Monday 10th July 2023
(1 year, 5 months ago)
Lords ChamberOnline Safety Act 2023 View all Online Safety Act 2023 Debates Read Hansard Text Watch Debate Amendment Paper: HL Bill 151-III Third marshalled list for Report - (10 Jul 2023)
Member’s explanatory statement
This amendment has the effect that OFCOM have a duty to review compliance by user-to- user service providers with the new duties imposed by the Clause proposed after Clause 67 in my name.
The Parliamentary Under-Secretary of State, Department for Culture, Media and Sport (Lord Parkinson of Whitley Bay) (Con)
My Lords, as I set out in Committee, the Government are bringing forward a package of amendments to address the challenges that bereaved parents and coroners have faced when seeking to access data after the death of a child.
These amendments have been developed after consultation with those who, so sadly, have first-hand experience of these challenges. I thank in particular the families of Breck Bednar, Sophie Parkinson, Molly Russell, Olly Stephens and Frankie Thomas for raising awareness of the challenges they have faced when seeking access to information following the heartbreaking cases involving their children. I am also grateful to the noble Baroness, Lady Kidron, for championing this issue in Parliament and more widely. I am very happy to say that she is supporting the government amendments in this group.
The loss of any life is heartbreaking, but especially so when it involves a child. These amendments will create a more straightforward and humane process for accessing data and will help to ensure that parents and coroners receive the answers they need in cases where a child’s death may be related to online harms. We know that coroners have faced challenges in accessing relevant data from online service providers, including information about a specific child’s online activity, where that might be relevant to an investigation or inquest. It is important that coroners can access such information.
As such, I turn first to Amendments 246, 247, 249, 250, 282, 283 and 287, which give Ofcom an express power to require information from regulated services about a deceased child’s online activity following a request from a coroner. This includes the content the child had viewed or with which he or she had engaged, how the content came to be encountered by the child, the role that algorithms and other functionalities played, and the method of interaction. It also covers any content that the child generated, uploaded or shared on the service.
Crucially, this power is backed up by Ofcom’s existing enforcement powers, so that, where a company refuses to provide information requested by Ofcom, companies may be subject to enforcement action, including senior management liability. To ensure that there are no barriers to Ofcom sharing information with coroners, first, Amendment 254 enables Ofcom to share information with a coroner without the prior consent of a business to disclose such information. This will ensure that Ofcom is free to provide information it collects under its existing online safety functions to coroners, as well as information requested specifically on behalf of a coroner, where that might be useful in determining whether social media played a part in a child’s death.
Secondly, coroners must have access to online safety expertise, given the technical and fast-moving nature of the industry. As such, Amendment 273 gives Ofcom a power to produce a report dealing with matters relevant to an investigation or inquest, following a request from a coroner. This may include, for example, information about a company’s systems and processes, including how algorithms have promoted specific content to a child. To this end, the Chief Coroner’s office will consider issuing non-statutory guidance and training for coroners about social media as appropriate, subject to the prioritisation of resources. We are confident that this well-established framework provides an effective means to provide coroners with training on online safety issues.
It is also important that we address the lack of transparency from large social media services about their approach to data disclosure. Currently, there is no common approach to this issue, with some services offering memorialisation or contact-nomination processes, while others seemingly lack any formal policy. To tackle this, a number of amendments in this group will require the largest services—category 1, 2A and 2B services—to set out policies relating to the disclosure of data regarding the online activities of a deceased child in a clear, accessible and sufficiently detailed format in their terms of service. These companies will also be required to provide a written response to data requests in a timely manner and must provide a dedicated helpline, or similar means, for parents to communicate with the company, in order to streamline the process. This will address the painful radio silence experienced by many bereaved parents. The companies must also offer options so that parents can complain when they consider that a platform is not meeting its obligations. These must be easy to access, easy to use and transparent.
The package of amendments will apply not only to coroners in England and Wales but also to Northern Ireland and equivalent investigations in Scotland, where similar sad events have occurred.
