Age Verification

Debate between Earl of Erroll and Lord Ashton of Hyde

Thursday 20th June 2019 Lords Chamber

[Lord Ashton of Hyde]

Yes, we will take action as soon as possible. As I explained, after the three or four months with the EU in draft are up, we will immediately proceed with laying it before Parliament. The delay is then the 40 days that it has to lie. As soon as it gets through both Houses of Parliament, it will be in force. We certainly intend to go through with it as soon as possible. The noble Baroness might like to check Hansard. She said that it was an “unavoidable mistake”; I have to confess it was an avoidable mistake. We should have avoided it and should avoid it in future. I also confirm that this was a mistake and the delay is in no way related to privacy concerns. That does not mean we are not taking privacy seriously. The additional voluntary certification scheme is important. We take privacy seriously, but that was not the reason for the delay.

[The Earl of Erroll (CB)]

I also regret this and am very sad about it. We have already been waiting for two years. Talk about dragging feet on this; I cannot believe it takes so long. I do not understand what the problem is with the guidance on age-verification arrangements. I have read it again and it does not contain anything technical. It lays out some fairly obvious things in plain English; it talks about various aspects of this and ends up saying that the Government would like to set up a voluntary certification scheme. That is about it; there is no technical stuff in there at all, so I am not sure why this is being used as an excuse to delay further. Could it possibly be because the BBFC has just launched a certification scheme that is really only about data protection? That is not its job; it is deliberately excluded from the Digital Economy Act. Data protection is the job of the Information Commissioner’s Office, which can levy huge fines. The BBFC is meant to be worrying about age verification and the protection of children online. Why is its certification scheme not about that? Its scheme is very heavyweight on the GDPR—or DPA 2018—stuff. Does it, therefore, think it needs more time? Was this just an excuse to delay it a little further?

If the Government are to issue new guidance in the autumn, I hope they will look at the British Standard. I also hope they will talk to the age-verification providers. They know how to do this, and how to do it anonymously. This is why, looking at the guidance, the BBFC says that the websites should not do it themselves. People bounce off, get verified elsewhere and get an anonymous, encrypted token back to prove they have done it. There is no problem or technical glitch with this. The Home Office may need to start talking to people who know how to do it; this really worries me.

The certification scheme is a good idea, so the websites know that the age-verification providers are all covered correctly. You need the GDPR stuff in there, but can it please be primarily about age verification and not be ridiculously expensive? At the moment, we are looking at £20,000 a pop for the scheme that the BBFC is proposing. A proper scheme, using the BEIS guidance, through the UK Accreditation Service, would have done a proper accreditation for certification providers for a quarter of the price or less. The Government have wasted a lot of money setting this scheme up and a lot of other people will waste a lot of money trying to get certification. As it is not really for age verification, it gives no guarantees of safety. Why are the Government doing it this way? As the whole thing is voluntary anyway, and certification not compulsory, why are they still delaying. Why does the BBFC not just start enforcing on 15 July? People are not going to put in age verification. Why disadvantage yourself, at extra cost, when you have no reason to do so? The websites will not do it until the last minute. In the meantime, the age-verification providers, which are all ready to go, are suffering economically very badly as a result of this delay.

[Lord Ashton of Hyde]

First, this is not an excuse for delaying. The legal advice that the BBFC has received, confirmed by the legal advice that my department has received, is that the guidance needs to be notified to the EU under the technical standards and regulations directive. The other two measures do not, so we are laying only the ones that we need to. I cannot give the noble Earl chapter and verse about the legal reasons today, but I can assure him there was no doubt about it. It was not even 50:50; it was absolutely correct. If there was any other way that we could have done it, without delaying it for this long, we would have done so.

We do not believe that money has been wasted in preparing this: we think that age verification is what Parliament asked for and what the majority of Members of both Houses want. That is the way it has been set up. Although it is technically quite difficult, it is not incompatible with the regulation of the ICO. The ICO, as the noble Earl rightly said, is responsible for data privacy and personal data breaches. The age-verification system is set up to comply with the GDPR and the Data Protection Act. The additional voluntary certification scheme—which is voluntary—is a further reassurance to users that even higher standards than the minimum standards of the GDPR apply. So I think it is correct that we continue with it.

