(6 months, 2 weeks ago)
Westminster HallWestminster Hall is an alternative Chamber for MPs to hold debates, named after the adjoining Westminster Hall.
Each debate is chaired by an MP from the Panel of Chairs, rather than the Speaker or Deputy Speaker. A Government Minister will give the final speech, and no votes may be called on the debate topic.
This information is provided by Parallel Parliament and does not comprise part of the offical record
I beg to move,
That this House has considered cyber security laws and tackling crime.
It is a pleasure to serve under your chairmanship, Ms Bardell. I am delighted to lead this debate on the important issue of cyber-security, particularly in relation to cyber-crime and the need to enhance the UK’s national cyber-resilience.
Cyber-security has a significant impact on society, the economy and individuals, as well as on both national and global security. The UK faces cyber-threats from a number of hostile actors, whether they are states, state-sponsored groups or criminal organisations motivated by money. Cyber-crime itself ranges from complex ransomware attacks to less sophisticated cyber-threats such as hacking and phishing, which many in their everyday lives. In today’s world, virtually every business, charity and public sector organisation is in some way digital, but, as high-profile incidents have shown, cyber-attacks exploiting that digitalisation can quickly undermine trust in our private and public sector institutions.
With a burgeoning cyber ecosystem, the UK is well placed to be a global leader on cyber-security, and I will come back to that point later. Often, however, we struggle to get the basics right, leaving citizens and businesses exposed as they move more and more of their lives and operations online. Last year, UK businesses experienced approximately 7.78 million cyber-crimes. Half of businesses and around a third of charities report having experienced some form of cyber-breach or attack in the last 12 months and such attacks have had a real impact on business and consumers.
A recent report by the think-tank the Royal United Services Institute brought to light some of the stark implications of cyber-crime, particularly in relation to ransomware, which is malware designed to deny a user or organisation access to their own data unless a ransom is paid to the attacker. RUSI’s report revealed the extent to which ransomware can ruin lives, with the harm going beyond financial and reputational costs for organisations. Victims and incident responders have revealed that ransomware creates both physical and psychological harms for individuals and groups, which have caused individuals to lose their jobs, evoked feelings of shame and self-blame, seeped into private and family life and contributed to serious health issues. Furthermore:
“The harm and cumulative effects caused by ransomware attacks have implications for wider society and national security, including supply chain disruption, a loss of trust in law enforcement, reduced faith in public services, and the normalisation of cybercrime. Ransomware also creates a strategic advantage for the hostile states harbouring the cyber-criminals who conduct such operations.”
Meanwhile, the threat landscape is changing and becoming more complex.
UK cyber firm NCC Group’s latest insights show that ransomware attacks increased by 84% last year, with the UK the second most targeted country for such attacks, only behind the US. Emerging technologies such as artificial intelligence have the potential to enable cyber-attackers to mount ever more sophisticated campaigns against organisations. AI is effectively lowering the barrier of entry into cyber-crime, making it easier for cyber-attackers to successfully target victims and widening the availability of voice cloning, deepfakes and social engineering bots. We are likely to see that manifest in a higher volume of cyber-attacks, an enhanced ability of cyber-criminals to generate malware and an improved success rate of social engineering and phishing attacks. With AI as an emerging threat, hacking as a service is being thought of as a growing market, whereby malware developers sell or lease cyber-attack tools and services to other cyber-criminals. Worryingly, such a business model extends cyber-attack capabilities to organisations and individuals that would not otherwise have known how to carry out attacks themselves.
Artificial intelligence is also advancing tactics that have been around for decades and, in its own way, evolving threats in line with technology. Deepfake phishing is just one example of a fast-growing threat that manipulates or confuses users in order to exploit their trust and gain access to their data. That can be done through emails or messages, video calls or voice messages, where personalisation and synthetic content can make the attack more credible.
Cyber-threats should be seen in the wider context of nation-state threats, too. The conflict in Ukraine has shown how cyber and kinetic attacks are increasingly interconnected in modern hybrid warfare. As thousands of lines of complex code control new and evolving physical functions and systems, such as in smart cities, cyber-security vulnerabilities can be exploited to effect change in the real world. Although we have not seen the so-called cybergeddon that some were expecting from the next big conflict on our globe, one thing is clear: cyber-warfare has proven itself to be a critical element in hybrid cyber-kinetic battlefields.
There is an opportunity here for the UK. To tackle cyber-crime, a close partnership between the public and private sectors is a critical part of the UK’s whole-society approach. In particular, the UK’s cyber industry is working closely with law enforcement, the public sector, academia and other private firms to ensure that the UK remains confident, capable and resilient in this fast-moving digital world. That includes vulnerability researchers, also known as ethical hackers, who identify security vulnerabilities in products, software and the UK Government. They rely on such researchers to identify bugs before they can be exploited by malicious actors for their nefarious purposes.
Meanwhile, threat intelligence researchers detect cyber-attacks and gain insight into attackers and victims. Researchers work with and pass on that important information to law enforcement and the intelligence agencies, enabling them to defend the UK against rising cyber-crime and geopolitical threat actors. Many of the recent takedown operations we have heard about, where law enforcement disrupted the servers or digital infrastructure that cyber-criminals used to conduct their illegal activities, were possible only because intelligence and insights about those cyber-criminals were shared across the public and private sectors. I firmly believe that there is an opportunity for the UK to play a significant leadership role in conducting the UK’s response, with the north-west cyber corridor at its heart.
We are already seeing that public-private partnership in action in wider Lancashire and in my own constituency of Preston through the National Cyber Force, which will open its new home in Samlesbury, Lancashire, in 2025. It is a partnership between defence and intelligence, and already carries out cyber operations daily to counter and contest the actions of those who would harm the UK or our allies, to keep the country safe and to protect and promote the UK’s interests at home and abroad. Furthermore, the Lancashire Cyber Partnership, or LCP, is a strategic collaboration between Lancashire County Council, the Lancashire Enterprise Partnership, the University of Central Lancashire, Lancashire University and BAE Systems. In addition, the National Cyber Force has its own role in shaping, supporting and promoting the county’s world-class cyber strengths and fast-growing cyber ecosystem, becoming a destination for cyber businesses, investors, careers training, academia and, indeed, innovation. With a strong cyber industry, Lancashire and the wider north-west are fostering the growth of the technology, digital and defence sectors, as well as harnessing the investment, jobs and benefits that come with a thriving cyber economy.
