Asked by: Lord Clement-Jones (Liberal Democrat - Life peer)
Question to the Department for Science, Innovation & Technology:
To ask His Majesty's Government (1) which public bodies are subject to the data sharing agreement under the Digital Economy Act 2017, (2) which public bodies have received data under the Digital Economy Act 2017, and (3) what checks they have performed on the accuracy of the entries added to the register of information sharing agreements.
Answered by Baroness Lloyd of Effra - Baroness in Waiting (HM Household) (Whip)
The Digital Economy Act 2017 (DEA) contains data sharing powers that allow specified authorities to share information, including personal data, for specific purposes. Anyone sharing information under Chapters 1- 4 of Part 5 of the DEA is required to have regard to the relevant Code of Practice when doing so. This states that those authorities, listed in schedules 4-8 and Chapter 2 of the DEA, should enter an information sharing agreement (ISA) when sharing data under these powers.
The codes of practice provide details to practitioners on how information sharing powers under the DEA must be operated. Those relating to public service delivery (PSD), debt and fraud and civil registration place a requirement on the Data Controller(s) to set out information about their ISA within a publicly available register.
The register, operated by Government Digital Service (GDS) and publicly available on GOV.UK, provides a central repository of all data shares made under the powers provided by Chapters 1 - 4 of Part 5 of the DEA. It is a key transparency measure which outlines details of each data share, including the bodies involved, why it is shared, for how long and the expected benefits.
The register currently contains 525 entries and 464 public bodies. It is available at https://www.digital-economy-act-register.data.gov.uk.
While GDS is responsible for maintaining the register, the DEA’s statutory Code of Practice makes clear that responsibility for the accuracy of register entries rests with the public authorities involved in each data share, except in relation to the debt and fraud provisions, where responsibility falls under the debt and fraud secretariat.
Asked by: Lord Clement-Jones (Liberal Democrat - Life peer)
Question to the Department for Science, Innovation & Technology:
To ask His Majesty's Government when they plan to publish draft regulations under the powers granted in section 6A of the Privacy and Electronic Communications (EC Directive) Regulations 2003 to set out new exemptions to the prohibition on storing or accessing information in terminal equipment under section 6(1); and what is the extent of the involvement of the Information Commissioner's Office in drafting those regulations.
Answered by Baroness Lloyd of Effra - Baroness in Waiting (HM Household) (Whip)
The government is actively considering what exceptions could be made to regulation 6, and we shall update the House in due course.
Any regulations would be developed and drafted by the Department for Science, Innovation and Technology. The Information Commissioner’s Office (ICO) will publish recommendations for the government on this issue. The Government will consult the ICO and other interested stakeholders on the development of any regulations, as we are legally required to by the provisions in section 112(3) of the Data (Use and Access) Act 2025.
Asked by: Lord Clement-Jones (Liberal Democrat - Life peer)
Question to the Department for Science, Innovation & Technology:
To ask His Majesty's Government what discussions they have had with the Information Commissioner's Office about the evidential basis for commercially viable models of contextual advertising that do not require user consent.
Answered by Baroness Lloyd of Effra - Baroness in Waiting (HM Household) (Whip)
Throughout the project looking into new exemptions to regulation 6 of the Privacy and Electronic Communications Regulations (described in previous answers HL12548), we have we regularly meet with the ICO to discuss the evidence they are gathering. This includes evidence from technical experts and industry representatives.
The ICO will make recommendations to the government next year about this matter and we will consider those recommendations and the evidence supporting them.
Asked by: Lord Clement-Jones (Liberal Democrat - Life peer)
Question to the Department for Science, Innovation & Technology:
To ask His Majesty's Government what consideration they have given to allowing the use of pseudonymised data for personalised advertising, provided that data sharing is limited to processors, retained only for necessary periods, and subject to robust privacy safeguards.
Answered by Baroness Lloyd of Effra - Baroness in Waiting (HM Household) (Whip)
As noted in the answer to HL12548, HL12549, HL12551, the Government is currently exploring options for additional exemptions to the cookie consent rules in the Privacy and Electronic Communications Regulations. It will consider the Information Commisisoner’s Office’s recommendations in this area carefully in due course.
Officials have met with the Professional Publishers Association and other trade associations to discuss how this work could support online advertisers, whilst preserving high standards of privacy for web users. The government will undertake further engagement with relevant stakeholders to consider the impact and design of any new proposals before deciding how to proceed.
Asked by: Lord Clement-Jones (Liberal Democrat - Life peer)
Question to the Department for Science, Innovation & Technology:
To ask His Majesty's Government whether they plan to meet the Professional Publishers Association to discuss the impact of the Information Commissioner's Office's proposed regulatory approach to online advertising on the publishing sector.
Answered by Baroness Lloyd of Effra - Baroness in Waiting (HM Household) (Whip)
As noted in the answer to HL12548, HL12549, HL12551, the Government is currently exploring options for additional exemptions to the cookie consent rules in the Privacy and Electronic Communications Regulations. It will consider the Information Commisisoner’s Office’s recommendations in this area carefully in due course.
Officials have met with the Professional Publishers Association and other trade associations to discuss how this work could support online advertisers, whilst preserving high standards of privacy for web users. The government will undertake further engagement with relevant stakeholders to consider the impact and design of any new proposals before deciding how to proceed.
