18:59 - The House divided: - Ayes: 281 / Noes: 15 - Question accordingly agreed to.
The Secretary of State for the Home Department (Mrs Theresa May)
I beg to move, That the Bill be now read a Second time.
Before I begin, I am sure that right hon. and hon. Members will be aware of the death of a prison officer who was attacked 10 days ago in east Belfast. I am sure that the whole House will wish to send its deepest sympathies to his family, friends and colleagues at this time.
The Government are committed to updating and consolidating our country’s investigatory powers in a clear and comprehensive new law that will stand the test of time. Over the past two years, there has been detailed analysis of those investigatory powers through three independent reviews; consultation with law enforcement, the security and intelligence agencies, civil liberties groups, and industry; and now, following the publication of the draft Bill last autumn, scrutiny by a Joint Committee of both Houses of Parliament, the Intelligence and Security Committee, and by the Science and Technology Committee. I would like to place on record my gratitude to the Chairs of those Committees—Lord Murphy of Torfaen, my right hon. and learned Friend the Member for Beaconsfield (Mr Grieve), and my hon. Friend the Member for Oxford West and Abingdon (Nicola Blackwood)—for the invaluable work that they, and their members, have undertaken over recent months. Their thorough scrutiny has helped to shape and improve the Bill, which today reflects the majority of their recommendations.
The revised Bill is clearer, with tighter technical definitions and strict codes of practice. It includes stronger privacy safeguards, bolstering protections for lawyers and journalists’ sources; it explicitly prevents our agencies from asking foreign intelligence agencies to intercept the communications of a person in the UK on their behalf unless they have a warrant approved by a Secretary of State and a judicial commissioner; it reduces the amount of time within which urgent warrants must be reviewed by a judicial commissioner, cutting it from five days to three; and it strengthens the powers of the new Investigatory Powers Commissioner. Alongside the introduction of the Bill, we published six draft codes of practice in order that they could be reviewed by the House.
Sir Edward Leigh (Gainsborough) (Con)
Under this Bill, the current system of three oversight commissioners is to be reduced to one commissioner. Given that there have been miscarriages of justice in the past, not least with the Maguire seven and the Guildford four, can the Secretary of State convince the House that it is in the interests of freedom and democracy that we reduce the number of commissioners from three to one?
Mrs May
Although one person will oversee the Investigatory Powers Commission as the Investigatory Powers Commissioner, they will have under them a number of judicial commissioners who will have extensive experience and will undertake certain tasks—first, on the new process of the double-lock authorisation for warrantry that we are introducing. They will also undertake the inspection and review of the operation of the agencies in the same way that the three commissioners have done so far. Far from reducing oversight, this Bill will enhance the oversight that is available.
The pre-legislative scrutiny that the Bill has undergone builds on the previous work of the Intelligence and Security Committee in its “Privacy and Security” report; the independent inquiry into surveillance practices by a panel convened by the Royal United Services Institute; and the review of investigatory powers carried out by David Anderson QC, the independent reviewer of terrorism legislation. All three reviews made it clear that legislation relating to interception and communications data needed to be consolidated and made subject to clear and robust privacy safeguards. Taken together, the scrutiny that this Bill has received may well be without precedent. Three authoritative reports informed the Bill’s drafting, three influential Committees of Parliament then scrutinised that draft, and now the Bill proceeds to full and proper consideration by both Houses of Parliament.
The Bill will provide world-leading legislation setting out in detail the powers available to the police and the security and intelligence services to gather and access communications and communications data. It will provide unparalleled openness and transparency about our investigatory powers, create the strongest safeguards, and establish a rigorous oversight regime.
As the House is aware, the Data Retention and Investigatory Powers Act 2014, which the Bill is intended to replace, contains a sunset clause requiring us to pass legislation by the end of 2016. That is the timetable set by Parliament, and the grave threats we face make it imperative that we do so. Today terrorists and criminals are operating online with a reach and scale that never existed before. They are exploiting the technological benefits of the modern age for their own twisted ends, and they will continue to do so for as long as it gives them a perceived advantage. We must ensure that those charged with keeping us safe are able to keep pace. The Bill will provide the police and the security intelligence agencies with the powers they need, set against important new privacy protections and safeguards. It will ensure that they can continue in their tremendous work, which so often goes unreported and unrecognised, to protect the people of this country from those who mean us harm.
I turn now to the contents of the Bill. In its scrutiny of the draft Bill, the Intelligence and Security Committee quite rightly concluded that
“privacy protections should form the backbone”
of legislation in this most sensitive area. That is indeed the case, and privacy is hardwired into the Bill. It strictly limits the public authorities that can use investigatory powers, imposes high thresholds for the use of the most intrusive powers, and sets out in more detail than ever before the safeguards that apply to material obtained under these powers. The Bill starts with a presumption of privacy, and it asserts the privacy of a communication. Part 1 provides for an offence of unlawful interception, so that phone tapping without a warrant will be punishable by a custodial sentence, a fine, or both. It creates a new offence of knowingly or recklessly obtaining communications data without lawful authorisation, so misuse of those powers by the police or other public authorities will lead to severe penalties. It abolishes other powers to obtain communications data. Subject to limited exceptions, such as court orders, public authorities will in future be able to obtain communications data only through the powers in the Bill, with all the accompanying safeguards.
Christian Matheson (City of Chester) (Lab)
We know that internet service providers and telecoms companies are vulnerable to hacking, and that some newspapers are not averse to passing brown envelopes to their sources in order to obtain information. Is the Home Secretary satisfied that the provisions in the legislation will prevent such hacking and such unauthorised, and perhaps salacious, access to individuals’ personal information?