We should be proud of the UK’s role as a responsible global cyber power, and we should also remember that there is widespread cross-party and cross-societal consensus on the importance of cyber-security as fundamental for thriving and prosperous digital societies and economies. However, we cannot be complacent. Research from the NCC Group has shown that citizens—our constituents—expect us, as political decision-makers, to do what we can to keep them safe and secure in cyber-space. We have strong foundations to build on, but we must continue to do more to take our cyber-security to the next level. Indeed, much more can be done to ensure that regional cyber clusters, such as the north-west, can play their part in making us all safer online, while also enhancing national cyber-resilience.
I would like to move on to the issue of the UK’s Computer Misuse Act 1990. First and foremost, that Act, which is the main cyber-security Act that regulates the UK’s digital relationship between individuals and malicious parties, needs bringing into the 21st century. The Act was written more than 30 years ago when just over 0.5% of the world’s population had access to the internet, and before the cyber industry—as we know it today—even existed. As a result, the UK’s cyber-defenders, such as the vulnerability and threat intelligence researchers mentioned earlier, are held back by that outdated law from doing all they can to protect the UK. That is because the Act, which was written over 30 years ago, has a blanket prohibition on all forms of unauthorised access to computer material, irrespective of intent or motive. In this day and age, where an individual desktop PC is but a distant memory, where technologies are hyperconnected and where cyber-crime is rampant, that approach simply does not reflect the reality we live in. The legislation is no longer fit for purpose, and, worse, it might be detrimental.
There have been calls from industry, led by the CyberUp Campaign, to reform the law to include a defence for legitimate cyber-security work. Sir Patrick Vallance called for such a defence in the “The Pro-innovation Regulation of Technologies Review”, and he recommended amending the 1990 Act to include a statutory public interest defence that would provide stronger legal protections for cyber-security researchers and professionals. That would have a catalytic effect on innovation in a sector with considerable growth potential. Countries such as France, Israel and the United States have already updated their regulations to provide that defence. I join Sir Patrick by agreeing that if the UK cyber industry is to compete on a level playing field, the UK Government should do the same. However, one year since Sir Patrick published his recommendation, and three years since the UK Government first launched their review into the Act, the Government are yet to set out how they will address the legal barriers that it presents to the UK cyber-security industry.
A second area where the Government must prioritise reform is in updating the network and information systems regulations, which set out the cyber rules for our critical infrastructure. Back in 2022, the Government announced their intention to legislate to enable new sectors to be brought within the scope of the NIS regulations, responding to the inevitable evolution of what constitutes the UK’s critical infrastructure, but those reforms were not included in the most recent King’s Speech. It is critical that there are no further delays in bringing forward the reforms, and that a Bill is prioritised. Failure to legislate would leave a core part of the UK’s critical infrastructure exposed when others globally are already moving forward with new laws to ensure that all relevant entities are appropriately and proportionately regulated.
Outside the UK’s critical infrastructure, we must look at how we protect small businesses and charities, the backbone of the UK’s economy. Despite six in 10 small businesses being victims of a cyber-attack last year, many lack the skills and budgets to implement proportionate cyber-protections, leaving them exposed. They can also be disproportionately affected, with cyber-attacks sometimes posing an existential threat. A survey found that 90% of European small and medium-sized enterprises believed that cyber-security issues would have serious negative impacts on their business within a week of the issues happening; 57% said that they would most likely become bankrupt or go out of business.
It is unrealistic to expect small firms to adhere to and invest in the same cyber-resilience standards as larger firms such as critical infrastructure firms. However, that leaves a significant part of the economy vulnerable to cyber-attacks. To tackle that problem, the Government should work with technology providers to embed cyber-security in their products, particularly those most relied on by small organisations. The Government should also look at how they can support smaller firms’ response to and recovery from cyber-attacks. That could include establishing a “first responder” service that provides proportionate—that is, free-at-the-point-of-use—support to small businesses that have been victims of cyber-attacks. That could include incident response services and the triaging of further steps, such as where victims could get the most effective help. Such a scheme could learn lessons from our counterparts in Australia, who recently announced a small business cyber-security resilience service.
Finally, the Government must look at how they enhance the UK’s cyber skills. The issue of cyber skills is not just about addressing the cyber industry’s significant skills shortage, although that is a critical part of it. It is also about equipping individuals—across organisations of all sizes and at all levels of seniority—with the cyber literacy that they need to make decisions about their personal, organisational and even national cyber-resilience. A national programme of cyber literacy is needed to ensure that everyone, from preschoolers right through to pensioners, is cyber-literate, no matter where they are on their learning, career or retirement journeys. That could include commissioning “Cyber Beebies”—keeping with the concept of CBeebies, which
“helps pre-schoolers learn whilst they play fun games, watch clips, sing songs and make things”—
in order to start cyber education and awareness in the earliest years.
We could also look at including cyber-competence—covering safe and secure online behaviours, privacy and use of technology alongside broader technology and computing lessons—as a mandatory part of the school curriculum. That should be reviewed and tested with an industry advisory board regularly to ensure that it keeps pace with technological developments and industry requirements. Teachers must also be regularly supported to understand new developments and how they should be reflected in the school curriculum.
STEM—science, technology, engineering and maths—programmes throughout the country have had a critical role in creating opportunities for today’s youth as they advance their education and skillset. In my own constituency of Preston, I am very proud of the work of Cardinal Newman College. One of the highest-performing sixth form colleges nationally, it has partnered with Lancaster University to harness the skills of young people with a passion and aptitude for the study of maths and science. In doing so, they have further developed the young people’s interest and education while providing them with opportunities for their future, including—especially—in the field of cyber at the new cyber defence centre.
I welcome the Minister, who is about to take his place in the hall. I should like to ask him four questions. Will he join me in praising and expressing pride in our UK cyber industry? Will he acknowledge, as we all do, the role that our industry plays in keeping us all safe and secure in cyber-space? Will he set out the Government’s further ambitions to take our cyber-security to the next level and beyond what has been announced as part of the national cyber strategy? Will he provide more information in particular on the Government’s plans to finally make progress on introducing legal protections for legitimate cyber-security activities as part of ongoing efforts to reform the Computer Misuse Act? Will he set out the Government’s views on following the Australian example of introducing a cyber first responders service for all our small businesses and charities, and set out the Government’s ongoing commitment to invest in our national cyber-resilience?
