Missing GOV.UK web link potentially cost taxpayers £50m as civil servants are forced to shuffle paper forms

medConfidential spots tiny yet staggering online blunder

Exclusive A single missing web link on GOV.UK has cost the taxpayer £51m over the past five years because civil servants are being forced to handle paper forms posted to the Home Office.

Research by privacy campaign group medConfidential reckons the government has wasted about £10m per year since late 2015 thanks to the omission of a crucial web link from a GOV.UK page about Biometric Residence Permits (BRPs).

Phil Booth of medConfidential told The Register: "While the Home Office generates a profit from fees for migrants, it is required to provide some services for free – such as making a change of registered home address when someone moves house."

GOV.UK has a webpage for this titled "report a change of circumstances if you have a visa or BRP". Importantly, the page only links to hard-copy forms for people wanting to update their BRP addresses, meaning the Home Office has to pay people to handle the physical paperwork.

medConfidential's Booth added: "The official GOV.UK page that signposts the paper form has no link for the majority of people to the online version of the form for the same function."

BRP holders who want to update their details quickly and easily, and save the taxpayer a few quid into the bargain, can use the Visa Address Update Service, which does exactly the same thing as the paper form.

Although this online service has existed since 2015, the BRP pages do not link to it for people with a permit who want to update their address – though the link is, bizarrely enough, offered to those who have applied for and have not yet received a decision letter. People with or applying for a permit who want to update their details in extraordinary circumstances – such as separating from their partner – need to use the printed form, too.

The Taxpayers' Alliance's Harry Fone told The Register: "Taxpayers will be livid at this totally avoidable largesse. With the tax burden at a 50-year high, Brits expect their taxes to be spent on frontline services, not bungling bureaucrats. Ministers and civil servants must be relentless at eradicating wasteful spending like this."

The wasted £50m could have been spent on anything other than paper-shuffling civil servants transcribing handwritten forms received in the post. For example, it could have been spent paying a minimum wage school leaver one hour to complete the 60-second task of adding the missing link to the BRP page on GOV.UK – a task that would still yield a net saving of £51,004,793.55.

With paper forms costing the government £14.49 each to handle, the costs incurred by 704,000 of them being posted in every year quickly add up.

The Home Office has ignored The Register's request for comment.

The Government Digital Service, creators and maintainers of GOV.UK, has not covered itself in glory over the past decade, as we summarised when its previous chief quit in 2019.

Method in the madness

Calculating the total cost to the taxpayer of the missing link is not a straightforward process unless, like medConfidential and El Reg, you know where to look.

The Office for National Statistics said, in its latest Migration Statistics Report that there were 1.36 million non-European Economic Area (EEA) nationals working in the UK between January and March 2020, the latest dates for which statistics are available. Only non-EEA nationals need to have a BRP [PDF, see page 1].

To take spouses, other dependents and the retired into account, we rounded this figure up to 2 million people; the ONS Labour Force Survey doesn't count non-working people with BRPs. In addition, non-EEA students studying in the UK also need BRPs. The Higher Education Statistics Authority said that on (mean) average over the past five years, 318,000 non-EU students per year entered UK higher education.

There are three non-EU EEA countries whose students don't need BRPs; Iceland, Lichtenstein, and Norway. We disregarded their student numbers for our purposes.

Having deduced that there are about 2.3 million BRPs on issue, we then needed to work out how often those BRP holders might tell the Home Office of a change in circumstances. An obvious trigger being a change of address; here using data about home rentals becomes important. Students frequently move house because they live in rented accommodation, while foreign nationals are not likely to make up a significant number of UK homeowners, ultra-rich oligarchs' shell companies aside.

Remembering that students tend to live in short-term lettings and move annually, we separated out the 2 million non-student BRPs from the 318,000 students for this next step.

woman winces in pain rubs temples - headache

UK.gov drives ever further into Nocluesville, crowdsources how to solve digital identity


The English Housing Survey's most recent statistics on households that moved within the last year (table FA4623 here) show that 19.3 per cent of UK households in private rents moved during 2018-19. Applying that percentage to our 2 million non-students gives 386,000 address changes per year. Adding the students back on, our total came to 704,000 BRP holders who moved during the last year – that is, 704,000 paper forms posted to the Home Office saying a BRP holder had moved house.

Now, how do we know how much it costs the Home Office to process those forms? For this we turned to GOV.UK itself: specifically, our well-beloved Government Digital Service. Back in the heady days of the early 2010s when the GDS empire was starting to be built, it published estimates of how much its digital doings could save the government.

Figure 19 in this GDS webpage gives a cost to the taxpayer of £12.10 per postal transaction handled by civil servants. Being diligent, we're going to apply inflation to that using the Bank of England's inflation calculator. With the given average of 2.4 per cent compound interest from 2012 until today we arrived at a 2018/19 adjusted-for-inflation cost of £14.49 to handle a single paper form.

£14.49 multiplied by 704,000 BRP holders posting paper forms to UK.gov every year gives us a handling cost of £10,200,960 annually.

How much has this blunder cost the taxpayer in total? The Internet Archive gave us the answers to that question. GDS launched its free online Visa Address Update Service (VAUS) in January 2015, as the first IA snapshot of its homepage shows. Meanwhile, no version of the "report a change of circumstances" webpage has ever once linked to the VAUS.