As for why we are having to delay this measure, if we bring in age verification now, it will be unenforceable in UK law, because it will have been incorrectly proceeded with against EU law and against the technical standards and regulation directive. Unfortunately, we have concluded that there is no choice but to delay it.

Ofcom: RT News Channel

Debate between Earl of Erroll and Lord Ashton of Hyde

Monday 28th January 2019 Lords Chamber

[Lord Ashton of Hyde]

I completely agree with the noble Lord. That is why I said in my initial Answer that it is right for Ofcom to make decisions without government interference.

[The Earl of Erroll (CB)]

My Lords, the Minister is right that Ofcom is not responsible to the Government. but am I right in saying that it is responsible to Parliament?

[Lord Ashton of Hyde]

I am not sure; I do not know whether it is responsible in a statutory sense but of course ultimately Parliament can decide what it wants. The main point is that, in a democratic society such as ours, the regulator of the news and of broadcasters should not be linked to government, especially the Executive. That is the situation we have now and I believe that it is working well.

Online Pornography (Commercial Basis) Regulations 2018

Debate between Earl of Erroll and Lord Ashton of Hyde

Tuesday 11th December 2018 Lords Chamber

[Lord Ashton of Hyde]

I had not forgotten that. It would obviously be difficult for me to commit to finding the necessary time but I will take that back to the department. I am not sure that it is currently within the plans of the Chief Whip to bring forward that legislation but I will ask. I understand the point that is being made but, as I said, the issue may well be covered within the review. I am afraid I cannot go any further than that tonight.

As for ancillary service providers, the BBFC and the DDCMS have been engaging with several companies. They have already agreed to act, as doing so is in line with their current terms of service. Therefore, we are optimistic that the voluntary approach will work, and of course that will be reviewed.

The right reverend Prelate, the noble Earl, Lord Erroll, and others talked about the rationale for choosing one-third of content as the appropriate threshold. During the passage of the Bill, it was established that the focus should be on commercial pornography sites and not on social media. There were good reasons for that but I do not want to revisit them—that is what was decided. The one-third threshold was regarded as proportionate in introducing this new policy where sites make pornography available free of charge. However, websites that market themselves as pornographic will also be required to have age verification, even if less than a third of the content is pornographic.

A third is an arbitrary amount. It was discussed and consulted on, and we think that it is a good place to start on a proportionate basis. We will keep this matter under review and, as I said, it will be one of the obvious things to be taken into account during the 12 to 18-month review. The noble Lord, Lord Morrow, asked how it will be measured. It will be measured by assessing the number of pieces of content rather than the length of individual videos. It will include all pornographic images, videos and individual bits of content, but the point to remember is that the threshold is there so that a decision can be made on whether it is reasonable for the regulator to assume that pornographic content makes up more than one-third of the entire content. This will be done by sampling the various sites.

The noble Earl, Lord Erroll, asked about ISP blocking and suggested that everyone would try to game the system to get out of meeting the requirements. That is not what we believe. The BBFC has already engaged with ISPs and we are confident that this will be an effective sanction. The wording in the guidance indicates that the regulator should take a “proportionate approach”. However, we are grateful for the noble Earl’s help. I am sure that he will also help during the review and later in the process when it comes to online harms. I see that he wants to help now.

[The Earl of Erroll]

It is not the ISPs that I am worried about; it is the websites that will game the system on notification, appeals and so on. That is the bit that will take a long time.

Pornographic Websites: Age Verification

Debate between Earl of Erroll and Lord Ashton of Hyde

Monday 5th November 2018 Lords Chamber

[Lord Ashton of Hyde]

The noble Lord is of course right that age verification itself is not the only answer. It does not cover every possibility of getting on to a pornography site. However, it is the first attempt of its kind in the world, which is why not only we but many other countries are looking at it. I agree that sex education in schools is very important and I believe it is being brought into the national curriculum already.

