# Metropolitan Police Data Training Compliance at Critical Low Only 30% of officers completed mandatory data protection training amid repeated breaches. - **Source:** [computerweekly.com](https://www.computerweekly.com) - **Published:** 2026-09-29 - **Original article:** - **On Brifing:** https://brifing.si/s/dbd18236-669c-43bd-9a94-ea081f18c656 ## Training compliance crisis The Metropolitan Police reports only 30% of officers have completed mandatory data protection training, revealed during a London Assembly hearing. This follows multiple high-profile data breaches, including one where a victim's new contact details were shared with their alleged stalker. The UK data regulator had previously issued an enforcement notice in August 2026 over systemic training failures. Director Kenny Bowie acknowledged the figures 'weren't particularly good' but emphasized personal responsibility over systemic solutions. ## Consequences of failures Recent breaches include a bulk email revealing identities in a high-profile criminal investigation and the accidental sharing of sexual abuse victims' email addresses. The latter incident, attributed to 'human error,' involved survivors of crimes by former Harrods owner Mohamed Al-Fayed. Green Party member Benali Hamdache criticized these failures as 'unacceptable,' particularly given victims' trust in police. The Information Commissioner's Office had previously noted low training completion rates without specifying numbers. ## Systemic governance issues The Met's data protection failures extend beyond training. In 2018, the Gangs Matrix intelligence tool operated without equality impact assessments or proper data sharing agreements until its 2024 discontinuation. A 2020 enforcement notice addressed backlogged subject access requests, while a 2022 records system was deployed despite known compliance issues. These systemic problems suggest deeper organizational challenges in data governance beyond individual officer training. ## Proposed solutions Bowie proposed a three-pronged approach combining personal responsibility, supervisory oversight, and technological safeguards. Suggested tech solutions include email prompts when CC'ing external parties. However, he declined to set timelines for compliance improvements. The force faces particular challenges with its 40,000 officers handling hundreds of thousands of cases annually, where eliminating human error entirely may be impossible despite technological interventions. ## Political and public pressure London Assembly member Hamdache vowed to continue pushing for full compliance, stating the public has a right to expect better standards. The repeated breaches have eroded trust, particularly among vulnerable victims who've shown 'enormous courage' in coming forward. Political scrutiny is intensifying as each new breach reveals systemic weaknesses in the Met's approach to data protection and victim privacy. ## Historical context of failures The Met's data protection issues predate current revelations. In November 2024, an officer was dismissed for improperly accessing files about Sarah Everard's murder case. The 2018 Gangs Matrix investigation found unlawful data sharing practices, while 2020 revealed failures in handling subject access requests. This pattern suggests long-standing cultural and systemic problems with data governance within the organization. ## Regulatory landscape The Information Commissioner's Office has repeatedly intervened, from the 2018 Gangs Matrix investigation to the 2026 enforcement notice. While acknowledging some progress, regulators have stopped short of further punitive action despite 'sustained failures.' This regulatory history demonstrates ongoing challenges in achieving compliance, with the Met often reacting to crises rather than proactively addressing systemic issues. ## Broader implications The training gap reflects deeper issues in police data governance with real-world consequences for victims and investigations. With only 30% compliance, the Met risks further breaches that could compromise cases and deter victims from coming forward. The situation highlights the tension between operational demands and data protection requirements in law enforcement, requiring cultural change beyond technical solutions. ## Sources covering this story - https://www.computerweekly.com/news/366651475/Only-30-of-Metropolitan-Police-officers-have-completed-mandatory-data-training — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._