered the Met’s information safety practices to be missing.
In November 2018, for instance, an ICO investigation into the Met Police Gangs Matrix, an intelligence database used to determine and monitor people thought-about to be linked to gangs, discovered severe breaches of information safety legal guidelines within the drive’s use of the device.
This included the entire absence of an Equality Influence Evaluation, an absence of central oversight or governance over the processing of the information, and the blanket sharing of delicate private information with third events regardless of the absence of any information-sharing agreements.
The Gangs Matrix device was ultimately scrapped in February 2024, though human rights teams have continued to specific considerations a few potential alternative system repeating the identical errors.
In December 2020, the Met additionally didn’t comply absolutely with an ICO enforcement discover relating to its backlog of 662 topic entry requests, which famous the drive had “sustained failures” in coping with individuals in search of to determine what private data the drive holds on them.
The ICO mentioned on the time that whereas “it is usually clear that the scenario isn’t but absolutely resolved”, the commissioner had determined there could be “no want for additional regulatory motion”.
In August 2023, Laptop Weekly reported that the Met additionally deployed an built-in file administration system referred to as Join in November 2022, regardless of information safety “compliance points” that may inhibit its skill to retrieve information, meet its statutory logging necessities and reply to topic entry requests.
A serving Metropolitan Police officer was dismissed in November 2024 after repeatedly accessing delicate recordsdata associated to the disappearance and homicide of Sarah Everard whereas off-duty, prompting concern that authorized necessities round police information entry weren’t being adopted.