Mrs May
As I have just said, the Bill sets out new, enhanced safeguards and oversight arrangements for the investigatory powers that are available to the authorities. As the hon. Gentleman will be aware, inappropriate access to information that is held has been the subject of court cases recently. It is entirely right that if information is being accessed in a criminal fashion, that should be dealt with in the appropriate way. I have just set out that there are new offences in the Bill to deal with the question of people obtaining, knowingly or recklessly, communications data without lawful authorisation.
Mark Pritchard (The Wrekin) (Con)
The Home Secretary knows that I am a supporter of the Bill, but does she share some of my concerns about international human rights law, emerging European privacy law and the collaboration with partners such as the United States on its domestic data and privacy laws vis-à-vis Apple and the FBI? If the Bill becomes an Act of Parliament, does she foresee any problems internationally or with collaborators?
Mrs May
My hon. Friend raises an important point. Many internet service providers, for example, offer services here but they are predominantly based in other countries. That is why the Government have been progressing, and continue to progress, discussions with the United States’ authorities about the whole question of the circumstances under which warrants issued lawfully in the United Kingdom can be exercised in the United States. We have always asserted territorial jurisdiction of those warrants under the Regulation of Investigatory Powers Act 2000. In fact, the previous Labour Government, who introduced RIPA, also established that territorial jurisdiction. It has never been tested, but we are putting that discussion with the United States into place.
Chris Philp (Croydon South) (Con)
The Home Secretary recently met my constituent Barry Bednar, whose 14-year-old son Breck was groomed online and, tragically, murdered. Could she explain to the House how the provisions in the Bill will help to prevent a repetition of Breck’s tragic murder?
Mrs May
My hon. Friend has represented his constituents very well in that matter, and it was an absolutely tragic case. I know the enormous distress that has been caused to Breck’s parents, not just by the initial grooming of their son and its sad consequences, but by other actions that have taken place since in relation to the case. What we are doing in this legislation is important, because it will ensure that the authorities, the agencies, law enforcement and the police will have the powers to enable them better to investigate incidents such as that which led to Breck’s sad death.
Part 1 of the Bill responds to recommendations by David Anderson and others by restricting the use of powers outside the legislation to undertake equipment interference. Where the police or the security and intelligence agencies wish to interfere with a computer or a smartphone to obtain vital evidence and intelligence, a warrant under the Bill will be required. As I have indicated, the Bill also responds to the recommendations of the Intelligence and Security Committee and places a statutory bar on the making of requests, in the absence of a warrant, to other countries to intercept the communications of a person in the UK. There can be no suggestion that the security and intelligence agencies could use their international relationships to avoid the safeguards in the Bill. In answer to a couple of questions earlier I referred to the territorial jurisdiction of the Bill. For the avoidance of doubt, I clarify that I meant, of course, the extraterritorial jurisdiction of the Bill.
The House will know that interception—the obtaining of the contents of a communication, by, for example, listening to a telephone call or reading the contents of an email—is one of the most sensitive and intrusive capabilities available to law enforcement and to the security and intelligence agencies. It is also one of the most valuable, and over the past decade, interception in some form has played a part in every top-priority MI5 investigation. The Bill restricts that power to only a handful of agencies and allows for warrants to be issued only where they are necessary and proportionate for the prevention or detection of serious crime, in the interests of national security or in the interests of the economic wellbeing of the United Kingdom, where that is linked to national security.
Authorising warrants is one of the most important means by which I, the Foreign Secretary and the Northern Ireland Secretary hold law enforcement and the security and intelligence agencies to account for their actions. In turn, we are accountable to the House and, through its elected representatives, to the public.
Part 2 of the Bill will introduce an important new safeguard. As now, a Secretary of State will need to be satisfied that activity is necessary and proportionate before a warrant can be issued, but, in future, it will not be possible to issue a warrant until the decision to issue it has been formally approved by a judicial commissioner. That will place a double lock on the authorisation of warrants. It will preserve that vital element of democratic accountability, but it will, for the first time, introduce independent judicial authorisation.
Mr Dominic Grieve (Beaconsfield) (Con)
The Home Secretary may have seen the letter in The Guardian today from a large number of lawyers who suggested that the legislation was intended to give
“generalised access to electronic communications contents”.
Does she agree that that is the very thing that the Bill does not do, and that the double-lock mechanism is there as an assurance that that will not happen?
Mrs May
My right hon. and learned Friend is absolutely right. The point about the Bill is that it makes it possible to intercept communications only under that dual authority—the double-lock that has been put into place—and it is not the case that the authorities are looking for generalised access to the contents of communications. I thank him for bringing that to the attention of the House.
Mr David Davis (Haltemprice and Howden) (Con)
As the Home Secretary says, this is an extremely important power but also a very sensitive one. As I understand it, she exercises it about 2,500 times a year, or about 10 times in each working day. Given that they are so sensitive, how long does she take, typically, over one of those decisions?
Mrs May
It is impossible to put a time on it, because each decision differs. The amount of information that is available, the type of case that one is looking at and the extent to which it refers to a matter that is already being considered vary. The amount of time I give to each case is the amount of time necessary to make the right judgment.
Mr David Lammy (Tottenham) (Lab)
I am grateful to the Secretary of State, and I recognise the sensitivity of these matters. She will know that there have been cases in which police misconduct is alleged and intercept has been used, and subsequently it has been very hard to use that evidence in front of a jury, particularly in a coroner’s court. Does she envisage any change in that? Is she minded to put that in the legislation?