I thank the Minister for engaging with me on this important issue. It is good that there is cross-party consensus on a matter of such importance, but it is clear that much more needs to be done when it comes to cyber-crime and ensuring that Government policy keeps pace with technology in the ever-changing cyber landscape. The public need to be better educated and trained from an early age in the use of computers. That will add to the resilience the country needs to overcome the challenges of cyber-crime for the purposes of cyber-security.
Before I call the SNP spokesperson, I want to note that the Minister was not in his place, which is disappointing given the importance of the issue and the effort put in by the Member in charge. We have been grateful to Minister Opperman for sitting in, who is fortified with the relevant information. I am sure he will let his colleague copy his homework, so he is able to respond, if the Member in charge is happy with that.
On that basis, we will proceed. I call SNP spokesperson Owen Thompson.
It is a great pleasure to see you this evening, Ms Bardell—as ever, the surprise only adds to the joy—and to respond to the hon. Member for Preston (Sir Mark Hendrick), who is quite right to have secured this debate. The challenge that he talked about and the ways of addressing it are fundamental not just to his constituents and the National Cyber Force, which he rightly paid tribute to and will be hosting in his constituency, but to the very nature of our country.
It is interesting to note that over the last 200 years, the British economy has been based on many things: the ingenuity and brilliance of our people; the rule of law and the ability to predict the future based on prior agreement; the genius of economic reforms innovated out of Edinburgh and Glasgow; and the ability to keep trade moving. For most of our existence, that trade has been maritime trade of various descriptions. It has been guaranteed not just by an extraordinary industry of sailors and shipwrights who have created the vehicles of commerce, but by the Royal Navy, which has kept the sea lanes open, the sailors safe and the goods moving.
The truth is that over the last few years, the nature of that commerce—that commercial gain and exchange—has changed. We have gone from sea lanes to e-lanes. We have gone from looking at the red ensign as a guarantee of security at sea, to looking at GCHQ and the National Cyber Security Centre as a guarantee of security on the internet and in cyber-space. Those changes have been fundamental. They have enabled us to do things that are frankly quite remarkable. Look at the change in the way communication works that our country has been through in the four years since covid struck us. With so many of our lives going online—even this place went online briefly, although we seem to have forgotten how convenient that was—many of us have been able to transform the businesses that we were working in from local or national to global.
That change has been a phenomenal blessing, but none of it would have been possible without the dedication and brilliance of some remarkable individuals who have kept us safe. Those individuals started off being headquartered solely in Cheltenham. Those of who have had the privilege to visit Cheltenham know that the extraordinary brilliance and genius of those remarkable people has been fantastic not just for our country but for many partners and allies around the world.
What we see today is that it is not just the Government who need to be kept safe. The reality is that companies and individuals guarantee that security in many different ways. What we are talking about this evening is how the wider economy is defended. That is where the Government have made some important changes, which I hope will be built on in coming years. The cyber-security force that we have created is an essential part of keeping the UK’s commercial interests safe. It is a fundamental building block of our economy not just today but for the future.
The way that has worked with the National Cyber Security Centre is essential, because the reality is that the economy of Britian is not guarded simply by the Government, and national security is not limited to the arms of the state. It is fundamentally true that many suppliers to Government and many different institutions that connect to Government are also important. More than that, every single aspect of our lives is a part of keeping our country safe. Although it is true that the Government do not provide the food, the supermarkets that feed us every day are part of our national security. Although it is true that the Government do not move the money, the banks that keep us fluid in that sense are absolutely part of our national security. It is therefore true that all those capabilities—all the cyber-defence that goes into the wider economy and into our lives—keep us all safe. Sadly, one of the things that has distressed me most in this job is discovering the level of abuse that I am afraid is now prevalent online. Hon. Members will not require me to tell them this, but we see an explosion in online bullying and abuse, and sadly we have seen an explosion in online harm that has taken not just many young people, but many people from across every walk of life, to dark places—and in some cases, very sadly, cost lives.
The cyber work that we do is about protecting not just the state, the Government or even the economy, but homes and families across the United Kingdom. That is why the work that we are doing in the reform of the Computer Misuse Act is so important, because, as the hon. Member for Barnsley Central (Dan Jarvis) and particularly as the hon. Member for Preston put it, the changes we have seen online in the last 20 or 30 years since the Act was passed are phenomenal. The Act was passed before the internet, the iPhone and social media. It is, in a modern sense, historical; it is dated and based on an era when to hold data was to hold it on a solid drive in a computer, not in the ether or on the cloud. The nature of intervention to keep cyber-defences alive and test them was very different, and the Act was drafted for that era. That is why the work of Sir Patrick Vallance and the way in which he has approached it have been so important, and it is why we have been looking so carefully at what he recommends and at how to get the best answer out.
The truth is that any decision we make is going to be difficult. It is going to raise questions about the ways in which businesses work and partner with others around the world. The right hon. Member for Midlothian (Owen Thompson) asked about ransomware and the way in which it is changing. That is where the direction that we take it so important—for example, the counter-ransomware initiative that the United Kingdom led and changed in various ways, and the approaches we have taken to ensure that we are properly structured to get its benefits. The reason I am confident that we are going in the right direction is that we are setting the agenda.
In the 18 months since I had the privilege of becoming the Security Minister, we have launched at least two actions. Forgive me as I try to remember how many were public and how many were private; hon. Members will appreciate that in this job it is probably best to get that distinction right. I will say that we have launched at least two public actions alongside partners on counter-ransomware actions. Noticeably, one from about a year ago was against various Russian targets who had decided that it was to their advantage to try to extort and exploit organisations in the United Kingdom and United States. Our reactions—the ways in which we have partnered with allies and friends—have ensured that we are able not just to defend ourselves, but to make the punishment fit the crime. We are putting in place sanctions, closing down accounts and ensuring that we have those resources in partnership with organisations like the FBI to resist those different areas.
This subject also raises some questions about the state, which were hinted at. I will go a little further into it, because this is not just about individual actors, those in the so-called troll farms or the Internet Research Agency, which was so famously used by Russia recently; it is also about states themselves. Sadly, we are seeing states trying to use these forms of exploitation as means of profit. We have seen one state in particular, North Korea, seeking to quite literally use them as a cash cow—as a way of paying for its nuclear weapons programme, extorting money out of individuals around the world to advance its own hostile interests.
