(6 years, 2 months ago)
Lords ChamberMy Lords, I fully support Amendment 21, proposed by the noble Lord, Lord Fox, and I hope that when the noble Lord, Lord Parkinson of Whitley Bay, replies to this short debate, he can signal his support. If not, I hope he can reassure us that the measures in the proposed new clause will be undertaken in other ways. I will be most disappointed if all he says is that they are not necessary. I echo the comment made by the noble Lord, Lord Empey, in this respect.
As we know, the Bill is about enabling the UK to deliver on a major infrastructure project. As was said earlier, broadband has to be seen as an essential utility in the same way as gas, electricity, water and the postal service, to which my noble friend Lord Adonis referred. We must ensure that we have a world-beating service. We should remember what happened to the Pony Express.
One of the barriers to delivering gigabit capability is easy access to multi-dwelling buildings such as blocks of flats: a tenant wants the capacity but the owner does not respond to requests for access rights. So, I support the Government in delivering this and dealing with a real barrier to the target they have set—but is it enough? This new clause would enable us to decide and, if they are found wanting, to take action. It requires the Government to lay before Parliament a review of the Act’s impact within six months. Importantly, the review must make a recommendation to the Government on whether they should bring forward further legislation to achieve their stated aim, which we all support in the light of the findings of the review they conducted.
Finally, the new clause provides for further reviews every 12 months after the initial review. As the noble Lord, Lord Fox, said, it seeks to inject some adrenalin into the Bill. Broadband connectivity and faster broadband speeds are vital to our country and to our economy. This new clause would enable Parliament and the Government to confirm that work is on track and where it is not, for that to be highlighted and appropriate action to be taken.
My Lords, I will speak briefly in opposition to the amendment. I can see why the noble Lords, Lord Clement-Jones and Lord Fox, tabled it, because targets are quite important to ensure that the Government do what they set out to do. However, the narrow timeframes given in the amendment are not practicable and will not tell us any more than we will know through other means.
I go straight to the point made by the noble Lord, Lord Fox, about the Prime Minister commissioning the National Cyber Security Centre to review new US laws that will impact on Huawei’s ability to use US technology. We know that the Prime Minister is looking again at this matter through this review. I am delighted to hear that, as the Committee would expect me to be given what I said earlier on my own amendments. It is quite right: it is better to change your mind and to get better information later, rather than too late to be able to effect the changes you might need to put in place.
However, the amendment is redundant for another reason: six months’ time is way too narrow because it takes us to the end of this year, when we know that the bandwidth of Parliament and government will be intensely focused on Covid-19 and its impacts. Distracting additional pieces of legislation or reports would probably not garner the bandwidth they need for us to see whether the Government are achieving what they set out to achieve. Six months is way too short.
As for annual reviews, the correct place to know whether the Government are reaching their objectives is Ofcom’s annual reporting on this matter. Anyone who saw Ofcom’s last report of December 2019 got a very clear picture of where there has been success for fibre broadband, some limited success for ultrafast broadband and great open holes in rural coverage. We all know from what the regulator is telling us is that there are real issues about rural coverage that have their own particular hurdles, such as masts, local communities, planning permissions and all those things. All that information is readily available through the regulator. I cannot see why we would wish to put another layer of reporting on top of what the regulator is already doing.
I again emphasise that I am very much in favour of the Government’s objectives. I have my other concerns, which I might well come back to on Report, but for the moment the amendment is redundant in a very fast-moving situation.
(6 years, 2 months ago)
Lords ChamberMy noble friend Lord Stevenson of Balmacara has tabled both the amendments in this group. I support my noble friend in his efforts to tease out information from the Government through these probing amendments, and I look forward to the Minister’s response. For my part, I want to be clear that, in both points under discussion here, by acknowledging the communication but not saying whether they agree or refuse, the granter has not stopped the process moving forward; my noble friend made that exact point in his contribution. All I am looking for is confirmation that that is not the case—that the process cannot be stopped by this becoming the default.
When speaking on an earlier group of amendments, the noble Lord, Lord Clement-Jones, made the point that broadband should be treated as an essential service—an essential utility just like water, gas and electricity, and that we have to be ambitious. I agree that this is a good Bill and that we are having a good discussion with some good amendments, but I am not sure whether we are meeting the challenge. I look forward to the response to this group from the Minister—whether the noble Baroness or the noble Lord. I remember that the noble Baroness, Lady Barran, when she was responding on the second group of amendments, made the point that we must not let the perfect become the enemy of the good. I agree with that quote from Voltaire in this context; it is spot on. But the point is that we have to be good. My fear is that is that we are being timid with some of this legislation, not good. I want to see the fire in the Government’s belly. I have not seen much fire today.
