Crime and Policing Bill

Lord Fuller Excerpts

Wednesday 4th March 2026 Lords Chamber

[Baroness Coffey (Con)]

My Lords, I started using a computer before 1990. I was one of those children who started using the BBC Micro—one of the best things the BBC ever produced. Indeed, I learned how to code—admittedly only in BASIC, but sufficient in the days when the internet had not even been created—to start working out how to use data in the computer system.

Unlike the previous amendment, I cannot say to the noble Lord, Lord Clement-Jones, nor indeed to the noble Baroness, Lady Doocey, that I would support them if they were to call a Division on this amendment. I completely agree with proposed subsections 2A(a) and 5A(a) that

“the person’s actions were necessary for the detection or prevention of crime”

but not this latter bit that they have lumped into it, saying that

“the person’s actions were justified as being in the public interest”.

I am a great believer in the public interest, but I find that it is being used now to try to justify too many things, including not releasing information from government. In fact, it would be contrary to the public interest, for example, to release information on some of the Bills that we are debating, not just today but at other times during this Parliament.

Let us just try to get a sense of what is going on with the Computer Misuse Act. Why was it introduced? It was introduced to stop manipulation. At what point does manipulation using computers become justifiable in the public interest? For some, that might be a whistleblower caveat. From what the noble Lord set out, I am not quite sure why this is the defining element. I am conscious that the Government may want to automate even more, so what is the balance with what is there to prevent crimes and similar? I appreciate that we do not want bureaucracy and legislation to get in the way of generally trying to stop harm, but what is the impact of the other elements of the noble Lord’s amendments? They could actually deploy harm while still trying to justify it in the public interest.

I appreciate there is sometimes a resistance to old legislation, but old legislation is not necessarily stuck in its time. There are many other Acts that go back hundreds of years that are still perfectly valid because the principles are the same. I would be concerned if we walked into allowing this amendment to go through without testing the opinion of the House to try to assess precisely what actions the noble Lord is trying to allow by making a case for the defence that something be done in public interest. That is why I express my concerns tonight.

[Lord Fuller (Con)]

My Lords, I will speak against Amendment 367. I have the gravest concerns about it. I am not going to echo everything my noble friend Lady Coffey said, but it amounts to a hackers’ charter. I take security and IT security very seriously. I am responsible for IT security in my business. We are in a sensitive industry—we are involved in global trade—never more so than today, when ammonia and natural gas are under global pressure as part of a war. You have to take these things seriously.

When I joined your Lordships’ House two years ago, there was a briefing and I was pleased that I was one of a handful of Peers and MPs who had a password manager. Every password I have is at least 16 characters—they are random and not one is repeated. You have to take this stuff seriously—no pet names, not using your wife’s name or possibly a wedding anniversary. Using a VPN is important as well.

No matter what precautions you take, however, someone is always going to have a go. What this amendment does is give the malevolent hacker a free pass to get through: a ready defence. It is not just that. We need to recognise that technology is changing all the time. All the things I may do with passwords are not enough. Even using face, voice, biometrics and two-factor authentication, cloned SIM cards or using public wifi to intercept signals are important ways in which even the most diligent and careful person can have their data compromised. There are people who want to abuse your privacy or insult your business. We can simply create a crime, but we must take a huge number of steps to avoid jeopardy or giving them a “get out of jail free” card.

In my view, this amendment would mean that, if somebody finds something, they get off, but if they do not find anything then they are guilty. All those years ago when I was at school, we were taught about trial by ordeal. If you gripped a red hot iron bar and you got blisters, you were guilty; if a lady was put on the ducking stool and she drowned, she was probably innocent. This is the sort of perverse outcome that this amendment would provide.

Further, it denies how technology is changing in so far as AI is concerned. In our minds, we have a spotty teenager hacking away at their computer, perhaps late into the night while playing Fortnite on the other screen. What this amendment does is give an opportunity for AI, mechanisation, and the industrialisation and automation of structured hacks on a phishing expedition—a mass insult or mass trolling to try to scrape as much as they possibly can. The public interest is in the eye of the beholder, and because there is no pure definition that is challengeable, and so one would have to go to the law or ask international lawyers what amounts to a statement of the law, we are going to get in a muddle.

