Rhys Blakely
2 for 1 tickets to Singin' In The Rain, this coming Monday. Book now
Security experts called for an urgent review of the law following the loss of the personal information of 25 million Britons by HM Revenue & Customs.
Most damning, they said, was the apparent revelation that the data lost was not encrypted but merely password protected.
“A criminal could break into these files in a matter of minutes,” Simon Davies, a senior visiting fellow at the London School of Economics who specialises in data security, said.
One senior executive at a high street bank called the breach a "fiasco". He said: “You would never see a bank send data in the slapdash way HMRC did. To say we are disappointed is an understatement”.
Mr Davies called the incident "the final straw and the latest in a long line of fundamental errors at HMRC".
He called for new legislation that would require bodies that lose information to inform members of the public who are placed at risk.
The Data Protection Act currently does not require companies to notify either the Information Commissioner's Office or those affected by the loss of data.
In September, a House of Lords committee repeated calls for a data-breach notification law following a report that detailed the findings of an enquiry into internet security.
Figures at the Metropolitan Police and the Information Commissioner's Office, in part responsible for upholding the DPA, have cautiously supported new measures though they have voiced concerns over who would police them.
Models for legislation would be likely to include California, where organisations are required to inform individuals immediately once they are aware of a loss of data.
Dr Gus Hosein of Privacy International, a non-government body that advocates for data protection laws, said that the UK is "the bad boy in the western world when it comes to data protection. It is the furthest behind".
He said the UK trails far behind companies such as Germany and Canada on the issue while 34 of America's 50 states have legislation in place.
Enjoy screenings of all the classic films you love, plus take advantage of two-for-one tickets
Have you ever dreamed of owning your own racehorse or a beautiful painting?
Enjoy comfort, safety, space and great design. Plus enter our great competition
Times Online's new TV show helps you make the right decisions for your pet
Are you California dreaming? Explore the wonders of the Golden State. Also enter our fantastic competition
Do you have what it takes to be a Times photographer?
Your brain is capable of more than you might think...
Find out to make the most of your money with our wealth management guides
Need help with your property? We have an entire how to guide - buying, selling, letting, moving, to help you
We are seeking entries for the inaugural Sunday Times Best Green Companies Awards
Enjoy some wonderful inspiring wildlife moments
An interactive preview of the brand new For Your Eyes Only exhibition

Love Sudoku? Play our brand new interactive game: with added functionality and daily prizes

Are you irritable when you return from work? Drained of emotion? You could be suffering from boreout
Prepare for some shock and awe, petrol lovers. Despite the greens trying to wipe it out, the car is about to offer us the most exciting year ever
We've trawled the brochures and websites to find this summer’s best holidays for every taste and budget

