Social Media: Online Anonymity

Debate between Lord Ashton of Hyde and Lord Kennedy of Southwark

Wednesday 6th February 2019 Lords Chamber

[Lord Kennedy of Southwark]

To ask Her Majesty’s Government what steps they are taking, or intend to take, to deal with online abuse by people using anonymous social media accounts.

[The Parliamentary Under-Secretary of State, Department for Digital, Culture, Media and Sport (Lord Ashton of Hyde) (Con)]

My Lords, online anonymity is an important part of a free and open internet—but being anonymous online does not give anyone the right to abuse others. The Government have made it clear that more needs to be done to tackle all kinds of online abuse. We will publish a joint DCMS-Home Office White Paper this winter, setting out a range of legislative and non-legislative measures and establishing clear standards for tech companies to help keep UK citizens safe.

[Lord Kennedy of Southwark (Lab Co-op)]

My Lords, does the Minister accept and understand the huge concern of law-abiding citizens that people are hiding behind anonymous accounts and making threats to kill, to rape, to assault and to bully, using racist, anti-Semitic and Islamophobic language? The platforms that host these people have done nowhere near enough to deal with this problem. If they will not get their own house in order, the Government must make them, through legislation. Will the Minister impress on his colleagues in government that the forthcoming White Paper must make that clear to them?

[Lord Ashton of Hyde]

I am happy to be able to agree with the noble Lord. Let us be clear: when abuse exceeds the threshold and moves into criminality, in most cases so-called anonymous perpetrators are actually traceable, so they can be prosecuted according to the law. I recognise the public disquiet about this, and, as the noble Lord said, we are considering what more can be done, by non-legislative means but also, when required, by legislation—and there will be legislation. We will consider what to do about anonymous abuse specifically, and we will address that in the online harms White Paper, which, as I said, is due out this winter.

Political Influence: Artificial Intelligence

Debate between Lord Ashton of Hyde and Lord Kennedy of Southwark

Tuesday 4th September 2018 Lords Chamber

[Lord Kennedy of Southwark (Lab Co-op)]

My Lords, when does the Minister think that the Government are going to move on from being concerned about this and looking across Whitehall to actually taking some action to deal with this urgent matter?

[Lord Ashton of Hyde]

The online harms White Paper will be published in the winter of 2018-19.

Sport: Performance-Enhancing Drugs

Debate between Lord Ashton of Hyde and Lord Kennedy of Southwark

Monday 23rd July 2018 Lords Chamber

[Lord Ashton of Hyde]

Criminal activities are subject to the negotiations that will take place and the Home Office is responsible for those. On doping in sport, we already have an international system based on WADA which I do not think will change just because we are coming out of Europe. This is an international problem that extends far beyond the borders of Europe. However, I take the noble Lord’s point that it is very important that we continue with that system and I see no reason why we should not be able to.

[Lord Kennedy of Southwark (Lab Co-op)]

My Lords, I agree with the noble Lord, Lord Addington, that we need to ensure that we drive these drugs out of individual sports, both at amateur and professional level. It is important to drive them out of team sports as well, but it is also important that football clubs have grounds they can actually play at. Will the noble Lord take back to his honourable friend the Minister for Sport our thanks for her support for Dulwich Hamlet? However, the club is still locked out of its ground, and we are only allowed to play thanks to Tooting and Mitcham. We need further help to get back into our home ground at Champion Hill.

Personal Data

Debate between Lord Ashton of Hyde and Lord Kennedy of Southwark

Tuesday 17th April 2018 Lords Chamber

[Lord Kennedy of Southwark]

To ask Her Majesty’s Government what action they propose to take to regulate platforms that hold personal data.

[The Parliamentary Under-Secretary of State, Department for Digital, Culture, Media and Sport (Lord Ashton of Hyde) (Con)]

My Lords, the UK’s forthcoming data protection laws will empower people to take control of their personal data and ensure that all businesses, including platforms, take necessary steps to protect the information that they hold. This is a crucial step in giving the public confidence that their data will be managed securely and safely. Beyond this, the digital charter that we are developing in the UK sets out the principles for our approach to agree the norms and rules of the online world and put them into practice. In some cases this will be through shifting expectations of behaviour, in some we will need to agree new standards, and in others we may need to update our laws and regulations.

[Lord Kennedy of Southwark (Lab Co-op)]

I am sure that, like me, the Minister saw the media reports of Mr Mark Zuckerberg’s appearance on Capitol Hill last week. He seemed to accept that some form of regulation was now inevitable. Will the Government look at what can be done in that respect? Does the Minister think the solution may be to regulate the people working in the industry, giving them clear obligations and clear standards to adhere to?

[Lord Ashton of Hyde]

My Lords, as I mentioned in my Answer, legislation is coming. The combination of the GDPR, which comes into effect on 25 May, and the Data Protection Bill, which should be in place by then, will make a real difference. Other things need to be done. One of the biggest changes in the last few months has been the acceptance that these social platforms have some responsibility for their content. That does not mean to say that they are publishers as such but Mr Zuckerberg accepted responsibility for content on Facebook. The Prime Minister, in her Davos speech, made much the same point.