[The Earl of Erroll (CB)]

Why is there so much wriggle room in section 6 of the guidance from the DCMS to the AV regulator? The ISP blocking probably will not work, because everyone will just get out of it. If we bring this into disrepute then the good guys who would like to comply probably will not; they will not be able to do so economically. All that was covered in British Standard PAS 1296, which was developed over three years. It seems to have been totally ignored by the DCMS. You have spent an awful lot of time getting there, but you have not got there.

[Lord Ashton of Hyde]

One of the reasons this has taken so long is that it is complicated. We in the DCMS, and many others, not least in this House, have spent a long time discussing the best way of achieving this. I am not immediately familiar with exactly what section 6 says, but when the statutory instrument comes before this House—it is an affirmative one to be discussed—I will have the answer ready for the noble Earl.

Particulars of Proposed Designation of Age-Verification Regulator

Debate between Earl of Erroll and Lord Ashton of Hyde

Thursday 1st February 2018 Lords Chamber

[Lord Ashton of Hyde]

The noble Lord is absolutely right, and I apologise if I misled anyone. It is not the BBFC’s job to determine what is lawful. It is meant to implement the law. The debate that I think we will have when the regulations come to this House will be on the decisions that will have been taken on what is pornography available for commercial purposes. The definition of what is unlawful will be under the extreme pornography definition within the existing Act.

[The Earl of Erroll]

Leading on from that, I remember from the debates that the trouble was that the Obscene Publications Act was not aligned with the CPS guidance or with various other things. I presume therefore that some work will be done on this in the near future, otherwise I suspect that the BBFC will get into trouble. At the same time, because age verification may come into this too, presumably we will also try to align the internet stuff, which is what we have been talking about in the Digital Economy Act—broadcast, which is regulated differently, and video on demand, which I think is Ofcom’s responsibility at the moment. We really do not want different rules across all of those, so I hope we are going to get on with that.

Digital Economy Bill

Debate between Earl of Erroll and Lord Ashton of Hyde

Report: 2nd sitting (Hansard): House of Lords
Monday 20th March 2017 Lords Chamber

[The Earl of Erroll]

My Lords, this is an important point. Without enforcement, nothing will work. If you do not enforce age verification, no one will bother with it. For exactly the same reasons as the noble Lord, Lord Paddick, gave, I think that the notice and take-down—the blocking—is the only thing that will work. Fines will not work; it is probably a waste of time even trying them. The only thing that might work is to ask the credit card companies not to take payments for those sites, because they like to observe the law. I am concerned that the BBFC will not have resources to do this properly, but even if it goes elsewhere the BBFC should still be able to notify ISPs to block sites. That bit must certainly be enforced.

[Lord Ashton of Hyde]

My Lords, I am grateful to everyone who has spoken in this brief debate. The introduction of a new law requiring appropriate age verification measures for online pornography will help protect young people and children from potential harms from online pornography. It will also rightly hold commercial providers of online pornography responsible for the material they provide and profit from.

The Government of course take the protection of children and young people very seriously. To provide effective protection it is important that we have a robust regulatory system in place. These amendments seek to limit the scope of the regulatory functions that may be fulfilled by the BBFC by seeking the requirement that the same regulator must not be responsible for both identifying a non-compliant site and taking enforcement action against it. I shall first explain why, in identifying the BBFC as the preferred regulator, we think we have made the right choice.

The Government’s intention is that, subject to parliamentary approval, the BBFC will be the regulator responsible for identifying websites that do not have adequate age verification or are hosting extreme pornography, and then to give notice to the appropriate persons, be they payment service providers, ancillary service providers or ISPs. It is not intended that the BBFC will be designated as the regulator responsible for issuing financial penalties. That will be a role for a separate body, yet to be determined, but which will be approved by Parliament.