This is where some of the changes we have been able to make—alongside the hon. Member for Barnsley Central, to whom I pay tribute, and with support from parties on all sides—will, I think, make a substantial difference in the years to come. Those changes include the National Security Act 2023, which, through the various different elements of co-operation with foreign states, makes criminal actions that formerly would have merely been assisting or would have been hard to define; they may not necessarily have been breaches of the Official Secrets Act, or empowering or profiting a foreign state in a direct sense and in a way that would have been criminal. The National Security Act has been essential in making sure that espionage is properly punished and that the support of hostile states is now criminalised. I am grateful for the support of the hon. Member for Barnsley Central and others, because that legislation has been an important change that has enabled us to make a difference.
We have seen various different ways in which states have used these sorts of powers. For example, I am afraid that we have seen the various different ways in which Beijing has been ordering different threats against us. I will not comment on things that are being gossiped about in different places—in main Chambers rather than in Westminster Hall—but I will say that the state-affiliated cyber group APT31 has been, and consistently remains, a threat targeted against the UK. I am afraid that we have seen that again and again, and we have had to take action to ensure that we are able to protect ourselves. This is one of those areas where the work of the National Cyber Security Centre has been so incredibly important in protecting not just the state but our wider economy—and that is where we have a wider mission, because the truth is that protecting the wider economy is about protecting not just all those areas, but families and individuals across our country.
I am proud of some of the work we have done alongside businesses, some of which are from the UK and some of which are international, which has enabled us to change some of the incentives and pressures on them. We have brought down fraud in the last year; 16% is not as far as I would like it to go, and I am sure that others in the House will recognise that there is further to go, but that is a hell of an achievement by some fantastically dedicated law enforcement professionals and their cyber partners to make sure that homes and families across the United Kingdom are safer.
We are moving further online. For instance, one can look at the national health service today, and see the amazing investment in technology and in the changing way in which we communicate with our doctors. As many of us know, the NHS app—which, I think I am right in saying, has been downloaded by about three quarters of all adults in the United Kingdom, although I will have to check that—is a fantastic way in which we can communicate across the medical professions. However, all of this means that we have wider vectors of attack, which means that it is enormously important to ensure that we are working together. That is why—I correct the hon. Member for Barnsley Central—although the National Security Council may not have a cyber element in that sense, there is a ministerial cyber board, which meets on a similar basis except that it is chaired by the Deputy Prime Minister and brings together Departments from all across Whitehall. That is an extraordinarily important place where we set the policy and make sure that it works together, because the UK Government are already doing a huge amount.
The hon. Member for Barnsley Central asked about the policy of paying ransomware. We have set out that no public body should be using state money to pay ransomware. We have set out this agenda with the national health service and have been very clear to organisations, including the British Library, that it should not be happening. That policy has been made clear. It is also clear that some ransomwares that are being used for profit are being closed down. I do not know if Members are aware of the LockBit sanctions, but they have been incredibly important; in the last few days we have not just taken over the LockBit site—a brilliant piece of work by the National Crime Agency and others, including the FBI—but exposed the people behind it. That is an extremely important way in which we are taking the fight directly to the criminals who are challenging us and making sure that the National Cyber Force, which is soon to be wonderfully homed in Preston—
Many of its people will be homed around there, I am sure, though they may work in other parts. That force is a fantastically important element in our national defence. While once we flew the white ensign to protect sea lanes, today we fly a different sign —a national cyber-security sign; and with wider British Government protection, we can protect our e-lanes of communication that keep us not just safe but free.
I thank those who have taken part in the debate, principally from the Front Benches, for their contributions and thoughts on the way forward with legislation in this area. We did not get a direct response from the Minister on whether there would be any attempt to amend the Computer Misuse Act 1990 this side of the election, but as my hon. Friend the Member for Barnsley Central (Dan Jarvis) said, we look forward to that at some stage. I cannot remember all the questions I posed—Hansard may now have disposed of them—but they are still pending with the Minister, so I hope he can write to me with answers. I look forward to hearing from him again.
I do feel very strongly about this issue, because apart from British Aerospace—BAE Systems, as it is now—and the new cyber centre that people are working away at, many of the important educational, technological and industrial developments taking place in and around my constituency in Lancashire are very important for local jobs and the economy, and in the national context. As all the Front-Bench contributors have said, the industry is a key part of keeping Britain and our constituents safe, and making sure that we continue to thrive in economic, political and democratic terms.
Thank you for chairing this debate, Ms Bardell. I am pleased that it has taken place, and hope it is a seed for further action in the coming weeks and months.
Question put and agreed to.
Resolved,
That this House has considered cyber security laws and tackling crime.
(1 year, 11 months ago)
Commons ChamberI appreciate the concerns that my right hon. Friend has raised. My right hon. and learned Friend the Home Secretary will set out in more detail the Government’s response to the High Court’s judgment today on Rwanda, but it is the court’s opinion that the Rwanda policy is consistent with the UK’s obligations under both the refugee convention and the European convention on human rights.
I regret the attempt by the hon. Gentleman to lower the tone of this debate. What I will say is that I will not apologise for telling the truth about the scale of the challenge that we are facing when it comes to illegal migration, and I will also reiterate my absolute commitment to delivering on the groundbreaking agreement that we have with Rwanda. It is compassionate, it is pragmatic, and I invite the Opposition parties to support it.
(2 years, 6 months ago)
Commons ChamberIt is a pleasure to follow my hon. Friend the Member for Newcastle upon Tyne North (Catherine McKinnell), who spoke passionately about the cost of living crisis and the problems we face that have not really been addressed by the Government’s Bills.
First, in this new Session of Parliament, I will talk about the platinum jubilee. The Loyal Address has come weeks before this year’s celebration to mark 70 years since Her Majesty Queen Elizabeth became the monarch of the United Kingdom and the head of state of other territories and countries. For me, it is particularly poignant because 20 years ago, at the golden jubilee, as a result of the efforts of people in Preston, the council, other stakeholders and me, Preston was fortunate enough to receive city status in the golden jubilee competition in which 40 towns across England competed. I do not know which town will be chosen this year but I wish good luck to whichever town it is and the Member of Parliament who represents it, because we have seen considerable investment in Preston as its profile has been raised through its city status.