Mrs May
The right hon. Gentleman has raised a very important point. He will be aware of one particular case in recent years in which the admissibility of evidence at inquest has been an issue. That is not a matter that we are putting in the Bill. It was explored when the closed material proceedings were brought into legislation through certain cases. We are looking actively at whether there are other means by which we can ensure that the appropriate information is available when such cases are being considered.
Mr Kenneth Clarke (Rushcliffe) (Con)
As someone who has also signed thousands of those warrants, with the benefit of hindsight I welcome the judicial commissioner having a look as well. I congratulate my right hon. Friend on making that significant change. Does she recall that the Bill will give the judicial commissioner the power to act only in the same way as a judge might act in a case of judicial review, which means overruling her only if she is behaving in a completely unreasonable way? Does she think that that is necessary, and does she not accept that if a judicial commissioner disagrees with her, there might be some value in at least having a discussion that covers broader principles of judgment and is not simply based on the fact that she is behaving in a way in which no reasonable man or woman would?
Mrs May
With a degree of prescience, my right hon. and learned Friend refers to the very next issue that I will address in my speech. I was going to point out that I know some right hon. and hon. Members have scrutinised the language in the Bill and have raised exactly that issue. I want to be absolutely clear: under the Bill, it will be for the judicial commissioner to decide the nature and extent of the scrutiny that he or she wishes to apply. Crucially, I can reassure right hon. and hon. Members that commissioners will have access to all the material put to the Secretary of State. The judicial commissioner will look not just at the process, but at the necessity and proportionality of the proposed warrant.
Mr Kenneth Clarke
Will my right hon. Friend allow me to ask a supplementary question?
Mr Clarke
Times have no doubt changed, but the information in individual cases is sometimes very simple and limited, because the case is thought to be so obvious. Will the judicial commissioner have the ability to ask for more information that has not gone before the Home Secretary if he or she wishes to know a bit more about the case and check what has been put before the Home Secretary?
Mrs May
I have to say to my right hon. and learned Friend that that will not be the case. The point is that it is important that the Secretary of State and the judicial commissioner make decisions on the basis of the same information being available to both of them. If the judicial commissioner decides that there is not enough information available, he or she would presumably refuse the warrant. It would be open to the Secretary of State to appeal to the Investigatory Powers Commissioner to look at the warrant again, or if the warrant is refused in such a circumstance, the Secretary of State might themselves say, “Take the warrant back, put in more information and resubmit it.”
Joanna Cherry (Edinburgh South West) (SNP)
Will the Home Secretary give way?
Joanna Cherry
On a point of clarification relating to the intervention by the right hon. and learned Member for Beaconsfield (Mr Grieve) about the letter to The Guardian signed by over 200 senior lawyers, is the right hon. Lady aware that the letter takes issue with bulk interception warrants and bulk equipment interference warrants, which even the Intelligence and Security Committee says should be removed from the Bill?
Mrs May
I will come on to talk about the bulk warrants, but it was clear from the Committee reports that the powers in the Bill are necessary. The ISC raised a question about the bulk equipment interception warrants, but, following that, the Government have produced further information on all bulk cases. We published some case studies and examples of how the powers would be used alongside the redrafted Bill.
Stella Creasy
May I take the Home Secretary to the other end of the telescope, as it were, on this matter? One of the concerns people have about a general access point is not about the warrants, but about the notion that, especially online, we can separate contact and content data. The idea is to allow access to contact data, but that will inevitably be blurred with content data online. Does she accept that there is a challenge in separating contact and content data, which could give rise to some people’s concerns about general access to information? Looking at somebody’s internet correspondence is not the same as looking at a record of their phone calls.
Mrs May
I know that that issue was raised when the draft Data Communications Bill was considered and has been raised in relation to the internet connection records power in this Bill, but such a separation is absolutely possible. We have talked at length with companies about being able to separate, for internet connection records, the websites that a particular device has accessed from the content of whatever has been looked at. It is very important for me to make it clear that when we talk about ICRs, we are talking not about looking at people’s web-browsing history, but about looking simply at the initial point of contact.
In relation to the authorisation process, which we have discussed in relation to the questions asked by my right hon. and learned Friend the Member for Rushcliffe (Mr Clarke), I welcome the Joint Committee’s clear endorsement of the double lock regime and, specifically, the language of the Bill on that point. Right hon. and hon. Members who think that the senior judiciary will simply rubber-stamp Government decisions have clearly never dealt with British judges.
In the case of urgent warrants, the provisions have been tightened in response to the pre-legislative scrutiny.
Mrs May
I will make a little more progress, but my hon. Friend may be able to catch my eye later.
In truly urgent circumstances, such as a fast- moving kidnap investigation, a warrant can still come into force as soon as the Secretary of State has authorised it, but that decision will need to be approved by a judicial commissioner within three working days. If the commissioner disagrees with the Secretary of State’s decision, the commissioner can order that all material gathered under the urgent warrant must be destroyed.
Furthermore, the Bill provides considerable additional safeguards for the communications of parliamentarians and lawyers. In any case, where it is proposed to intercept a parliamentarian’s communications, the Prime Minister would also be consulted, in line with the Wilson doctrine. Equally, the deliberate interception of legally privileged communications can be authorised only in exceptional and compelling circumstances, such as where it is necessary to prevent the loss of life.
Sir Edward Leigh
Of course Members of Parliament should not be above the law, and the Procedure Committee has ensured that a Member of Parliament who is arrested is treated exactly like a member of the public. We all recognise that, but in some of the most dodgy regimes—ours is not, of course, one of them—Governments do intercept the communications of Members of Parliament. Surely, just so that we can be absolutely reassured, we need the extra safeguard of having you, Mr Speaker, look at such an interception as well. Why not?
