Investigatory Powers (Communications Data) (Relevant Public Authorities and Designated Senior Officers) Regulations 2020
(4 years, 3 months ago)
Grand CommitteeRead Hansard Text Read Debate Ministerial Extracts
Baroness Williams of Trafford
That the Grand Committee do consider the Investigatory Powers (Communications Data) (Relevant Public Authorities and Designated Senior Officers) Regulations 2020
Relevant document: Special attention drawn to the instrument by the Secondary Legislation Scrutiny Committee, 13th Report
The Minister of State, Home Office (Baroness Williams of Trafford) (Con)
My Lords, these regulations, and the Functions of the Investigatory Powers Commissioner (Oversight of the Data Access Agreement between the United Kingdom and the United States of America and of functions exercisable under the Crime (Overseas Production Orders) Act 2019) Regulations 2020, are both made under the Investigatory Powers Act 2016. That legislation brought together powers available to our public authorities to obtain communications and data about communications, powers that are vitally important to their efforts to tackle crime and protect our citizens. It also created extensive and world-leading safeguards, including a powerful new Investigatory Powers Commissioner who provides independent oversight and authorisation of the use of these powers.
As the operational requirements of our public authorities continually evolve, it is vital that the use of the investigatory powers can adapt in response, within the strict parameters that Parliament agreed during the passing of the Investigatory Powers Act. When we do adapt the use of the investigatory powers, it is equally important that the appropriate safeguards can be applied. The regulations we are debating today collectively represent this adaptation in action.
I turn first to the Functions of the Investigatory Powers Commissioner (Oversight of the Data Access Agreement between the United Kingdom and the United States of America and of functions exercisable under the Crime (Overseas Production Orders) Act 2019) Regulations 2020. As I have previously informed the House, the agreement will allow UK public authorities, with the appropriate legal authorisation, to obtain data directly from US-based telecommunications operators for the purposes of preventing, detecting, investigating and prosecuting serious crime.
It is a requirement of the agreement to ensure an appropriate level of audit and oversight of its use. Given that the agreement has been designated under the Investigatory Powers Act 2016 and that almost all the authorities using the agreement fall under the Investigatory Powers Commissioner’s remit for aspects of their work already, it was decided that the commissioner and his team should oversee the UK’s use of the agreement.
The commissioner will, in accordance with the agreement, keep under review the compliance of UK public authorities with its terms. This will include the ex post facto review, by a judicial commissioner, of communications data authorisations and certain modifications to targeted interception warrants that would not otherwise be specifically subject to a commissioner’s review. This ex post facto review must be conducted as soon as is reasonably practicable, and no later than three months from when the authorisation is given.
In addition to the Investigatory Powers Act 2016, the agreement has been designated under the Crime (Overseas Production Orders) Act 2019. These regulations therefore amend the Investigatory Powers Act to provide the statutory basis for the commissioner to perform his role in relation to the agreement and to oversee the use of overseas production orders under the agreement. The commissioner is supportive of this and his team have recruited additional resources in preparation for the agreement coming into use. Although, as I have described, these regulations require the commissioner to perform his review of public authorities’ compliance in accordance with the agreement, the commissioner, as an independent officeholder, will continue to discharge his functions of inspection, investigation and audit as he sees fit.
The Government remain resolutely committed to the independence of the Investigatory Powers Commissioner. The Investigatory Powers Communications Data (Relevant Public Authorities and Designated Senior Officers) Regulations 2020 amend Schedule 4 to the Investigatory Powers Act to add five public authorities to the list of bodies which can legally obtain communications data, and they make minor amendments to bring certain role titles and organisation names into line with the current terminology.
Communications data includes the “who, when, where and how” of a communication but not the content: the “what” was said or written. It includes the method and way in which one person or thing communicates with another person or thing. Access to this data is a crucial investigative tool for a variety of law enforcement bodies and has a range of operational uses.
