Product Security and Telecommunications Infrastructure Bill

Lord Bassam of Brighton Excerpts

2nd reading
Monday 6th June 2022 Lords Chamber

[Lord Bassam of Brighton (Lab)]

My Lords, I feel that I am trespassing in this debate—on this rather light-hearted blue-on-blue banter over the way there—but I fear that I ought to join in because this is an important and necessary piece of legislation and, like several of the Bills in the Queen’s Speech, it has been much delayed and is long overdue.

For the most part, we on these Benches support the Bill and wish to help it on its way to the statute book. However, we have concerns over its effectiveness and in places we think that it is wrong and in need of amendment. Part 1 of the Bill, as the Minister set out, relates to powers to introduce mandatory security requirements for consumer connectable products such as smartphones, smart televisions and connected speakers. Historically, the UK has relied on European law to help regulate security requirements. We are now in a position where we are likely to follow where the EU leads on product security. What surprises me is that the Government have been so slow to make progress with their own legislation, given how increasingly important cybersecurity has become.

The other obvious and important point is that, given how quickly technology is evolving in this field, we are always likely to be playing a form of catch-up with legislation. I wonder, therefore, whether the eloquent Minister tell us what plans the Government have to future-proof the legislation, apart from relying on bringing forward regulations following on from the Bill. For example, is work being undertaken with tech companies and manufacturers to anticipate changes to products that will change or weaken, in any way, current levels of cybersecurity? Given that the Government consulted in 2019 on introducing mandatory security requirements for connectable products, and given that legislative proposals were consulted on in 2020, do they think that the current list of products is right, and will they be keeping those excluded under review?

We particularly welcome the move to bring forward a ban on default passwords, a requirement for products to have a vulnerability disclosure policy—whereby security weaknesses in a product are identified and notified—and the requirement for transparency about the period for which a manufacturer will provide security updates for the product. However, I wonder what guarantees consumers will have that these policies will be adequately policed and that enforcement will be effective. Will additional resource be committed, and how quickly will this regime be introduced? Surely the failure of the 2017 code suggests that action is needed now if product security is to be taken seriously.

Part 2 of the Bill covers the rollout of sites to extend and improve the digital network—something that we are all signed up to—and to ensure that it is capable of delivering digital connectivity to a level and standard which a modern economy demands. The Government’s approach so far raises questions about their judgment on the balance of power between landlords providing sites for installations and the network providers. Clearly, something is not right when companies can almost unilaterally determine the level of rent that they are prepared to pay for sites, regardless of earlier agreements. We are not convinced that the arrangements set out in the Bill get the balance right. Landlord-tenant relationships are complex matters, subject to laws that are often open to wide interpretation. What appears to be missing here is a process for dispute resolution that takes into account the original agreements and accurately reflects the value of the site to the network providers. We will no doubt, with others, seek to probe this during the course of the Bill, ensuring that principles of fairness and equity are properly written into the legislation and, in particular, that the many charitable and sporting organisations that benefit from rental income are not disadvantaged.

This is legislation worthy of support from these Benches and, like others who have been involved in the debate this afternoon, we look forward to bringing forward practical changes and improvements to the Bill which will ensure that, when it is on the statute book, this legislation is effective and assists in rolling out our digital connectivity in a way which will greatly benefit our society. We are happy to engage in that process.