Mrs May
I heard my hon. Friend’s earlier exchange with you, Mr Speaker. Two important extra safeguards have been put in this legislation: the first, which is stated in the Bill, is that the Prime Minister will be consulted, but there is also the double lock authorisation. In future, a warrant to intercept anybody—including Members of Parliament, should that be the case—will be subject not just to the determination of a democratically elected individual, but to the independent decision of the judiciary, through the judicial commissioners. That important safeguard has been put into the Bill.
Simon Hoare
The Home Secretary is right to point to the patchy relationship between the judiciary and Governments of all colours. I think the Bill strikes absolutely the right balance. It is absolutely imperative that somebody who is democratically accountable both to this House and to the country has almost the first say on whether such things are done. It is perfectly right for a properly trained judge to have an overview of the process, but it would have been a retrograde step to lose the democratic accountability and the link to decision making in this place.
Mrs May
I thank my hon. Friend for his comments. It is important that we have the balance right. Many people have said, “Just have judicial authorisation”, and some people still believe that the authorisation should be made by the Secretary of State. By having both, we do not lose democratic accountability, but we add the independent judicial authorisation.
Tom Tugendhat (Tonbridge and Malling) (Con)
Will the Home Secretary give way?
Mrs May
I will make some progress, if I may, but my hon. Friend may very well try again.
I want to turn to communications data—the who, when, where and how of a communication that provide the communication’s context, but not its content. Such communications data are vital to investigations carried out by the police and the security and intelligence agencies. They have been used in 95% of organised crime prosecutions by the Crown Prosecution Service. They are used to investigate, understand and disrupt terrorist plots. They have played a part in the investigation of some of the most serious crime cases in recent times. They can tie suspects and victims to a crime scene, prove or disprove alibis, and help to locate a missing child or adult.
Parts 3 and 4 of the Bill will preserve that power for the police and the security and intelligence agencies, but also provide strong privacy safeguards. Requests for communications data will require the approval of an independent designated senior officer and will be subject to consultation with communications data experts. In addition, requests for communications data by local authorities will also require authorisation by a magistrate, and requests by any public authority, including the security and intelligence agencies, to identify a journalist’s source will require the authorisation of a judicial commissioner.
I have outlined how communications data are vital in providing investigative leads and for pursuing suspects, but where communications take place using social media or communications apps, it does not make sense that those communications are currently out of reach. For example, in respect of online child sexual exploitation, the absence of such records often makes it impossible to identify abusers. As I have said, such an approach defies logic and ignores the realities of today’s digital age. The only new power in the Bill is the ability to require communications service providers to retain internet connection records, when served with a notice issued by the Secretary of State, and after consultation with the provider in question.
To reiterate, internet connection records do not provide access to a person’s full web browsing history. An internet connection record is a record of what internet services a device or person has connected to, not every web page they have visited. I am pleased that the Joint Committee agreed with the Government on the necessity of that power, and concluded that
“on balance, there is a case for Internet Connection Records as an important tool for law enforcement.”
Indeed, the Committee went further and said that law enforcement should be able to access those records for a wider range of investigative purposes, and the Bill reflects the Committee’s recommendations.
Mr David Hanson (Delyn) (Lab)
The Home Secretary is right to say that about the Joint Committee, but it also wanted greater clarity about those internet connection records. It also wanted to ensure—I would welcome her assurance on this—that the capability existed for the retention of those records, and it asked whose cost that would be.
Mrs May
We have clarified definitions in the Bill, and that point was made not only by the Joint Scrutiny Committee but by the Science and Technology Committee. In considering this issue we have spent—and continue to spend—a long time discussing the technicalities of this issue with companies that could be subject to such notices, because companies operate in different ways. I reiterate that the Government will reimburse in full the reasonable operational costs that companies will be subject to in relation to this matter.
Mr Hanson
That is important, and I support the Home Secretary’s objective in this case. She will know that the Bill contains a figure of around £180 million for that cost. Is she satisfied—the providers were not—that that figure will cover the costs of the implementation of such a scheme?
Mrs May
The right hon. Gentleman raised that issue with me when I gave evidence to the Joint Scrutiny Committee, and was concerned about the cost. We have discussed in detail with companies the technical arrangements for access to internet connection records, and we have assured ourselves of the feasibility of that. As is currently the case for such matters, the Government will be prepared to reimburse those costs.
Nicola Blackwood (Oxford West and Abingdon) (Con)
The Home Secretary is generous in giving way. We welcome the improvements to the Bill, but I hope she received my letter today detailing the outstanding concerns of the Science and Technology Committee. In particular, we feel that technology capability notices remain a key area of uncertainty regarding encryption, and despite the commitments made at the Dispatch Box, we must have long-term certainty for the tech sector on reimbursement of costs. Those questions will be central to delivering a coherent piece of technical legislation that is fit for a fast-moving area of our economy, and it must be dealt with as quickly as possible as the Bill proceeds through the House.
Mrs May
I reiterate the point that I made previously and again just now: 100% of the compliance costs will be met by the Government. My hon. Friend asks me to provide a long-term commitment for that, and we are clear about that in the Bill. As she will be aware, it is not possible for one Government to bind the hands of any future Government in such areas, but we have been clear about that issue in the Bill and I have been clear in my remarks today.
