(1 year, 5 months ago)
Public Bill CommitteesQ
Sophie Cartwright: It envisages significant numbers by reference to death or serious injury. It seems that the function of the IPA is around those incidents where there is death, but as drafted the Bill also covers a major incident where there is not death—where you would envisage an inquest or inquiry process—but serious injury. If it is intended just to cover major incidents, there is no definition of “significant”, but I know the guidance gives a comparable definition by reference to the Manchester Arena incident, Grenfell and Hillsborough. I think there is vagueness around significant numbers of deaths or serious injuries, but as drafted it would also capture major incidents where there is just injury.
The other thing I want to flag is that at the moment it is intended to cover only major incidents that occur in England and Wales. Again, there might potentially be a disconnect if you are excluding the IPA from having a role. One can well imagine the Tunisia inquest that occurred, which was to assist victims of a daunting, confusing and overwhelming process. As it is currently drafted, it seems almost to exclude major incident types where large numbers of British nationals get caught up in incidents overseas. I cannot see, on the face of it, why it would exclude major incidents where a large number of British nationals are caught up overseas. I wanted to flag that as a potential area where there may be a real role for the IPA: if there are large numbers of victims caught up in major incidents overseas.
Q
You alluded earlier to the interaction between an IPA, as envisaged in the Bill, and other judicial or investigatory processes, whether they were inquests or other public bodies performing their work in the aftermath of a major incident. There have been a number of calls for the IPA to be a data controller, so that it can access data. We heard this morning from another lawyer, Tim Suter, who argued that that would not be the best approach and that individual public bodies should remain the data controllers, but with the IPA being able to view or access the data in that way. Do you have any reflections on that point? Once a statutory public inquiry is set up, how would the interaction between the IPA and the inquiry work best? On the data controller point, I can see arguments from various perspectives, and I am interested in your reflections.
Sophie Cartwright: Clause 30 deals with some data aspects. It goes back to having clarity as to the intended purpose of the IPA. If it is to discharge the role as per the evidence you heard this morning from the original proponent of the IPA role, it is for the IPA to have a data controller-type role in terms of seeking material and records. That could, though, be fraught with complete complexities that will then bog down the IPA role.
If it is envisaged at the moment that it will just be that supportive role, and interacting, it can become quite complicated, particularly if the IPA is not intended to have a role that involves legal activity. To that extent, anything around data controlling and making requests for records and properly retaining and looking after them is definitely more in the water of legal activity.
As the Bill is currently drafted, I think it would become an absolute nightmare if you were requesting the IPA to have the data controller function and require documents and records. Anything that involves requests for documents and controlling, retaining and storing them definitely has to have a legal activity-type oversight, so I can well understand why Mr Suter gave evidence today to the effect that the public authorities should remain the data controller.
It goes back to having a clear clarity of purpose as to what the IPA is. If it is intended that the IPA will have a candour role and make requests for documentation, it is inevitable that data protection and GDPR issues will have to be properly looked at and considered, because that is a very complex landscape. At the moment, that would not in any way come near what is intended in clause 30 on the data-control aspect of the IPA’s role.
If there are no further questions, I thank you very much for your testimony. We are very grateful.
Ordered, That further consideration be now adjourned.—(Fay Jones.)