(5 years, 4 months ago)
Lords ChamberI was suggesting that that would be a change to the existing arrangements and that I do not think it right to suggest a change in the criminal law from the Dispatch Box without considering it fully.
My Lords, an earlier Minister referred to corporate social responsibility. Clubs such as Everton and Tottenham Hotspur have corporate social responsibility not only in this country but abroad; they should not be allowing their players to endorse gambling in Kenya and other foreign countries in ways that would not be allowed in this country.
I do not completely agree with the noble Lord. I agree that they have social responsibility and must protect not only their own good name but that of football, which is an asset to this country. But corporate bodies have to obey the laws of the countries in which they perform. That is their legal duty and what the Gambling Commission will take into consideration.
(5 years, 7 months ago)
Lords ChamberThe Government have not been in touch with the 1,300 grantees but, as I said, the fund is producing a list of the 500 to 600 for which conservation management plans might have been produced. It will be able to ask those copyright holders whether they are interested in doing that.
My Lords, it is clear that something terrible happened, but surely the way to make sure that it does not happen again is to give the National Archives absolute responsibility, whereby any holder of archives should consult it before contemplating any destruction or removal.
I am sorry but I do not agree with the noble Lord that something terrible has happened. The National Lottery Heritage Fund has no remit to retain records. It is not an archive; it is there to promote heritage, and it is able to spend on heritage the £150,000 a year that is saved. First, as I said, the originals remain with the grantees. Secondly, the fund took legal advice and, even if it had retained them, it would not have been able to make them available. Therefore, there was no point spending £150,000 a year on retaining the documents when they were not the originals and the originals were available elsewhere.
(5 years, 8 months ago)
Lords ChamberThe noble Lord is right that there has already been a lot of collaboration. Collaboration exists between Netflix and other subscription video on demand services and the public service broadcasters. That will continue and is being encouraged. Illegal boxes are illegal. They will be prosecuted within the law because they take away the benefits that public service broadcasting brings to ordinary citizens and consumers in this country.
My Lords, one protection for public service broadcasters in the 2003 Act was prominence in the listings, yet now both the FANGs that have been described and the manufacturers are calculatingly getting around the listings to shunt public service broadcasting into the sidings. It will need from the Government and the regulator more than passive observation. Active action will be needed if the PSBs are to be protected.
I agree with that. That is why we promised to legislate when Ofcom gives us its recommendations for the online prominence regime. If it needs legislation, the Secretary of State says that we will do that.
(5 years, 8 months ago)
Lords ChamberI do not know why that title was selected but it seems to explain exactly what the festival is all about.
My Lords, is this new festival an opportunity to establish a museum of Brexit, where the record of this Government can be preserved for future generations? Would not the advantage be that there is already a perfect location in the Chamber of Horrors?
I imagine that the noble Lord wants it to be publicly funded, but I do not think that that is necessarily what the public want.
(5 years, 9 months ago)
Lords ChamberIf they fulfil those conditions that I mentioned, the answer is yes.
I would like to touch on what our exit from the EU might mean for the applied GDPR, as provided for by Chapter 3 of Part 2 of the Data Protection Act 2018. Noble Lords will recall that we created a separate regime which provides for broadly equivalent standards to the GDPR to apply to processing activities that are outside the scope of EU law and covered by neither Part 3 nor 4 of the Act, which deal with processing by law enforcement and intelligence services respectively. This regime currently applies, for example, where a controller other than the intelligence services is processing for national security or defence purposes.
As the EU GDPR will not, as a matter of domestic law, apply directly to any general processing activities when we leave the EU, these regulations are intended to simplify matters by providing for a single regime for all general processing activities. Those provisions in the 2018 Act that provide for the applied GDPR, together with other references to the applied GDPR in legislation, are removed. Importantly, the provisions in the applied GDPR which currently provide exemptions from specified provisions where these are required for the purposes of safeguarding national security or for defence purposes have been retained in the merged regime. These exemptions balance the need to protect personal data against ensuring that the UK’s security and intelligence community can continue to carry out its vital work to safeguard national security. I should emphasise that the merger does not itself alter the purview of EU law so where aspects of domestic data protection law were outside EU competence before exit day, this will not change as a result of this instrument. We have included provisions in the regulations to make that point clear.
