● Covered by 1 source · 1 reportMedium impact1 negative
UK Police Data on Microsoft Azure Vulnerable to Foreign Access, US Government
Key points
- Sensitive UK police data is stored on Microsoft Azure.
- A 2017 assessment noted vulnerability to foreign and US government access.
- Police claim data stays in UK and requires permission for US access.
- Microsoft stated data can leave the UK and cannot guarantee sovereignty.
Sensitive Police Data on Cloud Platforms
A Guardian investigation uncovered that vast amounts of sensitive UK police data, including criminal records, victim statements, and internal emails from over 40 police forces, are stored on Microsoft Azure cloud platforms. Some of this information exceeds "official" classification, potentially reaching "secret" or "top secret" levels.
Acknowledged Vulnerabilities
A 2017 police document, reviewed by the Guardian, indicated that officers accepted the possibility of "US government insiders" viewing the data and that it could be "transmitted worldwide" with unknown extent. Specialists confirm these risks remain today, with almost every UK police force now relying on Microsoft Azure.
Contradictory Statements on Data Security
UK police stated that contracts with Microsoft prevent US authorities from viewing data without express permission and that data stored on Microsoft remains within the UK. However, these statements contradict Microsoft's 2023 disclosure to Police Scotland, which indicated that data "can go outside the UK" and that it "cannot guarantee data sovereignty".
Industry Concerns
A source with senior roles in UK policing expressed concern that the risks have not been properly understood, highlighting the extreme sensitivity of the data. The source noted that if this information falls into the wrong hands or is incorrect, it could lead to harm or death.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
A Guardian investigation revealed that sensitive UK police data, including criminal records and victim statements, stored on Microsoft Azure cloud platforms is vulnerable to compromise by foreign actors and the US government. A 2017 police document acknowledged this risk, which persists today, despite police assurances that data remains in the UK and requires express permission for US access, contradicting Microsoft's own statements.