The five public authorities that we propose to add to Schedule 4 by these regulations have each demonstrated through extensive consultation with the Home Office and the Investigatory Powers Commissioner’s Office that access to the data is now necessary and proportionate to their operational requirements and statutory duties. The authorities are the Civil Nuclear Constabulary, which requires these powers to investigate threats to the most sensitive nuclear sites in the UK; the Environment Agency, in order to tackle serious organised waste crime; the Insolvency Service, in order to investigate and prosecute criminal wrongdoing connected to personal and company insolvencies; the National Authority for Counter Eavesdropping, in order to protect the Government from technical espionage attack from hostile state actors; and the Pensions Regulator, in order to investigate serious crimes associated with workplace pension schemes, including fraud and money laundering.
In short, without communications data access, these public authorities often cannot carry out their role of investigating crime effectively. By adding them to Schedule 4, they will be subject to the stringent safeguards that already govern the use of communications data. These include the independent authorisation of most requests by the Office for Communications Data Authorisations, a serious crime threshold for requiring certain types of communications data and inspections conducted by the Investigatory Powers Commissioner’s Office. The oversight, together with the communications data code of practice, ensures that requests for communications data are necessary and proportionate. Where it is no longer necessary and proportionate for a public authority to acquire communications data, the entry in Schedule 4 will be removed. Noble Lords will see that in the recent removal of the fire and rescue service.
In summary, the regulations we are debating relate to provisions already set out in the Investigatory Powers Act 2016. They will allow the use of investigatory powers by our public authorities to adapt to changes in their operational requirements as they respond to an evolving threat picture, while ensuring that the appropriate safeguards can continue to apply. I beg to move.
Lord Blunkett (Lab)
My Lords, the Minister is aware that I am very supportive of the updating of measures that, necessarily, take account of enormous and rapid change taking place around us and the need, therefore, to adapt and adopt processes commensurate with that challenge. I particularly welcome the decision to change the formula so that we do not have to rely on mutual legal assistance, which was the most time-consuming and bureaucratic way of operating. The measures also deal with the relationship with the United States.
I am also very aware of mission creep from the original investigatory powers Act of 20 years ago. I came in as Home Secretary in 2001, inheriting the primary legislation but not having the orders laid. It has rent on my heart, because my second son, who had just qualified as a computer analyst, got in touch with me to say that the order that we laid under the Act was so wide-ranging on the agencies and institutions that had the ability to draw down and use the powers under RIPA that a storm was going on in what was then the embryo of social media. Having examined it, I discovered that they were right: we had allowed too many agencies and institutions access to the powers. A great deal has been learned over the 20 years about how to avoid that, and the Minister referred to the updated Investigatory Powers Act of five years ago.
I just want to test this out this evening. There is an agency with which I do not think that many people will be familiar—in fact, I will go as far as to say on public record that I was completely unaware of the necessary but obscure UK National Agency for Counter Eavesdropping. I should be grateful if the Minister could say a word or two about it when winding up. I am very strongly in favour of avoiding eavesdropping, whether it is by state actors on our Government and economy or on private enterprise, individuals and families. I have suffered myself in the past from gross intrusion on those around me, and I am very interested to know the extent of the powers of this counter-eavesdropping agency and the role of the commissioner in overseeing it, and in particular what powers it might possess.
I will not delay the Grand Committee any longer, because I think that, on the whole, we are all in favour of the two orders and the changes being made, but it is interesting what you find out by being in the House of Lords.
Lord Naseby (Con)
My Lords, I have read the papers in front of us this afternoon and should like to highlight a couple of things. I note from paragraph 7.2 that there has been a
“rapid escalation of organised crime”
in recent years of fly-tipping and so on. It seems to me, as one who has been using the tidy tip in Biggleswade in Bedfordshire by appointment, that there is no provision for small businesses or small builders to get rid of their bits and pieces of rubbish. Although it is not absolutely covered by the order, I wonder whether it is not time to look at the fly-tipping challenge that we are facing in this country.
My other point concerns paragraph 7.3 and the Department of Health and Social Care. Am I right in thinking that that is to do with the purchasing done by the department? If not, what else does it cover?