I believe that the approach the Government are taking is an appropriate way of addressing the deficiencies in domestic data protection laws resulting from the UK leaving the EU. The aim of these regulations is to ensure continuity for data subjects, controllers and processors by maintaining the same data protection standards that currently exist under the GDPR and the Data Protection Act 2018.
My remarks have focused on the changes made to the GDPR and the Data Protection Act because they are the most significant. For completeness, I should add that the regulations make a number of minor amendments to other legislation, consequential on the amendments we are making to the UK GDPR and Data Protection Act 2018. For example, they amend references to the “GDPR” in other legislation to refer to the “UK GDPR”.
They also address a small number of non-exit-related issues. They clarify that the GDPR definition of consent applies for the purposes of the Privacy and Electronic Communications (EC Directive) Regulations 2003, and address two minor drafting issues that were identified in Schedule 19 to the Data Protection Act 2018, shortly before it received Royal Assent. I commend these regulations to the House
My Lords, I am not sure the Minister is going to have quite the easy ride he had with the first statutory instrument. My eye was caught by a very detailed briefing by the law firm Fieldfisher on the consequences of this SI. It was the final paragraph that caught my eye. It says:
“From a broader perspective, the creation of a new data protection regime in the UK may present additional complexities for controllers and processors who are caught by both European and UK law and will therefore need to comply with both the GDPR and (in relation to UK customer data) something that looks like the GDPR but which may start to move away from it as time goes on”.
Those last words are ominous. There is no doubt that the GDPR was a great success for European co-operation. The noble Baroness, Lady O’Neill, reminded us earlier of the wide range of issues that we will have to take into account in protecting our democracy from data abuses. There are similar dangers in the protection of our commercial and business life. The value of the GDPR is that it gives us a strength of certainty of European legislation.
I will delay the House a little with a reminiscence. Between 2010 and 2013 I was the Minister at the Ministry of Justice responsible for the earlier negotiations on GDPR. I went to a meeting in Lithuania and throughout the day I noticed that there was one person sat at the table who never participated, voted or said anything. At the end I turned to the British ambassador and asked, “Who is the guy at the end of the table—he has not said anything?” “That is the Norwegian,” he said. “He can come and listen, but can’t vote and he is not involved our decisions.”
I often think of that when I hear people banging on about sovereignty. Sovereignty was best exercised by British Ministers at the table briefed, I have to say, by officials who were the people to go to. I will not name any particular official, but there was one man to go to as GDPR clunked its way through the machinery. There were “light touchers” and those who had quite recently experienced a Stasi or state abuse of personal data and privacy, and balancing the requirements of GDPR was part of the diplomacy our officials showed. I was also greatly assisted by our parliamentarians in the European Parliament: my noble friend Lady Ludford was very influential in steering the GDPR through some choppy waters.
The noble Lord, Lord Forsyth, who is not in his place, said a few weeks ago in one of our Brexit debates that the first time he went as a Minister to Brussels he felt resentment and animosity that he was being, as it were, dictated to by these foreigners. I do not think that I am being too misleading in saying that; I am sure that he will correct me later if I am wrong. He certainly did not feel at home there.
Just to be clear, I did not say anything about the speed with which the European Commission would provide its decision.
Oh, dearie me. It is always the EU’s fault that we have got ourselves on this particular window ledge.
I am not blaming anyone, but an EU adequacy decision can be given only by the European Commission. It is not a question of blame; it is just a fact.
I will close with another one where I am sure that the Minister is not going to blame the European Commission but say that it is its responsibility. During the period that I am talking about, the stature and influence of our then Information Commissioner had a major impact on how we put the GDPR in place. Again, the Minister was unable to give us any real reassurances about whether we will be at the table in co-operation, or whether it is these difficult foreigners who are going to stop us doing that.
It is no use the Minister saying otherwise, because this is the reality.
I am sorry, I cannot let that pass. I never said anything about difficult foreigners.
The Minister never said anything about difficult foreigners, but there has always been the impression that this would all be as smooth as smooth. “Do they not understand that we are trying to be helpful?”, we ask, when we have caused Europe so much disruption and cost by this act. In this case, it is essential that we are part of the ongoing dialogue. This GDPR is not the end of the process. As the House was discussing last week, these European laws are going to develop. How we then act and deal with them is going to affect where jurisdiction lies—with European or British courts.