So, we are not pursuing perfection, but we have to be doing good. If we do not get this right, we will not do this issue justice and we will be back here again in a year or two’s time to take things further. I am looking for reassurance from the Government that there is fire in their belly, that they are getting on with things, and that this cannot stop the proposals in their tracks.
(7 years, 6 months ago)
Lords ChamberTo ask Her Majesty’s Government what steps they are taking, or intend to take, to deal with online abuse by people using anonymous social media accounts.
My Lords, online anonymity is an important part of a free and open internet—but being anonymous online does not give anyone the right to abuse others. The Government have made it clear that more needs to be done to tackle all kinds of online abuse. We will publish a joint DCMS-Home Office White Paper this winter, setting out a range of legislative and non-legislative measures and establishing clear standards for tech companies to help keep UK citizens safe.
My Lords, does the Minister accept and understand the huge concern of law-abiding citizens that people are hiding behind anonymous accounts and making threats to kill, to rape, to assault and to bully, using racist, anti-Semitic and Islamophobic language? The platforms that host these people have done nowhere near enough to deal with this problem. If they will not get their own house in order, the Government must make them, through legislation. Will the Minister impress on his colleagues in government that the forthcoming White Paper must make that clear to them?
I am happy to be able to agree with the noble Lord. Let us be clear: when abuse exceeds the threshold and moves into criminality, in most cases so-called anonymous perpetrators are actually traceable, so they can be prosecuted according to the law. I recognise the public disquiet about this, and, as the noble Lord said, we are considering what more can be done, by non-legislative means but also, when required, by legislation—and there will be legislation. We will consider what to do about anonymous abuse specifically, and we will address that in the online harms White Paper, which, as I said, is due out this winter.
(7 years, 11 months ago)
Lords ChamberMy Lords, when does the Minister think that the Government are going to move on from being concerned about this and looking across Whitehall to actually taking some action to deal with this urgent matter?
The online harms White Paper will be published in the winter of 2018-19.
(8 years ago)
Lords ChamberCriminal activities are subject to the negotiations that will take place and the Home Office is responsible for those. On doping in sport, we already have an international system based on WADA which I do not think will change just because we are coming out of Europe. This is an international problem that extends far beyond the borders of Europe. However, I take the noble Lord’s point that it is very important that we continue with that system and I see no reason why we should not be able to.
My Lords, I agree with the noble Lord, Lord Addington, that we need to ensure that we drive these drugs out of individual sports, both at amateur and professional level. It is important to drive them out of team sports as well, but it is also important that football clubs have grounds they can actually play at. Will the noble Lord take back to his honourable friend the Minister for Sport our thanks for her support for Dulwich Hamlet? However, the club is still locked out of its ground, and we are only allowed to play thanks to Tooting and Mitcham. We need further help to get back into our home ground at Champion Hill.
(8 years, 2 months ago)
Lords ChamberMy Lords, I thank the Minister for that lucid exposition. When one has 282 amendments from the Commons, which I think is fairly unusual after the Lords have worked on a Bill, we find that the Commons have made many improvements, with one or two notable exceptions that no doubt we will come to in later groups. I welcome Amendments 8, 9 and 10 in particular, and Amendment 12. I heard what the Minister said in caveating the intended extent of the amendment. I very much hope that it will have the effect he hopes for. The automated decision-making provisions have to be in line with the GDPR, so it is clearly necessary to amend the Bill in that respect, but I generally welcome this group of amendments.
My Lords, I too welcome this group of amendments. First, on Amendments 8, 9 and 10, I recall the debate led by the noble Lord, Lord Marlesford, who is not in his place at the moment. He talked about his experience of the parish council in his area, explaining that a part-time clerk did a couple of days a week and it was impossible. He made his case well and I am happy to support him in it. I am glad to see that the Government have listened. I also believe that many Members on all sides of the House in the other place made similar points. I thank the Government very much for that.
I am very pleased with Amendment 12. We, with the Liberal Democrats, raised this issue during a debate in this House. We could not get it all agreed before it left to go to the other place but I had two very positive meetings with Matt Hancock and Margot James. The noble Lord, Lord McNally, also came along to our other meetings and the noble Lord, Lord Hayward, from the Conservative Benches, was also involved. We got to a good place. Nobody from any party thought that this issue should not be properly recognised in legislation. I am very pleased that the Minister and his colleagues have listened to us.