We are pleased to be working with the British Board of Film Classification as the intended age verification regulator, again subject to parliamentary approval. To respond to the remarks of the noble Baroness, Lady Jones, on structure, the BBFC is an independent, not-for-profit company that has a proven track record of interpreting and implementing legislation as the statutory authority for age rating videos under the Video Recordings Act. It has unparalleled expertise in classifying content and it is committed to delivering the aims of age verification. It is the expert on editorial judgments over pornographic and other content.

The BBFC has been classifying cinema films since it was set up in 1912 and videos and DVDs since the Video Recordings Act was passed in 1984. It continuously has to make judgments on classification, openly and transparently. These decisions relate to a multimillion-pound industry and are subject to challenge. The BBFC’s work with mobile network operators on the self-regulatory regime for mobile content is a good example of where it successfully sets content standards, implements them and adjudicates transparently and accountably.

The BBFC will not operate without oversight. It must have regard to the statutory guidance from the Secretary of State to the regulator. This will provide a further opportunity to ensure that the regulator fulfils its duties in the way Parliament sees fit. As I said earlier, we are seeking views on this guidance before a final version is laid. Ultimately, the regulator’s decision-making process will be subject to oversight by the courts as there is the possibility of challenge by way of judicial review. This prevents it acting arbitrarily.

In our view, these amendments are unnecessary for the following reasons. First, Clause 17 already enables the Government to designate a person, or any two persons or more jointly, as age verification regulators. The importance of getting this measure right means that the Government remain open-minded and retain flexibility as to how best to respond to changing circumstances. If the BBFC is proven to be unable to deliver certain regulatory functions the legislation has the flexibility to overcome these problems.

Secondly, splitting the regulatory functions in the Bill so that the same regulator cannot identify non-compliant sites and enforce against them unnecessarily creates a middleman in the process. The BBFC will have to give notice to a second regulator, which will then pass that notice on to an ISP or other appropriate body. This is just red tape for no benefit. It makes sense that the body that makes the original determination should also be responsible for notifying relevant parties affected by that determination and for ensuring that that notification action is effective in achieving compliance.

Thirdly, our ambition is to have the age verification regime in place by spring 2018. We are determined to stick to that timetable. The NSPCC has set out the scale of the problem we face and we need to get on with protecting children as quickly as we can. If we need to invent an additional regulator that can only delay the result.

Digital Economy Bill

Debate between Earl of Erroll and Lord Ashton of Hyde

Committee: 2nd sitting (Hansard): House of Lords
Thursday 2nd February 2017 Lords Chamber

[The Earl of Erroll (CB)]

My Lords, I will make some brief points. First, on this set of amendments I am afraid I disagree with the noble Baroness: we must get on with this. It will not be perfect on day one but the sooner we get moving the better. We have talked about this for a very long time. That is why I am not really pro these amendments.

On Amendment 55, I agree entirely with my noble friend Lady Howe. She is absolutely right to spot this lacuna: the BBFC will look at this stuff and age verification, but who will enforce it? That is a problem and I was going to raise it later anyway. She was absolutely spot on there. My noble friend Lady Kidron was also absolutely spot on about these sites. Twitter could be classified as commercial because it takes money from pornography sites to promote them. I can get evidence of that. It would be difficult for it to say that it does not promote them.

Very quickly on what the Minister said, I was going to raise under the group starting with Amendment 57 the issue of including prohibited material with the age verification stuff. We should separate protecting children from protecting adults or it will confuse things. The big danger is that if we start using this to protect adults from stuff that they should not see—in other words, some of the adult prohibited material, of which there is quite a lot out there—we run the risk of challenges in court. Everything that the BBFC does not classify because it falls into certain categories is automatically prohibited material. It is not allowed to classify certain acts. I should probably not tell noble Lords about those now as they are pretty unpleasant but they are fairly prevalent in the hardcore pornography out there. If the pornography sites are blocked from supplying adults with what they want, they will just move offshore and get round this. If they do that, there will be no point in doing age verification and we will not protect our children. That will create the first major loophole in the entire thing.