(5 years, 9 months ago)
Lords ChamberMy Lords, I declare an interest which every Member of this House who speaks will have to declare so perhaps I can save them the bother. I will benefit from the fact that I will not have to pay the £40 charge if the regulations are approved. Secondly, my wife is a parish councillor and will also benefit.
The original regulations were debated and approved in this House on 20 March 2018. Noble Lords may recall that those regulations introduced a new charging structure to fund the Information Commissioner’s Office. The authority for doing so derived at the time from the Digital Economy Act 2017, now superseded by the powers set out in Section 137 of the Data Protection Act 2018. As we promised during those debates, we are now looking to implement a new exemption from the annual data protection charge for elected representatives, candidates for election and Members of the House of Lords for processing that they undertake in the course of fulfilling their democratic duties.
The new data protection framework is about protecting personal data—that is, information that can identify individuals. Some of us in this House will be data controllers—we may hold personal data—and are responsible for how that information is processed. There may be a number of reasons why we hold that personal data—for example, we may have been entrusted with it by members of the public for particular aspects of parliamentary work—but, as data controllers, we have various obligations under the Data Protection Act, including how we look after that information.
While we have previously debated the importance of having an adequately funded regulator, there will be some situations where it would be unreasonable for some data controllers to pay the charge or where the charge would give rise to unintended negative consequences. For that reason, Schedule 1 to the funding regulations details a number of exemptions to the payment of the charge. For example, any data controller who processes personal data only for staff administration purposes, or purely for advertising, marketing and public relations reasons, is not required to pay.
During the parliamentary debate of the original funding regulations on 20 March last year, the Government undertook to review these exemptions. A public consultation took place last summer and has been available online since June 2018. The consultation sought views on whether each of the exemptions was still appropriate; a proposed new exemption for elected representatives, prospective candidates for election and Members of the House of Lords; and whether any other new exemptions should be introduced. Respondents were broadly supportive of the current exemptions regime. However, there was also support for one new exemption for elected representatives, candidates, including prospective candidates for election, and Members of the House of Lords.
The Government’s view is that activity deriving from elected representatives’ public offices and functions should not be liable to a charge. Charges of this nature potentially represent a perceived or actual barrier to democratic engagement. A number of respondents supported this view. In light of this support, we have decided to take this amendment forward for implementation, so I now come to the details of the instrument.
The amendment introduces an exemption for: Members of the House of Lords who are entitled to receive a Writ of Summons to attend this House specifically for the purposes of related functions; elected representatives, as defined in paragraph 23(3) of Schedule 1 to the Data Protection Act 2018 in connection with the discharge of their respective functions; and relevant processing undertaken by candidates, prospective and nominated, seeking to become elected representatives. These exemptions cover those who are acting on instructions or on behalf of such Members and elected or prospective representatives. Importantly, that is not to say that all processing of data conducted by those listed in the amendment, including all Members of this House, is automatically exempt from paying a charge. The instrument makes it clear that the exemption relates solely to processing carried out by these parties in connection with their democratic functions.
In the case of prospective candidates, the exemption would apply only to processing in connection with those activities related to election or re-election in a post. It is important to extend the exemption to anyone seeking to become an elected representative, not just to nominated candidates. This is because formal nomination, the stage at which candidates are defined in electoral legislation, occurs only in the immediate lead-up to an election. Activity to support re-election is likely to predate this stage. Excluding prospective candidates from this exemption would place them at a financial disadvantage compared with their incumbent counterparts. We have restricted the application of the exemption to data processing associated with the functions of our respective roles. This provides a safeguard against misuse, for example by individuals falsely claiming to be prospective candidates.
I want to be clear that the exemption relates only to the payment of the annual data protection charge. It is not an exemption from data controllers’ important data protection responsibilities. Anyone who does not adhere to those responsibilities and principles will face enforcement action by the ICO.
I hope noble Lords will agree that this amendment is important to encourage wider participation in the democratic engagement process. The removal of a requirement to pay the annual data protection charge to the ICO will ensure that all prospective candidates will start their electoral campaigns on a footing equal to that of elected representatives already in post. It also reflects the high regard the Government place upon those undertaking public functions. I beg to move.
