Home Office Contractor Faces Backlash Over Data Collection on UK Citizens
Accusations arise after a report details unauthorized data collection while verifying migrants' financial backgrounds.
The UK Home Office is under scrutiny for allegedly collecting personal data on a significant number of British citizens during its financial checks on migrants.
This follows the accidental release of a document containing sensitive information regarding more than 260 individuals, forwarded to a charity from a government official.
The details included names, dates of birth, and electoral roll data, with connections to the immigration application process based on past residential or employment ties.
The document, prepared by credit reporting firm Equifax on 25 June 2024, was intended to support a visa fee waiver application.
These applications require financial assessments to determine an applicant's inability to pay standard immigration or nationality fees.
Official figures indicate over 80,000 such applications were filed in the year leading up to September 2024.
Ramfel, the Refugee and Migrant Forum of Essex and London, expressed concern regarding the implications of this data collection.
Nick Beales, the charity’s head of campaigning, indicated that the scale of data included in the report suggested the Home Office may be retaining records on vast numbers of British citizens unaware of this collection.
He emphasized that many listed individuals were likely British citizens with no previous dealings with the Home Office.
Equifax, which faced one of the largest cybersecurity breaches in history in 2017, included a disclaimer with the report acknowledging the challenges in verifying the information collected.
The disclaimer stated the service was available solely for internal purposes, raising questions about its use in government processes.
In November, Ramfel reached out to Matthew Rycroft, the Home Office’s permanent secretary, to address the data breach; however, the charity did not receive a comprehensive response to their inquiries.
A subsequent letter from Joanna Rowland, director general of customer services at the Home Office, acknowledged the concerns but did not specifically address the charity's questions regarding the destruction of third-party data and measures to limit unnecessary information sharing.
The Home Office confirmed it was investigating the incident and stated that it had ceased using Equifax for processing visa fee waiver applications.
This comes amidst a notable surge in fee waiver applications, attributed in part to an increase in the immigration health surcharge, which rose from £624 to £1,035 for most adult visa applicants in February 2024. Recent statistics indicate a dramatic increase in the number of applicants claiming inability to pay, with figures escalating from 13,600 in late 2023 to 25,600 in the third quarter of 2024.
Beales criticized the need for extensive financial checks amid rising application costs, arguing they imposed unnecessary burdens on low-income individuals and could be reformed to alleviate processing delays that have left many waiting over a year for a visa.
Equifax provides services to various government departments, including the Department for Work and Pensions and HM Revenue & Customs, and was recently penalized by the Financial Conduct Authority for another data breach affecting nearly 14 million UK consumers, underscoring ongoing concerns about data protection standards.
The Home Office stated that any potential data breach is taken seriously and emphasized its commitment to following stringent data protection regulations, including ensuring that only essential personal data is processed and stored securely.