The Minister is of course right that technology changes all the time. We have no idea what we will be doing in four or five years’ time. Things move so fast now, so it is good that our legislation is written to take that into account. I was also pleased to hear the Minister say that the Government intend to consult and work with the Parliamentary Parties Panel, which is very important. It is a statutory body, set up in the PPERA 2000, where practitioners from all political parties can come together and talk with both the Electoral Commission and Cabinet Office officials. It really is the body where the people who know what they are talking about can come together. I sat on the body for many years and there was a lot of agreement among party officials about what needs to be done. I am glad that the Government will do it and I am pleased with what has come forward today.
(8 years, 3 months ago)
Lords ChamberTo ask Her Majesty’s Government what action they propose to take to regulate platforms that hold personal data.
My Lords, the UK’s forthcoming data protection laws will empower people to take control of their personal data and ensure that all businesses, including platforms, take necessary steps to protect the information that they hold. This is a crucial step in giving the public confidence that their data will be managed securely and safely. Beyond this, the digital charter that we are developing in the UK sets out the principles for our approach to agree the norms and rules of the online world and put them into practice. In some cases this will be through shifting expectations of behaviour, in some we will need to agree new standards, and in others we may need to update our laws and regulations.
I am sure that, like me, the Minister saw the media reports of Mr Mark Zuckerberg’s appearance on Capitol Hill last week. He seemed to accept that some form of regulation was now inevitable. Will the Government look at what can be done in that respect? Does the Minister think the solution may be to regulate the people working in the industry, giving them clear obligations and clear standards to adhere to?
My Lords, as I mentioned in my Answer, legislation is coming. The combination of the GDPR, which comes into effect on 25 May, and the Data Protection Bill, which should be in place by then, will make a real difference. Other things need to be done. One of the biggest changes in the last few months has been the acceptance that these social platforms have some responsibility for their content. That does not mean to say that they are publishers as such but Mr Zuckerberg accepted responsibility for content on Facebook. The Prime Minister, in her Davos speech, made much the same point.
(8 years, 7 months ago)
Lords ChamberMy Lords, Amendment 42, moved by the noble Baroness, Lady Hamwee, was also debated in Committee. The noble Baroness, her noble friend and other noble Lords raised concerns in Committee about paragraph 4 of Schedule 2 in respect of the broad nature, the wide-ranging exemptions and the application of those exemptions. I see the point about the application of this part of the Bill. The amendments tabled by the noble Lord, Lord Ashton of Hyde, set out in the Bill those rights which might be restricted by virtue of article 23(1) of the GDPR and so give more focus to this part of the schedule.
I want to see effective immigration controls and also fair immigration controls, but I do not want to see people unable to get access to data held on them or to how that data is being used and shared except in limited circumstances. I hope the Minister can confirm that the government amendments will do this on a case-by-case basis and do not provide a blanket power. These things are very sensitive and are a matter of balancing important principles, protections and rights carefully and coming down with the right protections in place. I think it would be a problem if we were left in a situation where we could disclose to data subjects information that could give them the opportunity to circumvent our immigration controls.
The noble Baroness, Lady Williams of Trafford, gave a detailed explanation of the Government’s opposition to the amendment in Committee and highlighted a number of the issues that would come forward. I do not think anyone wants a situation where we are making things worse for ourselves. I recall the examples given of an overstayer where the authorities are seeking to enforce an administrative removal or where there is an application to extend the leave to stay and it is suspected that false information has been given. These seem perfectly reasonable to me. The amendments tabled by the Government provide important clarification on what is exempt, limit the power in the Bill and seek to address the concerns highlighted during the previous debate and today.
Before the noble Lord sits down, does he therefore agree with the Government that this is all about the circumvention of immigration controls? Does he not think that essentially, as my noble friend Lady Hamwee mentioned, most of the circumstances are about people asserting their rights?
I accept that people want to assert their rights. Of course I do. I also think that we had a very detailed debate in Committee. Points were raised about the broad-brush approach; the Government have responded, and I am happy to support their amendments.
My Lords, these amendments bring us back to the immigration exemption in paragraph 4 of Schedule 2 which, as the noble Lord, Lord Kennedy, said, was debated at some length in Committee. As this is Report, I am not going to repeat all the arguments I made in the earlier debate, not least because noble Lords will have seen my follow-up letter of 23 November, but it is important to reiterate a few key points about the nature of this provision, not least to allay the concerns that have been expressed by noble Lords.
Let me begin by restating the core objective underpinning this provision. The noble Lord, Lord Kennedy, specifically asked for further clarity on this point. The UK’s ability to maintain an effective system of immigration control and to enforce our immigration laws should not be threatened by the impact of the GDPR. It is therefore entirely appropriate to restrict, on a case-by-case basis, certain rights of a data subject in circumstances where giving effect to those rights would undermine that objective. That is the sole purpose and effect of this provision—nothing more, nothing less.
