(4 years ago)
Lords ChamberMy Lords, I am grateful to the noble Baroness, Lady Chakrabarti, for drawing attention to the points I made, and I am sorry if I sounded too aggressive on some of them. The point I did not make, which I shall make now, is on how much crime is committed. One would expect that, in most cases, it would not be the commission of crime so much as association with people while they committed crimes, with the person in question not necessarily being directly involved but having some complicity, which is one of the problems.
The requirements, as I understand them, if they are in that situation and a criminal conduct authorisation is issued, are that it has to be proportionate, it may not be issued if what is sought to be achieved can be done in another way, and it has to be part of an effort to prevent more serious criminality. Those three conditions are perhaps not mentioned very much but are important.
I have left out some issues that I might have discussed. We have just talked about possibly leaving the Department of Health and Social Care out of the Bill. Think of this moment when organised crime, throughout the world, is seeing how it can get into the vaccines business in one way or another. The challenge that that will pose will feature in our news broadcasts and papers in the days ahead. It will obviously be a big issue. One recalls that the NHS was practically brought to a grinding halt from its systems being hacked and disrupted.
There is this, as well, if it is not too dramatic. At the time of Brexit, when we may be moving towards no deal, there is an idea to take from HMRC its ability to keep every possible assistance. In trying to deal with some of the problems it will have, it will need all the help it can get.
My concern about these amendments, and referral to the police or judges to overview the operations of CCAs, is that a clear structure is set up. The Investigatory Powers Commissioner is a very senior judge and the judicial commissioners are very senior. My concern all the way along is that nobody has challenged how vital covert intelligence sources can be, in a range of different fields. The question is whether we can still keep those covert sources coming. The more we expand the range of people who have access to that information, the bigger the danger of leaks, and then there will be fewer sources available in the future. That is why I think the structure set up of the Investigatory Powers Commissioner and his judicial commissioners, with a tribunal and an annual report to Parliament on its operations, has important safeguards. Going much further than that starts to undermine the security of the information and imperil the safety of some brave people, who are giving evidence to help keep our country safe, in a range of different fields.
My Lords, it is a pleasure to follow the noble Lord, Lord King of Bridgwater, with whom I completely agree on maintaining the status quo on the involvement of covert human intelligence sources and the ability of the police and security services to authorise these people to engage in crime. I have no argument with him on those issues. But, as the noble Baroness, Lady Chakrabarti, said, the issue for us is the police granting immunity from prosecution or from any legal action at all.
My noble friend Lady Hamwee and I have Amendment 79, but I will take the amendments in this group in order. Amendment 75A from the noble Baroness, Lady Jones of Moulsecoomb, is intended to require the Investigatory Powers Commissioner to identify unlawful or improper conduct through a CCA to the police for investigation. I have a great deal of sympathy for what the noble Baroness is trying to achieve, but I am not sure that her amendment achieves what she sets out to.
The amendment talks about conduct that is not authorised by the criminal conduct authorisation, but we are also concerned with conduct that is unlawful or improper that is authorised by a CCA, by accident, inexperience or corrupt practice. This does not appear to be covered by the amendment. Of course, if it is the result of police malpractice, referring the matter to the police may not be enough to ensure that it is properly dealt with.
(4 years ago)
Lords ChamberMy Lords, unlike, I think, every other speaker to these amendments so far, I do not support them. I see in them, once again, attempts to impose yet more conditions that may affect the effectiveness of the operation of undercover support and sources doing what I thought was generally agreed to be vital work in the interests of enforcement and the life of people in our country. I say at the start that a number of these things, and the worry about how these powers may be exercised, do not pay respect to the fact of the code of practice, which many have said should be required reading for everybody taking part in these debates. The importance of that code of practice is that it is going to have to be approved by both Houses of Parliament. That will be a very important protection, because it is under that code of practice that authorising officers issuing CCAs, and the Investigatory Powers Commissioner, will obviously be required to act.
