---

Afghanistan

I note that the shadow Secretary of State made great play of the changes and the extra safeguards that Ministers of the previous Government put in place following the breach. I also note that the Secretary of State said he had had to make more changes and introduce new software. That suggests to me that the changes put in place by the previous Government were not good enough. Can I ask him this clearly? Who had knowledge of this incident in the 18 months after the data breach had taken place before it reached Ministers? How were there no checks on anyone in the Department who had access to that sort of data to ensure they were using it properly?