Data Protection Bill [HL]

Debate between Lord Ashton of Hyde and Lord Kennedy of Southwark

Report: 2nd sitting (Hansard - continued): House of Lords
Wednesday 13th December 2017 Lords Chamber

[Lord Kennedy of Southwark]

My Lords, the amendment in my name, and that of my noble friend Lord Stevenson of Balmacara, would insert a new clause in the Bill that requires a data controller to notify both the Information Commissioner and the police if they are subject to a ransomware attack. Ransomware attacks involve hackers taking control of your information held on a computer and agreeing to release the information back to you only on the payment of a large sum of money. It is kidnapping not of a person but of information.

Apparently thousands of UK businesses have paid these ransom demands and do not bring these issues to the attention of the authorities for fear of damaging their reputation. This is a really serious issue, and one that we cannot allow not to be addressed. I find it shocking that companies are paying these ransom demands, effectively on the quiet. The amendment would make it a legal requirement to notify. It is only by being able to understand the scale of these attacks and understand what has happened—whether or not it is successful is irrelevant—that the authorities can undertake the important work of analysis needed to prevent these attacks happening in the future.

I would go further, and say that it is irresponsible of data controllers or their businesses and organisations not to come forward to notify the proper authorities. They are vulnerable and making the problem worse by hindering the efforts to tackle the problem. Not only are they at risk of whoever is behind the attack coming back for more money later—having paid the hacker, the person will be seen as an easy touch—they are exposing other people, businesses and organisations to this form of attack in the future. My amendment would require notification, and I look forward to a detailed response to the issues I have raised. I beg to move.

[Lord Ashton of Hyde]

My Lords, I am grateful to the noble Lord, Lord Kennedy, for his amendment on data protection breaches and ransomware attacks. The repercussions of such attacks are felt by everyone, whether or not they are a direct victim of the crime. It is estimated that in 2016 the cost of fraud and cybercrime in the UK was £193 billion, with the full social cost likely to be much higher. It is therefore essential that stringent measures are in place in legislation to ensure that cyberattacks and fraud are prevented, and any perpetrators found and stopped.

We, nevertheless, believe that Amendment 78A is unnecessary. Article 33 of the GDPR, referenced in the noble Lord’s amendment, requires the data controller to inform the Information Commissioner within 72 hours of all data breaches, including as a result of ransomware attacks. The controller is required to provide information of the likely consequences of the personal data breach, and to describe the measures taken or proposed by the controller to address the breach. There is one exception, given in Article 33, for breaches unlikely to result in a risk to data subjects, but that hardly seems relevant in cases where hackers have proven access to the data in question.

The GDPR does not require data controllers to report cyberattacks to the relevant police forces, for good reason. It is well understood that the Information Commissioner has the expertise and resources to take the appropriate and necessary action in the first instance, including, if she deems it appropriate, referrals to the police or to investigate and bring prosecutions herself under data protection law. I am also puzzled by the amendment’s intention to single out ransomware as the only form of cyberattack worth reporting to the police. A huge range of cyberattacks cause substantial distress and harm to individuals, such as insider attacks, attacks from third countries and other cybercrimes, such as malware and phishing. In addition, organisations can report cyberattacks or fraud to Action Fraud, which in turn ensures that the correct crime reporting procedures are followed. This organisation is overseen by the City of London Police, the national lead for economic crime, and we believe that it represents an effective and scalable structure. For the reasons I have stated, therefore, I would be grateful if the noble Lord would withdraw his amendment this evening.

[Lord Kennedy of Southwark]

I am happy to withdraw my amendment this evening. I wanted to raise the issue here. The Minister cited the figure of £193 billion lost through these and other forms of attacks—he went through a number of them—and this is a very serious matter. I hope that he is correct that companies are required to notify the Information Commissioner on the back of this legislation. This is very serious. I hope that he is correct that it is not necessary to go to the police—the sums of money that he mentioned are absolutely shocking. At one point, he said that the Information Commissioner can start prosecutions. That is fine, if we can find the people behind the crime and if they are in this country. If they are somewhere in lands far away, I wish him all the best, but I suspect that we will have some trouble in catching the perpetrators or bringing them to justice. My worry is that, because of reputational damage, companies will be reluctant to notify anyone about this stuff. It is very serious.

[Lord Ashton of Hyde]

Can I just echo what the noble Lord says? We agree that it is serious, which is why we have set up the National Cyber Security Centre to help to protect public services online and why the Chancellor allocated nearly £2 billion for cybersecurity when he launched that centre.

[Lord Kennedy of Southwark]

It is very pleasing to hear that. I welcome that, but these are matters that we will have to keep under review. Unfortunately in this world, the people involved in this stuff are usually quite skilful and bright and can keep one step ahead of the law or the people trying to catch them. We should keep these matters under review but, unfortunately, they are not going to go away. My worry is that these crimes are committed many miles from these shores and catching the perpetrators is the problem. However, I am very happy at this stage to withdraw my amendment.

Data Protection Bill [HL]

Debate between Lord Ashton of Hyde and Lord Kennedy of Southwark

Report stage (Hansard - continued): House of Lords
Monday 11th December 2017 Lords Chamber

[Lord Kennedy of Southwark]

My Lords, I welcome government Amendments 11 and 12. As we have heard, they address some of the concerns that were raised in Committee. The Government have said that they never intended to have a narrow interpretation and they have put back the words of the 1998 Act, which is very welcome. As was said earlier, the noble Earl, Lord Kinnoull, has laid out in great detail the issues addressed in his Amendments 25 and 26. He makes a very important and clear case and raised some important issues. I hope that the noble Lord, Lord Ashton of Hyde, will respond to those. I certainly think that there is a case for bringing these things back at Third Reading to address the points the noble Earl has raised.