The Government will also address other barriers which are beyond the scope of this Bill. For example, we will explore measures to introduce data rights for bereaved parents who wish to request information about their deceased children through the Data Protection and Digital Information Bill. We are also working, as I said in Committee, with our American counterparts to clarify and, where necessary, address unintended barriers to information sharing created by the United States Stored Communications Act. I beg to move.
Baroness Kidron (CB)
My Lords, I thank the Minister and indeed the Secretary of State for bringing forward these amendments in the fulsome manner that they have. I appreciate it, but I know that Bereaved Families for Online Safety also appreciates it. The Government committed to bringing forward these amendments on the last day in Committee, so they have been pre-emptively welcomed and discussed at some length. One need only read through Hansard of 22 June to understand the strength of feeling about the pain that has been caused to families and the urgent need to prevent others experiencing the horror faced by families already dealing with the loss of their child.
I will speak briefly on three matters only. First, I must once again thank bereaved families and colleagues in this House and in the other place for their tireless work in pressing this issue. This is one of those issues that does not allow for celebration. As I walked from the Chamber on 22 June, I asked one of the parents how they felt. They said: “It is too late for me”. It was not said in bitterness but in acknowledgement of their profound hurt and the failure of companies voluntarily to do what is obvious, moral and humane. I ask the Government to see the sense in the other amendments that noble Lords brought forward on Report to make children safer, and make the same, pragmatic, thoughtful solution to those as they have done on this group of amendments. It makes a huge difference.
Secondly, I need to highlight just one gap; I have written to the Secretary of State and the Minister on this. I find it disappointing that the Government did not find a way to require senior management to attend an inquest to give evidence. Given that the Government have agreed that senior managers should be subject to criminal liability under some circumstances, I do not understand their objections to summoning them to co-operate with legal proceedings. If a company submits information in response to Ofcom and at the coroner’s request the company’s senior management is invited to attend the inquest, it makes sense that someone should be required to appear to answer and follow up those questions. Again, on behalf of the bereaved families and specifically their legal representatives, who are very clear on the importance of this part of the regime, I ask the Government to reconsider this point and ask the Minister to undertake to speak to the department and the MoJ, if necessary, to make sure that, if senior managers are asked to attend court, they are mandated to do so.
Thirdly, I will touch on the additional commitments the Minister made beyond the Bill, the first of which is the upcoming Data Protection and Digital Information Bill. I am glad to report that some of the officials working on the Bill have already reached out, so I am grateful to the Minister that this is in train, but I expect it to include guidance for companies that will, at a minimum, cover data preservation orders and guidance about the privacy of other users in cases where a child has died. I think that privacy for other users is central to this being a good outcome for everybody, and I hope we are able to include that.
I am pleased to hear about the undertaking with the US regarding potential barriers, and I believe—and I would love to hear from the Minister—that the objective is to make a bilateral agreement that would allow data to be shared between the two countries in the case of a child’s death. It is very specific requirement, not a wide-ranging one. I believe, if we can do it on a bilateral basis, it would be easier than a broad attempt to change the data storage Act.
I turn finally to training for coroners. I was delighted that the Chief Coroner made a commitment to consider issuing non-legislative guidance and training on social media for coroners and the offer of consultation with experts, including Ofcom, the ICO and bereaved families and their representatives, but this commitment was made subject to funding. I ask the Minister to agree to discuss routes to funding from the levy via Ofcom’s digital literacy duty. I have proposed an amendment to the government amendment that would make that happen, but I would welcome the opportunity to discuss it with the Minister. Coroners must feel confident in their understanding of the digital world, and I am concerned that giving this new route to regulated companies via Ofcom without giving them training on how to use it may create a spectre of failure or further frustration and distress for bereaved families. I know there is not a person in the House who would want that to be the outcome of these welcome government amendments.
Lord Parkinson of Whitley Bay (Con)
My Lords, I am grateful for the recognition of the work that has been done here, led by the noble Baroness, Lady Kidron, but involving many others, including officials who have worked to bring this package forward.