The GDPR recognises this by enabling member states to place restrictions on the rights of data subjects where it is necessary and proportionate to do so to safeguard,
“important objectives of general public interest”.
The maintenance of effective immigration control is one such objective. This is the basis for the provision in paragraph 4 of Schedule 2.
The noble Baroness referred to article 23 of the GDPR. It does not expressly allow restrictions for the purposes of immigration control. She asked whether the immigration restriction is legal. She pointed to Liberty’s claim that the exemption is unlawful. It is not the case.
(8 years, 7 months ago)
Lords ChamberMy Lords, the amendment in my name, and that of my noble friend Lord Stevenson of Balmacara, would insert a new clause in the Bill that requires a data controller to notify both the Information Commissioner and the police if they are subject to a ransomware attack. Ransomware attacks involve hackers taking control of your information held on a computer and agreeing to release the information back to you only on the payment of a large sum of money. It is kidnapping not of a person but of information.
Apparently thousands of UK businesses have paid these ransom demands and do not bring these issues to the attention of the authorities for fear of damaging their reputation. This is a really serious issue, and one that we cannot allow not to be addressed. I find it shocking that companies are paying these ransom demands, effectively on the quiet. The amendment would make it a legal requirement to notify. It is only by being able to understand the scale of these attacks and understand what has happened—whether or not it is successful is irrelevant—that the authorities can undertake the important work of analysis needed to prevent these attacks happening in the future.
I would go further, and say that it is irresponsible of data controllers or their businesses and organisations not to come forward to notify the proper authorities. They are vulnerable and making the problem worse by hindering the efforts to tackle the problem. Not only are they at risk of whoever is behind the attack coming back for more money later—having paid the hacker, the person will be seen as an easy touch—they are exposing other people, businesses and organisations to this form of attack in the future. My amendment would require notification, and I look forward to a detailed response to the issues I have raised. I beg to move.
My Lords, I am grateful to the noble Lord, Lord Kennedy, for his amendment on data protection breaches and ransomware attacks. The repercussions of such attacks are felt by everyone, whether or not they are a direct victim of the crime. It is estimated that in 2016 the cost of fraud and cybercrime in the UK was £193 billion, with the full social cost likely to be much higher. It is therefore essential that stringent measures are in place in legislation to ensure that cyberattacks and fraud are prevented, and any perpetrators found and stopped.
We, nevertheless, believe that Amendment 78A is unnecessary. Article 33 of the GDPR, referenced in the noble Lord’s amendment, requires the data controller to inform the Information Commissioner within 72 hours of all data breaches, including as a result of ransomware attacks. The controller is required to provide information of the likely consequences of the personal data breach, and to describe the measures taken or proposed by the controller to address the breach. There is one exception, given in Article 33, for breaches unlikely to result in a risk to data subjects, but that hardly seems relevant in cases where hackers have proven access to the data in question.
The GDPR does not require data controllers to report cyberattacks to the relevant police forces, for good reason. It is well understood that the Information Commissioner has the expertise and resources to take the appropriate and necessary action in the first instance, including, if she deems it appropriate, referrals to the police or to investigate and bring prosecutions herself under data protection law. I am also puzzled by the amendment’s intention to single out ransomware as the only form of cyberattack worth reporting to the police. A huge range of cyberattacks cause substantial distress and harm to individuals, such as insider attacks, attacks from third countries and other cybercrimes, such as malware and phishing. In addition, organisations can report cyberattacks or fraud to Action Fraud, which in turn ensures that the correct crime reporting procedures are followed. This organisation is overseen by the City of London Police, the national lead for economic crime, and we believe that it represents an effective and scalable structure. For the reasons I have stated, therefore, I would be grateful if the noble Lord would withdraw his amendment this evening.
I am happy to withdraw my amendment this evening. I wanted to raise the issue here. The Minister cited the figure of £193 billion lost through these and other forms of attacks—he went through a number of them—and this is a very serious matter. I hope that he is correct that companies are required to notify the Information Commissioner on the back of this legislation. This is very serious. I hope that he is correct that it is not necessary to go to the police—the sums of money that he mentioned are absolutely shocking. At one point, he said that the Information Commissioner can start prosecutions. That is fine, if we can find the people behind the crime and if they are in this country. If they are somewhere in lands far away, I wish him all the best, but I suspect that we will have some trouble in catching the perpetrators or bringing them to justice. My worry is that, because of reputational damage, companies will be reluctant to notify anyone about this stuff. It is very serious.