Despite the joyous occasion of celebrating the Queen’s platinum jubilee, the people of Preston and the country cannot help but be distracted by the real-time tragedy of the cost of living crisis that comes on the heels of two-plus years of hardship and sacrifice caused by the global pandemic. In the Queen’s Speech, the Government made it clear that they are not interested in easing the pain of people who are suffering now and will suffer in months to come. Between last year’s Queen’s Speech and last month’s spring statement by the Chancellor, no tangible action has been brought forward to address the cost of living crisis.
The country is in a state of emergency and on the brink of a potential recession, so people need help now. I echo the calls that the Government will have heard from Opposition Members for an emergency Budget to try to address that situation. At a time when high inflation is outstripping wage and benefit increases, in conjunction with recent tax increases, this Queen’s Speech is a missed opportunity to address the issues that matter most to people: their livelihoods and the future.
Today’s debate focuses on crime and justice. The Conservative party fancies itself as tough on crime, yet it has a Prime Minister and a Chancellor who have been issued with fixed penalty notices for breaking laws that they wrote. Crime is up while criminal enforcement is down, with thousands of criminals getting off without being charged or held accountable.
The same is true for fraud and computer misuse, with online fraud soaring during the pandemic and before, yet few fraudsters are being arrested. According to the figures that I have, 416,000 cases of fraud have been reported in the last year and £35 million has been stolen as a result of that fraud, but only 156 fraudsters have been arrested. People may conclude from that that crime does indeed pay.
I am sure that the hon. Gentleman would want to acknowledge that, although he is right that fraud and computer misuse have been rising and have been included in the overall crime numbers in the last few years, quite a lot of those offences are committed by people who are operating internationally and online and who are, therefore, particularly difficult to bring to justice because they are in other jurisdictions.
I certainly agree with that point. In fact, as the Minister knows, there has been a big shift away from things such as car and telephone theft. Many people are now finding that their identities are being stolen and fraud is taking place as a result of computer crime, which is a big problem. We certainly see problems in cyber-space in terms of defence. I am pleased that the cyber-security centre is coming to Lancashire and hopes to do a great deal in that area. I am still quite bemused by the size of the resources being committed to police forces up and down the country to tackle this sort of thing, and the lack of wherewithal for Companies House to try to tackle fraud with businesses. I have had a number of cases of online fraud in my own constituency, about which I have written to the Government.
With the Online Safety Bill having been carried over into this Session, we have seen how delay has allowed disinformation to spread like wildfire online, particularly during Russia’s illegal invasion of Ukraine, which obviously speaks to the point I have just made about cyber-crime and cyber-security. We want to see more effort on scams included in the scope of that legislation, to which I know the Labour party is committed.
The data reform Bill will reform the way data is handled in the UK after Brexit. The Government have said that the changes will help to increase the competitiveness of UK businesses and boost the economy, but reinventing the wheel by finding an alternative to the general data protection regulation just so the Government can claim freedom from so-called EU red tape is a waste of time. It is posturing really, and just creating new standards for data security is not going to solve any problems.
On the question of security itself, with the current state of affairs internationally, I think the Government need to be reminded of how critical national security is. We welcome the National Security Bill, and we want to limit state threats activity in the UK. As has been witnessed in the Russian invasion of Ukraine and in state-backed interference in the UK before that, there are changing threats to the UK, and legislation on foreign interference must keep pace with the reality on the ground. We want better security and we support the National Security Bill, but we want this situation to be transformed quickly, with the cyber centre I have mentioned being constructed and the experts in there as soon as possible.
On the Public Order Bill, this should really be about tackling injustice. However, it is not about tackling injustice; it is about restricting further rights to protest in a legitimate way. There are extreme cases, as we saw here when people glued themselves to the glass in the Gallery overlooking the Chamber, but laws exist at the moment to deal with that sort of thing. The normal activity of demonstrations is something that, as a free country, we have come to expect, and if the Government are too heavy-handed on this, Bill will do a great deal more to cause problems by not allowing people to protest freely.
There is talk about an energy security Bill and how it will build on the success of last year’s COP26 environment summit in Glasgow, with a pledge to build up to eight nuclear power stations and to increase wind and solar energy production in the UK. Again, I, as a Labour Member, and my party will support an energy security Bill. In particular, an increase in the provision of nuclear power is a no-brainer to me. Over the last 20 years—I do stress the last 20 years, and I would include the Labour Government as well—what we have seen in this country is a lot of talk about nuclear without much being done. I certainly welcome the consideration given to small modular reactors, which will provide very efficient nuclear power from engines that were originally designed to power nuclear submarines rather than provide power to the public. There is potential for great developments to see us move towards a carbon-free future, and not only in this country, but for exports abroad. In the area of my constituency, we have Springfields—formerly British Nuclear Fuels, but now part of the Westinghouse Electric Corporation—which is a world leader in producing nuclear fuels. I think the 1,000-plus people who work at Springfields can look forward to extra work if this Government and any future Labour Government are committed to delivering on the ground, instead of just the talk we have had over the last 20 years.
On the very point of small modular reactors, does the hon. Member recognise that the Government have invested some £220 million at Rolls-Royce? It is not just talk, as he asserts.
Yes, and Mike Tynan, formerly of Westinghouse, who is a good friend of mine—he still lives near Preston—has been involved through the Advanced Manufacturing Centre in Sheffield and done a great deal of work in the area. After 12 years, I am glad that the Government finally see the benefit of that for the future, but it has taken the instability of the wholesale energy markets to bring that about. I would have liked to have seen it much earlier in this Government’s tenure or within Labour’s tenure. It should not take a war for us to move in that direction.
On energy security, I am concerned about restarting the debate about fracking. In Lancashire, we had an experimental phase of fracking, and I was quite agnostic about it when the coalition were in government and the leader of the Liberal Democrats, the right hon. Member for Kingston and Surbiton (Ed Davey), was the Energy Minister, but I am not now, because in moving from experimentation towards production we saw tremors measuring seven or eight on the Richter scale. At the time, we were told that any tremors above two or three on the scale would be dangerous and assured that the Government would look at whether work should continue, but now the Secretary of State is starting to look again at fracking. He argues that the wholesale energy market has brought that on, but the decision to put a moratorium on fracking had nothing to do with that; it was about safety in production. It was never a consideration to lift the moratorium because of energy prices. It is a desperate attempt to bring that dangerous business to certain communities—in the north of England in particular—when it is not warranted on safety grounds or, for that matter, on energy grounds. Nuclear can provide the extra energy that we need, so I support the Government in what they are trying to do on nuclear, but they are making a mistake if they think that they can revisit fracking. Labour welcomes steps for a low-carbon economy and the commitment to nuclear, and the impact that that will have on our energy independence.