[Lord Ashton of Hyde]

My Lords, I am grateful to everyone who has spoken in this debate. As we have just heard, Amendment 25 would replace the existing processing conditions:

“Insurance and data concerning health of relatives of insured person”,


and:

“Third party data processing insurance policies and insurance on the life of another”,


with a broader insurance processing condition. Amendment 26 would require the Information Commissioner to produce sector-specific guidance for the insurance sector. These processing conditions are made under article 9(2)(g), the substantial public interest derogation. When setting out the grounds for such a derogation, the Government are limited by the need to meet this substantial public interest test. We are also required to provide appropriate safeguards for data subjects.

The Government recognise the importance of insurance products, in particular compulsory classes and the protection afforded by third-party liability. As the noble Earl mentioned, engagement between the insurance sector and government officials has continued since this matter was discussed in Committee and, indeed, since I met him and representatives of the insurance industry after Committee. There is still some work to do on the precise drafting of the relevant provisions, but I am grateful for the opportunity to place on record the Government’s intention to table an amendment addressing this issue at Third Reading, if we can finalise the drafting in time and the House is content for us to do so. At the moment I am not aware of any insuperable problems in that regard, but noble Lords will recognise that this is a complex issue and one that we want to get absolutely right.

As for the Information Commissioner producing sector-specific guidance, as proposed by Amendment 26, I will certainly take that back and pass it on to the department. With that reinsurance, or rather reassurance—“reinsurance” was a bit of a Freudian slip there—I respectfully invite the noble Earl not to move his amendments this evening. I beg to move.

--- Later in debate ---

[Lord Ashton of Hyde]

I am grateful to the noble Lord, Lord Kennedy, for raising this issue, and to the noble Baroness for her comments. These issues are vital to our system of government, and we agree with that.

Amendment 27 seeks to expand the umbrella term “political activities” to include any additional activities determined to be appropriate by the Electoral Commission. Noble Lords will agree that engaging and interacting with the electorate is crucial in a democratic society, and we must therefore ensure that all activity to facilitate this is done in a lawful manner. Although paragraph 18(4) includes campaigning, fundraising, political surveys and case work as illustrative examples of political activities, it should not be taken to represent an exhaustive list.

Noble Lords will be aware that the Electoral Commission’s main areas of expertise concern the regulation of political funding and spending, and we are of the opinion that much, if not all the activities they regulate will be captured under the heading “political activity”. As I have just set out, fundraising is included as an illustrative example, which ought to provide some reassurance on this point. Moreover, the greater the number of activities denoted by the Electoral Commission, the less likely it is that any other activity would be considered by a court to be a political activity by dint of its omission. The commission, a body which as far as I am aware claims no expertise in data protection matters, would find itself in an endless spiral of denoting new activities as being permissible under the GDPR. Nevertheless, in recognition of the importance of such processing to the democratic process, the Government are continuing to consider the broader issues at stake and may well return to them in the second House. In this vein, the noble Lord made a number of good points, and I look forward to meeting him with the Minister for Digital, my right honourable friend Matt Hancock, on Thursday this week to discuss the matter in more detail than the parameters of this debate allow. We will see what the noble Lord feels about the timing of that after the meeting.

As for the noble Baroness, Lady Hamwee, we talked about having bigger meetings, and I am sure the time will come. This is just a preliminary meeting to decide on timings and to give the noble Lord, Lord Kennedy, the chance to discuss this with the Minister for Digital. I envisage that further meetings will include the noble Baroness.

I appreciate the sentiment behind the noble Lord’s amendment. In the light of our forthcoming discussions, I hope he feels able to withdraw it.

[Lord Kennedy of Southwark]

I thank the Minister for his response. I tabled the amendment to keep the issue live and to illustrate the problem we have here. In his response, he talked about the responsibilities of the commission and data protection responsibilities and how they may conflict, belonging to different bodies. That begins to highlight the problem that we potentially have here. You could have different regulators trying to enforce different bits of legislation, all on the statute book at the same time and equally legitimate. We have got a real problem here.

I look forward to the meeting on Thursday. It is very important that we have a meeting after that, though, with a much wider group of people from different parties and campaigns. It is a genuine problem that affects every political party represented in this House and the other place and those that are not in either House. There is no advantage here—it is a question of getting a procedure in place that allows political parties to campaign and do their job properly and fairly. Equally, it protects the volunteers so that they understand what they can and cannot do so that they do not unintentionally get themselves in difficulty. I look forward to the meeting, but there are one or two things to sort out before then. I hope that it can get done by Thursday but, if it cannot, we have the other place. But it would be much better to sort it out at this end rather than the other end. I beg leave to withdraw the amendment.

Data Protection Bill [HL]

Debate between Lord Ashton of Hyde and Lord Kennedy of Southwark

Committee: 6th sitting (Hansard): House of Lords
Wednesday 22nd November 2017 Lords Chamber

[Lord Ashton of Hyde]

My Lords, I am grateful to the noble Lord, Lord Kennedy, for turning the Committee’s attention to the provisions in Clause 163. The clause makes it a criminal offence for a data controller, or somebody employed by the controller, to deliberately frustrate a subject access request by altering, defacing or destroying information that a person would have been entitled to receive.