Moving on, I note that 10 departments are now involved. One asks who is co-ordinating those 10 to ensure that they are consistent in their approach to what they think is fraud.
I declare an interest as a trustee of the parliamentary pension fund. We all know that small businesses have, quite rightly, been brought into the national pension scheme since 2012. Why, at this point, eight years on, is it felt for the first time that the Pensions Regulator should be given powers? Previously, it was not given powers, because they were not up to scratch. Any of us who are involved in that world know that it is hugely complicated at the moment; it is not easy, particularly for the millions of small businesses, to keep up to date with the changes that are being made. I am sure that mistakes are made, but I do not think that, at this point in time, this particular edition of the Pensions Regulator is proportionate to the problems in that area.
Moving on to the second order, those of us who have worked with or alongside the United States will be well aware that there are six states, Delaware being the leading one, that do not co-operate with the US Government very much at all in declaring who has moved money in and out of a state. We have had instances in the past on the Public Accounts Committee where it was clear that that particular state—and five others, I think—just does not co-operate. This all sounds fine here, but what will happen in relation to those states that do not co-operate with the US Government as a whole?
Secondly, what is the position of our overseas territories? I declare an interest: I have family in the Cayman Islands. In my judgment and, I think, in that of Her Majesty’s Government, those islands have been highly co-operative in trying to find a modus vivendi in the illegal movement of funds. Other parts of the overseas territories have not been quite so co-operative. It is not clear to me whether this agreement with the US is limited to just the UK and, as far as the States is concerned, probably does not touch those six states—I have mentioned only the leading one. I am not sure whether this measure covers the overseas territories. I do not think that it does, but I would be grateful for elucidation on that point.
Are we in a position to say okay, we have got the States, but there are other countries that we believe we should have a similar agreement with? If that is private and confidential, I do not expect it to be indicated this evening, but it would be helpful for the Committee to know the key parties—that is, countries—that we would like to have agreements with.
Paragraph 7.5 of the Explanatory Memorandum says that
“the Parties shall engage in a review of each Party’s compliance with the terms of this Agreement”.
One wonders how often. I happened to notice that tomorrow we will deal with a separate SI in which reviews will occur every three years. In other places, it is eight years. There does not seem to be too much consistency in government.
Paragraph 7.6 states:
“The IPA is included in this list, but the COPO Act is not, because it did not exist when the IPA was drafted. Consequently, the IPC is currently unable to keep under review any Agreement-related activity exercisable by virtue of the COPO Act, such as the use of OPOs.”
Is this not a loophole? Since we are doing this now—this measure must have been prepared some time ago—what are we doing to close that loophole?
The Deputy Chairman of Committees (Lord Lexden) (Con)
I call the noble and learned Lord, Lord Morris of Aberavon, Lord Morris? I think we have to move on, so I call the noble Baroness, Lady Jones of Moulsecoomb.
Baroness Jones of Moulsecoomb (GP)
My Lords, the Investigatory Powers Act was a landmark piece of repressive legislation passed by this Parliament, granting unprecedented powers to gather information on the public at large. It is so bad that even the Chinese Communist Party has pointed to the UK’s law to justify its own intrusive surveillance of the Chinese people. Many of us who are concerned about state surveillance and government overreach raised the alarm at the time, but Parliament continued regardless.
However, I am happy to see that the Investigatory Powers Act that exists today is a very different beast from the one passed by Parliament only four years ago. The European Court of Justice did not take long to rule that some of the worst parts of the Act, including the Orwellian hoovering up of information about everyone’s internet usage, was plain illegal. A second court case saw the High Court rule, again, that parts of the Act were unlawful and must be replaced. That forced the Government into retreat, with powers now being deployed only against serious crime.
At a time when the Government are seeking to curtail judicial review, we should remember that the courts have acted as a beacon of our freedoms and liberties when Parliament has failed properly to scrutinise the Investigatory Powers Act. That is one example of so many reasons why we must fight against the Government’s attack on the constitutional role of the judiciary to hold the executive power to account. This is an important context which I am happy to have the opportunity to set out, with an unusually long speaking time by recent standards. This context colours the two regulations before your Lordship’s Grand Committee today.