I make no apology for repeating what I said on an earlier amendment in quoting James Brokenshire, the Minister for Security, when he gave the astonishing figures for a single year in London alone. The use of undercover sources resulted in 3,500 arrests, the recovery of more than 100 firearms and 400 other weapons, the seizure of more than 400 kilograms of class A drugs and the recovery of more than £2.5 million in cash. It also enabled, which I did not mention, the National Crime Agency to safeguard several hundred victims of crime, including from child sexual exploitation and abuse. Those figures alone, just from London in one year, surely leave nobody in any doubt of the importance of this vital source of support for preserving an orderly and law-abiding society. I make this point because, under the code of practice, which includes this question, others are seeking to add the word “serious” to “crime”. How does an authorising officer react when an informant comes and says, “There is a group of people who are starting to get together, I am not quite sure what they are up to, but I think there is a real risk that it could turn, later on, into something much nastier”?
When one looks at those figures I quoted from James Brokenshire, how many lives have been saved; how many people’s lives have not been disrupted; how much misery and poverty that might otherwise have entailed has been prevented? For these reasons, I am not persuaded of the need to add “serious” to crime; I think it might inhibit the operation of a properly authorised issuer of a CCA, who obviously has to use his judgment, and has to persuade the IPC as well that his judgment is correct and is in line with the code of practice.
I should also say a word about preventing disorder. We are living in extremely difficult and dangerous times at the moment. We know that the power of social media now makes it possible, in an instant, practically, to organise major demonstrations which may, in fact, be based on that new and horrid ingredient “fake news”. These may disrupt many people’s lives and may cost people’s lives. Although there are many very worthy causes—whether it is Black Lives Matter or Extinction Rebellion—pursuing very understandable and admirable objectives, none the less we also know that around the fringes of those organisations, or in the confusion that some of their demonstrations cause, other sources of crime can easily emerge and it often makes opportunities for gangs to commit many more crimes as well. So I would not delete “preventing disorder”, provided it is properly covered within the code of practice.
The other thing I would just add is about economic well-being. I totally support trade unions—I always have done and, as Secretary of State for Employment, I was obviously closely involved—and legitimate trade union activity. However, we all know that, within our lifetime, we have had one or two instances where that has not been the case. One instance was the miners’ strike, when Mr Arthur Scargill said that one of his objectives was to bring down the Government, and he was not averse, in the process, to accepting money from the Soviet Union in pursuit of that objective. It is to the credit of Neil Kinnock, now the noble Lord, Lord Kinnock, if I may say so, that he would not support him at that time, because Mr Scargill had not put the issue to a vote of the whole trade union movement.
I think we have seen here, and I understood at the beginning of this, that virtually all noble Lords recognise the vital importance of undercover source information and for there to be a proper system, a statutory system, under which they would operate. That is what I wish to see. I wish to see a thoroughly effective code of practice, thoroughly trained issuing officers and rapid and close contact with the Investigatory Powers Commissioner as they carry out their work.
My Lords, I accept that it is difficult to separate these issues, but I will leave discussion of economic well-being and the activities of trade unions and trade unionists until the relevant groups.
As drafted, the Bill defines very broadly when a criminal conduct authorisation is necessary, and this group of amendments focuses on the new Section 29B(5)(b) inserted into the Regulation of Investigatory Powers Act 2000 by Clause 1(5) of this Bill. It states:
“A criminal conduct authorisation is necessary … if it is necessary … for the purpose of preventing or detecting crime or of preventing disorder”.
Crime and disorder have very wide definitions, as noble Lords have set out in this debate.
As we have already debated, tasking a CHIS to participate in crime is a very serious step for any authority to take, with all the implications for the rule of law and the potential for abuse that we have already debated, and because of the potential danger it places the CHIS in, about which we will discuss more in a later group. In many situations it could have far more negative consequences for innocent people than the interception of communications, and we should not forget that we are amending legislation that was originally intended to cover, when drafted, only the interception of communications.
The legislation covering such interception limits the use of its powers to cases of serious crime. Even in my limited seven years in this House, I have lost count of the definitions of serious crime in different pieces of legislation. It could be argued that, if we wanted to limit the power to grant a CCA to cases of serious criminality, we could choose whatever definition of serious crime we liked.
