Digital Economy Bill

Debate between Earl of Erroll and Lord Maxton

Committee: 2nd sitting (Hansard - continued): House of Lords
Thursday 2nd February 2017 Lords Chamber

[Lord Maxton (Lab)]

My Lords, I am very reluctant to take part in this debate, because I was not available to speak at Second Reading, which always restrains noble Lords from speaking in Committee. However, I will make three points.

First, I confess openly that I have indulged in sexual activity—I will not say when, as that might be unfair. But I have never fired a gun or a revolver in anger, or taken part in a fight with a knife, or indeed taken part in a fight at all. Yet we are not banning scenes of violence, even on the news, which are seen by children all the time, whereas we are involved in banning scenes of sexual activity. That may be right, but we ought to be looking at other areas of life as well, because they can damage children just as much as sexual activity can.

Secondly, this law as it stands—many noble Lords who have moved or spoken to amendments have admitted this—is almost inoperable. It cannot be enforced—or can be enforced only on rare occasions. That is rather like speeding in your motor car, which is an analogy I have used before. Everybody breaks the law by speeding—or most people do—because they know that they will not get caught. That is rather like this law, as it stands at present. The problem with unenforceable or rarely enforced laws is that they bring the law into disrepute—and that is the danger of this part of the Bill as it stands. We are in danger of bringing in something that is not enforceable and, by doing so, we are bringing the law itself into disrepute.

Lastly, I will give my solution to all of that. The aim of this part of the Bill is not to stop pornography sites but to stop children watching them. There is a simple answer to that—but, unfortunately, it is an answer that the Liberal party do not support and which the Tory Government got rid of when we introduced the voluntary part of it. It is an identity card. If you introduce a mechanism whereby you can get into pornography sites on any device only by using your fingerprint or via eye recognition, or whatever it might be, of course that can stop it. On my iPad I already have a device by which I can save my passwords and which will show them to me when I want to use them. But I can get into it only by using my fingerprint; I cannot do it any other way. I cannot even use my normal four-digit pass code; I can do it only with my fingerprint. Why not do that sort of thing for pornography sites as well? Only adults will be able to get into them; children will be barred by the introduction of an ID card mechanism, so that you can get into it only by that means. Unfortunately I have hospital appointments during the next sitting of Committee, but I hope that on Report I will be able to introduce amendments to that effect.

[The Earl of Erroll (CB)]

My Lords, I have one amendment in this group. I very much support Amendment 65, but there is no point adding anything to what the noble Lord, Lord Morrow, said. He covered it in great detail and for all the right reasons. I will add only for the noble Lord, Lord Paddick, that a lot of the payment service providers—this is the key to it—such as Mastercard, Visa, and so on, are international. If there is a duty on them, they are very good at trying to stick to the law. That would close quite a few holes and make life a bit difficult for sites—so as a deterrent, it would really help.

Sadly, this whole approach to cutting off the ancillary service providers years ago was enough to kill off pirate radio in the 1960s—which I was very sad about. But this time I approve of being able to do it, because I approve of the motive behind it: trying to stop children accessing pornography.

Amendment 68B, in my name, questions what a “large number” of children is. I realise that it is obvious that you have to prioritise, because 80% of the sites are over a certain size and they will definitely come under this. They handle 80% or so of the traffic, or whatever, so I can see that you should check up on them first. But they are also the ones that will comply, because many of them are onside anyway. However, let us say that there are 10% of sites left. That is an awful lot of children, if you do the maths in your head. You knock one nought off the end of however many children there are, but you still leave an awful lot. I therefore do not understand why we are leaving in a “large number” as a constant target. There must come a point when it is worth moving on to the smaller numbers as well. I therefore do not understand the purpose of the clause. It is self-evident that they will have to prioritise. If they do not, they are idiots—and I know perfectly well that the members of the BBFC are not. Therefore I cannot understand the purpose of it.

Amendment 69A, in the name of the noble Lord, Lord Paddick, has some merit in it. As the noble Baroness, Lady Benjamin, said, there is a lot of non-commercial stuff out there. The purpose of this is to stop children viewing pornography. It does not matter whether it is commercial or not. If you put in something like this, there are clever ways in which people will try to define their sites as non-commercial. In particular, if they can start appealing against this—this is where having a complicated appeals process would become so dangerous—I can see loopholes opening up. So we need to start including non-commercial pornography—and it is okay if it takes a year.

I also support Amendment 237, in the name of the noble Baroness, Lady Benjamin. We need to have a deadline. It is something that all sites can work towards. We should say that, on whatever date, if sites are not compliant—we suggest that it ought to be a bit like a speed limit, where you ought to slow down before you hit the 30 miles per hour limit—we will issue notices to the ISPs to block them. Something might happen, because you have a level playing field, everything happens on the same date, and under the amendment in the name of the noble Baroness, Lady Benjamin, they will have a year to do it in. That is probably enough to get your regulations in place and so on. It is a very good idea.

--- Later in debate ---

[The Earl of Erroll]

My Lords, I want to say a few words because I have been working on the issue of age verification for a long time. I became interested in it when it became apparent a couple of years ago that it was going to come to the top of the agenda. For the last year or so, the Digital Policy Alliance, which I chair, has been working with the British Standards Institution to produce a publicly available specification—PAS 1296—exactly on this issue. Its whole point is to enable anonymised verification of the attribute of your age. People have said that you would have to give the information to the adult content site, the porn site, but you do not necessarily need to.