These two regulations are relatively benign precisely because campaigners beat the Government in the court 2-0. The regulations are restricted in their scope and power, applying only to serious crime and with judicial safeguards in place. They are a world apart from the draconian, dystopian legislation dreamed up by the then Home Secretary Theresa May.
I have a specific query for the Minister, and the noble Lord, Lord Naseby, has referred to some of this. The functions of the investigatory powers order implements part of the agreement between the UK and the USA on access to electronic data for the purpose of countering serious crime. Article 12 of that agreement requires a review within 12 months of the agreement coming into force of
“each Party’s compliance with the terms”
of the agreement, and
“a review of … handling of data acquired”
under the agreement. Can the Minister say whether that review has taken place? Am I to understand from her opening remarks that it has not happened yet? When will it take place, and will your Lordships’ House have a copy of that review so that we can see it and discuss it? In particular, I seek assurances that President Trump is not using powers in this agreement against his political enemies in the USA, who seem to be growing in number. He is ruling over what looks like a totalitarian state apparatus purely for his own personal interests, and I very much hope that our Government do not go the same way.
The Deputy Chairman of Committees (Lord Lexden) (Con)
I call again the noble and learned Lord, Lord Morris of Aberavon, and ask him to unmute so that we will be able to hear him. There is still no response, so I call the noble Lord, Lord Foulkes of Cumnock.
Lord Foulkes of Cumnock (Lab Co-op)
My Lords, may I say that it is a great pleasure to be here in person? For one thing, you do not have the problems that my noble and learned friend Lord Morris is experiencing. However, it was said on the way in that I would not be able to cause as much mischief as I normally do in Grand Committee as we are a bit like battery hens in here. I hope that it does not affect our behaviour in that way.
This is a very important issue. I was a member of the Intelligence and Security Committee for three years between 2007 and 2010, so I have a little inside information about what some of the countries that are not our best friends get up to. This is very important in relation to that, and I will come back to it in a minute.
First, the report of the Secondary Legislation Scrutiny Committee quite rightly points out that the Civil Nuclear Constabulary, the Environment Agency and the Pensions Regulator were removed and now they are being put back in again. There is a sort of explanation under paragraph 5, but it is not really a very satisfactory one.
I suspect—the noble Lord, Lord Paddick, is shaking his head; perhaps he can answer on this—that they were taken out by the coalition because of pressure from the Liberal Democrats and the Conservatives, now that they are ruling on their own, have put them back in again. For once, I agree that they should be in and that that is right—let us find out—but it represents yet another U-turn. We have had lots of them in the last few weeks, have we not? Let us add this one to the list—if anyone is keeping one.
Going back to the Intelligence and Security Committee, there was an astonishing U-turn there, mind you. Chris Grayling was so enthusiastic that he wanted to chair the committee; now he finds that he does not have enough time or enough interest even to be a member. Very strange things are going on there, but I do not think that the Minister, however good she is—and she is a good Minister—would be able to answer on that. Once Chris Grayling had dipped his toe in the water, it was not just right for him, as I think Goldilocks said.
The memorandum for the regulations relating to communications data and relevant public authorities states that the regulations
“have been subject to a successful 12-week consultation period with the Investigatory Powers Commissioner and the public authorities to which the modifications relate as required by … the IPA.”
However, given the role that the ISC had—as I know very well—in scrutinising the original Investigatory Powers Bill before it became law in 2016 and the critical recommendations it made in the 2016 report, can the Minister tell us whether the ISC itself was consulted on these regulations? If so, what did it say? If not, why not?
Similarly, I would be interested to know what scrutiny, involvement or consultation the ISC has had in the overseas production order regulations relating to UK and US communications data sharing.