Today’s debate is also about justice and, when we discuss the delivery of justice, it would be remiss of us not to mention food injustice, which we see in this country at the moment. Justice is not just about what is happening in the courts; it is also about fairness and what is happening in society. I am a Labour and Co-operative MP, and one of the co-operative movement’s founding principles is tackling hunger and food insecurity, which is critical in the face of a cost of living crisis. In one of the richest countries on earth, no one should go hungry.
Millions of people are affected by the cost of living, and in the UK 2 million people—mainly adults—have had a day when they went entirely without eating food. In this day and age, we should not accept that. We want a fair food Act that enshrines a commitment to zero hunger by 2030—a sustainable development goal that should be put into UK law—and a comprehensive national food strategy, but those were not included in the Queen’s Speech. If we were really concerned about justice, people’s ability to eat should be a priority, but the Government have not really considered that. It should have been in the Queen’s Speech. We are also aware that as many as 16 million people may be in poverty by 2023, which is less than a year away, and, according to the Resolution Foundation, 1.3 million are currently suffering in extreme poverty.
While not specifically mentioned in the Queen’s Speech, it is no secret that the Government are preparing new draft legislation to unilaterally scrap key parts of the Northern Ireland protocol, including chucking away checks on goods between Great Britain and Northern Ireland, stripping away powers of the European Court of Justice and eliminating all requirements for Northern Irish businesses to follow EU regulations. That all comes from a Government and Prime Minister who negotiated and agreed to the protocol. In September 2020, the Government were prepared to break international law in
“a very specific and limited way”—[Official Report, 8 September 2020; Vol. 679, c. 509.]
when it came to the protocol, before backing down. Yet here we are again as global Britain, issuing thinly veiled threats to Brussels under the guise of protecting peace and stability in Northern Ireland, all the while jeopardising relationships with Dublin, Brussels and Washington, and any credibility we would otherwise have with international trade partners.
The Government are currently trumpeting the Australia and New Zealand trade deal, mentioned in the Queen’s Speech, which they are looking to put through the House. The degree of trade we have lost as a result of the shenanigans over Brexit and what is happening in Northern Ireland at the moment is phenomenal. No amount of trade deals we are likely to do over the next five years will replace that loss. That is not what Brexit should have been about, according to the Government’s own declarations in the run-up to the referendum.
The Prime Minister said that the Brexit freedoms Bill, mentioned yesterday, would allow the UK to
“get on with growing our economy by making the most of our Brexit freedoms”.
by liberating the economy in the wake of the UK’s departure from the EU. Yet by overturning the protocol, the UK risks the possibility of trade retaliation during a cost of living crisis, which is a perfect storm in terms of the livelihoods of people in this country and the businesses that support those livelihoods. We are just now beginning to see the fallout from Brexit. We would have seen the fallout earlier but for covid, and now the effects of covid are being masked by increases in energy prices as a result of the Ukraine war. The cost of living crisis has several factors, which I have just mentioned. The Government are returning to the 2019 playbook of using the EU as a bogeyman following last week’s dismal election results, but people know the ruse and are tired of being taken for fools when it comes to Brexit and its so-called benefits.
The country cannot continue like this, with a cost of living crisis and the Government sleepwalking with a threadbare Queen’s Speech that will do little or nothing to improve the livelihoods and living standards of the people of this country.
(2 years, 7 months ago)
Westminster HallWestminster Hall is an alternative Chamber for MPs to hold debates, named after the adjoining Westminster Hall.
Each debate is chaired by an MP from the Panel of Chairs, rather than the Speaker or Deputy Speaker. A Government Minister will give the final speech, and no votes may be called on the debate topic.
This information is provided by Parallel Parliament and does not comprise part of the offical record
I thank my hon. Friend the Member for Bridgend (Dr Wallis) for securing this debate. Once upon a time I also applied for it, so I am glad that one of us got through the lottery.
I am the chair of the all-party parliamentary group on cyber security, and this is an issue that we have looked at time and again. We have looked at specific reform of the CMA, and frankly, with almost any issue we concentrate on, we keep coming back to the challenges that the CMA brings up for professionals. As others have done, I thank CyberUp for the support it has given, both to the APPG and in advance of this debate. When reforms are made to the CMA, it will be due in no small part to the advocacy that CyberUp and industry have put behind this.
My view is that the CMA is holding the UK back and making us less secure. It needs reform, and the urgency is very keenly felt in the industry. It is frankly ridiculous that we are reliant on a piece of legislation that came into force at the time of Windows 3.0, before Google and Amazon, and crucially before the internet had come into common use.
In the last meeting of the APPG on cyber security we had Ciaran Martin, the former head of the National Cyber Security Centre, before us, and we asked his view. It is hard to articulate how much he rolled his eyes when I asked the question, but clearly the view of those who operate in this space is that the time for change is now.
As it is currently written—I apologise, Sir Mark, for going over some of the same ground—the CMA inadvertently criminalises a large proportion of vulnerability and threat intelligence research that UK cyber-security professionals must carry out to protect the UK from cyber-threats such as the one affecting No. 10 that is in the news today, ransomware attacks and those from state actors such as Russia.
Let us be clear: the legal jeopardy that cyber-security professionals face is not theoretical but very real. We have heard from professionals who have been at the sharp end of the law for merely doing their jobs—probing weaknesses in order to fix them. At a time when the world has never been more connected, and there is inter-reliance between news, messaging, shopping, banking, security and leisure—the web of systems that hold modern society together—we need to ensure that the laws are fit for purpose and fulfil the roles they were enacted to achieve. I firmly believe that this one does not and we are the poorer for it.
It is worth spending a little time putting this in context and detailing the main challenges of an unreformed CMA. Cyber-security professionals identify vulnerabilities in products and services and work with manufacturers and vendors to fix them. They detect cyber-attacks, gain insights into attackers and victims, lessen the impact of incidents and prevent future ones. The Government’s “National Cyber Strategy 2022” recognised the value of that important work. It committed to building valuable and trusted relationships with the cyber-security researcher community to deliver a reduction in those vulnerabilities. But the CMA is currently a block to that, irrespective of the intent or motive of those doing the work. That leaves the UK’s cyber defenders having to act with one hand tied behind their back, because much of their defensive work requires interaction with compromised victims’ and criminals’ computer systems where owners will not give access or explicitly permit such activities.