Find a course, arrange a game and save money
2007/07
£57,500
South East England
2007/07
£40,995
South East England
2006/06
£41,995
South East England
Great car insurance deals online
£40-55k+benefits+uncapped commission
Morgan Keating
South East
Up to £30,000
GLE
London
£
c£75,000 + executive benefits
Morgan Keating
London and South
Unpaid with travel expenses
Network Rail
Globrix, the property search engine
Visit Times Online Property for homes for sale or rent
Residential development site with planning permission
£1,500,000
Mortgages, bank accounts & money transfers to help you buy abroad
Dinarobin Hotel Golf & Spa 7 nights
From £1830 per person – saving £530.
Walking & multi-activity holidays in Cauterets. Stylish self-catering apartments.
From 350€ for 7 nights.
SAVE 25% on Sandals Luxury Resorts
Great travel insurance deals online
Contact our advertising team for advertising and sponsorship in Times Online, The Times and The Sunday Times. Search globrix.com to buy or rent UK property.
© Copyright 2008 Times Newspapers Ltd.
This service is provided on Times Newspapers' standard Terms and Conditions. Please read our Privacy Policy.To inquire about a licence to reproduce material from Times Online, The Times or The Sunday Times, click here.This website is published by a member of the News International Group. News International Limited, 1 Virginia St, London E98 1XY, is the holding company for the News International group and is registered in England No 81701. VAT number GB 243 8054 69.
What is required is adherence to the simplest procedures of Data Protection.
See the blog at the British Computer Society.
It is important in regard to NHS data to distinguish between identifiabkle and non-identifiable data. It is most important, for example to study long term effects of medicines, that patient data are available to researchers. I know of no breach by medical researchers of the type of thing seen in HMRC.
S Evans, Hastings, E Sussex
With the potential disclosure of almost the entire national database of personal details, the only secure solution is to regenerate the 25 million files using new numbers.
No doubt this dysfunctional government will say that we must now have biometric data included with our identity cards, passports, NHS cards, driving licences and toilet paper.
Of course there is also the more sinister reason for 'losing' a copy of the information - nulabor government corruption and its social re-engineering agenda - but let the paranoid doom-mongers loose on the inevitable speculation.
martin brighton, sheffield, UK
Only earlier this year I contacted the Information Commissioner about a DPA breach at the Child Benefit Office but that office were not interested in my complaint -advising me, albeit on a different type of breach, that
'there is no strong indication of a related systematic data protection problem existing within HMRC'
Beggars belief!
Lynn, Sunderland,
The positive in this deeply depressing news is that the government is now under intense pressure to reform Data Protection Law and this desperately needs to be done. The question isnât so much about what information the government has on various systems but who actually has access to this information. How can we be sure that they be trusted? What safeguards will there be? How will this prevent our information from falling into the wrong hands or being abused? All of this should have been resolved at least 20 years ago when Data Protection Laws were first being introduced. If it had then maybe the government wouldnât find itself in the position it is in now.
Jason Mead, Bristol, England
There are some technological and procedural improvements that could reduce the risk of this sort of thing happening again but the real problem is that government doesn't understand privacy and the risks inherent in big databases.
The easiest way to avoid this kind of blunder is to simply not store or process private data unless absolutely necessary. I expect to hear about new laws and maybe more use of data encryption yet at the same time, the government wants to introduce "voluntary" ID cards and an extensive data collection system for anybody travelling in or out of the country.
After a blunder of this proportion, do any readers honestly believe that computerised medical records are safe from prying eyes? Have there been other government data leaks we don't know about? My guess is that Labour will come up with a new law and some improvements to reduce risks in future but the real problem is a meddling, intrusive, control freak government that is not fit for purpose.
Edward, UK,
This is a shamble. Nothing is working out for the government which is constantly slicing departments to cut costs but the side effective is compromising on efficiency. This issue is not mutually exclusive from Northern Rock where the Bank of England made substantial amount of loan to Northern Rock. Now the European Commission is saying that the payment, which is below the normal interest rate, is unlawful as the loan prevents customers move around to other banks and therefore preventing free competition. What the Commission is fundamentally arguing is that the loan litrerally has become a state subsidy which puts other companies at disadvantaged.
Ripon Ray, London, UK
Nice one Gov, I have to take an hour off work this afternoon to get my account number changed.
Phill, The Wirral, England
Failure to protect personal data is a breach of the Data Protection Act.
Go gettem! Lets see 7 million prosecutions of HMRC
Jim Broadhurst, Burnley, England
The auditors asked for this data? They are happy it is sent this way? Who are the auditors?
David Blaylock, Cockermouth, UK
I work for HMRC, guess when I foundout about this fiasco... 2.30pm!!! Says it all really!!! They knew this would be in the public domain by Tuesday morning as they spent all weekend updating the customer contact systems to prepare for the rise in customer calls from the worried public. Shows how little they care for the employees, let alone the tax payers!!!
Caz, West Midlands, England
And this is the Government who wants us to trust them with all our records and biometric data Imprinted on ID cards.
Fullproof security, I think Not!
Len, Argyll, scotland