Finally, these regulations come after the introduction of temporary powers—so many of them were brought into effect by the Coronavirus Act 2020—enabling the Secretary of State to grant the Investigatory Powers Commissioner powers to appoint temporary commissioners with powers to sign warrants to allow authorities to access communications data. That was in anticipation of staff shortages due to coronavirus. The time limit on seeking retrospective warrants was also expanded. As with all temporary regulations put in place because of the epidemic, can the Minister say how long she intends to keep these temporary powers in place?
I have just two or three questions to which I would like answers. Otherwise, although it might not seem it from some of my demeanour, I support the Motion.
Lord Paddick (LD)
My Lords, I thank the Minister for outlining these draft statutory instruments to the Committee. I find it a little disconcerting being back in London, having been away for such a long time.
Bearing in mind the comments of the noble Lords who have spoken before me, I was beginning to wonder whether I had read the wrong statutory instruments; perhaps that is all to do with my disorientation. However, the noble Lord, Lord Foulkes of Cumnock, was reassuringly in line with some of my concerns. I am also grateful to the Secondary Legislation Scrutiny Committee for drawing to the special attention of the Committee the first of the statutory instruments in its 13th report. If the Minister will bear with me, I will take the statutory instruments in the order in which they are on the Order Paper rather than in the order that she spoke to them.
As noble Lords will remember, the Investigatory Powers Act was controversial—not going quite as far as the noble Baroness, Lady Jones of Moulsecoomb—when it passed through your Lordships’ House. One of the few reassuring aspects of the legislation was the fact that a number of public authorities, most notably local authorities, had their power to access communications data revoked. It is therefore somewhat concerning that three public authorities that had their authority to access communications data removed under the 2016 Act have now had that power reinstated. My understanding is that was at the time that these public authorities had their authority removed, rather than anything to do with the coalition; I think it was post coalition.
Even more concerning is the fact that the Home Office have agreed to add these and other public authorities on the basis of new business cases, changes in circumstances and work with local police forces that the Home Office has evaluated and that it has decided to grant the powers to. I accept that the Home Office has provided a memorandum explaining the purpose and effect of the regulations, but there is only one brief paragraph on each provision. Again, the Minister was very brief in explaining why there had been a U-turn on three of these public authorities and the basis for granting the powers to the others, including this eavesdropping body—nobody has heard of it, although when I Google searched it, there it was.
These regulations are laid under the enhanced affirmative procedure of Section 268 of the 2016 Act, and yet the detailed reasoning for adding these public authorities, including the three that were previously moved, has not been made available to us. How is Parliament to properly assess whether these public authorities have made a sufficient case, so that the grant of these powers is “necessary and proportionate”? Where is the parliamentary oversight?
Can the Minister explain how many public authorities in total have sought these powers under the Investigatory Powers Act? What proportion of requests made to the Home Office have actually been granted, and how many of them have been turned down? Can the Minister explain the process for evaluating such requests, and what consultation takes place with the Investigatory Powers Commissioner before such requests are agreed to?
I understand that the complexity of crimes these public authorities investigate may have increased, and that their specific expertise and experience often make them a better place to investigate crimes in the first instance, before handing over to local police forces. However, what is to stop joint investigations with local police forces applying for the communications data required, rather than separately authorising these organisations? These are significant powers to access sensitive personal information, and the case for each public authority to access them should be made out in more than a few-line summary.
The second statutory instrument relates to the Crime (Overseas Production Orders) Act 2019—another controversial piece of legislation—and the controversial data access agreement between the United Kingdom and the United States of America. I will not rehearse the concerns expressed in your Lordships’ House about data being provided by UK communications service providers to US law enforcement agencies, under this agreement, which could result in the accused being convicted in a US court and sentenced to death.
However, can the Minister remind the Committee what the effect of Article 8(4) of the agreement is in practice? It looks to me like a case-by-case provision rather than a death penalty assurance. Are the Government reviewing this part of the agreement in light of recent Supreme Court cases?
I am reassured that the Investigatory Powers Commissioner has been involved in the drafting of this statutory instrument, but what additional resources are being given to the Investigatory Powers Commissioner to ensure proper compliance with the agreement and the periodic review of each party’s compliance with the terms of the agreement, as set out in Article 12(1)? I look forward to the Minister’s response.