Another aspect is that the Act is having a really damaging impact on the cyber-skills pipeline. In 2018, the Joint Committee on the National Security Strategy concluded that a shortage of “deep technical expertise” was one of the greatest challenges faced by the UK in relation to cyber-security. This year’s national cyber-security strategy made explicit the need to grow and improve sectoral skills in order to build UK resilience to threats. But we should be clear about the chilling effect that the CMA is having on doing that and the challenges that it throws up. The sector needs a diverse range of minds in order to continue to grow and to adapt to a changing environment. High-profile prosecutions enabled by the CMA for little more than pursuing public interest investigations reinforce negative stereotypes that may deter some from pursuing a career in cyber-security. If the UK is to meet the challenge of closing the cyber skills gap, it needs to stop criminalising the activity, and ultimately talent, that is needed to promote the industry and grow its share of the global cyber-security services market, which is currently dominated by North America. That will not only grow cyber skills in our own economy, but help to build cyber resilience and better defend the UK.
As my hon. Friend the Member for Bridgend pointed out, there are relatively simple tweaks that we think could be made to this legislation that would make a big difference in this space. They would unlock huge opportunities for the sector and our national resilience. As has been mentioned, the inclusion in the CMA of a statutory defence, not a blanket one—I think my hon. Friend the Member for Boston and Skegness (Matt Warman) was absolutely right on that—would give cyber-security professionals acting in the public interest a clear defence from prosecution. That would provide legal clarity for individuals, the industry and the state. We can learn much from our international partners in this space about how to achieve a fair balance and enact safeguards to ensure that new freedoms are not abused by those who are not on the side of the angels. I am talking about a clear framework that measures the defensibility of an action, proportionality, intent and competence and looks at a harm-benefit profile. They are the sorts of principles that we should be considering when looking at reform.
It seems bizarre that as we launch the National Cyber Force in Lancashire and as my local town deal brings a university campus focused on cyber-security in Barrow, the legal framework that will enable these people to do their jobs and practise their craft is lagging behind. It is clear from the national cyber-security strategy that, as a country and a Government, we do not lack aspiration in this space, and that is a really good thing. It is the burden of advanced nations to have to defend these new frontiers, but we must ensure that the framework is in place to support our good efforts and deliver on the opportunities that the strategy speaks about. A very good step would be reforming this Act and ensuring that those acting in the public interest have protection from unjust litigation. Doing that would make us all safer.
While we are on the subject of the new cyber-security centre, I too am very pleased that it is coming to Lancashire; it is next door to my constituency. Like Mr Baker, I am proud to have studied computer science at master’s level—in my case at the University of Manchester—so I am very pleased with the developments and the way that things are going forward. We will hear from the Front Benchers now.
(2 years, 9 months ago)
Westminster HallWestminster Hall is an alternative Chamber for MPs to hold debates, named after the adjoining Westminster Hall.
Each debate is chaired by an MP from the Panel of Chairs, rather than the Speaker or Deputy Speaker. A Government Minister will give the final speech, and no votes may be called on the debate topic.
This information is provided by Parallel Parliament and does not comprise part of the offical record
Before I call the hon. Member for Gower (Tonia Antoniazzi) to open the debate, I wish to make a short statement about the sub judice resolution. I have been advised that the petition being debated today directly relates to the death of Gracie Spinks in June last year. An investigation by the Independent Office for Police Conduct is ongoing, and the inquest relating to the death of Gracie Spinks remains active. Mr Speaker has agreed to exercise the discretion given to the Chair in respect of the resolution on matters sub judice to allow limited reference to the death of Gracie Spinks. However, I ask that Members do not refer to the detailed speculation about the circumstances surrounding the death, including the conduct of the police in this case.
I remind Members to observe social distancing, and to wear masks. I invite Tonia Antoniazzi to move the motion.
I 100% agree. I take my hon. Friend back to my terrorism analogy: imagine if we allowed the police to freestyle how they dealt with terrorism—that we did not have specific tasks that police force areas had to follow.
The same priority is never given to male violence against women. It is never, ever considered to be the most pressing issue. More than 20% of all police call-outs are cases of violence against women and girls. Do we think that those cases get 20% of the policing budget in any area? Can we all guess? I do not want to turn this into a pantomime, Sir Mark, but I think we can all guess that they do not get anywhere near that amount. The reality is that this support has to be driven with the political will shown by the 100,000 people who signed the petition. The hon. Member for Bolsover said that he was proud that this was the issue that mattered to his people. The country has spoken again and again in the last two years—more so than ever before—to say, “This issue matters to us.”
In my lifetime of working in this area, which now seems like many lifetimes, I have never known the country to push this as an issue of political will quite as much as it has in the wake of Sarah Everard’s death. These things will only change when every police force area knows that if it does not, the chief constable will be sacked. This proposal will only work if the issue is addressed when allocations of budgets come from the Government. Although I like the £151 million, the Minister and I both know—because it has been announced quite a few times over the years—that £125 million is going to refuge accommodation and has nothing to do with the police. It will go to local councils to offer refuge accommodation—not necessarily to the standard that I would like to see, but still better than nothing.
The reality is that we in this place have to say that, crime-wise, this issue is our priority and we are going to push it through to the bitter end, so that when a Prime Minister stands up and says that the single most important thing a leader can do—the first line of Government—is to ensure the safety and security of their citizens, in their head they are remembering that women and girls exist.
For information, the University of Central Lancashire is in Preston, in my constituency.
It is a pleasure to serve under your chairmanship, Sir Mark. I congratulate the hon. Member for Gower (Tonia Antoniazzi) on securing this debate and doing justice to this vital subject. It really is an honour to be here.
I thank the other Members who are present. I am sure that there would have been more had it not been for events in the main Chamber. Nevertheless, I thank my hon. Friend the Member for Bolsover (Mark Fletcher) and the hon. Member for Chesterfield (Mr Perkins) for doing an extraordinary job, as men advocating for the women and girls in their constituencies. The hon. Member for Birmingham, Yardley (Jess Phillips) and I may disagree on much, but I think we both agree that it is heartening and inspiring to see men coming together, because it is only when men stand up and demand change on behalf of women that we will see the change that we all want to see.