This offence is not new. A similar offence was provided for in Section 77 of the Freedom of Information Act 2000. The only difference between the offence in Clause 163 and the offence in the Act is that the latter was limited to the handling of subject access requests by public authorities and their employees and agents, whereas Clause 163 extends this to apply to all controllers.

The noble Lord’s amendment would make it clear that the offence applies where a data subject requests personal data about them contained in a review about workers written by a third party. I am grateful to the noble Lord for explaining the background to the amendment; nevertheless, I submit that it is unnecessary. Article 15 of the GDPR makes it clear that the data subject has the right to obtain from the controller confirmation as to whether data about him or her is being processed, as well as access to that data. Whether a report about the data subject was compiled by a third party or processor acting on the controller’s behalf is irrelevant, as it still amounts to personal data held by the controller.

It is always unacceptable for any controller to destroy or deface personal data with the sole intention of preventing somebody accessing what they were entitled to. That is precisely why Clause 163 creates a criminal offence targeted on that particular activity.

I hope that I have addressed the noble Lord’s concerns. If I have not, of course I will be more than happy to discuss them with him later. Therefore, I hope that he will be able to withdraw the amendment.

[Lord Kennedy of Southwark]

I thank the noble Lord for his response. He has not really addressed the point that I was making, so I will be very happy to have a discussion outside the Chamber. This is a real problem that is happening now and I am not convinced that what we have in the Bill will be enough to deal with it. It may well be that my amendment is not in the right place, but there is an issue with people not easily accessing data that is held on them, particularly for the self-employed and others seeking work through various platforms.

[Lord Ashton of Hyde]

If we have misunderstood the noble Lord’s intention behind the amendment, I apologise. As I said, we will be happy to discuss it with him.

[Lord Kennedy of Southwark]

I do not think that the noble Lord misunderstood; it is just that there are several issues around the gig economy that we need to look at, and I shall be happy to discuss them outside the Chamber. I beg leave to withdraw the amendment.

--- Later in debate ---

[Lord Ashton of Hyde]

My Lords, the Bill creates a comprehensive and modern framework for data protection in the UK. The importance of these data protection standards continues to grow—a point that has not been lost on noble Lords, nor the Government. That is why the Government have tabled Amendments 185A, 185B, 185C and 185D, which provide for a framework for data processing by government.

Inherent in the execution of the Government’s function is a requirement to process significant volumes of personal data, whether in issuing a passport or providing information on vulnerable persons to the social services departments of local authorities. The Government recognise the strong public interest in understanding better how they process that data. The framework is intended to set out the principles and processes that the Government must have regard to when processing personal data.

All government and public sector activities require some form of power to process personal data, which is derived from both statute and common law. In light of the requirements of the GDPR, such processing should be undertaken in a clear, precise and foreseeable way. The Government’s view is that the framework will serve further to improve the transparency and clarity of existing government data processing. The Government can, and should, lead by example on data protection. To that end, the proposed clauses provide the Secretary of State with the power to issue guidance in relation to the processing of personal data by government under existing powers. As I have already stated, government departments will be required to have regard to the guidance when processing personal data.

The Government have consulted the Information Commissioner in preparing the amendment and will, as required in Amendment 185A, consult the commissioner before preparing the framework. The Government are keen to benefit from the commissioner’s expertise in this area and to ensure that the framework does not conflict with the commissioner’s codes of practice. The guidance should provide reassurance to data subjects about the approach that government takes to processing data and the procedures it follows when doing so. It will also help to strengthen further the Government’s compliance with the GDPR’s principles. I beg to move.

[Lord Kennedy of Southwark]

My Lords, government Amendments 185A, 185B, 185C and 185D add four fairly substantial new clauses to the Bill on the last day of Committee. I can see the point made by the Minister when he moved the amendments, but it is disappointing that they were not included right at the start. Have the Government just thought about them as a good thing?

The Delegated Powers and Regulatory Reform Committee has not had time to look at these matters. I note that in Amendment 185A, the Government suggest that regulations be approved by Parliament under the negative procedure. I will look very carefully at anything that the committee wants to bring to the attention of the House when we look at these matters again on Report. I am sure the committee will have reported by then.

I will not oppose the amendments today, but that is not to say that I will not move some amendments on Report—particularly if the committee draws these matters to the House’s attention.

[Lord Clement-Jones]

My Lords, I want to echo that point. There is time for reflection on this set of amendments and I sympathise with what the noble Lord, Lord Kennedy, said.

Data Protection Bill [HL]

Debate between Lord Ashton of Hyde and Lord Kennedy of Southwark

Committee: 3rd sitting (Hansard): House of Lords
Monday 13th November 2017 Lords Chamber

[Lord Ashton of Hyde]

No, it is not the first time because this is the position that exists under the Data Protection Act 1998.

[Lord Kennedy of Southwark]

My Lords, I thank all noble Lords for speaking in this debate. As I think the noble Lord, Lord McNally, said, these amendments would delete just two words, but we have had a very important debate. We tabled the amendments to probe these issues, which are very important.

I am pleased that the noble Lord, Lord Ashton of Hyde, has agreed to meet us because we need to discuss this. It would be much better if we could get interested Peers from this House and officials from various parties together to sort this matter out, rather than leave it and let it go to the other place. We have a much better record of sitting down and sorting such issues out. I hope, if we need to amend the Bill, we do so on Report. Before we have our meeting—I accept it will be quite a big meeting—it would be useful if the noble Lord wrote to me, if he can, and to other interested Lords so we can have the Government’s position on paper before we sit down. That would help our discussions and move them on. There is a community of interest among noble Lords.