Can I just echo what the noble Lord says? We agree that it is serious, which is why we have set up the National Cyber Security Centre to help to protect public services online and why the Chancellor allocated nearly £2 billion for cybersecurity when he launched that centre.
It is very pleasing to hear that. I welcome that, but these are matters that we will have to keep under review. Unfortunately in this world, the people involved in this stuff are usually quite skilful and bright and can keep one step ahead of the law or the people trying to catch them. We should keep these matters under review but, unfortunately, they are not going to go away. My worry is that these crimes are committed many miles from these shores and catching the perpetrators is the problem. However, I am very happy at this stage to withdraw my amendment.
(8 years, 8 months ago)
Lords ChamberMy Lords, I hope to be as brief as the Minister, who I thought was admirably so in introducing the government amendments. However, there are some issues that arise. I applaud the noble Baroness, Lady Royall, and others who have been so instrumental in persuading the Government on this. As the noble Lord, Lord Patel, indicated in various ways, there are ambiguities; the particular way in which the Government have chosen to amend the Bill potentially leaves a gap. I wonder, for instance, whether alumni fundraising for, say, a research institute can never be in the public interest. Is there not a possibility that it might fall outside the exemptions as a result? Perhaps the Minister can give me the correct interpretation. It is very important that this is on the record and that it is very clear what the formulation means. It would have been much more straightforward to have approached the subject directly in the Freedom of Information Act, but that is not the way the Government have chosen to help alumni fundraising in universities. In talking about universities, I should declare an interest as chairman of the council of Queen Mary University as well.
Another question arises. By and large there is nothing particularly controversial in the remainder of the amendments, but I do not quite understand why new Section 76C of the Freedom of Information Act, which was introduced in the original version of the Bill, is now being taken out by Amendment 198. Is it because Clause 127 already provides the necessary duty of confidentiality of information by the commissioner and employees of the Information Commissioner’s Office? The Minister might have given us a bit of explanation about that, which would have been extremely helpful.
Otherwise, many of the other provisions are welcome. Amendments 119, 182 and 197 demonstrate that it would be a good idea to have prompt enactment or implementation of legislation, so that weird and wonderful new clauses such as are introduced by those amendments would be unnecessary.
My Lords, I thank the noble Baroness, Lady Chisholm of Owlpen, for her explanation of the government amendments in this group, which are largely in response to issues raised in Committee. I do not intend to speak for long on this group, because the amendments are largely to be welcomed. I want to pay particular tribute to my noble friend Lady Royall of Blaisdon, who raised the concern of the university sector during Committee that, under the Bill, universities could find themselves in difficulty over fundraising activities with alumni. We were pleased to see today that the Government have listened and addressed that. My noble friend cannot be with us today because of the weather making it difficult for her to travel to London. Generally, the higher education sector and others are grateful for what is proposed, although a couple of noble Lords have raised particular concerns, so it would be useful if the Minister could address those in her response. There may be one area that has not quite been resolved.
There are a couple of issues to mention. We are happy to support the amendment on police sharing of information for law enforcement purposes, as I am the amendment in respect of the Prisoner Ombudsman for Northern Ireland and the technical amendments on tribunals and courts to ensure consistency of language.
I shall not go on any further, because I am conscious that we have two Statements today and one will take at least an hour and the other 40 minutes, and the dinner break business for an hour, which will eat in to our time for Report today. I shall leave it here and say well done to the Government: thank you very much for that. It is better that we spend our day looking at issues that we have not quite resolved.
My Lords, I thank all noble Lords for the points they made. In answer to the noble Lord, Lord Patel, as my noble friend Lord Ashton explained in previous debates, Clause 7 was never intended to provide an exhaustive list of public interest tasks but, rather, to ensure continuity with respect to those processing activities that cover paragraph 5 of Schedule 2 to the 1968 Act. However, I am happy to reiterate that medical research—and other types of research carried out by universities for the benefit of society—will almost always be seen as a public interest task. I appreciate the sector’s desire to have greater guidance from the Information Commissioner on the issue, and I shall certainly pass that on, but the noble Lord will appreciate that it is not for me to dictate the Information Commissioner’s precise programme of work from the Dispatch Box.
I thank the noble Lords, Lord Smith and Lord Macdonald, for their kind words. I think we have put universities on a safe footing in this regard. I reiterate my thanks to them for coming to see us and helping us with that amendment.
The noble Lord, Lord Clement-Jones, asked: is alumni fundraising always in the public interest, and what about medical research?