The noble Lords, Lord Hendy and Lord Hain, have decided in their Amendment 22 to define serious crime as indictable offences only, but I am glad to hear from the noble Baroness, Lady Chakrabarti, that the noble Lord, Lord Hendy, is attracted to our definition rather than the one in his own amendment.
As my noble friend Lady Hamwee has clearly articulated, we have gone with the definition already used in RIPA—for the sake of consistency, at least within the Act itself. The principle, however, is the same: that this power to grant a criminal conduct authorisation should be limited to serious crime.
The Government may say that, in addition to being necessary, the granting of a CCA must also be proportionate, and it would not be proportionate to deploy CHIS if the criminal activity was minor. The same argument applies, however, to the interception of communications in RIPA, where “necessity” is already limited to serious crime, as defined in our Amendment 31.
The noble Lord, Lord King of Bridgwater, talked about the code of practice. There is, however, a definition of serious crime in RIPA despite the existence of the code of practice for the interception of communications. The noble Lord also talked about the impressive array of offences that had been detected as a result of the deployment of CHIS, including those relating to firearms, drug-dealing and child sexual exploitation. All those examples would fall within our definition of serious crime.
What is sauce for the goose is sauce for the gander, even though geese and ganders are different in some important respects. RIPA limits the interception of communications to serious crime, so this Bill should limit the issuing of criminal conduct authorisations to serious crime using the same definition.
The second issue is more difficult and more controversial, starting with the fact that the prevention of disorder is not one of the necessary grounds for the interception of communications. The Government are already on the back foot here, in that large-scale disruptive disorder can have very serious consequences for society yet there is no power to intercept the communications of organisers of disorder in order to prevent it. None the less, there is an argument for both the interception of such communications and the deployment of CHIS into groups that are planning to cause widespread disruption that could seriously affect public order, cause damage to property and the economy, prevent people going about their day-to-day business, and create fear among innocent bystanders.
(8 years, 1 month ago)
Lords ChamberMy Lords, I am very grateful to the Minister, who has in part repeated what he said the last time we considered these issues. I raise again my concern that this public consultation is not, as he describes it, a serious consultation. I explained last time that Cabinet Office guidelines—I appreciate there are no rules, laws or regulations about it—say that consultations should be for 12 weeks; this consultation is for 10 weeks. Consultations should not run over a holiday period; this consultation includes Christmas and new year. Why does it not follow Cabinet Office guidelines?
I do not share the concerns of the noble Lord, Lord Myners. Like the noble Baroness, Lady Hollins, I emphasise that the majority in this House voted for her original amendment, and I am sure it will not be long before this House has another opportunity to vote to force the Government to implement the provisions of the Crime and Courts Act 2013 that protect innocent victims from unreasonable and unnecessary press intrusion. The Government should know that we on these Benches will support such a vote.
My Lords, the noble Lord, Lord Paddick, said that a majority in this House supported the noble Baroness, Lady Hollins, in her amendment, but there is an even bigger majority in this House for ensuring that the Bill becomes law. We are now dealing with a very serious threat, a very serious situation, in which the provisions in the Investigatory Powers Bill are important. As your Lordships know, if the Bill does not make progress now, with the sunset clause on the present arrangements we would be naked in having no provision in law to govern the working of investigatory powers. There is absolutely no doubt that the noble Baroness has done the right thing. We could not possibly go on with this and provoke that risk at this time. Whatever the merits of these amendments—and I have not gone deeply into their merits—there is no doubt that I speak for the overwhelming majority in this House when I say that the Bill has got to become an Act soon so that we have proper provisions in place to defend our country and our citizens against the risks they might otherwise face.
(8 years, 2 months ago)
Lords ChamberI did not suggest in any way that David Anderson agreed with this amendment, or that the lists of everybody’s websites would be read, as the noble Lord, Lord Rooker, suggested.
As regards the comments made by my noble friend Lord Campbell of Pittenweem, he referred to case studies in the David Anderson report on bulk data. I cannot emphasise this enough to noble Lords: internet connection records do not currently exist. The telecommunications companies will have to create them. Therefore any case studies in David Anderson’s report do not relate to the bulk collection of internet connection records. Internet connection records do not exist, so they cannot be collected in bulk at the moment.