I certainly agree with the points made by the noble Lord, Lord McNally, and by my noble friends Lord Whitty and Lady Jay, but we need to focus on these issues, get them right and get proper amendments in place to protect parties and campaigners as they do their proper and lawful work. At this stage, I am happy to withdraw the amendment.

Data Protection Bill [HL]

Debate between Lord Ashton of Hyde and Lord Kennedy of Southwark

Monday 6th November 2017 Lords Chamber

[Lord Ashton of Hyde]

It is always a pleasure to meet my noble friend, and I am happy to do that.

[Lord Kennedy of Southwark]

My Lords, I thank all noble Lords who have spoken in the debate this evening. We have touched on a number of important topics, which I hope the noble Lord, Lord Ashton of Hyde, will reflect on as we move through the Bill and look at these issues again. I make it clear that my amendments were all probing amendments to get from the Government their position on things. I was particularly pleased that the noble Earl, Lord Kinnoull, raised the issue about the insurance industry and that the Minister will meet him and representatives of the industry.

I noticed when the Minister replied to the debate that on more than one occasion he made references to recitals. He, I and the House know that the recitals will not form part of British law, so to keep relying on them is, I contend, a little weak on the Government’s part. They will have to find something a bit stronger and more solid as we move on, because, as I said, these will not form part of British law. That is an important point for the Minister to think of when he responds to amendments. For him to keep relying on them highlights the position the Government are in, which is not very good at the moment. Having said that, I beg leave to withdraw the amendment.

Data Protection Bill [HL]

Debate between Lord Ashton of Hyde and Lord Kennedy of Southwark

Monday 30th October 2017 Lords Chamber

[Lord Kennedy of Southwark (Lab)]

My Lords, I refer the Committee to my registered interests: I am on the board of two small charities in the London Borough of Southwark.

I recall from Second Reading the noble Lord, Lord Marlesford, who is not in his place today, talking about the effect of the legislation on small organisations—many others have made reference to it already. He referred to parish councils, which often employ just a part-time parish clerk. The noble Lord, Lord Arbuthnot of Edrom, spoke similarly about the effect on organisations. Both noble Lords had a point at Second Reading, as does the noble Baroness, Lady Neville-Rolfe, with her amendment today.

As we have heard, the amendment limits the scope of the Act to organisations employing more than five people and specifies for exemption organisations such as small businesses, charities and parish councils which meet the employment qualification of five employees or fewer. My noble friend Lord Knight of Weymouth made a valuable point about size and turnover—I think the noble Baroness accepted that in her intervention.

The amendment also makes the useful point that the exemption is not limited to these three specific groups but seeks to cast a wider net. I certainly want to hear from the Minister that community councils would be exempted, as well as the small not-for-profit sector and small co-operatives, which I am sure is the intention behind the amendment.

The amendment needs a detailed response, as we have to be clear on what the Government think is reasonable for such organisations to have to comply with and how the Government will make it as simple as possible and not pile additional burdens on them. I hope the Minister will not say that these organisations already have to comply with the 1998 Act and that this legislation is only a very small increase in what is required. We will require a lot more reassurance than that from the Minister.

Amendment 152, also in this group, would place a duty on the Information Commissioner to advise Parliament, government and other institutions and bodies on the likely consequences, economic or otherwise, for industry, charities and public authorities of measures relating to the protection of individuals’ rights and freedoms with regard to the processing of personal data. The noble Baroness again makes a valid point and there is merit to placing this duty in the Bill.

If the Minister thinks that Clause 113, and specifically Clause 113(3)(b), is sufficient to provide the Information Commissioner with the power and the duty to do what is set out in the amendment, we need him carefully to set that out today for the benefit of your Lordships’ House.

Amendments 169—and Amendment 170, which would add “and charities” to it—raises some very important issues. It would place a duty on the Secretary of State to ensure that they or the Information Commissioner had a programme in place to ensure that information on the new duties that businesses and charities will be obliged to follow is publicly available. Again, these are very important and welcome amendments. Large businesses, large corporations and large charities will more than likely have the structures in place to ensure that they comply with any new requirements, but smaller organisations do not have compliance departments or lawyers on retainer to advise them. The Government have to get that message out to them. I particularly like subsection (2) of the new clause proposed by Amendment 169, which would require this information to be placed online and the Secretary of State to have regard to the creation of online training and testing to meet the requirements of the new Act. This group of amendments raises important matters on which I hope the Minister can give the Committee some reassurance.

[Lord Ashton of Hyde]

My Lords, I am grateful to all noble Lords who have raised the amendments and commented on them, because the Government recognise the concern behind them; namely, to protect the smallest organisations from the additional requirements established by this and future data protection legislation and to ensure that all UK businesses and organisations are properly supported through the transition.

I fully concur with my noble friend Lady Neville-Rolfe that supporting UK businesses of all sizes must be a priority. I can assure her that it is of the utmost importance both for the Government and for the Information Commissioner. However, I cannot agree with the proposal in Amendment 7 that those organisations with five or fewer employees be exempted from the requirements of the Act. We are talking in this Bill not just about businesses but about individual rights of data subjects. As my noble friend Lord Lucas mentioned, it is right that individuals enjoy the protections that will be afforded by this new regime regardless of the size of the organisation with which they are dealing. People should not be afforded a lesser degree of protection simply because they have chosen to do business with, or indeed to voluntarily support, a small organisation. After all, the fact that an organisation employs few staff does not mean that a breach of data protection law will cause a correspondingly small amount of distress. Many of the most cutting-edge financial technology firms begin life in someone’s back bedroom, but it does not make their customers’ transaction history any less worthy of protection.

