Product Security and Telecommunications Infrastructure Bill

Debate between Lord Kamall and Lord Fox

Report stage
Wednesday 12th October 2022 Lords Chamber

[The Parliamentary Under-Secretary of State, Department for Digital, Culture, Media and Sport (Lord Kamall) (Con)]

My Lords, I thank those noble Lords who gave me a warm welcome—and indeed those who did not. Many noble Lords will know me from my work in the previous department. In the case of the noble Baroness, Lady Merron, who was one of the first to welcome me, it is just a continuation; we seem to be inextricably linked in some way.

I pay tribute to my predecessor, my noble friend Lord Parkinson, for his work as the DCMS Minister. He was widely praised and I think people appreciated his engagement. Those who have engaged with me on previous legislation know that I tend to have a very open policy as well. I am happy to have as many meetings as we need and to facilitate meetings with officials, so please have no fear about asking for those meetings; I will be happy to do that as much as possible.

I turn to Amendment 1, from the noble Lords, Lord Clement-Jones and Lord Fox. I thank them for retabling this amendment, which first appeared in Committee. I also thank them and other noble Lords for meeting me before today.

We think that the threat landscape is ever-changing. Security requirements that are appropriate today could change and differ in the future. Setting that out in primary legislation would limit our ability to respond to threats in the future, impose barriers to innovation and leave unnecessary regulation still on the statute book or unnecessarily complicate the regulatory framework. The vast complexity of the connectable technology landscape means that the definitions used in our security requirements need to be carefully nuanced and readily updatable to avoid imposing unnecessary or inappropriate burdens on industry as those technologies develop. For example, we set out in our 2020 call for reviews that we do not currently consider it appropriate for our intended passport requirements to apply to API queues. Connectable products may be able to access a large number of API interfaces, many of which do not have a material impact on the security of the product. Compelling the Government to extend this password requirement to all APIs key to the product, as this amendment would entail, is exactly the sort of unnecessary industry burden that we are trying to avoid while making sure that we stick to setting out the requirements in regulations.

The Government are unwavering in our commitment to bringing forward security requirements that ban universal default and easily-guessable passwords, mandate the publication of a vulnerability disclosure policy and mandate transparency concerning security update provision. My officials have been working diligently to develop regulations that realise that commitment, and we hope to engage on the regulations in draft by the end of the year. Something that I often to say to my officials, whichever department I have been in, is that there are two phrases that I do not like to see: “in due course” and “at pace”. I like to give an indicative timeframe, so I hope the timeframe of “by the end of the year” gives some assurance.

That is why we do not believe the amendment is necessary, and I hope the noble Lords will consider withdrawing it. On top of that, I am willing to have meetings in future to clarify anything that noble Lords feel has not been clarified.

I turn to Amendment 3, tabled by the same double act of the noble Lords, Lord Fox and Lord Clement-Jones; I think this is going to be a recurring theme in my time as the Minister here. The proposed amendment aims to define online marketplaces as “distributors” for the purposes of the Bill. I assure noble Lords that the Government are on the side of the consumer. That is why the Bill requires all—I repeat, all—UK consumer connectable products to be secure, including those sold via online marketplaces. The Bill will ensure that where online marketplaces manufacture, import or sell products, they bear responsibility for the security of those products. Where this does not happen, I assure noble Lords that they should make no mistake: the regulator will act promptly to address serious risk from insecure products, and work closely with online marketplaces to ensure effective remedy.

We recognise that as well as bringing benefits to consumers e-commerce brings challenges—the double-edged sword of technology. This is one of the reasons why the Government are reviewing the product safety framework. We will publish a consultation later this year—once again, not “in due course” but later this year —with detailed proposals on tackling the availability of unsafe and non-compliant products sold online. Consumers need clarity and better protection, and this will be a priority for our work in this space.

I hope that the ambition of this Bill, its enforcement plan and the outline of further policy engagement will provide some confidence for noble Lords not to press Amendment 3.

[Lord Fox (LD)]

In reference to the consultation, does the Minister include product safety and product security in the term “unsafe”?

[Lord Kamall]

We understand that they are two different things, but I am happy to clarify and come back to the noble Lord—I hope to do so before we come to future amendments.

Amendment 3 aims to define what a “distributor” is for the purposes of the PSTI Bill. The Bill requires all UK consumer connectable products to be secure. Where it does not happen, the regulator will act promptly. For e-commerce, given the double-edged sword of technology, reviewing that framework is important. I hope the ambition of the Bill encourages noble Lords to consider not pressing the amendment, but once again I am happy to engage further for clarification and to address any outstanding concerns.

