Select committee: Defence Committee

Conclusion 11

1st Report - Shifting heaven and earth? The Afghan data breach and resettlement schemes Published 30 Jul 2026 Addressed to Ministry of Defence
Conclusion (the committee's words)
The government did not maintain adequate cost visibility over the direct financial consequences of the data-breach response. The NAO found that the MOD could not identify ARR-specific costs with normal audit confidence, because those costs had not been separately recorded. The evidence also suggests that government did not consistently distinguish between the marginal cost of the breach response, the cost of the ARR, the cost of prioritised ARAP relocations and the wider cost of Afghan resettlement. Weak cost visibility, ambiguous presentation and delayed programme controls limited assurance and made it harder to test whether decisions were being taken on a realistic understanding of their financial consequences. (Conclusion, Paragraph 132) 70

From: Defence Committee, 1st Report - Shifting heaven and earth? The Afghan data breach and resettlement schemes (HC 69), 30 July 2026

Government response

The government responded to the whole report on 16 October 2026 (deadline 30 September 2026).

Summary written by Accountability Index from the government's response. It is not the government's own words.

The Ministry of Defence says the data incident was "unacceptable", accepts a number of the Committee's conclusions and some recommendations in whole or in part, and declines others, citing risk to life and national security.

  • On the injunction, the government agrees the super-injunction was exceptional and accepts Recommendation 8 "in principle", but says any decision to widen briefing would be "for the government of the day".
  • It "accepts part of" the recommendation to publish principles on injunctions, saying any course of action "remains a decision for Ministers" and is to be considered case by case.
  • It will provide the Committee with "six-monthly updates" on the Afghan Resettlement Programme and expects to complete all ARP casework by Spring 2027, though the August 2026 milestone for initial decisions was missed.
  • It declines to publish quality assurance KPIs, saying they "could have unintended consequences", and says exceptional circumstances will be considered for those unable to self-move within 12 months.

Read the government's response ↗ Report an error