Cop who used police system to snoop for info on crook pals sentenced for Computer Misuse Act offenses

Daniel Hughes, a former Merseyside police officer, has been sentenced to a suspended 12-month prison term following his guilty verdict for Computer Misuse Act and Data Protection Act offenses. Hughes, 40, from Liverpool, repeatedly accessed police computer systems between 2016 and 2019 to conduct unauthorized searches, often involving intelligence related to serious organized crime cases.

In 2021, the Crown Prosecution Service reported that Hughes disclosed sensitive information about ongoing police investigations to "other people."

Hughes was arrested in March 2022, and during the investigation, police seized his devices and examined his communications, uncovering evidence of his associations with criminals. He was found guilty by a jury in June 2026 after denying all charges during his trial. Hughes was dismissed from his position in July 2026 following his conviction and an internal misconduct hearing, though he was not relieved of his duty for misconduct in a public office.

Judge Alan Conrad KC stated that Hughes did not profit from transmitting details on cases for which he had no legitimate interest and did not pass these on to criminal enterprises. The judge acknowledged Hughes' service to the force, noting his long-standing membership (2006-present) and his courageous actions in the line of duty, including being stabbed in 2016 and attacked with a glass bottle in 2019.

Despite these positive aspects, Hughes maintained inappropriate relationships with criminals for over a decade, including those who were close to criminals. He participated in WhatsApp groups with these individuals and socialized with them, including going on trips abroad.

The Crown Prosecution Service described Hughes as a "corrupt" officer who ignored the mandatory training on maintaining appropriate relationships. Prosecutor Olivia Travis emphasized that Hughes concealed his criminal associations despite a clear duty to declare them. The jury rejected his claim that he acted in the course of his duties.

Hughes was found guilty of eight counts of unauthorized access to computer material under the CMA 1990 and three counts of knowingly or recklessly obtaining or disclosing personal data without consent under the DPA 2018.