Over five years that missing GOV.UK link has cost the British taxpayer £51,004,800. For the sake of one single link was a hole punched in the national coffers. ®

Similar topics

Other stories you might like

  • Florida's content-moderation law kept on ice, likely unconstitutional, court says
    So cool you're into free speech because that includes taking down misinformation

    While the US Supreme Court considers an emergency petition to reinstate a preliminary injunction against Texas' social media law HB 20, the US Eleventh Circuit Court of Appeals on Monday partially upheld a similar injunction against Florida's social media law, SB 7072.

    Both Florida and Texas last year passed laws that impose content moderation restrictions, editorial disclosure obligations, and user-data access requirements on large online social networks. The Republican governors of both states justified the laws by claiming that social media sites have been trying to censor conservative voices, an allegation that has not been supported by evidence.

    Multiple studies addressing this issue say right-wing folk aren't being censored. They have found that social media sites try to take down or block misinformation, which researchers say is more common from right-leaning sources.

    Continue reading
  • US-APAC trade deal leaves out Taiwan, military defense not ruled out
    All fun and games until the chip factories are in the crosshairs

    US President Joe Biden has heralded an Indo-Pacific trade deal signed by several nations that do not include Taiwan. At the same time, Biden warned China that America would help defend Taiwan from attack; it is home to a critical slice of the global chip industry, after all. 

    The agreement, known as the Indo-Pacific Economic Framework (IPEF), is still in its infancy, with today's announcement enabling the United States and the other 12 participating countries to begin negotiating "rules of the road that ensure [US businesses] can compete in the Indo-Pacific," the White House said. 

    Along with America, other IPEF signatories are Australia, Brunei, India, Indonesia, Japan, South Korea, Malaysia, New Zealand, the Philippines, Singapore, Thailand and Vietnam. Combined, the White House said, the 13 countries participating in the IPEF make up 40 percent of the global economy. 

    Continue reading
  • 381,000-plus Kubernetes API servers 'exposed to internet'
    Firewall isn't a made-up word from the Hackers movie, people

    A large number of servers running the Kubernetes API have been left exposed to the internet, which is not great: they're potentially vulnerable to abuse.

    Nonprofit security organization The Shadowserver Foundation recently scanned 454,729 systems hosting the popular open-source platform for managing and orchestrating containers, finding that more than 381,645 – or about 84 percent – are accessible via the internet to varying degrees thus providing a cracked door into a corporate network.

    "While this does not mean that these instances are fully open or vulnerable to an attack, it is likely that this level of access was not intended and these instances are an unnecessarily exposed attack surface," Shadowserver's team stressed in a write-up. "They also allow for information leakage on version and build."

    Continue reading
  • A peek into Gigabyte's GPU Arm for AI, HPC shops
    High-performance platform choices are going beyond the ubiquitous x86 standard

    Arm-based servers continue to gain momentum with Gigabyte Technology introducing a system based on Ampere's Altra processors paired with Nvidia A100 GPUs, aimed at demanding workloads such as AI training and high-performance compute (HPC) applications.

    The G492-PD0 runs either an Ampere Altra or Altra Max processor, the latter delivering 128 64-bit cores that are compatible with the Armv8.2 architecture.

    It supports 16 DDR4 DIMM slots, which would be enough space for up to 4TB of memory if all slots were filled with 256GB memory modules. The chassis also has space for no fewer than eight Nvidia A100 GPUs, which would make for a costly but very powerful system for those workloads that benefit from GPU acceleration.

    Continue reading
  • GitLab version 15 goes big on visibility and observability
    GitOps fans can take a spin on the free tier for pull-based deployment

    One-stop DevOps shop GitLab has announced version 15 of its platform, hot on the heels of pull-based GitOps turning up on the platform's free tier.

    Version 15.0 marks the arrival of GitLab's next major iteration and attention this time around has turned to visibility and observability – hardly surprising considering the acquisition of OpsTrace as 2021 drew to a close, as well as workflow automation, security and compliance.

    GitLab puts out monthly releases –  hitting 15.1 on June 22 –  and we spoke to the company's senior director of Product, Kenny Johnston, at the recent Kubecon EU event, about what will be added to version 15 as time goes by. During a chat with the company's senior director of Product, Kenny Johnston, at the recent Kubecon EU event, The Register was told that this was more where dollars were being invested into the product.

    Continue reading
  • To multicloud, or not: Former PayPal head of engineering weighs in
    Not everyone needs it, but those who do need to consider 3 things, says Asim Razzaq

    The push is on to get every enterprise thinking they're missing out on the next big thing if they don't adopt a multicloud strategy.

    That shove in the multicloud direction appears to be working. More than 75 percent of businesses are now using multiple cloud providers, according to Gartner. That includes some big companies, like Boeing, which recently chose to spread its bets across AWS, Google Cloud and Azure as it continues to eliminate old legacy systems. 

    There are plenty of reasons to choose to go with multiple cloud providers, but Asim Razzaq, CEO and founder at cloud cost management company Yotascale, told The Register that choosing whether or not to invest in a multicloud architecture all comes down to three things: How many different compute needs a business has, budget, and the need for redundancy. 

    Continue reading

Biting the hand that feeds IT © 1998–2022