Let me turn to Amendment 13. The Government are listening to and considering concerns that the Computer Misuse Act is constraining activity that would enhance the UK’s cybersecurity. We understand that if you want to test cybersecurity you have to be able to test its breaking point. We are trying to strike the right balance between providing suitable reassurances for well-meaning individuals who want to identify vulnerabilities and not allowing malicious actors to access devices without consent. There are risks here. It is very nuanced, and the Government do not want to rush into legislative change without clear evidence to justify any such change to existing law. As the noble Lord, Lord Clement-Jones, said, the Home Office has been conducting a review of the Act since 2021, and the proposals for statutory defences have been an integral part of this review. I can confirm that a response that sets out how the Government plan to proceed should be published in the coming weeks, and an update will be provided to this House.

I hope that this will provide sufficient assurances on these three amendments, and the noble Lords will consider withdrawing and not pressing their amendments. I repeat the offer of continued engagement and meetings for clarification and to reassure noble Lords.

--- Later in debate ---

[Lord Kamall (Con)]

I thank noble Lords from all 360 degrees of the House for their contributions to this debate. Before I answer the specific points, I will address some of the points about relationships being broken, as it were, between landowners and operators.

A number of non-legislative steps are taking place to make sure this code works well in practice. For example, the department’s—wait for the name—Barrier Busting Task Force holds monthly workshops with a broad range of stakeholder groups with an interest in the code. These workshops are attended by network operators and landowner representative groups such as the NFU, the Central Association of Agricultural Valuers and the Country Land and Business Association, as well as local authority representatives, legal professionals and surveyors. The workshops aim to encourage greater co-operation and collaboration in relation to the code negotiations and agreements through identifying and implementing better ways of working. The workshops touch on key issues, many of which have been raised by noble Lords. For example, stakeholders are currently working to agree on a standard template wording for common clauses within code agreements and have agreed a pilot communications framework that sets out how both operators and landowners could approach negotiations.

Perhaps one of the most significant developments to come from these workshops—my officials call it exciting—is that a number of stakeholders, including representatives from the CLA, the CAAV and the NFU, alongside operators and infrastructure providers, have come together to form the national connectivity alliance. This alliance will bring together stakeholders from across the industry to discuss issues of mutual interest, improve co-operation and collaboration and, hopefully, share best practice. The Government welcome this development and wish it every success when it launches in November. I use that as an example to address some of the concerns and suggestions in this House that somehow relationships have broken down between landowners and operators.

While having 360-degree support, Amendment 28 would make the changes to the code in 2021 and 2017 subject to specific and independent review. As with similar amendments, I wholly appreciate the House’s determination to ensure that the Government are held accountable for this legislation and for providing updates on progress towards their coverage and connectivity targets, which are at the heart of the Bill, but the Government see three important difficulties with this amendment, which I hope noble Lords will consider.

First, and this is a key concern, having another review of the code on the immediate horizon will not help a market that is starting to settle. Officials have been gathering data throughout the passage of the Bill, and the number of code agreements already concluded this year is extremely positive. I know that noble Lords are keen to see that data—

[Lord Fox (LD)]

I realise that this is taking some time, but on a number of occasions the Minister has talked about the market “starting to settle”. Can he describe what settling a market is and what data he is using to make that assertion?

[Lord Kamall (Con)]

The noble Lord makes a reasonable point. I know that noble Lords are keen to see the data, but all that I can do at the moment is undertake to make it available as soon as possible—I did not say “in due course”, by the way. We believe that the prospect of another review will, quite simply, create chaos in the market—I know that noble Lords disagree with that. Site providers would inevitably, and not unreasonably, draw out negotiations as long as possible, in the hope that the “no scheme” valuation regime would be scrapped. It is important to consider that.

Secondly, the amendment seeks to impose a duty to assess, in isolation, the impact of this legislation and the previous reforms made to the code on digital connectivity and on stakeholder relationships. The Government question how feasible it is to quantify the extent to which such progress is attributable to a single piece of legislation, and we all know that the market to which these provisions apply is dynamic. By the time such a review has been commissioned, the research carried out and the findings reported on, the market is likely to have moved on significantly, rendering that report obsolete. In 1996, I wrote a bestseller on EU telecommunications policy—I am sure you have all heard of it—and, by the time it was published, it was already out of date. That shows how quickly this market develops. Funding such a report therefore cannot provide good value to the taxpayer, and the amount could be better spent helping the Government reach their ambitious connectivity targets, to which I will come in a moment. But remember: the report would probably be obsolete by the time it is published.

Finally, this amendment overlooks the substantial review and reporting mechanisms that are already in place. For example, in relation to progress on gigabit-capable broadband, my noble friend Lord Parkinson referred in Committee to Ofcom’s annual Connected Nations report, which is updated twice a year and provides a clear assessment of the progress in both fixed and mobile connectivity. The Government also monitor and report regularly on their connectivity commitments, with quarterly updates published by BDUK. The Government will of course carefully consider the implementation of this legislation to understand how it is working in practice. For these reasons, I believe that the proposals in this amendment, while well-intentioned, could be disproportionate and ultimately unhelpful. I have also written about unintended consequences, and we have to be very careful of these here.

