UK Treasury tightens Budget leak controls with new security protocols

Traders Union
All News
Regulators
Treasury tightens Budget leak controls

Highlights

Treasury officials now face strict access restrictions to Budget policy documents, limited to directly involved staff, following new security protocols in 2024.
Documents marked as 'Budget, market sensitive' are watermarked with the sender's email and restricted via Microsoft 365, using National Cyber Security Centre guidelines.
The overhaul follows last year's Budget leaks and aims to prevent speculation-driven pension cash-outs and delayed investment, with enhanced accountability and digital tracking of document sharing.

Security overhaul for Budget documents

As first reported by the Financial Times, officials in the Treasury are now blocked from viewing Budget policies unless they are directly involved, under new controls introduced this year to reduce leaks of tax and spending decisions.

The changes include updated software settings that align the department with parts of government handling national security matters. A new classification, "Budget, market sensitive", has also been added alongside existing categories such as "official sensitive" and "top secret" for documents requiring the strictest handling.

Documents are now watermarked with the email address of the official who shared them, and access is restricted to a named list of staff. The functions are being activated through standard Microsoft 365 applications, using settings developed in consultation with the National Cyber Security Centre for classified information handling.

A review earlier this year by Treasury permanent secretary James Bowler acknowledged that too many people had access to key Budget information and recommended technical limits on who can view and share the most sensitive policy papers. Healey, who previously served as defence secretary, is said to have pushed for safeguards closer to those used at the Ministry of Defence, where access is logged more intensively.

Policy backdrop and wider implications

Healey is seeking to stop leaks after dissatisfaction inside government over the handling of Rachel Reeves' final Budget last year. That episode included the disclosure of a decision not to raise income tax and the accidental online release of the Office for Budget Responsibility's full economic and fiscal outlook before Reeves had begun speaking.

Speaking at the IMF annual meeting in Bangkok last week, Healey said speculation ahead of the Budget had caused real effects, including unnecessary pension cash-outs and delayed investment decisions. One defence official said the tighter controls are intended to underline the seriousness of leaking, with time stamps and electronic signatures allowing the movement of emails and digital exchanges to be traced without monitoring message content.

The tougher regime could sharpen accountability within the department, but it may not resolve all leak risks. Hannah White, chief executive of the Institute for Government, said protecting official information is important, while arguing the move assumes civil servants are the main source of leaks even though such disclosures often come from politicians and advisers.

In our earlier article on the Bank of England’s push for banks to build “bare metal” recovery capabilities, we explained how regulators are urging lenders to plan for more severe cyber incidents as AI increases the scale and complexity of attacks. The piece highlighted the shift from relying mainly on perimeter defences to ensuring critical services can be restored independently if core systems are compromised.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.