Lord Rosser (Lab) [V]
We are not opposed to either of these two draft orders. The first of the two draft orders we are debating adds a further five additional public authorities to the list that are now deemed to have a “necessary and proportionate” requirement to obtain communications data, which is, of course, information about communications rather than what was said or written.
This power to obtain communications data is, according to an extra government factsheet memorandum explaining the purpose and effect of the draft instrument, on the basis that these five public authorities
“are increasingly unable to rely on local police forces to investigate crimes on their behalf”.
The five additional public authorities are the Civil Nuclear Constabulary, the Environment Agency, the Insolvency Service, the UK National Authority for Counter Eavesdropping and the Pensions Regulator. Can the Minister explain why it is that, in the light of cuts in police numbers since 2010, each of these five additional public authorities
“are increasingly unable to rely on local police forces to investigate crimes on their behalf”?
Could the Minister say whether this inability to investigate these crimes applies across all local police forces or only to some police forces, and if the latter, which ones?
We will support measures that cut crime and deal effectively and meaningfully with offenders. Can the Minister explain why the remedy is not to increase the capacity of local police forces so that they can investigate these crimes, rather than give powers to obtain communications data to civilians within these five public authorities? On the latter point about civilians, can the Government give a categorical assurance that this draft instrument does not lower the rank or seniority of designated officers and that there is no widening of the authority to exercise the powers here within the organisations covered by this or by previous orders?
The Explanatory Memorandum states that in deciding whether to grant these powers to the public authorities concerned, the Government consider the seriousness of the offences they investigate and the number of requests for data the public authorities each estimate they will make. Can these powers be used only in respect of serious offences or can they be used in respect of any offence? Can the Minister also say how many such requests for communications data each of the five additional authorities have estimated they will make and how that compares with the number being made currently by local police forces investigating crimes on their behalf? How do the estimates of the number of requests each of the five public authorities have said they will make compare with the number of requests being made by broadly comparable public authorities that already have these powers?
Currently, the public authorities that can obtain communications data under the provisions of the 2016 IP Act include, among others, intelligence agencies, law enforcement agencies, the Food Standards Agency, the Gambling Commission, the Prison and Probation Service, and the NHS Counter Fraud Authority. Can the Minister give details of which public authorities have already been given powers in relation to investigating crimes because increasingly they too cannot rely on local police forces being able to investigate crimes on their behalf? Can she also say if any public authorities for whom powers to obtain communications data have been sought have had that request declined by the Government? This point was raised by the noble Lord, Lord Paddick.
The IP Act sets out the circumstances in which various investigatory powers may be used and the safeguards that apply in relation to ensuring that any interference with privacy is strictly necessary, proportionate, authorised and accountable. Since the Government are not required to report on the operation of the Act until five and a half years from Royal Assent, what assurances can the Government provide now that the statutory safeguards in relation to interference with privacy are proving to be effective and are delivering in line with the intentions of Parliament? What views did the Investigatory Powers Commissioner express about the addition to the list of these five further public authorities, and did the commissioner have any reservations or other comments?
The second draft instrument provides the statutory basis for the Investigatory Powers Commissioner to have the required oversight of compliance by UK public authorities on access to electronic data in relation to serious crime, as provided for in the 2019 international agreement between the UK and USA and exercisable under the Crime (Overseas Production Orders) Act 2019 and the IP Act 2016. According to the Explanatory Memorandum, this arrangement, which presumably relates to the IPC providing independent oversight of UK activity under the agreement with the USA, has been agreed with the US Department of Justice. However, to avoid any misunderstanding, can the Minister place on record in her response exactly what it is that has been agreed with the US Department of Justice? Can she also place on record in her response what arrangements the US Department of Justice has agreed with the UK in relation to independent oversight of USA activity under the agreement, since presumably there is reciprocity when it comes to agreeing each other’s arrangements?