Alongside the draft code of practice, I have published—at the Joint Committee’s request—a comparison of the differences between the proposals in the Bill and those set out by Denmark in recent years. I have also held further discussions with UK and US communications service providers on the proposals in the Bill, and we will continue to work closely with them as we implement this new power. As a guarantee of that, we have included a commitment that the Home Secretary will report to Parliament on how the Bill is operating within six years of Royal Assent. If Parliament agrees, it is our intention that a Joint Committee of both Houses will be formed five years after the Bill receives Royal Assent, specifically to undertake a review of the new legislation and to inform the Home Secretary’s report.
Part 5 of the Bill deals with equipment interference—for example, the acquisition of communications or information directly from devices such as computers or smartphones. By bringing existing powers into the Bill, we have responded to recommendations made by David Anderson, QC, and by the Intelligence and Security Committee. The Bill places those powers on a clear statutory footing, and makes their use subject to the issue of warrants that must be approved by a judicial commissioner.
Hon. Members will be aware that not only are those powers already available to law enforcement bodies, but they are vital to so much of their work to prosecute serious criminals. In exceptional circumstances, that capability is also used to deal with threat-to-life situations that fall short of serious crime, most typically to identify missing persons. For example, we would all expect that when a child goes missing and the parents know the password to their social media account, that the police should be able to use that password to search for vital clues. The Bill preserves capabilities that are already available to law enforcement, and makes it clear that they can be used to save lives. Nevertheless, these are intrusive powers and their use must be strictly limited. In future, all equipment interference warrants will require the approval of a judicial commissioner.
The draft code of practice, which I published alongside the Bill, constrains the use by law enforcement of more novel or advanced techniques that hon. Members might reasonably expect to be the preserve of the National Crime Agency and similar bodies. Equipment interference warrants may only be served on communications service providers with the personal agreement of the Secretary of State.
Alongside the draft codes of practice, and in response to recommendations of the Intelligence and Security Committee, we published a comprehensive public case setting out how bulk powers—for interception, communications data and equipment interference—are used, and why they are more necessary than ever before. There are, of course, limits to how much can be said about those most sensitive bulk capabilities without handing an advantage to criminals and those who mean us harm. For that reason, the security and intelligence agencies have provided further, classified detail about the use of those powers to the Intelligence and Security Committee.
As the publicly published case for bulk powers makes clear, such powers are vital to the effective working of the agencies. They have played a significant part in every major counter-terrorism investigation over the past decade, including in each of the seven terrorist plots disrupted since November 2014. They have been essential to detecting more than 95% of cyber-attacks against people and businesses in the UK identified by GCHQ over the past six months, and they enabled more than 90% of the UK’s targeted military operations during the campaign in the south of Afghanistan.
Part 6 of the Bill places these powers on a clearer statutory footing and makes them subject to robust and consistent safeguards. In future, bulk warrants will need to be authorised under the double lock regime that I have described. Furthermore, the examination of any data obtained under a bulk warrant will need to be for an operational purpose that has been approved by a Secretary of State and an independent judge.
Joanna Cherry
Other hon. Members have mentioned protection for the communications of parliamentarians. Does the Home Secretary agree that the provision in the Bill does not protect parliamentarians from having their communications to and from constituents scooped up by bulk collection provisions, or with communications data or internet connection records, which could lead to whistleblowers being identified?
Mrs May
I could give a variety of responses to those points. The hon. and learned Lady must be aware that certain bulk powers are predominantly those for foreign usage, rather than in relation to the United Kingdom. With bulk powers, where there is any interaction with individuals in the UK, the double lock authorisation is still necessary to ensure that the examination of the information is subject to the same sort of tests regarding necessity and proportionality.
Part 7 applies those safeguards to the retention and use of bulk personal datasets. Such information is already used by the security and intelligence agencies to keep us safe, and may be acquired under existing powers. However, the Bill introduces powerful new privacy protections so that the personal data of innocent people are always subject to strong robust safeguards, irrespective of how they were acquired.
I said that privacy safeguards are at the heart of this Bill, and the guarantor that those safeguards will be effective and adhered to—both in substance and in spirit—will be the new Investigatory Powers Commissioner, or IPC. Created under part 8 of the Bill, the commissioner, who will hold or have held high judicial office, will oversee a world-leading new oversight body, bringing together the existing responsibilities of the Interception of Communications Commissioner, the Intelligence Services Commissioner and the Chief Surveillance Commissioner. The new Investigatory Powers Commissioner will be provided with an enhanced budget and a dedicated staff of commissioners and inspectors, as well as technical experts and independent legal advisers. They will have access to the staff and systems of the agencies, and will have a remit to provide Parliament and the public with meaningful assurance about how the powers in the Bill are being used. When a person has suffered as a result of a serious error in how the powers in the Bill are used, the IPC will have a new power to inform the victim without the need to consult the Investigatory Powers Tribunal, which will itself stand ready to hear any claim and will have the power to quash warrants, award compensation or take any other remedial action it feels appropriate.
I turn now to part 9 of the Bill and clause 217, which provides for requests to be made to communications service providers to maintain permanent technical capabilities to give effect to warrants, and, in connection with that, to maintain the ability to provide copies of communications in an intelligible form. Let me be clear: this provision only maintains the status quo. It allows law enforcement and the security and intelligence agencies to ask companies to remove encryption that they have applied or that has been applied on their behalf. It would not—and under the Bill could not—be used to ask companies to do anything it is not reasonably practicable for them to do.