Noble Lords took the opportunity to ask a number of questions. The noble Baroness, Lady Kidron, asked about senior management liability. Ofcom will have extensive enforcement powers at its disposal if service providers do not comply with its information requests issued on behalf of a coroner. The powers will include the ability to hold senior managers criminally liable for non-compliance. Those powers are in line with Ofcom’s existing information-gathering powers in the Bill. Where Ofcom has issued an information request to a company, that company may be required to name a senior manager who is responsible for ensuring compliance with the requirements of the notice. If the named senior manager is found to have failed to comply with that information notice, or has failed to take all reasonable steps to prevent a failure to comply with the notice, that individual will be held personally liable and could be subject to imprisonment.
On the point about them not appearing in court, coroners have well-established powers to require senior managers to attend court. The enforcement powers available to Ofcom are in line with Ofcom’s existing information-gathering powers in the Bill. They do not extend to Ofcom requiring senior managers to appear in court as part of a coronial investigation. We do not think that would be appropriate for Ofcom, given that the coroner’s existing remit already covers this. The noble Baroness raised many specific instances that had come to her attention, and if she has specific examples of people not attending court that she would like to share with us and the Ministry of Justice, of course we would gladly follow those up.
The noble Lord, Lord Knight, rightly mentioned my noble friend Lady Newlove. I can reassure him that I have discussed this package of amendments with her, and had the benefit of her experience as a former Victims’ Commissioner.
On the training for coroners, which is an issue she raised, as did the noble Baroness, Lady Kidron, in her remarks just now, the Chief Coroner for England and Wales has statutory responsibility for maintaining appropriate arrangements for the training of coroners. That is of course independent of government, and exercised through the Judicial College, but the training is mandatory and the Chief Coroner is aware of the issues we are debating now.
The noble Lords, Lord Allan of Hallam and Lord Knight of Weymouth, raised the helpline for parents. Yes, we expect our approach of requiring a dedicated helpline or similar means will involve a human. As we say, we want a more humane process for those who need to use it; we think it would be more effective than requiring a company to provide a named individual contact. We touched on this briefly in Committee, where the point was raised, understandably, about staff turnover or people being absent on leave—that a requirement for a named individual could hinder the contact which families need to see there.
The noble Lord, Lord Allan, also asked some questions about deaths of people other than a child. First, Ofcom’s report in connection with investigations into a death covers any coronial inquest, not just children. More broadly, of course, social media companies may have their own terms and conditions or policies in place setting out when they will share information after somebody has passed away. Companies based outside the UK may have to follow the laws of the jurisdiction in which they are based, which may limit the sharing of data without a court order. While we recognise the difficulty that refusing to disclose data may cause for bereaved relatives in other circumstances, the right to access must, of course, be balanced with the right to privacy. Some adult social media users may be concerned, for instance, about the thought of family members having access to information about their private life after their deaths, so there is a complexity here, as I know the noble Lord understands.
The noble Baroness, Lady Kidron, asked about data preservation orders. I am very glad that officials from another Bill team are already in touch with her, as they should be. As we set out in Committee, we are aware of the importance of data preservation to coroners and bereaved parents, and the Government agree with the principle of ensuring that those data are preserved. We will work towards a solution through the Data Protection and Digital Information Bill. My noble friend Lord Camrose—who is unable to be with us today, also for graduation reasons—and I will be happy to keep the House and all interested parties updated about our progress in resolving the issue of data preservation as we work through this complex problem.
The noble Lord, Lord Clement-Jones, asked about the Information Commissioner’s Office. We expect Ofcom to consult the ICO on all the guidance where its expertise will be relevant, including on providers’ new duties under these amendments. I am grateful, as I say, for the support that they have had and the recognition that this has been a long process since these issues were first raised in the pre-legislative committee. We believe that it is of the utmost importance that coroners and families can access information about a child’s internet use following a bereavement, and that companies’ responses are made in a humane and transparent way.
