UK law firms begin registering Afghan applicants for compensation over leaked data from the government’s ARAP resettlement program.
Legal action is underway in the United Kingdom after the personal data of thousands of Afghan nationals—who had applied under the Afghan Relocations and Assistance Policy (ARAP)—was accidentally leaked. Several UK-based law firms have started filing claims seeking compensation for those affected.
According to a report by LBC Radio on Thursday, July 17, each individual impacted by the breach may be entitled to receive up to £250,000 in compensation. Legal firms involved in the process could receive up to 25% of this amount as service fees. The news has prompted hundreds of affected Afghans to step forward.
Manchester-based law firm Brings Legal stated it has already registered nearly 1,000 Afghan ARAP applicants for potential legal proceedings. These individuals were part of a UK government initiative to resettle Afghans who had worked alongside British forces and were at risk after the Taliban’s return to power.
The data leak occurred in February 2022, when an employee of the Ministry of Defence mistakenly sent a file containing the private information of around 19,000 applicants using an unsecured system. British authorities confirmed the incident, and the High Court quickly issued an order preventing further public disclosure to avoid exposing applicants to Taliban threats.
In response to the incident, the UK government launched a new initiative in April 2024 called the “Afghanistan Resettlement Route”. This program aims to confidentially relocate those whose data was compromised. So far, approximately 6,900 individuals have been resettled under this scheme, with costs reaching £400 million—and projections suggesting the total could rise to £850 million.
Defence Secretary John Healey issued a formal apology in the House of Commons, expressing regret for the delay in addressing the matter and acknowledging the distress it has caused. He also voiced frustration over the inability to speak openly about the issue earlier due to legal constraints.
This high-profile breach has raised serious questions about the UK government’s handling of sensitive data, particularly in life-threatening contexts. Advocates stress the urgent need for more robust cybersecurity and accountability within future humanitarian and relocation programs.
As legal claims continue to mount, the UK government may face increasing financial and reputational pressure. Observers emphasize that this incident should serve as a turning point for how vulnerable individuals’ data is handled in national and international protection efforts.
