UK Police Data Stored on Microsoft Azure Faces Long-Standing Security Concerns
A long-standing security concern has been raised regarding UK police data stored on Microsoft Azure. A 2017 assessment warned that police data could face foreign access risks, including from US government insiders.
The assessment identified vulnerabilities in Microsoft software and the risk of 'US government insiders' accessing sensitive data. This was highlighted by Ian Dyson, then City of London police commissioner and senior information risk owner for the entire country.
Despite this being on record since 2017, almost every UK police force has moved its data to Microsoft Azure. The risks identified persist today, with five specialists agreeing that encryption does not prevent Microsoft employees from accessing the data.