This group of amendments should be seen alongside the wider protections for children in the Bill, and I hope they will help bereaved parents to get the closure that they deserve. The noble Lord, Lord Allan, was right to pay tribute to how these parents, who have campaigned so bravely, have turned their grief and frustration into a determination to make sure that no other parents go through the sorts of ordeals that they have. That is both humbling and inspiring, and I am glad that the Bill can help to be a part of the change that they are seeking. I share my noble friend Lady Harding’s wish that it may bring them a modicum of calm. I beg to move.
Member’s explanatory statement
This amendment is consequential on the splitting up of Clause 25 into two Clauses.
Member’s explanatory statement
This amendment is consequential on the splitting up of Clause 25 into two Clauses.
Member’s explanatory statement
This amendment is consequential on the splitting up of Clause 25 into two Clauses.
Member’s explanatory statement
This amendment is about complaints of content being blocked because of an incorrect assessment of a user’s age. A reference to Clause 25(2) is inserted, as the duty in that provision can also be complied with by using age verification or age estimation.
and for the purposes of subsection (6), also includes the duties set out in section (Disclosure of information about use of service by deceased child users) (deceased child users).”Member’s explanatory statement
This amendment has the effect that OFCOM have a duty to review compliance by search service providers with the new duties imposed by the Clause proposed after Clause 67 in my name.
Member’s explanatory statement
This amendment provides that a provider can only conclude that children cannot access a service if age verification or age estimation is used on the service with the result that children are not normally able to access it.
Lord Clement-Jones (LD)
My Lords, very briefly, I commend these two amendments. Again, the provenance is very clear; the Joint Committee said:
“This regulatory alignment would simplify compliance for businesses, whilst giving greater clarity to people who use the service, and greater protection to children.”
It suggested that the Information Commissioner’s Office and Ofcom should issue a joint statement on how these two regulatory systems will interact once the Online Safety Bill has been enacted. That still sounds eminently sensible, a year and a half later.
Lord Parkinson of Whitley Bay (Con)
My Lords, Amendments 100 and 101 seek further to define the meaning of “significant” in the children’s access assessment, with the intention of aligning this with the meaning of “significant” in the Information Commissioner’s draft guidance on the age-appropriate design code.
I am grateful to the noble Baroness, Lady Kidron, for the way in which she has set out the amendments and the swiftness with which we have considered it. The test in the access assessment in the Bill is already aligned with the test in the code, which determines whether a service is likely to be accessed by children in order to ensure consistency for all providers. The Information Commissioner’s Office has liaised with Ofcom on its new guidance on the likely to access test for the code, with the intention of aligning the two regulatory regimes while reflecting that they seek to do different things. In turn, the Bill will require Ofcom to consult the ICO on its guidance to providers, which will further support alignment between the tests. So while we agree about the importance of alignment, we think that it is already catered for.
With regard to Amendment 100, Clause 30(4)(a) already states that
“the reference to a ‘significant’ number includes a reference to a number which is significant in proportion to the total number of United Kingdom users of a service”.
There is, therefore, already provision in the Bill for this being a significant number in and of itself.
On Amendment 101, the meaning of “significant” must already be more than insignificant by its very definition. The amendment also seeks to define “significant” with reference to the number of children using a service rather than seeking to define what is a significant number.
I hope that that provides some reassurance to the noble Baroness, Lady Kidron, and that she will be content to withdraw the amendment.
Baroness Kidron (CB)
I am not sure that, at this late hour, I completely understood what the Minister said. On the basis that we are seeking to align, I will withdraw my amendment, but can we check that we are aligned as my speech came directly from a note from officials that showed a difference? On that basis, I am happy to withdraw.
Member’s explanatory statement
This amendment is consequential on the amendment of clause 30 in my name.
“5A (1) In this paragraph “the relevant day”, in relation to a regulated user-to- user service, means—(a) the first day on which the service is a Category 1 service, or (b) the first day on which the service again becomes a Category 1 service (following a period during which the service was not a Category 1 service).(2) If, on the relevant day, section 12(2) guidance is available, a section 12(2) assessment of the service must be completed within the period of three months beginning with that day.(3) Sub-paragraph (4) applies if—(a) on the relevant day, the first section 12(2) guidance has not yet been published, and(b) immediately before the publication of that guidance, the service is still a Category 1 service.(4) The first section 12(2) assessment of the service must be completed within the period of three months beginning with the day on which the first section 12(2) guidance is published.”Member’s explanatory statement
This amendment and the rest of the amendments of Schedule 3 in my name provide for the timing of the first assessments under the new Clause proposed after Clause 11 in my name.