I will respond directly to the question of the noble Lord, Lord Fox, about targets. The levelling-up White Paper set out our mission that, by 2030, the UK will have nationwide gigabit-capable broadband and 4G coverage, with 5G coverage for the majority of the population. The Government are developing a wireless infrastructure strategy to set out the strategic framework for that development, and this will be published later this year.

The existing 5G target, which is for the majority of the population to have access to 5G by 2027, has been met five years early, with basic non-standalone 5G. As part of the wireless infrastructure strategy, we are establishing a new ambition for 5G. The shared rural network will see the Government and industry jointly investing over £1 billion to increase 4G mobile coverage throughout the UK to 95% geographic coverage by the end of the programme, underpinned by licence obligations.

The UK Government’s other target for broadband remains to deliver gigabit-capable broadband to at least 85% of premises by 2025 and to reach over 99% by 2030. To achieve the minimum 85% objective, DCMS is stimulating the market to deliver as much as possible—at least 80% by 2025. It has also invested £5 billion as part of Project Gigabit to ensure that the remaining 5% in the UK receive coverage. If I have not answered the questions of the noble Lord, Lord Fox, I commit to write to him—perhaps he could let me know.

I understand that there was a lot of interest, and there have been very well-made points during the debate, but I am afraid that the Government cannot accept this amendment at this stage.

Covid-19 Update

Debate between Lord Kamall and Lord Fox

Wednesday 8th December 2021 Lords Chamber

[Lord Kamall (Con)]

Enforcement has been a constant concern throughout, and workers have been concerned about having to enforce. The police and certain transport operators may issue fixed penalty notices to those who refuse to wear a face covering when required to do so and are not exempt or do not have a reasonable excuse. This will be used only as a last resort. The fines will start at £200, which will be halved if paid within 14 days. For repeat offenders, the second offence will be £400, the third £800, the fourth £1,600, the fifth £3,200, and the sixth and subsequent offences £6,400. The price mechanism will be used as a deterrent, but I am sure that the authorities will exercise discretion, so they may give an informal warning first, as has happened. They can also take measures if members of the public do not comply with this law without a valid exemption. They can deny access to public transport services, and direct someone to wear a face covering or leave a service if they are not wearing one without a legitimate reason.

[Lord Fox (LD)]

My Lords, the Government are effectively outsourcing a lot of the policing of this to the businesses of this country—small, medium and large. Those businesses will not be able to do that unless they have a full understanding of what is expected of them, full public backing from the Government that they have to do this and details of how they will be helped. I understand that it is not the Minister’s portfolio, but I ask that he takes this to both BEIS and the Treasury and that we get quick answers for British businesses, which have to police vaccine passports and the use of masks all over this country for this policy to have any reason at all.

[Lord Kamall (Con)]

I thank the noble Lord; we had a conversation earlier about the importance of business and of informing businesses as quickly as possible, and the important role that they play. It is clear that the police and transport operators have fixed penalty notices. We know how sometimes it can be difficult for individuals, particularly in retail, to enforce the law—that they are worried about being seen as police officers. But we hope to make it clear that it is an offence not to wear a mask in places where you are required to do so, and we are issuing further guidance on that. I will take the matter back, as the noble Lord says, and get a cross-governmental response.

Health Incentives Scheme

Debate between Lord Kamall and Lord Fox

Thursday 28th October 2021 Lords Chamber

[Lord Kamall (Con)]

I thank the noble Baroness. I would like to know on what basis she thinks I should take part—I hope I am not looking unhealthy. I also apologise to noble Lords if I have come across as prickly; maybe I just got too excited about this scheme. As someone who been quite critical in the past of schemes that do not work and who has looked at evidence behind such schemes, I am excited that this is a real pilot, as opposed to a one-size-fits-all national system. We can see what works and then roll it out. I also thank the noble Baroness for making me aware of the scheme in GP surgeries. Maybe the noble Baroness could do me a favour and send me some details, so I can look into it in more detail and see how we could roll it out.

[Lord Fox (LD)]

My Lords, in giving his answer, the Minister failed to answer one of the questions from my noble friend Lord Scriven on school sport. So perhaps we can give the Minister a second go at responding. When will the Government throw their full weight behind reviving, revitalising and extending school sport?

[Lord Kamall (Con)]

I have responded to questions, including the noble Lord’s question about sport in schools, which is of course incredibly important—we all benefited from that. One of the things I have to be clear about is which department it falls under. As I understand it, some of this does fall under the Department for Education, so if the noble Lord does not mind, I will write to him.