Re: I think that horse fucked off years ago
It is likely to be an IT issue, because the chances are that someone in the IT department is the Data Protection Officer for GDPR compliance. Especially as you say this was an HR project, there was almost certainly personal information in there, and if something had gone wrong, it would the DPO who'd be in trouble from the ICO, not the hapless HR bod.