Finally, alongside the Bill, we have taken forward the recommendation made by Sir Nigel Sheinwald to develop an international framework to ensure that companies can disclose data, a point I made in response to my hon. Friend the Member for The Wrekin (Mark Pritchard). We are in formal negotiations with the United States Government and are making good progress. The provisions in the Bill are drafted to accommodate any such agreement. Any company co-operating with its obligations through an international agreement will not be subject to enforcement action through the courts.
The Bill provides unparalleled transparency on our most intrusive investigatory powers, robust safeguards and an unprecedented oversight regime, but it will also provide our law enforcement and intelligence agencies with the powers they need to keep us safe. Because of its importance, our proposals have been subject to unprecedented levels of scrutiny, which has resulted in a Bill that really does protect both privacy and security—it is truly world-leading. I look forward to the revised Bill now receiving full and careful consideration by both Houses. I commend it to the House.
Sir Edward Leigh
If there is a matter of acute public concern and a whistleblower is making himself a real nuisance to the Government, and communicates that to his Member of Parliament, should one member of the Government, the Home Secretary, ultimately authorise it, with it then being referred to the Prime Minister, who might also be affected by the decision? He would effectively be judge in his own court and surely it is at least arguable that some other scrutiny should be involved.
Andy Burnham
I think the Home Secretary has indicated that there would be, because her decision would be subject to the double lock, including judicial approval. My point is, why should the Prime Minister be only consulted by the Home Secretary as part of that process? It seems to me that there is a role for the Prime Minister finally to approve any such warrant, and I believe the Bill could be strengthened in that regard.
There is also the question of journalists. The National Union of Journalists believes that the Bill weakens existing provisions. Clause 68, which makes the only reference to journalists in the entire Bill, sets out a judicial process for the revelation of a source. Its concern is that journalists are wide open to other powers in the Bill. Given the degree of trust people need to raise concerns via the political, legal or media route, and given the importance of that to democracy, I think the Government need to do further work in this area to win the trust and support of those crucial professions.
Our second area of concern relates to the thresholds for use of the powers. The Bill creates a range of powers that vary in intrusiveness, from use of communications data and internet connection records at one end to intercept, equipment interference and bulk powers at the other end. There is a real concern that the thresholds for them are either too low or too vague.
Let us take internet connection records. The Home Secretary has previously described ICRs as “the modern equivalent” of the “itemised phone bill”, and the Government intend them to be made available on the same basis—that is, for the detection or prevention of any crime. The Joint Committee noted, however, that this is not a helpful description or comparison. ICRs will reveal much more about somebody than an itemised phone bill. They are closer to an itinerary, revealing places that people have visited.
The question for the House is this: is it acceptable for this level of personal information to be accessed in connection with any crime—antisocial behaviour or motoring offences, for instance? I do not believe it is, and I think a higher hurdle is needed. This is a critical point that the Government will need to answer if they are to secure wider public support for their Bill. People have legitimate fears that if ICRs become the common currency in law enforcement, much more information will be circulating about them, with the potential for it to be misused.
The Government need to tell us more about why they need this new power and they need to set a stricter test for its use—in connection with the prevention or detection of more serious crime or a serious incident such as a missing person, for instance. That is what I think the hurdle should be: serious crime rather than any crime, and I would welcome hearing the Home Secretary’s response on that point.
At the other end of the scale, the justification for using the most intrusive powers in the Bill is on grounds of “national security” or, as the Home Secretary said, “economic well-being”. While I understand the need for operational flexibility, there is a long-standing concern that those tests are far too broad. There is a feeling that “national security” has been used to cover a multitude of sins in the past. Let us remember that official papers from the domestic building workers’ strike in English market towns in 1972 are still being withheld on grounds of “national security”! How on earth could that possibly be justified?
Andy Burnham
I would gladly share with the right hon. and learned Gentleman some of the papers I have about the historic injustices that we have seen in this country—[Interruption.] But it is relevant, because those convictions still stand to this day. I said earlier—I do not know whether he was in his place—that revelations have been made that information supplied to blacklist people in the construction industry came from the police and the security services. I welcome the move to codify all this in law so that those abuses cannot happen again, but I hope that he will understand that Labour Members want to leave nothing to doubt. Why should the most intrusive warrants be used on the test of economic well-being? What does that mean? Are we not entitled to say that national security alone can justify intrusion on people’s privacy in that way?
Mrs May
I have been listening carefully to the response of the right hon. Gentleman to my right hon. and learned Friend the Member for Harborough (Sir Edward Garnier). Let me press him on the point that my right hon. and learned Friend raised, because it is very important. We are inserting the judicial authorisation of warrants. I did not think—I said this in my speech—that any Member should question the independence of the judiciary. It seems, however, that he is doing just that. Will he now confirm that he is not questioning that?
Andy Burnham
I am not doing that in any way, shape or form. It is wrong for the Home Secretary to stand there and imply that. What I am talking about is the grounds on which her Bill gives the police and the security services the ability to apply for warrants. [Interruption.] Conservative Members should listen: I am saying to the Home Secretary and to them that those grounds should be as tightly defined as possible, and I do not think it helps if she is proposing that they can be brought forward on grounds of “general economic well-being”. In the past, her party has taken a different view from ours, and this opens up a much wider range of potential activities that could be subject to the most intrusive warrants. That point is both fair and, if I may say so, well made.
Joanna Cherry
We need to compare apples with apples and oranges with oranges. A more correct comparison is with jurisdictions such as Canada and America, the systems of which are more similar to ours than the continental European jurisdictions that the hon. and learned Lady describes, but I will come back to that when I get to authorisation.