“Content of codes of practice: age assurance
11A (1) This paragraph is about the inclusion of age assurance in a code of practice as a measure recommended for the purpose of compliance with any of the duties set out in section 11(2) or (3) or 25(2) or (3), and sub- paragraph (2) sets out some further principles, in addition to those in paragraphs 1 and 2 (general principles) and 10(2) (freedom of expression and privacy), which are particularly relevant.(2) In deciding whether to recommend the use of age assurance, or which kinds of age assurance to recommend, OFCOM must have regard to the following—(a) the principle that age assurance should be effective at correctly identifying the age or age-range of users;(b) relevant standards set out in the latest version of the code of practice under section 123 of the Data Protection Act 2018 (age- appropriate design code);(c) the need to strike the right balance between—(i) the levels of risk and the nature, and severity, of potential harm to children which the age assurance is designed to guard against, and(ii) protecting the right of users and (in the case of search services or the search engine of combined services) interested persons to freedom of expression within the law;(d) the principle that more effective kinds of age assurance should be used to deal with higher levels of risk of harm to children;(e) the principle that age assurance should be easy to use, including by children of different ages and with different needs;(f) the principle that age assurance should work effectively for all users regardless of their characteristics or whether they are members of a certain group;(g) the principle of interoperability between different kinds of age assurance. (3) In a code of practice that describes measures for the purpose of compliance with the duty set out in section 11(3)(a), OFCOM must recommend (among other things) age verification or age estimation which is such of a kind, and which is to be used in such a way, that it is highly effective at correctly determining whether or not a particular user is a child (see section 11(3C)).(4) In deciding which kinds and uses of age verification or age estimation to recommend for the purpose of compliance with the duty set out in section 11(3)(a), OFCOM must have regard to their guidance under section 73 that gives examples of kinds and uses of age verification and age estimation that are, or are not, highly effective at correctly determining whether or not a particular user is a child.(5) Nothing in sub-paragraph (2) is to be read as allowing OFCOM to recommend, for the purpose of compliance with the duty set out in section 11(3)(a) by providers subject to the requirement in section 11(3A), a kind or use of age verification or age estimation which does not meet the requirement to be highly effective as mentioned in section 11(3C).(6) A code of practice that recommends the use of age assurance for the purpose of compliance with the duties set out in section 11(2) or (3) must also describe measures recommended for the purpose of compliance with the duties set out in—(a) section 11(6), (8) and (10) (inclusion of clear information in terms of service), and(b) section 17(2) and (3)(see, in particular, section 17(5)(e) (complaints about age assurance)).(7) A code of practice that recommends the use of age assurance for the purpose of compliance with the duties set out in section 25(2) or (3) must also describe measures recommended for the purpose of compliance with the duties set out in—(a) section 25(5) and (8) (inclusion of clear information in publicly available statement), and(b) section 27(2) and (3)(see, in particular, section 27(5)(d) (complaints about age assurance)).(8) A code of practice may—(a) refer to industry or technical standards for age assurance (where they exist);(b) elaborate on the principles mentioned in paragraphs (a) and (c) to (g) of sub-paragraph (2).(9) In this paragraph “age assurance” means age verification or age estimation, and see in particular section (“Age verification” and “age estimation”) (4) (self-declaration of age not to be regarded as age verification or age estimation).”Member’s explanatory statement
This amendment contains provisions which relate to OFCOM’s recommendation of age assurance in codes of practice for the purposes of Part 3 of the Bill. It includes some relevant principles and makes it clear that OFCOM must recommend highly effective age assurance in connection with the duty in Clause 11(3)(a) (preventing children from encountering primary priority content that is harmful to children).
Member’s explanatory statement
This amendment is a minor drafting change to omit a superfluous word.