Can the Minister also say if any UK public authorities have yet sought to obtain data directly from US-based telecommunications operators under the terms of the 2019 COPOA Act using an overseas production order? If so, on how many occasions? Likewise, have any US public authorities sought to obtain data from UK-based service providers under the same, or similar, arrangements? If so, on how many occasions? Have assurances been given in relation to the non-use of the death penalty, and has protection been given to journalistic sources and material? Finally, is the Investigatory Powers Commissioner likely to be using statutory oversight and compliance powers in relation to agreements between the UK and any other countries apart from the US?
Baroness Williams of Trafford (Con)
I thank all noble Lords who have taken part in the debate and the noble Lord, Lord Morris of Aberavon, for his brief appearance. I could not keep up with the questions from the noble Lord, Lord Rosser, so I have missed some bits out. I hope to pick them up in the answers to other questions, but I will write to him if not.
I was very pleased to hear the opening remarks from the noble Lord, Lord Blunkett; I thought he would be supportive. He admitted to never having heard of the UK National Authority for Counter Eavesdropping. I join him in that: neither have I. It is the national authority for technical security and counter-eavesdropping. It helps the Government on technical espionage attacks by hostile state actors. Its capabilities and purpose are distinct and focus on countering close-access technical operations that could ultimately damage national security.
As he will know only too well, hostile state actors currently have the desire and the means to gain access to or otherwise compromise the integrity of highly classified communications systems and secure facilities. They are known to be able to carry out close-attack technical attacks, as demonstrated by the attack on the Organisation for the Prohibition of Chemical Weapons in The Hague by the Russian intelligence services in 2018. In that case, the Dutch authorities were able to detect and apprehend the agents involved, along with a car full of equipment.
We assessed that Russia and other hostile state actors, particularly China, will continue to attempt to disrupt, attack and commit espionage in the UK. I do not think any noble Lords in the Committee would disagree with that. The Intelligence and Security Committee’s recent report into the interference by Russia in UK democracy demonstrates intent, capability and, indeed, tenacity.
There is also the insider threat to consider, whereby an individual in an organisation may place a device for eavesdropping purposes. Insider threats can be from corrupt, compromised, disgruntled staff or from contractors. They can be among the hardest threats to identify. In order to fulfil its role, the UK National Authority for Counter Eavesdropping needs to be able to identify illicit and covert eavesdropping devices that may be present in sensitive and classified areas and then identify the user behind the device using communications data. We are now all experts in that particular agency.
There were a number of questions, particularly from the noble Lords, Lord Paddick and Lord Foulkes, about agencies being added and taken away, about why that happens and about the purposes of the various agencies that have been added. For clarity, the authorities we are talking about are the Pensions Regulator, the Civil Nuclear Constabulary, the Environment Agency and the Insolvency Service. It was right that those powers were removed in 2015, just as it is right for them to be reinstated now. We cannot foresee how operational requirements will evolve in response to the crimes that public authorities are investigating. We need to have the option to add and remove authorities depending on the necessity of the powers; the noble Lord, Lord Paddick, was right that it is nothing to do with the coalition. This is precisely why the IPA included the power to add and remove bodies from Schedule 4.
These authorities have all demonstrated a strong necessity and proportionality case against similar criteria that the Home Office applied when removing powers in 2015. Those criteria were: the statutory responsibilities of the authorities with access; the seriousness of the offences that they investigate; and the number of requests that they made. As is demonstrated by the case of the Civil Nuclear Constabulary in particular, which does not expect to use the powers often, assessing the volume of applications made is perhaps not the most effective of criteria for deciding which bodies should be listed in Schedule 4. The risk here is just too high to ignore. A public authority can make infrequent use of powers, yet still lead on investigations where communications data is critical.
I congratulate my noble friend Lord Naseby on celebrating his diamond wedding anniversary today.
Baroness Williams of Trafford (Con)
In fact, I think I ought to congratulate his wife more than him on enduring 60 years of marital bliss with my noble friend.