I am sure everyone in this House wants to get the balance right between protecting civil liberties, and giving the security services and the police the necessary and proportionate powers to fight serious crime and terrorism. However, we in the Scottish National party believe that the Government’s attempt has not got that important balance right and we are looking forward to working with other parliamentarians to try to get it right. We are worried that the Government are not giving sufficient time for the consideration of this enormous Bill. The 14 Home Office documents relating to the Bill that were released to Parliament on 1 March, including the Bill itself, extend to 1,182 pages, which is almost treble the amount of material released with the draft Bill last November. There is a suspicion that the amount of material being released in large tranches, coupled with relatively short timescales within which to consider and amend proposals, is an indication that the Government do not really want proper parliamentary scrutiny of this. We are determined to do our best to make sure that sufficient parliamentary scrutiny is provided.
Mrs May
Let me be absolutely clear about this. I have been in this House long enough to see Bills go through the House where parliamentarians have complained when the Government have failed to bring codes of practice that should sit alongside the Bill to the House at the very first stage of the debate. This Government have brought those codes of practice to the House more than several days before Second Reading, precisely so that Members of this House have an opportunity to see them and consider them alongside the Bill.
Joanna Cherry
The Home Secretary misunderstands my complaint—it is not about the fact that the material has been produced. My complaint is that the material has been produced with a timescale following thereon that is not sufficient for us to scrutinise it properly. I must make something crystal clear before I go any further: the SNP will not be morally blackmailed or bullied by Conservative Members into blind support for a Bill of dubious legality in some respects, which seeks powers that go beyond those of other western democracies. We are not going to tolerate any suggestion that by seeking proper scrutiny of the Bill and full justification for the far-reaching powers sought, we are being soft on terrorism and serious crime. I would associate myself with the other main Opposition party in that respect.
Let me give hon. Members an example of why they can be assured that the SNP is not soft on terrorism or serious crime. We have been in government in Scotland for nine years and we have shown ourselves to be a responsible Government. Although issues of national security are reserved, we have always co-operated closely with the UK Government, for example, when Glasgow airport was attacked by terrorists in 2007. Our record in fighting crime in Scotland is second to none. The Scottish Government have got recorded crime down to a 41-year low and we are committed to a progressive justice policy. We will not, therefore, stand accused of being “soft” on serious crime or terrorism, because that is simply not a fair statement to make.
In the coming years, we confidently expect to be devising the security policy of an independent Scotland, and it will be a responsible security policy that will not only seek to work closely with near neighbours on these islands, but will look to international models from other democracies and strive to take proper cognisance of international human rights norms and the rule of law. That is all we are about in our opposition and in our scrutiny of this Bill.
Our concerns about the Bill are not just our concerns. They are shared by: the parties sitting around me; many Conservative Members sitting opposite me; many of the members of three parliamentary Committees; non-governmental organisations; the technical sector; eminent legal commentators—more than 200 senior lawyers signed that letter in The Guardian today; communications service providers; and the UN special rapporteur on the right to privacy. [Interruption.] I hear somebody shout confidently from the Government Benches that the 200 lawyers who signed that letter are wrong. I suggest that he or she—I think it was probably a he—looks at the list of those who signed it and perhaps accords them a bit more respect; there is room for a difference of opinion here.
Stella Creasy
I am not quite sure about the hon. Gentleman’s point because no one is suggesting that we would not want to access such information. My point is that, from a technical perspective, separating contact data from content data is much more difficult than the Home Secretary suggests. That means that we need more honesty about the powers we are proposing that our police and investigatory authorities should have.
For example, if someone can get information about my use of an electricity meter, they might want to look at the contact between me and that meter. If I were accessing it a lot, they might wonder what I was doing in my home that required so much heat. Drug enforcement agencies might look at such contact patterns, and inevitably that brings with it content about what someone is doing. That does not mean that we do not need methods to access that information; it means that one thing missing from this debate to date is an honesty about the technological complications that will come with this Bill, and we must address those concerns.
The Minister for Security (Mr John Hayes)
Perhaps I can reassure the hon. Lady. The Home Secretary emphasised that we continue to have discussions with the providers for exactly the reasons she has described. It is essential that they can do what we oblige them to do, and we are determined to put those mechanisms in place. The right hon. Member for Sheffield, Hallam (Mr Clegg) gave the game away because he said that repeatedly, over time, security services and the police have requested the ability to carry out such work, for the simple reason that they need to do that in order to protect us all.
Stella Creasy
I am grateful to the Minister for acknowledging that the idea that one can always separate contact from content data is not viable. We need a much more honest debate about who will be able to access that information and under what circumstances. I hope that that will be discussed in Committee, because as the Bill is currently drafted, we cannot justify to our constituents the fact that their content data may be accessed—however inadvertently—because of the nature of technology. We must address that.
Let me move on to the question of honesty about encryption. A lot of technology companies and the technology industry in our economy are concerned about how the Bill may affect encryption. The Bill gives the Secretary of State the power to serve technical capability notices, and to require companies to remove their electronic protection. Again, it is not yet clear what that means, what protection exists in terms of encryption technologies, and what that might mean for other consumers of services. That is a real concern for many.
We know that encryption is a vital part of security for services. Constituents will mention Ashley Madison and TalkTalk, or they may be aware of hospitals that did not have security measures in place and had their systems hacked. We are talking about whether the Government will require those companies to bring in those backdoor opportunities for accessing information. We need much stronger scrutiny of the Bill and of what the encryption process means, not least because removing some of the encryption requirements would create a security risk. The Government are making that choice in return for the ability to do some of the things they are talking about doing, and we need to be honest with the public about that.