I also pay tribute to Jackie Barnett-Wheatcroft, who is with us today, for creating this petition. The amount of work that she has done to get this issue to the top of the agenda is not inconsiderable. It was a real pleasure and honour to speak to her and hear about her tireless efforts. She has taken this issue on because she cares about it, and that passion came across so clearly. It was wonderful to speak to her and my hon. Friend the Member for North East Derbyshire (Lee Rowley), who is also in the Gallery. As a Whip, he is not able to speak, but he was the conduit that allowed us to have that conversation. I pledge again that I will do everything in my power to help Jackie with her work to set up the charity, which I know will change people’s lives and be a massive source of support. To Jackie, I say thank you so much.
Of course, we must honour Gracie Spinks. Her name is not mentioned in the petition itself, but it is a tribute to her. You have enjoined me not to transgress and go beyond what I am allowed to say, Sir Mark, because the IOPC’s investigations mean this is a live case, but that does not prevent me from expressing my total shock and horror in reading about those awful events—I know that everybody shared that feeling. The issues goes wider than the area that Gracie comes from; constituents of mine in Redditch have signed the petition, as have people from across the country.
When we read about that tragic and senseless loss of life, we can all relate to it—whether or not we are parents does not matter. I extend my deepest sympathies and condolences to Richard and Alison, who are in the Public Gallery. I can only begin to imagine how terribly they must have suffered. I thank them for the tremendous amount of work they put into the petition, which has resulted in this hour-and-a-half discussion, and our dedication and effort. This is only the start of the change that they want to see.
I believe, Sir Mark, that I have enough time to set out what we are going to do, what we have already done, and what we will continue to do, as the petitioners have rightly requested.
I remind the Minister to leave time for the Chair of the Petitions Committee to respond.
Thank you for that reminder, Sir Mark; I will ensure that I leave enough time.
Stalking is at the heart of our “Tackling violence against women and girls” strategy, which we published in July. It is worth stepping back and reminding ourselves of why we needed that strategy, the consultation of which received the greatest number of responses to any Government consultation. That highlights that need, and we must all keep fighting and pushing—I include myself and the shadow Minister in that—to keep the issue at the top of the priority list for Government and for Members across the House.
We all have so many important things to focus on every day in our lives as parliamentarians but, as the shadow Minister said, the public care deeply about this topic, and that was reflected in the responses to the consultation. Of course, that was an immediate response following Sarah Everard’s death, but many other women have died—we all know about the work that the shadow Minister does every single year in Parliament to remind us of those deaths—and it is right that we continue to honour the victims in our work to take the strategy forward.
To reduce the risk of perpetrators committing further offences, as the strategy confirmed, we launched a fund for police and crime commissioners to run programmes to address the behaviour of domestic abuse and stalking perpetrators. The funds will provide programmes to cover a range of different methods for tackling stalking. It is right that we recognise that stalking only recently came on to the statute book in its current form. Our understanding is not quite as well developed as it is for many other crimes that involve serious violence against women and girls. That is why it is important that we have those programmes and evaluate the evidence so that we can understand what works. That work includes the development of a multi-agency stalking intervention project in Cambridgeshire, and the development of the compulsive and obsessive behaviour intervention programme in Surrey. The aim of all such programmes is to encourage behavioural changes to reduce the frequency and gravity of the abuse presented by the perpetrator, thereby improving the safety of and protection for the victim.
The strategy also refers to our commitments to improve the use of stalking protection orders. We introduced these orders just two years ago, and they can protect victims of stalking at the earliest possible opportunity and help to address the behaviour of perpetrators before they become entrenched or escalate. They have the flexibility to impose both restrictions and positive requirements on a perpetrator, and I am proud that the Government introduced them.
We know that there is more to do. We know that some forces have been applying for more of these orders than others. The violence against women and girls strategy confirmed that the Home Office would work with the police to ensure that all forces make proper use of the orders. That is why I have recently written to all chief constables whose forces have applied for fewer stalking protection orders than might have been expected to encourage them to always consider applying for one in stalking cases.
I did that in October, and I received responses from several forces setting out the measures they are taking to make sure these orders are being used appropriately. I am pleased that one of the responses I received was from Derbyshire police, which is rightly taking a number of actions, including the delivery of a force-wide training programme specifically for stalking offences.
That is an excellent suggestion. If we have not already done so, I will ensure that that happens. In any case, the Ministry of Justice will look very closely at all the consultation responses received on this issue and many others.
I will briefly touch on what is happening in terms of the multi-agency public protection arrangements—MAPPA for short—because they are vital. They are specifically about how offenders are managed, which several Members have touched on. It is important that agencies make use of MAPPA to strengthen the effective management of serial and high-harm perpetrators of stalking and domestic abuse, and the national MAPPA team works closely with local strategic management boards to support implementation at a local level. This is about having the most appropriate arrangements in place to ensure that we keep people safe from harm.
We are also shortly due to publish a domestic abuse strategy that will seek to transform our response to domestic abuse in order to prevent offending—of course, stalking is a key part of the domestic abuse pattern of offending—support victims and pursue perpetrators. That will include a specific section on the risks associated with stalking. Some very good points have been raised about the pattern of offences and the escalation process. A couple of Members touched on education and what we are doing in schools, and we are already working with colleagues in the Department for Education.
I also want to let Members know that we will release a national education campaign about violence against women and girls. This will be quite a groundbreaking piece of work. We are talking about changing that misogynistic culture that everyone has spoken about, and making it absolutely clear that we probably all know a perpetrator—not necessarily a murderer, but someone who is not behaving in a respectful way to their female friends, associates, colleagues or partners. This communications campaign is specifically designed to make crystal clear what is and is not acceptable in the public and domestic sphere. I am really looking forward to the campaign and will pay close attention to it, as I am sure will all hon. Members here, and I encourage them to amplify it through their own communication channels, to get out the message out that this Government do not put up with those kinds of behaviours, whether they are on the street or whether they are serious crimes such as stalking, harassment and murder.
I once again thank the hon. Member for Gower for introducing the debate in order to raise this important issue. I will of course follow up on the points Members pressed me on. I could say a lot more, but unfortunately time is short, and I want to allow the hon. Lady the opportunity to respond to the debate.
I call Tonia Antoniazzi, who is a member of the Petitions Committee, not the Chair.