Amendment 7 is unlikely to have the intended effect because the GDPR does not permit such an exemption. As an area in which our ongoing relationship with the European Union will be of the utmost importance, I do not consider that such an amendment would be in the best interests of British businesses.

However, I understand my noble friend’s concerns that the smallest organisations may be the least well equipped to deal with the changes introduced by this regime. I was therefore pleased to learn recently—the noble Lord, Lord Clement-Jones, mentioned this—that the Information Commissioner has announced the establishment of a dedicated telephone advice service for small and micro businesses to support them in implementation. The noble Lord also mentioned that the threshold was 250 employees, which represents quite a large organisation by today’s terms, with small businesses, especially in the tech field, growing up all over the place.

In respect of Amendment 152, I fully concur with my noble friend about the importance of monitoring the consequences of the Act for businesses and other organisations. I reassure her that there is already, quite rightly, a broad obligation on government to assess and report on the impact of all legislation that regulates business under the Small Business, Enterprise and Employment Act 2015. In addition, the Information Commissioner will be required to advise Parliament, government and other bodies on both legislative and administrative measures relating to the new Act and to provide opinions on any issue relating to the protection of personal data. My noble friend Lady Neville-Rolfe also asked about the impact on business. I confirm that the Government will publish a further assessment of the impact of the Bill on business very shortly.

With regard to Amendment 169, it is worth reiterating that the Information Commissioner has already provided general guidance, which is available online to all businesses, to help them understand their obligations. The commissioner is continuing to develop this guidance and has a programme in place for publication. I cannot go through it all but, in addition to the guidance the ICO has already published, it expects to develop this further between now and May into a fully comprehensive guide to the GDPR, including summaries and checklists, as well as more detailed content focused on key areas. This will also be available online from early next year. Later this year, the Information Commissioner will publish draft guidance on children’s data; on accountability, including documentation; on legitimate interests, including examples addressing universities maintaining alumni relationships; and draft guidance on security of processing, including joint work on high-level security principles. It will also provide sector-specific guidance. The Government are working with the Information Commissioner to identify appropriate areas and to work with sectors to deliver more guidance.

In respect of timing, I completely agree with my noble friend that it is desirable that up-to-date guidance about the new regime is available to businesses as soon as possible. As I have just set out, that is precisely what the commissioner is already attempting. But I fear that it may not be feasible, as the amendment requires, for final information to be published at least six months before the commencement of the provisions in the Act, not least because changes to the Bill may affect that guidance.

In respect of Amendment 170, I share the sentiment of the noble Lord, Lord Clement-Jones, in wishing to ensure that charities are provided with guidance to help them understand their obligations. I reassure him that the general guidance that the Information Commissioner has already published is designed to assist all organisations through the transition.

The noble Lord, Lord Knight, asked how the role of the Information Commissioner will develop and be resourced. My noble friend Lady Williams said at Second Reading that the Government take the adequate resourcing of the Information Commissioner very seriously and have provided for an appropriate charging regime in Part 5 of the Bill. I assure the noble Lord that we are aware that there are problems with the Information Commissioner at the moment and we are looking at that. But, possibly for the reasons that he mentioned, I am not able to make any binding commitments tonight. But I accept that there is an issue there. We are looking at it.

I assure noble Lords that the Government share the concerns raised in these amendments and are particularly pleased that the Information Commissioner is actively taking steps to provide dedicated support for small and micro enterprises, including the telephone service I mentioned earlier. With that in mind, I hope my noble friend feels able to withdraw her amendment.

[Lord Kennedy of Southwark]

The Minister mentioned guidance a few times and said that it might not be ready in time. I was reminded of our debates—which he was not involved in—on the Housing and Planning Bill. We were told about guidance and regulations, and well over a year later we have seen next to nothing. This is such an important issue that we need to hear a little more from the Minister. I and many other noble Lords mentioned parish councils. I do not think he mentioned those. For example, I know the Deeping St James Parish Council in Lincolnshire very well. It employs only a part-time clerk. I think the noble Lord, Lord Marlesford, made a similar point about parish councils at Second Reading. Perhaps the Minister could say something about that.

[Lord Ashton of Hyde]

Yes, I think my noble friend mentioned the parish council of the noble Lord, Lord Marlesford, in her reply. I make the point again that individuals’ data rights have to be protected. Just because parish councils are small organisations does not mean that they should not take that seriously—and I am sure they do. With regard to the practicalities of how they cope with their duties, apart from the fact that the Information Commissioner is providing guidance specifically for small organisations, the parish clerk—who already often works for more than one parish council so they can share the cost—is in a good position to deal with the duties under the Bill and will be able to take the guidance relating specifically to small businesses and organisations from the Information Commissioner.

I admit that I did not follow the Housing and Planning Bill too closely. But I mentioned a lot of the guidance that will be available before the end of the year. The Information Commissioner is very aware of the need to produce this quickly. In addition, of course, she is actively involved in outlining the European guidance on which a lot of member states’ guidance will be based. Therefore, she is helping to set the tone on which her future guidance will be based.