I cannot support Amendment 367, not just because I think it is naïve, in so far as it is thinking about the individual at home, but because it fails to understand the way that technology is changing so rapidly—the industrialisation, AI and so forth, and the volume attacks. We cannot give a perverse incentive that allows those people with malevolent intent to get off while individuals, business and the economy, at home and abroad, are under attack.

[Lord Cameron of Lochiel (Con)]

My Lords, I am grateful to the noble Lord, Lord Clement-Jones, and the noble Baroness, Lady Doocey, for bringing back this amendment on Report. As was our position in Committee, we recognise the need to update the Computer Misuse Act 1990 and bring it in line with the online reality in which we now live, 36 years after the Act.

I am grateful that, in Committee, the Minister acknowledged the need for the Government to examine the pro-innovation regulation of technologies review by the noble Lord, Lord Vallance, and come to their own conclusions. He was right then that it is entirely reasonable to expect cyber security to be updated with the growth in internet use and the corresponding growth in cyber attacks.

Little more needs to be said, other than that we support the intentions of the noble Lord, Lord Clement-Jones. I hope that the Minister will be able to update the House on the changes to the Act that the Home Office has considered.

--- Later in debate ---

[Baroness Neville-Rolfe (Con)]

My Lords, I support my noble friend Lord Jackson. I was delighted to move the amendment in Committee in his absence and to attract so much cross-party support. We also had the support of the police, of the esteemed former Met Commissioner, the noble Lord, Lord Hogan-Howe, who I am glad to see in his place, and, as we have heard, from Dame Chi Onwurah, a very distinguished Labour MP.

As it is so late, I rise to say only that I agree entirely with my noble friend. The sight of distressed people in the Apple store, some from abroad, having to buy new phones and trying to get back into their accounts, affected me profoundly. It made me determined to change the incentive structure, both for criminals and indeed for retailers, which actually benefit from emergency sales of mobile phones. Given the degree of concern expressed across the Committee, at a much more civilised time, and the changes that my noble friend Lord Jackson has made to the amendment to try to meet any concerns, I very much look forward to a positive response from the Minister and to getting after this ghastly criminal operation.

[Lord Fuller (Con)]

My Lords, I will speak briefly to Amendment 368 in support of my noble friend Lord Jackson, because losing your phone is not just inconvenient. When your device is stolen, a crime has been committed, and operators have a responsibility to take a much more leading role in disincentivising the opportunities to steal, to make it a lot easier to reunite people with a phone that might have been lost and to discourage the black market in stolen goods.

It is a late hour, but I hope to tell a little uplifting story about my experiences today, because today I found a phone on the Tube as I got off at Westminster. It turns out that the gentleman sitting next to me, who had got off at Victoria on the way from Fulham, had left it behind. I am an honest chap. I had a look: it was a pink case with two phone numbers inside. I called them and there was no answer, but I texted them and, by and by, there was a response. To cut a long story short, the phone was reunited with the owner—perhaps, as I have the phone number now, I might send them the YouTube clip and possibly the Hansard as well. The phone was deposited at Westminster Tube with TfL staff, who were really good. They were actually really interested and keen to help this poor, unfortunate chap.

But what if someone had not been quite so honest? What if that phone number was not tucked inside the pink case? How would it have been secured and returned? I did not expect to talk to this group, but my experience today shows how important this amendment is. The man in the street should not rely just on the kindness of strangers. The phone companies should not make it harder to reunite; we should prevent the perverse incentives.

But there is another point. The phone is no longer just a phone. It is not just a device to doomscroll on late at night. It is not just a device to play “Candy Crush”. The phone is now a token—part of our security infrastructure and part of the devices that secure our economy. I do not believe that this has been fully understood. I got locked out of my parliamentary account the other day, and because I had left my phone behind, I could not do my work, neither my commercial work nor the work associated with this House. I do not think that the penny has quite dropped with the operators to recognise that they are now part of the security infrastructure of our economy. It is not just the inconvenience of losing a phone and queuing up, as my noble friend says, in the Apple store to replace it; this is part of the technological infrastructure of our nation. Technology has moved on, and the phone companies must do so too.