Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019

Lord Rooker Excerpts

Monday 18th February 2019 Lords Chamber

[Lord Adonis]

I was not suggesting that they were his personal expensive lawyers, just expensive lawyers who have chosen to brief him; I know that he could not possibly afford expensive lawyers. When he said that it depends on what happens as time goes on, he put his finger on a very important point. The whole point of no deal, with a separate regime under our ICO, is that we could quite quickly find ourselves diverging, and as we diverge, that will quickly impose burdens over and above those that would apply even if we left the EU with a deal.

I am also not sure it is true to say that there would be no burdens as a result of the regulations even at the outset. I am a lay man in this business, and trying to understand what is going on is very difficult, particularly because there has been no consultation and we do not have the opportunity to assess what people who are expert and directly affected have said. The reason I intervened on the Minister in his opening remarks is that, having been a company director who has had to deal with the implementation of the GDPR, I know that having a representative dealing with data matters inside the EEA is very important. Many companies have offshored a lot of their data-control activities, and the requirement of the GDPR that they must have a representative inside the EEA—which I think is the correct thing to do—is a definite burden. It means that companies not only have to employ additional individuals but have to set up additional offices, in essence, to cope with those flows in many cases, particularly if they are dealing with significant data-handling exercises which are outside the EEA at the moment. This happens all the time with call centres in India; many companies are in this territory.

My understanding of what the Minister said in our earlier exchange is that if we leave with no deal and therefore must set up our own UK data-monitoring regime immediately, there will be a requirement for every company operating outside the EEA—which must, under the GDPR, have a representative inside the EEA—to have a representative in the United Kingdom. I would be grateful if the Minister could confirm that because if it is true, that is an immediate and potentially significant burden.

The other important point is that people need to understand that these arrangements are reciprocal. One reason why we as a country have such a good services industry is that a lot of companies based in the UK do substantial business in the EEA and beyond. That is great. My assumption, although it is not spelled out in the Explanatory Memorandum, is that in a no-deal scenario, data controllers who are based in the UK but do substantial business in the EEA will be required by the European Union to have representatives in the European Union over and above their data controllers in the UK; these are not currently needed. I would be grateful if the Minister could address that point. This flows logically from the new regime being set up. I would be astonished if that is not the case because I do not think that the European Union would regard having a data controller in the United Kingdom as meeting its standards of data adequacy. I would be grateful if the Minister could confirm that.

On that point, it is apparent that this immediately imposes a burden, potentially a significant one, on every company that handles data in the European Union or the EEA, as opposed to just in the UK. That represents a substantial proportion of our companies. If we had had an impact assessment, as the noble Baroness, Lady Ludford, suggested, this issue would have been brought out and we would know its effect. If there had been public consultation, we would know, but there has been none—and we have had no impact assessment. To my surprise, the Select Committees of this House that oversee instruments and put them to us have not raised these issues, which seem substantial and should have been raised before these instruments came to this House.

[Lord Rooker (Lab)]

I think my noble friend has not quite got it. I assure him that, as the noble Lord, Lord Cunningham, said earlier, Sub-Committee B is in the process of sending a letter to the Treasury complaining about the national policy it laid down on not having impact assessments for these instruments. Every week, we are seeing dozens of instruments with references to both informal consultation and none, but now it has been picked up that there is a national policy not to have impact assessments.

[Lord Adonis]

Is my noble friend saying that the Select Committee did raise these concerns?

[Lord Rooker]

Yes. As I speak, a letter is winging its way from Sub-Committee B to the Treasury. It was agreed at our meeting last week, the committee having discussed it in previous weeks.

[Lord Adonis]

That raises the issue of why that is not in any of the information before your Lordships. I was not aware of that at all. It is not flagged up in any of the documentation. Like other noble Lords, I appreciate hugely the work done by our Select Committees but the committee’s view is not always completely clear to the House when these instruments come before it, unless the committee has issued a formal report. We do not get full value from our Select Committees in the way that their work is presented. For instance, I am surprised that the chairs of these Select Committees do not comment on these instruments based on the committees’ work. I see that one of the chairs is sitting opposite; perhaps he would like to intervene.

[Lord Trefgarne (Con)]

All I can say at the moment is that the letter to which the noble Lord, Lord Rooker, referred has not gone quite yet.

[Lord Rooker]

That is because of a dispute between the two chairs. Sub-Committee B agreed in discussions last week about the terms of that letter and will meet tomorrow. I do not know what has happened today in Sub-Committee A, but Sub-Committee B made a decision, based on the statutory instruments it saw, to object to the Treasury’s objectionable policy. If Sub-Committee A does not agree, I hope that Sub-Committee B—which is dealing with half of these instruments—will send the letter on its own. Another member of Sub-Committee B is currently sitting in the Chamber.

[Lord Adonis]

My Lords, I appear to be flushing out an important dispute that is taking place between the chairs of Sub-Committee A and Sub-Committee B.

[Lord Rooker]

You are.

[Lord Adonis]

I have to say that this for me is a black box. Because of my other duties I have not been able to spend time analysing what is going on in Sub-Committees A and B, but this is very important because hundreds of these instruments are coming to us.

I turn to the issue of there being no consultation, which my noble friend Lord Rooker referred to. I have been going on about it for weeks. This has been true of every single no-deal instrument that has come to your Lordships. It is deeply and profoundly unsatisfactory. In my view this ought to have been flagged up for each of these instruments from the beginning and ought to have been a reason for them not to come before the House. How can we possibly conduct the proper business of the nation in terms of changing the law when we do not have any public consultation with any of the sectors that are affected by these instruments? We are dependent on the expensive lawyers of the noble Lord, Lord McNally, even to spell out the most basic features of these regulations—which, first, will not be apparent to those of us who are lay people and, secondly, which those people who are affected have had no opportunity to present except through the agency of expensive lawyers who seek to make a living. Of course, the expensive lawyers referred to by the noble Lord, Lord McNally, will now advertise their wares to companies, telling them what the impact of these things is going to be because they did not have a chance to engage with them earlier and make their views known, particularly if they start being adversely affected.