[Lord Kennedy of Southwark]

That is fine as far it goes. The point I am making is that we have heard guidance mentioned two or three times, in relation to two or three different organisations. I know that the Minister was not involved but we heard the same comments about guidance and regulations from the Government Front Bench when we were dealing with the Housing and Planning Bill. I hope we are not having déjà vu here. We hear these things are coming forward. These things are very important. I accept entirely that people’s data are important—of course they are—but, equally, getting this guidance right is important, as is organisations being able to have the information so that they ensure that they comply with the law. I hope the Minister can take back how important this is. He said it will all be after Report, at the end of the year. The Bill will have long left this House and we will be saying, “Where is this guidance then? You promised it and nothing has arrived”. It really is not good enough for the individual data subject or for business or for anyone else involved.

[Lord Ashton of Hyde]

I agree with the noble Lord that, if nothing did arrive, it would not be good enough.

Telecommunications Infrastructure (Relief from Non-Domestic Rates) Bill

Debate between Lord Ashton of Hyde and Lord Kennedy of Southwark

Committee: 1st sitting (Hansard): House of Lords
Tuesday 24th October 2017 Grand Committee

[Lord Kennedy of Southwark (Lab)]

My Lords, I refer the Committee to my registered interests as a local councillor and a vice-president of the Local Government Association. I support Amendments 1, 5 and 11 in this group, tabled by the noble Baroness, Lady Pinnock. They highlight some real problems for communities—be they urban or rural—which suffer from poor connectivity, and there has been no real incentive to improve the situation for them by improving speeds. The amendments add the condition that, for the relief to apply, it has to be focused on areas within a local authority where the average broadband speed is 10 megabits per second or less. I think I am right when I say that about 93% of homes and businesses in the UK are able to receive superfast broadband, but it is the copper version. The Bill is generally welcomed.

The noble Baroness is right to focus her amendments on areas with poor connectivity. There is a good argument for this as reliefs provide an incentive to do something that a business might otherwise not want to or be keen to do. The view may be taken that it is not economically beneficial, or something else could be more beneficial. The noble Baroness raises the important issue of how to ensure that those parts of England and Wales, urban and rural, which suffer from poor connectivity can benefit from the relief provided to companies. Otherwise, such areas run the risk of falling further behind. We can all agree that the benefits that fibre can bring could be enormous for all parts of the UK.

Can the noble Lord, Lord Bourne, respond to the concern expressed by the noble Baroness, as we do not want to see parts of the country falling further behind? How can we ensure that this relief, welcome though it is, actually benefits those areas with the worst connectivity?

[The Parliamentary Under-Secretary of State, Department for Digital, Culture, Media and Sport (Lord Ashton of Hyde) (Con)]

My Lords, my noble friend Lord Bourne has left this one to me. I thank the noble Baroness and the noble Lord for their contributions. I realise the point that some of these issues raise. I will make some general comments on the points made by the noble Baroness, Lady Pinnock, and then come to the substance of the amendment.

The noble Baroness referred to billion-dollar companies—I presume she meant BT. The relief applies to all companies, large or small, because fibre-optic cable is the way of the future. We regard laying fibre-optic cable as a good thing, regardless of where it is and who lays it, so we leave it up to the market. This Bill is a fairly blunt instrument—merely an enabling measure; it was announced by the Chancellor and it is merely to allow the relief to take place. On the very understandable issue of where it should be directed, we have carried out a number of measures to effect that. We understand the issue about rural and hard-to-reach areas—and, indeed, some of the areas in our cities that do not have adequate broadband. The specific amendments do not necessarily address the broad thrust of some of the remarks made by noble Lords, and I will explain why we do not think the amendments are particularly helpful. They would mean that the reliefs provided for in the Bill on new fibre applied only to those areas that currently receive an average speed of less than 10 megabits per second. They would undermine a fundamental part of what we seek to achieve through the Bill. We want to ensure that businesses and households throughout the country, including rural areas and cities, have access to faster broadband. In fact, by the end of this year, 19 out of 20 premises will have access to superfast broadband.

The universal service obligation will provide a digital safety net by giving everyone in the country the legal right to request a connection to broadband speeds of at least 10 megabits per second by 2020. As noble Lords will know, we are also considering a voluntary proposal from BT in that respect. I stress that the 10 megabits per second is a safety net; we want as many people as possible to have access to superfast broadband or better, which is why we have set a target of 95% superfast coverage by the end of 2017, which will continue to be extended beyond that to at least 97% of premises.

We have delivered a series of measures to ensure that all areas can and do have access to the broadband speeds that they need. For example, Defra has just made available £30 million of funding under the rural development programme for England, targeted at supporting rural businesses and growth for broadband services in those areas with speeds of 30 megabits per second or faster where that is not currently available or planned. In the 2016 Autumn Statement, the Government announced more than £1 billion to support digital infrastructure, targeted at supporting the rollout of full fibre connections for future 5G communications. The first wave of projects for our local full fibre networks programme has been launched, and includes a mixture of urban and rural areas. We are soon to launch a challenge fund for local bodies to bid for access to £200 million, with all parts of the UK free to participate, and we anticipate a significant number of applications from predominantly rural areas. We think that those projects will encourage further commercial interventions to build and extend fibre networks.

