(8 years ago)
Lords ChamberMy Lords, I am very grateful to the Minister, who has in part repeated what he said the last time we considered these issues. I raise again my concern that this public consultation is not, as he describes it, a serious consultation. I explained last time that Cabinet Office guidelines—I appreciate there are no rules, laws or regulations about it—say that consultations should be for 12 weeks; this consultation is for 10 weeks. Consultations should not run over a holiday period; this consultation includes Christmas and new year. Why does it not follow Cabinet Office guidelines?
I do not share the concerns of the noble Lord, Lord Myners. Like the noble Baroness, Lady Hollins, I emphasise that the majority in this House voted for her original amendment, and I am sure it will not be long before this House has another opportunity to vote to force the Government to implement the provisions of the Crime and Courts Act 2013 that protect innocent victims from unreasonable and unnecessary press intrusion. The Government should know that we on these Benches will support such a vote.
My Lords, the noble Lord, Lord Paddick, said that a majority in this House supported the noble Baroness, Lady Hollins, in her amendment, but there is an even bigger majority in this House for ensuring that the Bill becomes law. We are now dealing with a very serious threat, a very serious situation, in which the provisions in the Investigatory Powers Bill are important. As your Lordships know, if the Bill does not make progress now, with the sunset clause on the present arrangements we would be naked in having no provision in law to govern the working of investigatory powers. There is absolutely no doubt that the noble Baroness has done the right thing. We could not possibly go on with this and provoke that risk at this time. Whatever the merits of these amendments—and I have not gone deeply into their merits—there is no doubt that I speak for the overwhelming majority in this House when I say that the Bill has got to become an Act soon so that we have proper provisions in place to defend our country and our citizens against the risks they might otherwise face.
(8 years, 1 month ago)
Lords ChamberI did not suggest in any way that David Anderson agreed with this amendment, or that the lists of everybody’s websites would be read, as the noble Lord, Lord Rooker, suggested.
As regards the comments made by my noble friend Lord Campbell of Pittenweem, he referred to case studies in the David Anderson report on bulk data. I cannot emphasise this enough to noble Lords: internet connection records do not currently exist. The telecommunications companies will have to create them. Therefore any case studies in David Anderson’s report do not relate to the bulk collection of internet connection records. Internet connection records do not exist, so they cannot be collected in bulk at the moment.
I acknowledge the great experience of the noble Lord, Lord King of Bridgwater, and his passion about these issues. He emphasised that everything needs to be done to prevent a terrorist attack, and I agree with him 100%. The point that I made in my opening speech when I quoted David Anderson directly, saying that it was a direct quote from him, was that GCHQ, MI5 and MI6—the agencies responsible for keeping us safe from terrorism—say that they do not need internet connection records. Even the Minister said that at present there is no anticipated need to collect internet connection records to prevent a terrorist attack.
I am very grateful to the right reverend Prelate the Bishop of Chester for saying that we are making a fundamental point here. The difference between today’s debate and Monday’s debate is that requiring individuals’ internet connection records has to be based on reasonable suspicion. Thanks to the intervention of the Labour Front Bench, the level of the seriousness of the crime that needs to be suspected before those records can be handed over is higher than the Government first suggested. However, this power would allow everybody’s internet connection records to be acquired in bulk by the security agencies with no reasonable suspicion at all.
I am sorry but this is Report and I do not have to give way, unless the noble Lord wishes to clarify what I have just said.
I wish to make an intervention. The noble Lord said again that nobody wants this power. Can he explain why it is in the Bill?
It is not for me to explain why the Government want in the Bill a power that currently does not exist, because internet connection records do not exist, and which the security services say they do not want but which the noble and learned Lord says might be needed in the future. It is not for me to justify this power; I am saying to the House why I do not believe it is justified. The noble and learned Lord and the noble Lord, Lord Rosser, made the point that this is an existing power, but how can you have an existing power to acquire something that will not exist until the Bill is enacted?
I have tried to explain very clearly—although unfortunately some people have not heard what I have said—why we cannot accept this provision, and that is why I want to test the opinion of the House.
(8 years, 4 months ago)
Lords ChamberI understand the importance of safeguards, but the noble Lord’s thrust is that he is against the retention of internet connection records in total. He therefore totally disagrees with the impressive Joint Committee of both Houses, which considered the matter at some length. It said:
“We consider that, on balance, there is a case for Internet Connection Records as an important tool for law enforcement”.
Does he disagree?
I am grateful for the chance to clarify my position. That is my position: we disagree with the conclusions of the Joint Committee. We believe, on balance, that the retention of internet connection records is disproportionate and unnecessary.
Technology experts recommend that companies should plan on the basis of their security measures having been breached, not just plan for the security of their databases. This makes highly intrusive personal data potentially available to criminals and hostile foreign powers. If a criminal establishes that a married man is accessing gay websites, or a hostile foreign Government establish that an intelligence officer is accessing lonely hearts websites, that could increase the risk of blackmail or entrapment. Knowing from ICRs when someone is not at home can increase the risk of burglary.
Internet connection records are hugely expensive to analyse and store. Based on estimates from Denmark, where the storage of internet connection records has already been explored extensively, the set-up costs alone in the UK could be around £1 billion. As in the UK, the cost estimates provided by the Government and telecommunications providers in Denmark varied widely. The Government therefore asked independent management consultants to establish the true cost, which confirmed that the telecommunications service providers’ estimates were the correct ones. Extrapolating from the independently verified Danish costs using the relative populations of both countries would take the set-up costs alone for internet connection records in the UK to more than £1 billion.
For those who think that this cannot be right, I should say that 80% of all the data ever created since the beginning of time has been created in the last two years. That is the rate of increase, and, with more and more devices being connected to the internet, such as those controlling our central heating, and with even refrigerators and ovens being connected to the so-called internet of things, the number of internet connection records is set to increase exponentially. Apart from not being able to see communications in among all these other internet connections, the storage costs alone will be enormous.
Taking all these arguments together, the storage of the internet connection records of everyone in the UK for 12 months, whether they are suspected of wrongdoing or not, fails the proportionality test. I quote the RUSI report again, this time on proportionality. It states:
“Intrusion must be judged as proportionate to the advantages gained, not just in cost or resource terms but also through a judgement that the degree of intrusion is matched by the seriousness of the harm to be prevented”.
The advantages gained through the storage of internet connection records are limited, the costs are prohibitive, the degree of intrusion is huge and serious harm can be prevented through other means.