My Lords, we welcome this statutory instrument and the exemptions provided for. Like the Minister and, I think, everybody in this House, we do not want a tax on democracy, but people should be assured that the legal responsibilities remain the same and can be quite onerous. The Minister’s last remark was that we must not allow people to use the candidate or even the MP or Peer as cover for activities that would be outside the narrow exemption of this House.
This reminds me of debates we had some 20 or even 30 years ago—in the early 1990s—when we brought in legislation about the financing of political parties. I remember that those of us who had experience of working for political parties were very conscious that they are all made up of volunteers, often amateurs. There was a danger in that legislation—and I think there still is—of putting on to enthusiastic volunteer amateurs, who make our democracy work, very onerous financial responsibilities in terms of election spending and, in this case, very onerous data protection responsibilities. There might be a case for giving political parties some funding for advice, training and support to make sure that these responsibilities are understood and work well.
What the Minister has had to say is very welcome, and we are all involved in this, but it appears that the initial advice was a little confusing and caused concern. Once these regulations are approved, as I am sure they will be, I wonder whether the House authorities can issue some clear and definitive advice that will be of benefit to Members of this House. We look forward to this SI being passed.
(5 years, 10 months ago)
Lords ChamberI do not want to talk specifically about RT for the reasons I mentioned. Ofcom has sanctions which can include fines, suspension or revocation of a licence if Ofcom deems that suitable.
My Lords, is the Minister aware that Ofcom licenses many hundreds of broadcasters in London? This is a good example of what the noble Lord, Lord Howell, often refers to as Britain’s soft power. Is it not very important that we leave Ofcom to the job it was given with the powers it was given? The idea that some kind of political or government pressure was involved does not set a good precedent with regard to closing radio or television stations. We should let RT make its case to Ofcom, let Ofcom use its powers and then see what happens.
I completely agree with the noble Lord. That is why I said in my initial Answer that it is right for Ofcom to make decisions without government interference.
(6 years, 6 months ago)
Lords ChamberI am sure that the Secretary of State would agree with that. The difference here is that it was a very popular decision, which always makes it easier.
My Lords, will the Minister take a more sober judgment? In 2005 this House, and Parliament as a whole, thought that it had done a magnificent thing in stopping the advent of super-casinos. It was the euphoria of stopping them that allowed for the introduction of gambling machines to go through almost unnoticed. There is a danger in the euphoria here also. I think that the noble Lord, Lord Campbell-Savours, and others are right. It is the growth of online gambling and the changes in technology that afford it that will give us the next problem. I urge that the research and analysis into online gambling is carried out with rigour and it is not simply left to the industry to self-regulate, clever as it may be with its artificial intelligence and its algorithms. Independent research is needed, which can advise government in the future, otherwise this problem will come back in another form.
I take that point. I am absolutely not suggesting that today’s announcement is the end of it. We will be very specific: the Gambling Commission is looking at requiring operators to set limits on customer spending until affordability checks have been concluded and at bringing forward stricter licence requirements for gambling companies to interact with vulnerable customers. This is not something that we are just letting them get on with; it is being required of them. If a company were to break such stricter licence requirements, it could lose its licence. There would be very serious sanctions if a company did it wrong. The Gambling Commission is also examining proposals to prohibit reverse withdrawals and the use of credit cards for online gambling. We will continue to pay close attention to the operators’ progress in using behavioural data to identify problem gamblers. We are not just sitting back and saying that this is it. We are monitoring it. The Gambling Commission continues to monitor it and is putting in stricter conditions.
(6 years, 6 months ago)
Lords ChamberMy Lords, I am grateful for all those comments. It is nice that in the last group I will handle on it—touch wood—I leave the Bill in a glow of good will. I am particularly pleased that I can agree with the noble Lord, Lord McNally, and that we have been able to respond to some of the concerns and points raised in this House. In many ways, the Bill has been an object lesson of discussion on a very technical Bill. We have made progress. I certainly acknowledge and am very grateful for the support and co-operation I have had from both opposition Front Benches.
As a little footnote, which might give encouragement to others, I first raised the Thomson Reuters matter because it sponsored a conference at the Guildhall well over a year ago about the coming of the GDPR. I went along to find out about it. I and the other Benches raised this from that. It has now ended up in the Bill. It is an encouragement to companies that sometimes think that legislation is a mysterious place that, by taking little bit of effort to put the case and extend it, they can have real influence.
