In the report the Independent Police Complaints Commission (IPCC) said:
"There is no doubt, from our investigation and the evidence gathered by Operation Baronet, that Surrey Police knew in 2002 of the allegation that Milly Dowler’s phone had been hacked by the News of the World (NOTW).
"It is apparent from the evidence that there was knowledge of this at all levels within the investigation team.
"There is equally no doubt that Surrey Police did nothing to investigate it; nobody was arrested or charged in relation to the alleged interception of those messages either in 2002 or subsequently, until the Operation Weeting arrests in 2011."
More top news
Detectives have launched a public appeal for help to trace a vulnerable missing 16-year-old girl who is believed to be with a man 51.
A "selfish and wicked" mother has been jailed after filling in false paperwork to stop her ex-husband from attending their son's cremation.
As Ireland went to the polls for a key gay marriage referendum, thousands shared their trips home to take part on the #HomeToVote hashtag.