There is also a question relating to the security of data. In 2009, the Conservatives made great play of turning back the “surveillance state”, but it seems to me that they are seeking to privatise the databases they told us they did not want to see developed. The Bill asks companies to hold the data, but the security of that data is not clear. We know that having to hold everybody’s internet records for a whole year will be a honeypot to hackers. That will be a massive security risk unless security processes are in place—even if data are held by private companies. The fact that the Government have not clarified who will pay for that security, what a reasonable cost is and how to resolve disputes about what a reasonable cost will be, leaves open a gap that not just hackers but consumers will be deeply interested in. The Government must be much clearer about how they will make sure they protect consumers from having their information hacked as a result of requiring companies to gather data.
There are similar concerns about bulk interference and encryption data, but my central point is this: there are questions about the proportionality and the judicial extent of the Bill and working overseas, but there are also concerns about technology. We have to be able to answer questions on all three issues to be satisfied that the Bill is appropriate for the 21st century. I hope those issues will be addressed by amendments in Committee. I believe that many members of the Science and Technology Committee share concerns about whether our technology industry is comfortable with the proposed legislation.
For the Government to fail to act on any one of those questions will compromise the others. If we do not get the technology right and do not work with our overseas partners, we will not keep anybody safe. We could, in fact, create more problems. I hope Ministers will listen to those concerns and I hope they will recognise the spirit of what they said in 2009 about the importance of rolling back the surveillance state. I also hope they will be digital natives, not digital refugees. I will not support the Bill on Third Reading if they do not change it.
The Secretary of State for Foreign and Commonwealth Affairs (Mr Philip Hammond)
This has been a good debate and I pay tribute to all contributors. We have heard a great deal of detail from a lot of very knowledgeable people. I am only grateful, Mr Speaker, that I do not have to pick up the bill at standard hourly rates for all the lawyers who have contributed to our debate tonight.
Amid all the admirable attention to detail, we must never lose sight of what this is all about: the first duty of Government is to keep us safe from serious crime, terrorism and hostile foreign powers. The Bill sets out a new framework for the use and oversight of investigatory powers by the law enforcement and security and intelligence agencies––not just those required to counter threats here at home but those supporting the vital outward-facing work of GCHQ and the Secret Intelligence Service, the two agencies for which I am responsible. I pay tribute tonight to the work of the secret intelligence agencies, the police, the National Crime Agency and all the other bodies that together do such a fantastic job of keeping us safe.
The purpose of the Bill is threefold: to bring together in one place all the powers already available to the agencies to obtain communications and data about communications; to equip us for a digital age by introducing a new power relating to the retention of internet connection records; and to overhaul the way the use of these powers is authorised and overseen. Our delivery of those three objectives has been underpinned by three principles: that the powers available to the agencies are necessary to tackle the serious threats we face; that they are proportionate, balancing the need to tackle threats with the rights to privacy of law-abiding people; and that they are subject to proper and effective authorisation and oversight.
To those who say that the Bill is rushed and that we have rushed into this without due consideration, I say, with the greatest respect, that that is nonsense. Our approach has been informed by the recommendations of no fewer than three independent reviews and three Committees, which scrutinised the draft proposals in detail. Indeed, few measures ever brought before the House can have been subject to such a high degree of pre-legislative scrutiny. I want to place on the record once again my and the Home Secretary’s thanks to all those involved, because their work has undoubtedly improved the Bill.
The introduction of judicial authorisation in the warrant-issuing process as part of the overarching architecture will reassure the public. I want to be clear—because concerns have been raised tonight—that the judicial commissioners will be able to consider proportionality and necessity as they exercise their double-lock function. I want to reassure hon. Members who raised this point that we are confident that this additional layer of protection can be introduced without undermining the effectiveness of the system.
This is a Second Reading debate. It is clear from remarks tonight that there is widespread acceptance across the House, including from both Opposition Front Benches, of the need for legislation, but both raised a series of points—several recurring themes arose in the debate—all of which are perfectly proper issues to raise in Committee, when a proper, detailed justification of each of the proposals in the Bill can be made and scrutinised. I am confident that all reasonable concerns and fears can be allayed as the Bill progresses.
It is important to be clear that, apart from internet connection records, all the powers in the Bill are already in use by our agencies and police forces, as they keep us remarkably safe from the myriad threats we face. Any attempt to curtail those powers, which they already have and are currently using, would make us less safe. That is something that we, on this side of the House, are simply not prepared to contemplate. I was hoping to address some of the key issues raised during the debate, but I am afraid that time does not allow it. All the issues raised, however, will be fully and exhaustively addressed in Committee.
The Bill is about backing our police and intelligence agencies with the powers they need to keep the British people safe. It is about allowing them to adapt to changing technology and the ways in which criminals and terrorists use it, but it is also about ensuring that all this is done in a proportionate way and with proper authorisation and oversight so that the British people can have absolute confidence that the powers are being appropriately used and that their privacy is being properly protected.
The Bill delivers all those objectives. The powers set out are necessary to tackle the serious threats we face, and they are proportionate, carefully balancing the need to tackle threats with people’s right to privacy. The Bill provides for a level of oversight and scrutiny that will be world leading, with the introduction of judicial oversight and the double lock—the biggest change in this area since Government avowed the very existence of the intelligence and security agencies over 20 years ago.
For too long, technological change has been moving the dial in favour of the criminal and the terrorist. The Bill is an important step in the fight back. I urge colleagues on both sides of the House to join us in taking the battle to the terrorists and the organised criminals by backing the Bill tonight.
Question put, That the Bill be now read a Second time.