There are two stages: when the child, or the adult, first arrives at the site; and, if they are allowed into the site, what they then do. At the point when they come to the front page of the site, where they should be asked to prove their age, there should be an option—and this is the point about anonymity—that allows them to bounce off, with a token, to an age verifier. I have on my smartphone, for instance, one from Yoti. I can identify myself to Yoti; it knows about me and can send an encrypted token back to the website, which does not contain any identity information at all—purely the fact that I am over 18. If the regulator later needs to unravel the token because it appears that rules have been breached, it is possible to present the token and start unravelling it—but only with proper powers. The point is that a hacker cannot find out who presented that token. So it is possible now to do what is necessary.

That answers the point made by the noble Lord, Lord Maxton. The problem with an identity card is that it will identify you. If you gave your identity to one of these websites and it happened to be hacked, like Ashley Madison, and if you were a Cabinet Minister—or even like most of us here, actually—your career would probably be in ruins. So I think it is essential that people be permitted anonymity. That is why, I am afraid, I am not in favour of the identity card method. There are other similar ways of doing the same thing—

[Lord Maxton]

I would, maybe, accept the noble Earl’s point in this particular context, but the ID card has, of course, a variety of different uses—particularly if it is a smartcard—rather than just this one.

Identity Documents Bill

Debate between Earl of Erroll and Lord Maxton

Wednesday 17th November 2010 Lords Chamber

[Lord Maxton]

My Lords, at Second Reading of this Bill, I suggested that, while at the moment an identity card would not help to stop fraud on the internet, it will come. There will eventually come a point when, in view of the rising number of people purchasing goods and services online, the banks and the people selling goods will insist that there is some form of identity involved in the transaction. Whether it will be putting a card into your computer or a camera that will show that you actually are the person, I do not know, but I would think the banks in particular will insist on this in the longer run, both for their own hole-in-the-wall cash machines and for buying online. The ID card, as it was originally proposed, if it had been made compulsory from the word go, as I wanted it to be, would have been one of the answers to that and would have saved the private sector very considerable sums of money in the long run.

[The Earl of Erroll]

My Lords, I fully understand the sentiment behind this, but I am not sure this is the best way to go. I do not think it is really the Home Office’s forte to produce such a report. I entirely agree with the noble Baroness, Lady Hamwee; there are a lot of lessons to be learnt and a lot of people studying this sort of thing. As for the figures used by the noble Lord, Lord Rosser—and taking the point just made about the banks—that is the whole point. People confuse theft of credit card details with identity theft. Identity theft is when someone’s identity is taken over and used to do many other things, such as entering into contracts, travelling across borders and perpetrating crimes. Nicking a credit card and its details is something completely different. Those provide the huge figures, and the people who can stop that are the banks and the credit card companies by increasing their security. They are always looking at this, and they are trading off between the losses they make on transactions where cards are not present, and the cost of additional security. We are seeing new security measures coming through, but it is not a government job. There is no point at which you would take a national identity card that is not designed for online transactions, and a credit card that at the moment is not designed for them, and hope that one is going to help with the other. Actually, the entire problem about security for the credit card is contained there, and the people know what to do about it. They are getting on with it rather slowly to my mind, but when the fraud figures get big enough they will do something about it. I agree there are lessons to be learnt, but I do not think it is an identity card lesson. There are some other lessons to be learnt, but I think that there are other bodies better qualified to do the job than the Home Office writing expensive reports.

--- Later in debate ---

[Lord Maxton]

My Lords, the noble Lord who moved the amendment may be slightly surprised to know that I support it, but for reasons that are rather different from those that he put before the House. A friend of mine described the Bill as the King Canute Bill; in other words, it is doing away with something—identity cards—which, in a relatively short time, whatever Government are in power, will have to be reintroduced. That is almost inevitable. I would hope that an appointed independent person would give that recommendation to the Government of the day and say, “Sorry, we have got it wrong. It is time that we reintroduced ID cards”. I agree entirely with my friend’s view, except that poor old King Canute is the most maligned man in English history, because he never suggested that he could hold back the tide. What he said to his courtiers was, “I cannot hold back the tide”. I suppose that it is the first example of PR going badly wrong.

There will come a point where the need for smart card technology will become such that we will have to introduce an identity cards Bill. This amendment would at least allow an independent person to look at it and say, “Sorry, we’ve got it wrong. Let’s have another look. Let’s introduce ID cards”.

[The Earl of Erroll]

My Lords, if I had got my act together a bit more quickly, I would have added my name to the amendment, because it is very sensible. There are some residual powers in the Bill which we need to keep an eye on. Although an Information Commissioner exists, he does not have the power to march in and look at things unless there are complaints. He would also be overextended.

We need to look out for residual powers that could give rise to concern. They come in Clause 10. Subsections (8) and (9) sensibly state that certain information which is gathered to prove someone’s identity when a passport is being issued should be destroyed after 28 days. Given that the Government will destroy the information within 28 days, I am happy for them to consult other databases—I mentioned in Committee electricity bills, which is probably the quickest way of finding whether someone has changed address or where they really are. I have no problem with the Government doing that to verify a person’s identity for the purpose of producing a passport.

However, then we get to subsection (10), which is the good old catch-all. It says that the Government can retain the information beyond 28 days for the purpose of “preventing or detecting crime”—I remember this sort of wording in RIPA, which led to a lot of grief—and “apprehending and prosecuting offenders”. Well, that depends on how quickly they apprehend them again. We should have oversight by an outside commissioner who reports to Parliament and not by a Home Secretary, because this sort of thing can get out of hand and, later, suddenly rise up to bite a Government in the future. We have several commissioners doing this sort of job elsewhere in the security world. We either add it on to someone’s job or create another one, but it is sensible for protecting the public.