
This would be somewhat justifiable if the authorities were able to make use of the data they already have in a useful manner.
I served on my local council for a number of years, and was on the housing committee. Time and again we would have an "urgent housing" request come on from the social services people at the county council. The reason: a youngster was turning 16 and therefore coming out of care, needing to be housed. Whatever your feelings about whether 16 year olds should be taking council flats, the fact that, time and again, Social Services were taken by surprise by a 16th birthday was as vexing as it was hilarious.
But lets not try to make people actually do their jobs, no we'll put in place "systems" which will also be taken by surprise by 16th birthdays, despite assembling the most potent honeypot for all classes of villains. I get so pissed off by the "safeguards will be put in place to prevent unauthorised access" mantra. Of course, it's never been known for someone with "authorised access" to misuse data, no siree.
All this "security review" will do is throw up a load of "recommendations" which gummint will then claim to have acted on, the action actually being to say "we have added useless safeguards" and doing nothing, just blundering on down the same path. Oh, and feed a few million quid into the pockets of another bunch of "IT Security Charlatans".