Home Office contractor collected data on UK citizens while checking migrants’ finances

A picture


The Home Office has been accused of collecting data on “hundreds of thousands of unsuspecting British citizens” while conducting financial checks on migrants.A report by a private contractor for a routine immigration application was mistakenly sent to a charity by a government official, and contained information on more than 260 people including their names, dates of birth and electoral roll data.Their only connection to the applicant appears to be that they previously lived or worked in the same address or postcode area, but some of the people listed had left as far back as 1986.The document, seen by the Observer, was generated by the credit reporting firm Equifax on 25 June 2024 and was emailed to a caseworker from the Refugee and Migrant Forum of Essex and London (Ramfel) later the same day.It was drawn up for an immigration fee waiver application, which requires financial checks to verify that people cannot afford to pay the normal fee for their visa, immigration or nationality applications.

More than 80,000 of these applications were lodged in the year to September,Nick Beales, Ramfel’s head of campaigning, said the number of people named in the single report suggested that the Home Office could have been “collecting financial data on hundreds of thousands of unsuspecting British citizens”,Equifax, which was subject to one of the largest cybersecurity breaches in history in 2017, included a disclaimer in the report, which read: “The volume and nature of the information available on this service makes it impractical for Equifax Ltd to verify it … This service is made available only for your own private or in-house purposes,”Beales said the Home Office did not respond to an initial email flagging the data breach, and the charity wrote to Matthew Rycroft, permanent secretary at the Home Office, in November,The letter said: “This raises serious questions about transparency, privacy, and potentially non-consensual data collection, as we cannot imagine any of these people, the majority of whom are likely British citizens with no prior engagement with the Home Office, have ever knowingly consented to the Home Office receiving and storing their data.

”Ramfel asked whether data on third parties was destroyed after use and what measures were in place to minimise unnecessary information collection and sharing, but a response received in December did not answer the questions.A letter from Joanna Rowland, director general of the Home Office’s customer services group, said: “I cannot comment on individual processes in detail, but I note your suggestions and have asked officials in the relevant departments to consider them.The Home Office works hard to ensure the UK General Data Protection Regulations and Data Protection legislation is fully complied with.This means processing and securely storing the minimal amount of personal data necessary to execute our functions, lawfully and effectively, and deleting data which is not necessary.”The Home Office told the Observer it was investigating whether a data breach had taken place.

It no longer used Equifax for visa fee waiver processing.Government statistics show a steep rise in the number of fee waiver applications since the Conservative government increased the immigration health surcharge from £624 to £1,035 a year for most adult visa applicants in February 2024.The number of people declaring they could not afford the fees jumped from 13,600 in the last three months of 2023 to 18,500 in the first quarter of 2024, 22,800 in the second quarter and 25,600 between July and September, and backlogs are growing.Sign up to ObservedAnalysis and opinion on the week's news and culture brought to you by the best Observer writers after newsletter promotionBeales said: “With applications for leave to remain already costing nearly £4,000, additional intrusive checks on a person’s finances are clearly unnecessary for those on low incomes or receiving disability benefits.“Removing these checks would help the Labour government streamline visa processing, reduce extensive delays that see people waiting over a year for their visas to be issued and stop the mass collection of data of non-consenting third parties.

”Equifax provides services to government departments and public bodies including the Department for Work and Pensions, HM Revenue & Customs, the Ministry of Defence, Student Loans Company, the Ministry of Justice and NHS Business Services Authority.In 2023, the firm was fined £11m by the Financial Conduct Authority over a data breach in which hackers accessed information on almost 14 million UK consumers because of data protection failures.A spokesperson for Equifax UK declined to comment but pointed to legal guidance stating that credit reference agencies do not require consent for data collection and instead rely on “legitimate interest” under data protection laws.A Home Office spokesperson said: “Any data breach is a matter of serious concern, and we ensure they are fully investigated.We continue to take robust action by continually monitoring training and safeguards to protect personal data.