We support better broadband in all areas, but we believe that the amendment would limit the rate relief to only those local authority areas with an average of less than 10 megabits per second, which would damage the rollout of faster broadband across the UK. First, it would mean that much of the new fibre to be installed to the premises—FTTP—would be excluded from the relief. To deliver a network that is fit for the future, we need more fibre everywhere, including in areas that currently get more than 10 megabits. This amendment could deter significant investment and have the perverse result that less full fibre—the gold standard of broadband technology—was actually deployed.

Secondly, the amendment would exclude from the rate relief new fibre in those villages and rural areas that do not currently have high-speed broadband but happen to fall within a local authority area which does on average have high speed broadband. It would mean excluding from the relief whole areas where support is needed and where the measures provided for in the Bill would make a difference. At the moment, less than 3% of premises across the UK receives under 10 megabits per second, so the amendment potentially excludes up to 97% of premises from the relief.

Therefore, I hope that the Committee will recognise that the amendments should not be included in the Bill. However, we agree that improving broadband in those areas with less than 10 megabits is a priority, which is why we have put in place the universal service obligation. The new fibre rate relief as proposed through the Bill will support that objective. I hope that, with this in mind, the noble Baroness will withdraw her amendment.

--- Later in debate ---

[Lord Ashton of Hyde]

My Lords, I am grateful to noble Lords for laying out their amendments clearly. As the noble Lord, Lord Kennedy, said, these amendments are very much linked to the last group on which I answered—the first group today.

Amendment 4, which was moved by the noble Lord, Lord Kennedy, seeks to ensure that there is a requirement for recipients of the relief to,

“give due consideration … to rural and hard to reach areas”.

In a similar vein, the noble Baroness, Lady Pinnock, proposes an amendment to require a report on the impact of these measures on rural connectivity. Although I might support the spirit of these apparently reasonable amendments, I do not believe that they are necessary. I share the concerns of many noble Lords that rural and remote areas should not be left behind in the drive to improve and extend high-quality broadband connectivity. I declare an interest: I live in a rural area and am absolutely aware of the problems to which noble Lords have alluded.

The relief provided for in the Bill is available across England and Wales. No area is excluded or exempted, and we have engaged with the Welsh Government to support the application of the measure in Wales. Providers deploying fibre connectivity in the countryside will receive the same rates relief as those deploying in the hearts of our great cities. That is important because the problems of slow speeds are the same, regardless of where the household is located. When we talk about social deprivation, for example, it is still a problem in an inner city as well as a rural area.

Providers are free to deliver connectivity wherever the market allows. However, to ensure that people living and working in rural and remote areas can and do have access to the broadband speeds that they need, the Government have delivered a series of measures, which I mentioned in my previous answer—but I shall remind noble Lords of them just briefly. There is the superfast rollout programme, which is worth about £1.7 billion of public money. We are currently consulting on the broadband universal service obligation, which will apply across the United Kingdom, with at least 10 megabits per second. Then there is the local full fibre networks programme, worth £200 million, and the rural development programme for England at £30 million for broadband. Those measures have been a great success, with 45% of households with superfast in 2010 rising to 95% by the end of this year.

It is clear that the relief will be alongside a package of measures put in place by the Government to help spread to those living and working in rural and remote areas the benefits of economic growth and access to services that better broadband connectivity will bring. Together, they will also lay the foundations needed for the next generation of mobile technology, known as 5G, to which the noble Baroness, Lady Pinnock, referred.

The noble Baroness’s proposed new clause in Amendment 15 would require a report on the impact of the measure on rural connectivity. I support the outcome—that is, an understanding of the impact of Government’s action in this area—but my concern is that requiring a report on the impact on rural connectivity may have an adverse effect. Telecoms networks take time to plan and build, and investors rely on certainty. A report on the relief after 12 months is premature, given the time taken to deploy networks. My noble friend Lord Bourne will cover reporting arrangements in greater detail later, but my concern is that if the Government are required to report so soon, it could create uncertainty over whether the relief will continue, and lead to unintended consequences.

On subsection (2)(c) of the noble Baroness’s proposed new clause, on mobile coverage, I note that the main benefit of the measure to mobile will be in aiding the deployment of 5G. It will take longer than 12 months for the next generation of mobile technology to appear; we do not quite know what it is yet.

Of course, we will monitor the effectiveness of the scheme in providing new fibre, which will include rural areas, but we need to allow the sector appropriate time to build networks in all areas. Ofcom reports on infrastructure deployment every year, and we should see the impact of all the Government’s measures in this field in due course. In view of those explanations, I hope that the noble Lord will withdraw his amendment.

[Lord Kennedy of Southwark]

The Minister made the point, with regard to the amendment of the noble Baroness, Lady Pinnock, that 12 months may be too soon. After what period of time does he think a report would be useful? Would it be 12 months, 24 months or 36 months?

[Lord Ashton of Hyde]

Ofcom reports every year, so I do not think it would matter whether it is 12 months or 24. My point was specifically on mobile coverage for which the 12 months would not be appropriate, because 5G has not really been invented yet, so there certainly will not be any visible signs on mobile coverage. Essentially, we are saying that we want fibre-optic cable to be laid over all areas of the country to improve future mobile reception and also fibre to the premises, which is what the future gold standard is. We need it everywhere, not just in rural areas. While we accept that rural and hard-to-reach areas have a problem, I have laid down a series of other measures to deal with those areas specifically.

[Lord Kennedy of Southwark]

I thank the Minister for that response and for his response to my other question. I am happy at this stage to withdraw my amendment.