Asked by: Lord Clement-Jones (Liberal Democrat - Life peer)
Question to the Department for Science, Innovation & Technology:
To ask His Majesty's Government what steps they are taking to ensure that data protection regulation supports innovation and competitiveness in the UK's digital publishing and advertising markets.
Answered by Baroness Lloyd of Effra - Baroness in Waiting (HM Household) (Whip)
As noted in the answer to HL12548, HL12549, HL12551, the Government is currently exploring options for additional exemptions to the cookie consent rules in the Privacy and Electronic Communications Regulations. It will consider the Information Commisisoner’s Office’s recommendations in this area carefully in due course.
Officials have met with the Professional Publishers Association and other trade associations to discuss how this work could support online advertisers, whilst preserving high standards of privacy for web users. The government will undertake further engagement with relevant stakeholders to consider the impact and design of any new proposals before deciding how to proceed.
Asked by: Lord Clement-Jones (Liberal Democrat - Life peer)
Question to the Department for Science, Innovation & Technology:
To ask His Majesty's Government whether they have asked the Information Commissioner's Office to assess the relative economic and privacy impacts of (1) contextual, and (2) personalised, advertising models.
Answered by Baroness Lloyd of Effra - Baroness in Waiting (HM Household) (Whip)
As noted in the answer to HL12548, HL12549, HL12551, the Government is currently exploring options for additional exemptions to the cookie consent rules in the Privacy and Electronic Communications Regulations. It will consider the Information Commisisoner’s Office’s recommendations in this area carefully in due course.
Officials have met with the Professional Publishers Association and other trade associations to discuss how this work could support online advertisers, whilst preserving high standards of privacy for web users. The government will undertake further engagement with relevant stakeholders to consider the impact and design of any new proposals before deciding how to proceed.
Asked by: Lord Clement-Jones (Liberal Democrat - Life peer)
Question to the HM Treasury:
To ask His Majesty's Government what assessment they have made of the accuracy of Home Office travel data used in determining immigration status; whether this has involved 24,000 families having their child benefit stopped; whether any failures in accurate determinations would breach the principles of accuracy, fairness and transparency set out in the UK General Data Protection Regulation; and whether they plan to cease the use of Home Office data in assessing immigration status.
Answered by Lord Livermore - Financial Secretary (HM Treasury)
HMRC do not use Home Office international travel data to determine immigration status. HMRC uses the data as a starting point for identifying potential unreported absences from the UK. Undetected changes to an individual’s residency status are a leading cause of Child Benefit error and fraud.
HMRC’s Chief Executive wrote to the Treasury Select Committee on 14 November 2025 about this matter including the corrective action that HMRC is taking. This letter was subsequently published by the Committee on 18 November 2025.
It was understood from the outset and made clear by the Home Office that its international travel data could not be used in isolation to determine Child Benefit entitlement, therefore requiring HMRC to conduct its own checks and enquires with recipients to establish eligibility. The same data was used during a pilot in 2024 which allowed HMRC to focus their enquiries on less than 2% of recipients while preventing £17m in incorrect payments. This led to the expansion of the measure and investment in an additional 180 counter-fraud staff, announced at the Budget in 2024 and is expected to save around £350 million over the next five years.
When using international travel data complemented by a check of UK employment using the Pay As You Earn (PAYE) system, HMRC will no longer suspend payments at the outset of its enquiries. Instead, recipients will be given at least one month to evidence their entitlement. HMRC will continue to iterate the process where its monitoring and learning suggests that it should make further changes.
Asked by: Lord Clement-Jones (Liberal Democrat - Life peer)
Question to the Department for Science, Innovation & Technology:
To ask His Majesty's Government whether they plan to use powers under the Data (Use and Access) Act 2025 to extend consent requirement exemptions under regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003 for low-risk uses of pseudonymised data.
Answered by Baroness Lloyd of Effra - Baroness in Waiting (HM Household) (Whip)
The Privacy and Electronic Communications Regulations (PECR) require online advertisers to seek consent to place cookies (and similar technologies) on users’ devices. But certain uses of cookies are a lower risk to privacy than others, and privacy enhancing techniques such as pseudonymisation can further reduce risk. As part of the Data (Use and Access) Bill this government introduced reforms to PECR that enabled more than £17m annually in compliance savings. The government is working with the Information Commissioner’s Office (ICO), industry, and others to assess whether new exemptions under PECR could be used to promote growth and innovation in the advertising, creative, and publishing industries while maintaining high privacy standards for users.
Asked by: Lord Clement-Jones (Liberal Democrat - Life peer)
Question to the Department for Science, Innovation & Technology:
To ask His Majesty's Government what steps they are taking to ensure that the UK's data protection framework supports the long-term viability of advertising-funded creative and editorial content.
Answered by Baroness Lloyd of Effra - Baroness in Waiting (HM Household) (Whip)
The Privacy and Electronic Communications Regulations (PECR) require online advertisers to seek consent to place cookies (and similar technologies) on users’ devices. But certain uses of cookies are a lower risk to privacy than others, and privacy enhancing techniques such as pseudonymisation can further reduce risk. As part of the Data (Use and Access) Bill this government introduced reforms to PECR that enabled more than £17m annually in compliance savings. The government is working with the Information Commissioner’s Office (ICO), industry, and others to assess whether new exemptions under PECR could be used to promote growth and innovation in the advertising, creative, and publishing industries while maintaining high privacy standards for users.