” The subheading of this article was amended on 23 February 2025.An earlier version said incorrectly that Equifax accidentally sent the report to a charity; it was sent by a government official as stated in the article itself.
societySee all
A picture

‘It’s not ethical and it’s not medical’: how UK rehab clinics are cashing in on NAD+

They are beloved by A-listers and surging in popularity. But claims that NAD+ infusions are a fix for addiction are unproven, risky – and possibly illegal, an Observer investigation revealsIt is billed as a “miracle” treatment that can reverse ageing and regenerate brain cells. And getting hooked up to IV drips containing NAD+ has surged in popularity, with record Google searches and celebrity fans such as Kendall Jenner and Joe Rogan.Now NAD+ is being touted in the UK as a treatment for substance ­misuse. Infusions of NAD+, which is derived from vitamin B3, are being sold across the country as a ­“clinically proven” and “effective” way to quit drinking or get off drugs

A picture

The pill hasn’t been improved in years. No wonder women are giving up on it | Martha Gill

Something is changing when it comes to contraception. Lots of people aren’t using it. Last week we heard that this includes a third of young Irish people. Meanwhile, there has been a significant rise in abortions in England and Wales. Prescriptions for the contraceptive pill in England dropped from 432,600 in 2014 to 188,500 in 2021

A picture

As menopause wars rage, social media skirmishes erupt over new approaches to hormone therapy – and Sydney is about to be a flashpoint

A menopause and hormone treatment conference in Sydney in March has ignited a passionate debate among medical doctors and researchers about women’s empowerment, social media advice, big business and even how doctors communicate with their patients.The So Hot Right Now conference, being held on 1 and 2 March in Sydney, has become a flashpoint over the science of menopause hormone therapy, or MHT – formerly known as hormone replacement therapy – just as it has in the UK and the US.Sign up for Guardian Australia’s breaking news emailAt the heart of the conflict is the dosage of hormones being prescribed by a new breed of mainly female doctors, and whether evidence supports the claims being made on social media, especially about the benefits of testosterone therapy in perimenopausal and menopausal people.“The menopause wars are alive and well,” says Prof Jayashri Kulkarni, a professor of psychiatry at the Alfred hospital in Melbourne, who will appear on the panel at the Opera House event on 1 March.“Millions of women go through menopause without any problems, but for others the experience is horrendous,” she says

A picture

‘Revenge porn’ abusers allowed to keep devices with explicit images

Perpetrators of “revenge porn” offences are being allowed to keep explicit images of their victims on their devices, after a failure by prosecutors to obtain orders requiring their deletion.An Observer analysis of court records in intimate image abuse cases has found that orders for the offenders to give up their devices and delete photos and videos are rarely being made. Of 98 cases concluded in the magistrates courts in England and Wales in the past six months, just three resulted in a deprivation order.In other cases involving digital devices, such as offences regarding indecent images of children, these orders were made consistently.The Crown Prosecution Service (CPS) this weekend said more must be done to “stop ­perpetrators retaining these images and continuing to take gratification from their crimes”

A picture

Domestic violence victims must be included in the assisted dying debate, campaigners say

There is a “significant risk” that victims of coercive control could be put under pressure to end their own lives using assisted dying legislation, charities have warned.The Centre for Women’s Justice (CWJ) and Standing Together Against Domestic Abuse were among expert organisations that made submissions earlier this month to the committee examining the assisted dying bill, warning that the plans in their current form could endanger victims of coercive control.The groups said discussion of the proposals had so far failed to consider domestic abuse or the risk that perpetrators could coerce or pressure victims into assisted dying.Kim Leadbeater MP, who introduced the bill, which covers England and Wales, said she welcomed the contributions of these groups and was “absolutely committed to ensuring the right protections are in the bill”.Nogah Ofer, solicitor at the CWJ, said: “The evidence shows that coercive control frequently results in victims losing their own sense of self and self-worth, and is closely linked with both domestic homicide and suicide related to domestic abuse

A picture

‘My paedophile letters’: French surgeon to stand trial accused of abusing 299 child patients

When two gendarmes knocked on her door in 2019, Marie had no idea that she was about to find herself at the dark heart of one of the world’s biggest child abuse cases.The French mother of three, now 38, was shocked when the officers told her she had been the victim of Joël Le Scouarnec, a surgeon and an alleged serial paedophile accused of raping and sexually abusing hundreds of children.She recalled asking them: “Was I touched?”“No, madame. Raped,” they replied.“I couldn’t think they were talking about me