I have this from the pornographers themselves. They know what they are doing. However, they are very happy—and would like—to protect children. If we leave them alone and argue through the Obscene Publications Act and other such things as to what they must stop adults seeing, they will help block children. They are very keen on that. Children just waste their time as they do not have money to spend. At the end of the day, the pornographers want to extract money from people.

I am advised that the real problem is that prohibited material includes content that would be refused a BBFC R18 certificate. The Crown Prosecution Service charging practice is apparently out of sync with recent obscenity case law in the courts. Most non-UK producers and distributors work on common global compliance standards based on Visa and Mastercard’s brand-protection guidelines. Maybe we should start to align with that. We should deal with that separately under the Obscene Publications Act. It will be very easy for the BBFC, the regulator or the enforcer to tell what does not have age verification on the front. That is yes/no—it is very simple. The trouble is that if we get into prohibited material, it will end up before the courts. We will have to go through court procedures and it will take much longer to block the sites. I would remove that from here. I shall leave my other comments to a later stage.

[Lord Ashton of Hyde]

My Lords, I am grateful for those contributions. They address some very important issues, some of which we will deal with now and some of which we will deal with later during the progress of the Bill. To start at the end, the noble Earl, Lord Erroll, made some interesting points regarding the statement that I made. We absolutely acknowledge some of them. I have listened to his suggestions. Our focus here is to protect children. That is what this Bill is for. That is what our manifesto commitment was. When he sees our suggestions, I hope that he will be able to contribute to the debate on Report—but I have noted everything he said.

The introduction of a new law requiring appropriate age verification measures for online pornography is a bold new step. It represents the first stage of ensuring that commercial providers of online pornographic material are rightly held responsible for what they provide and profit from.

Amendment 54B would require the regulator to publish guidance about the overarching duty of care on internet service providers and ancillary service providers, and their responsibility to ensure that all reasonable steps are taken to ensure the safety of a child or young person involved in activities or interaction for which the service provider is responsible. The purpose of our measures is to protect children from pornographic material. Seeking to stretch the framework further to regulate companies on a different basis risks the delivery of our aim. However, that is not to say that we want to ignore the issue. We take the issue of child safety online seriously and engage intensively with the industry through the UK Council for Child Internet Safety to ensure that robust protections are in place.

The Government expect industry to play a leading role in internet safety provisions, as it is best placed to offer safety and protection to children and young people. We know that it is already doing this and has default protections for under-18s, including the use of parental controls and tools to allow users to flag content, protect user privacy as well as educate users on staying safe with information and advice. We will have further opportunities to discuss the role of the industry, including social media and internet service provider filters, later in Committee.

Amendment 54D seeks to introduce a new clause with the requirement that the Secretary of State must consult on the role of the age verification regulator. The clause further seeks that the Secretary of State must lay before each House of Parliament a report on the results of the consultation and the Secretary of State’s conclusions, with any appointments to be subject to approval in each House. The introduction of the measures requiring appropriate age verification for online pornography follows public consultation. We asked about the powers that a regulator should have and there was strong support for a number of responsibilities that we have introduced. The passage of this Bill has provided an important opportunity for debate on this and we have seen the introduction of an important new blocking power for the regulator, which we shall discuss later.

We are grateful to the DPRRC and the Constitution Committee for their reports, which a number of noble Lords mentioned. They made a number of recommendations about the designation of the regulator and how the regulator should fulfil its role. We are carefully considering those and will publish our response before Report.

Amendment 55, in the name of the noble Baroness, Lady Howe, would specify that the Secretary of State is to designate the British Board of Film Classification as the age verification regulator. As the Committee will know, Clauses 17 and 18 provide for the designation of the regulator and we intend to designate the BBFC to carry out most—as the noble Baroness, Lady Howe, reminded us—of the functions of the regulator. Indeed, some noble Lords may have seen the BBFC’s recent presentation to the Children’s Media and the Arts APPG.