I acknowledge the great experience of the noble Lord, Lord King of Bridgwater, and his passion about these issues. He emphasised that everything needs to be done to prevent a terrorist attack, and I agree with him 100%. The point that I made in my opening speech when I quoted David Anderson directly, saying that it was a direct quote from him, was that GCHQ, MI5 and MI6—the agencies responsible for keeping us safe from terrorism—say that they do not need internet connection records. Even the Minister said that at present there is no anticipated need to collect internet connection records to prevent a terrorist attack.
I am very grateful to the right reverend Prelate the Bishop of Chester for saying that we are making a fundamental point here. The difference between today’s debate and Monday’s debate is that requiring individuals’ internet connection records has to be based on reasonable suspicion. Thanks to the intervention of the Labour Front Bench, the level of the seriousness of the crime that needs to be suspected before those records can be handed over is higher than the Government first suggested. However, this power would allow everybody’s internet connection records to be acquired in bulk by the security agencies with no reasonable suspicion at all.
I am sorry but this is Report and I do not have to give way, unless the noble Lord wishes to clarify what I have just said.
I wish to make an intervention. The noble Lord said again that nobody wants this power. Can he explain why it is in the Bill?
It is not for me to explain why the Government want in the Bill a power that currently does not exist, because internet connection records do not exist, and which the security services say they do not want but which the noble and learned Lord says might be needed in the future. It is not for me to justify this power; I am saying to the House why I do not believe it is justified. The noble and learned Lord and the noble Lord, Lord Rosser, made the point that this is an existing power, but how can you have an existing power to acquire something that will not exist until the Bill is enacted?
I have tried to explain very clearly—although unfortunately some people have not heard what I have said—why we cannot accept this provision, and that is why I want to test the opinion of the House.
(8 years, 5 months ago)
Lords ChamberI understand the importance of safeguards, but the noble Lord’s thrust is that he is against the retention of internet connection records in total. He therefore totally disagrees with the impressive Joint Committee of both Houses, which considered the matter at some length. It said:
“We consider that, on balance, there is a case for Internet Connection Records as an important tool for law enforcement”.
Does he disagree?
I am grateful for the chance to clarify my position. That is my position: we disagree with the conclusions of the Joint Committee. We believe, on balance, that the retention of internet connection records is disproportionate and unnecessary.
Technology experts recommend that companies should plan on the basis of their security measures having been breached, not just plan for the security of their databases. This makes highly intrusive personal data potentially available to criminals and hostile foreign powers. If a criminal establishes that a married man is accessing gay websites, or a hostile foreign Government establish that an intelligence officer is accessing lonely hearts websites, that could increase the risk of blackmail or entrapment. Knowing from ICRs when someone is not at home can increase the risk of burglary.
Internet connection records are hugely expensive to analyse and store. Based on estimates from Denmark, where the storage of internet connection records has already been explored extensively, the set-up costs alone in the UK could be around £1 billion. As in the UK, the cost estimates provided by the Government and telecommunications providers in Denmark varied widely. The Government therefore asked independent management consultants to establish the true cost, which confirmed that the telecommunications service providers’ estimates were the correct ones. Extrapolating from the independently verified Danish costs using the relative populations of both countries would take the set-up costs alone for internet connection records in the UK to more than £1 billion.
For those who think that this cannot be right, I should say that 80% of all the data ever created since the beginning of time has been created in the last two years. That is the rate of increase, and, with more and more devices being connected to the internet, such as those controlling our central heating, and with even refrigerators and ovens being connected to the so-called internet of things, the number of internet connection records is set to increase exponentially. Apart from not being able to see communications in among all these other internet connections, the storage costs alone will be enormous.
Taking all these arguments together, the storage of the internet connection records of everyone in the UK for 12 months, whether they are suspected of wrongdoing or not, fails the proportionality test. I quote the RUSI report again, this time on proportionality. It states:
“Intrusion must be judged as proportionate to the advantages gained, not just in cost or resource terms but also through a judgement that the degree of intrusion is matched by the seriousness of the harm to be prevented”.
The advantages gained through the storage of internet connection records are limited, the costs are prohibitive, the degree of intrusion is huge and serious harm can be prevented through other means.