Investigatory Powers Bill

Debate between Lord Bishop of Chester and Lord Oates

Report: 2nd sitting (Hansard - part one): House of Lords
Monday 17th October 2016 Lords Chamber

[Lord Oates]

My Lords, I will not detain the House too long and certainly do not want to repeat all the eloquent arguments that my noble friend Lord Paddick has outlined on this matter. I want to say two things about the previous two interventions. The utility issue—the fact that people may be prepared to give up their liberties—does not necessarily come into play here. I do not think that the vast majority of people have any idea whatever of what the Government are planning. I do not think they have any idea that regardless of whether they are regarded as innocent, suspect or anything else, every single person’s website visits will be held on databases on the instruction of the Government. Nobody is aware of that. They are not making a decision about whether they are prepared to accept that infringement, and I think they will be horrified when they understand it.

A number of noble Lords have said that the fact that the law can be evaded is not a reason not to have a law. If a law can easily be evaded and that law requires a massive invasion of the privacy of people throughout this country, that has to be weighed in the balance. It has to be taken very seriously.

We have to be clear about what is proposed. The Government intend to take the power to compel the creation of databases of every single website that every single person in this country visits over a 12-month period. That is a huge amount of data, and it puts a vast amount of power in the hands of the Government. More to the point, it is a vast amount of power in the hands of whoever might manage to hack those databases. This is not some vague threat made up or exaggerated by opponents of these ICR powers to make a point. It is a real and present danger and a massive threat to the privacy and security of every single person in this country. We are all aware of the spate of state-sponsored and other hacking that has been taking place in the United States and elsewhere around the world. Every day, systems come under serious attack and none is entirely immune. If the US Pentagon can be hacked, then who on the Government Front Bench can say hand on heart that this vast new store of information that the Government are demanding be created cannot be hacked?

When I talk to people around the country about the powers that the Government are proposing to take in relation to ICRs they are almost universally shocked. They do not have any faith that such data will be held securely, and they cannot understand why the Government would put at risk their privacy and security unless holding such information was critical to the prosecution of the most serious crimes. As my noble friend Lord Paddick has pointed out, the security and intelligence agencies have consistently been clear that they do not need ICRs. There are very simple ways to evade the collection of ICRs, so those committing serious crimes are unlikely to be troubled. The strongest case cited for these powers is in relation to identifying and prosecuting paedophiles, and there is no doubt we should listen and consider this case very carefully because the protection of children from such people must be regarded as an absolute priority for every one of us. However, as my noble friend Lord Paddick has pointed out, in those serious crimes, including child exploitation, GCHQ can assist law enforcement and there is a joint unit for those purposes. Perhaps more to the point, the sort of people involved in the criminal activities we are discussing would easily be able to avoid their ICRs being captured.

The power the Government are claiming is extraordinary. It is a power that none of the other “Five Eyes” countries has. Indeed, to my knowledge, no even nominally democratic Government in the world have it. It is such an extraordinary power that my noble friend Lord Carlile, who is unfortunately no longer in his place and who is no slouch on counter- terrorism measures, wrote an article in the Mail on Sunday on 26 May 2013:

“I, Lord Reid, Lord West and others of like mind have never favoured the recording of every website visited by every internet user, though we have been accused of that ambition”.

Granting the Government a power to order the retention of the details of every website visited by every person in the country over a 12-month period will give us, at best, only false comfort. It may make some of us feel more secure, but it will not make us more secure. In fact, it will put at risk the security and privacy of every person in this country. I support the amendment in the names of my noble friends.

[The Lord Bishop of Chester]

My Lords, I was a member of the Joint Committee conducting pre-legislative scrutiny of the Bill, along with the noble Lord, Lord Strasburger—I am not sure whether anyone else in the Chamber was. I remember a discussion which was genuinely open and uncertain about the practicality of this above all. The issue of privacy has been raised very powerfully by the noble Lord, Lord Oates, and others from the Liberal Democrat Benches. We thought at the end of the day that the whole Bill was about reaching a balance, with a degree of compromise over issues of privacy alongside the really quite robust safeguards which are in the Bill, such as the role of the judicial commissioners, as all set out in Clause 86. Our real issue was over practicality and cost. When the Minister comes to respond, it would be helpful if we could have a bit more guidance as to what this is going to cost. The cost will not fall on the companies; it will fall upon the Government, who will have to fund it.

However, we were persuaded that under Clause 84, the retention notice may be more specific than has been suggested in the speech from the Liberal Democrat Benches. It is not necessarily every connection to every website: the provision could be targeted to particular websites, for example, which is all set out in Clause 84. We should also emphasise that these records would not be of the content of what was happening: it would be where you had made contact, not the content of the connection as such. That is an important factor which has not been mentioned in the contributions.

That said, a representative from Denmark came and explained to us why the Danes had given up on this, simply on the grounds of cost and practicality. It is the practicalities that I would like to hear about most from the Minister when he speaks, alongside of course acknowledgement of the points that have been made by others in the debate.