I am grateful to the noble Lord. That brings me nicely to the point made by the noble Lord, Lord Pannick, about arbitrators. The noble Lords, Lord Clement-Jones and Lord Stevenson, mentioned the importance of arbitration to the economy of this country. I am only too well aware of it from my background in insurance. London has a very well-respected legal system, but the arbitration system is linked to that. We certainly would not wish in any way to hinder it. Contrary to what the noble Lord, Lord McNally, did, the people who brought this up seemed to do so at the last minute. I slightly wonder how they managed to miss this trick, if it is so obvious, for the two years that the GDPR has been in place, let alone—
(6 years, 11 months ago)
Lords ChamberDoes the Minister also agree that a further answer to the points made by the noble Lord, Lord Faulks, and the noble and learned Lord, Lord Mackay of Clashfern, is that it is absolutely inevitable that the detailed provisions of the Bill will be, on occasion, the subject of dispute, uncertainty and litigation, and that it would be very helpful to have a statement of principle on what is intended at the commencement of the Bill? This would not be the first time that a Bill has done that. Everybody would then know what the principles were. Of course, the Minister still needs to consider before Third Reading what that statement should be, but that is the point, as I understand it, of government Amendment 1.
Why does the Minister feel it so necessary to push ahead with his amendment when it is quite clear that the best and most constructive way forward would be for both amendments not to be pressed to allow constructive discussion and resolution at Third Reading?
Government Amendment 1 provides a basis for the discussion that we will have before Third Reading. Of course, I accept that it could be amended at that stage.
As for the remarks of the noble Lord, Lord Pannick, I will have to read my noble friend Lord Faulks’s words. I was not entirely sure that he was as supportive as the noble Lord feels, but I may have misinterpreted him.
(7 years ago)
Lords ChamberMy Lords, I associate myself with the amendment in the name of the noble Baroness, Lady Howe. We are in Committee and it is a probing amendment. When we discussed it with colleagues the feeling was that 13 might be the right age but, as the noble Baroness indicated, it needs probing and some thinking about.
There is a danger, particularly in a House with our age group, that we assume these technologies are understood by the young—even the very young. We all hear anecdotes of parents or grandparents who have to consult their eight year-olds on how to make various gadgets work, but that misses the point. A frightening amount of information is being freely given. I mentioned at Second Reading that my generation and my parents’ generation had thoughts of personal privacy that my daughter and her contemporaries seem to have no thought of. They are very happy to exchange information about themselves, what they do and where they are with gay abandon.
When we get to the very young it is very important to make sure—we will discuss this in later amendments, if not tonight—that there is sufficient understanding and information to make informed choices, otherwise we get into very dangerous territory indeed. Therefore we are, not for the first time, in the noble Baroness’s debt for raising these questions. Late as it is, it is right that we put on record that these things, along with the amendments that will follow in the next couple of groupings, need to be taken as a whole before we make a final judgment as to the right age.
My Lords, I echo the comments of the noble Lord, Lord McNally, to say we are grateful to the noble Baroness, Lady Howe. I acknowledge, particularly after her Second Reading speech, that she has not immediately demanded that the age be put back up to 16, which I thought she might. She has produced an interesting amendment.
Amendment 16 would give the Information Commissioner the power to determine the age threshold at which children can consent to their data being processed by online information services. This would be based on consultation and evidence. While it is certainly a preferable proposal to a blanket increase to 16, I am afraid I still cannot agree.
First, the Information Commissioner’s role as an independent regulatory authority is to administer and enforce the application of data protection legislation. As part of that role the Commissioner provides advice to businesses, organisations and individuals on the proper implementation of the legislation and on their rights under that legislation, and provides redress for breaches of individuals’ personal data. It also has an advisory function in relation to Parliament, the Government and other institutions. By contrast, the question of affixing the age below which parental consent is required has much broader-ranging considerations and implications, including an important moral dimension. Requiring the Information Commissioner to be the one to answer it would place on the officeholder an extra demand for which the office is neither designed nor resourced.
Secondly, the GDPR specifies that it is member states that should make this important decision. It does not give the power for states to delegate this choice to another regulatory body. Therefore, this amendment would make the Bill as a whole non-compliant with the GDPR. It is for those reasons that the Government consider that the question should be decided by this House and the other place rather than by a regulatory body. I realise that, in saying that, we leave ourselves open to further discussions on this matter.