Digital Economy Bill

Debate between Earl of Erroll and Lord Ashton of Hyde

Committee: 2nd sitting (Hansard - continued): House of Lords
Thursday 2nd February 2017 Lords Chamber

[The Earl of Erroll]

My Lords, it has been suggested to me that this group of amendments could also be used in the code of practice and the safety responsibilities could also be drawn up to include non-age-verified pornography.

[Lord Ashton of Hyde]

My Lords, the Government take the harm caused by online abuse and harassment very seriously, and we will continue to invest in law enforcement capabilities to ensure that all online crime is dealt with properly.

Amendment 70 would require the Government to carry out a review of online abuse and lay a report before Parliament within six months of Royal Assent. We do not believe that it is necessary to include provision for a review in primary legislation. As part of the ending violence against women and girls strategy, we have established an official government working group to map out the current issues, prevalence, initiatives and barriers to addressing gendered online abuse and to produce an action plan.

We are absolutely clear that abusive and threatening behaviour is totally unacceptable in any form, either offline or online. As the Committee will be aware, any action that is illegal when committed offline is also illegal if committed online. Current legislation, some of which was passed before the digital age, has shown itself to be flexible and capable of catching and punishing offenders, whether their crimes were committed by digital means or otherwise. The Protection from Harassment Act 1997 was amended to introduce two new stalking offences to cover conduct that takes place online as well as offline. In addition, the Government will be introducing a new civil stalking protection order to protect victims further.

We will continue to take action where we find gaps in the legislation, just as we did with cyberstalking, harassment and the perpetrators of grossly offensive, obscene or menacing behaviour, and of course we introduced a new law making the fast-growing incidence of revenge porn a specific criminal offence.

The Law Commission recently consulted on including a review of the law covering online abuse as part of its 13th programme of law reform, which will launch later this year. It is expected to confirm with Ministers shortly which projects it proposes should be included.

We are also working to tackle online abuse in schools and have invested £1.6 million to fund a number of anti-bullying organisations.

In addition, we are working to improve the enforcement response to online abuse and harassment so that it can respond to changing technologies. The Home Office has also allocated £4.6 million for a digital transformation programme to equip forces with the tools to police the digital age effectively and to protect the victims of digital crime, including online abuse and harassment. Police and prosecutors evidence offences carried out digitally, non-digitally or both. The CPS Guidelines on Prosecuting Cases Involving Communications Sent via Social Media makes clear the range of criminal law which can be brought to bear on offences committed through social media. Moreover, from April 2015, police forces have been recording online instances of crimes, including stalking and harassment.

I shall talk about the next three amendments together, as they all cover the duties of social media sites. Amendment 71AA seeks to make it a requirement for all social media sites to carry out a safety impact assessment. Amendment 71AB seeks to require Ministers to issue a code of practice to ensure that commercial social media platform providers make a consistent and robust response to online abuse on their sites by identifying and assessing online abuse. Amendment 233A seeks to impose a duty on social media services to respond to reports posted on their sites of material which passes the criminal test—that is, that the content would, if published by other means or communicated in person, cause a criminal offence to be committed.

The Government expect social media and interactive services to have robust processes in place that can quickly address inappropriate content and abusive behaviour on their sites. On the point made by the noble Baroness, Lady O’Neill, it is incumbent on all social media companies to provide an effective means for users to report content and perform the actions that they say they will take to deal with this. We believe a statutory code of practice is unworkable because there is no one-size-fits-all solution. Dealing properly with inappropriate content and abuse will vary by service and incident. Technological considerations might differ by platform and as innovation develops. Users will benefit most if companies develop their own bespoke approach for reporting tools and in-house processes.

Social media companies take down content that is violent or incites violence if it breaches their terms and conditions. We expect them to inform the police where they identify significant threats or illegal activity happening on their sites. It is, however, extremely difficult to identify where the threat has come from and whether it is serious. We work closely with companies to flag terrorist-related content and have so far secured the voluntary removal of over 250,000 pieces of content since 2010.

I can assure the Committee that we share the sentiments expressed in these amendments. At the moment, though, they are not practical or necessary, so I hope on that basis noble Lords will not press their amendments.