My noble friend talked about local fly-tipping. That is precisely the type of thing for which the Environment Agency might wish to use its communications data powers to protect the natural environment. Its statutory duties include the protection of the environment, natural resources and, of course, human health, which fly-tipping affects. It prosecutes offences that create serious risks of harm to people and the environment, such as illegal landfills and hazardous waste disposal—that might come under my noble friend’s question—and treatment and shipments. Its remit encompasses more than 400 different offences and it encounters some 40,000 suspected offences each year. Of course, we know that waste crime costs the economy in excess of £600 million a year.
Back in 2018, the Secretary of State for the Environment announced an independent review into waste crime, which published the report Independent Review into Serious and Organised Crime in the Waste Sector. That report recommended that the Home Office grant communications data powers under Part 3 of the Investigatory Powers Act. We have a duty to respond to that recommendation.
My noble friend asked about the DHSC. Its inclusion has nothing to do with financial matters; it is purely because its name has changed. He also talked about the Pensions Regulator. It is sad to say so, but criminality in pensions is not only a present threat but a growing one. It is recognised as a risk by the Pensions Regulator and its supporting regulatory partners, including the Serious Fraud Office, the National Crime Agency and HMRC. Having previously referred cases to law enforcement partners to prosecute, the Pensions Regulator now actively leads on these types of investigations and the prosecution of offenders. As my noble friend will appreciate, communications data will be a vital tool in assisting these investigations.
The Pensions Regulator took ownership of Project Bloom from the NCA in 2016. Bloom is a multiagency approach to pension scams and fraud. The Pensions Regulator can evidence £500 million-worth of scams in its regulatory remit, which is quite significant. It estimates that the ongoing threat runs into several billion pounds. Through Project Bloom, the Pensions Regulator has been running a communications campaign with the FCA featuring national television advertising campaigns, which noble Lords may well have seen.
The noble Lord also asked about states, such as Delaware, that do not co-operate. It is to companies rather than states that these requests will be made. That is an important point. Overseas territories do not use it.
The noble Baroness, Lady Jones of Moulsecoomb, asked about the review. It has not yet appeared because the agreement is not yet in force. I am sure that when it is the review will be forthcoming.
The noble Lord, Lord Foulkes of Cumnock, asked about temporary powers. Those statutory powers will last for one year. He asked about the IPCO’s role in all this. It will cover its role in the agreement and in the annual report, which is publicly available.
The noble Lord, Lord Paddick, rightly asked about the business cases, which I did not go into at great length because they are sensitive and extremely lengthy. Reflecting on that thought, I am very happy to organise a private session to go through the business cases for interested noble Lords. The noble Lord also asked about the consultation period under the Investigatory Powers Act. A 12-week period is required for consultation with relevant public authorities and the IPCO on Schedule 4 changes.
The noble Lords, Lord Paddick and Lord Rosser, asked how many organisations have applied and been turned down. I do not know the answer to that question, but I can find out. They also covered the death penalty assurances, which they know are being sought. It was interesting that we have received assurances from the US that should the UK accede to the 2015 MLA request by transferring evidence, the death penalty will not be sought or imposed in any prosecution in the recent case of Kotey and Elsheikh. I hope noble Lords will understand—I know they will—that it would not be appropriate to comment any further while legal challenges are ongoing in that case.
The noble Lords, Lord Rosser and Lord Paddick, talked about additional resources. They are well-versed in our ambitions for 20,000 police officers. The noble Lord, Lord Rosser, also asked about lowering the rank. Quite simply, no lowering of the rank is required. On the ISC, it is not a requirement in the legislation already using the enhanced procedure—laid for 40 days and debated in both Houses—but I fundamentally agree with the noble Lords that engagement with the ISC is an important factor.
The final question to which I have an answer is about safeguards, raised by the noble Lord, Lord Rosser. I am sure the IPCO will lay out any concerns the commissioner has in his annual report, particularly on any safeguarding issues around the whole regime.
I will leave it there for now. I will attempt to answer any questions I have not answered in writing.
Motion agreed.