Online Safety Bill

Baroness Ritchie of Downpatrick Excerpts

3rd reading
Wednesday 6th September 2023 Lords Chamber

[Baroness Stowell of Beeston (Con)]

My Lords, I am very concerned to hear the contribution from the noble Lord, Lord Rooker. I certainly look forward to hearing what the Minister says in reply. I confess that I was not aware of the Delegated Powers and Regulatory Powers Committee’s report to which he referred, and I wish to make myself familiar with it. I hope that he gets a suitable response from the Minister when he comes to wind up.

I am very grateful to the Minister for the amendments he tabled to Clause 44—Amendments 1 and 2. As he said, they ensure that there is transparency in the way that the Secretary of State exercises her power to issue a direction to Ofcom over its codes of practice. I remind the House—I will not detain your Lordships for very long—that the Communications and Digital Select Committee, which I have the privilege to chair, was concerned with the original Clause 39 for three main reasons: first, as it stood, the Bill handed the Secretary of State unprecedented powers to direct the regulator on pretty much anything; secondly, those directions could be made without Parliament knowing; and, thirdly, the process of direction could involve a form of ping-pong between government and regulator that could go on indefinitely.

However, over the course of the Bill’s passage, and as a result of our debates, I am pleased to say that, taken as a package, the various amendments tabled by the Government—not just today but at earlier stages, including on Report—mean that our concerns have been met. The areas where the Secretary of State can issue a direction now follow the precedent set by the Communications Act 2003, and the test for issuing them is much higher. As of today, via these amendments, the directions must be published and laid before Parliament. That is critical and is what we asked for on Report. Also, via these amendments, if the Secretary of State has good reason not to publish—namely, if it could present a risk to national security—she will still be required to inform Parliament that the direction has been made and of the reasons for not publishing. Once the code is finalised and laid before Parliament for approval, Ofcom must publish what has changed as a result of the directions. I would have liked to have seen a further amendment limiting the number of exchanges, so that there is no danger of infinite ping-pong between government and regulator, but I am satisfied that, taken together, these amendments make the likelihood of that much lower, and the transparency we have achieved means that Parliament can intervene.

Finally, at the moment, the platforms and social media companies have a huge amount of unaccountable power. As I have said many times, for me, the Bill is about ensuring greater accountability to the public, but that cannot be achieved by simply shifting power from the platforms to a regulator. Proper accountability to the public means ensuring a proper balance of power between the corporations, the regulator, government and Parliament. The changes we have made to the Bill ensure the balance is now much better between government and the regulator. Where I still think we have work to do is on parliamentary oversight of the regulator, in which so much power is being invested. Parliamentary oversight is not a matter for legislation, but it is something we will need to return to. In the meantime, I once again thank the Minister and his officials for their engagement and for the amendments that have been made.

[Baroness Ritchie of Downpatrick (Lab)]

My Lords, I, too, thank the Minister for his engagement and for the amendments he has tabled at various stages throughout the passage of the Bill.

Amendment 15 provides a definition:

““age assurance” means age verification or age estimation”.

When the Minister winds up, could he provide details of the framework or timetable for its implementation? While we all respect that implementation must be delivered quickly, age verification provisions will be worthless unless there is swift enforcement action against those who transgress the Bill’s provisions. Will the Minister comment on enforcement and an implementation framework with direct reference to Amendment 15?

[Lord Allan of Hallam (LD)]

My Lords, as this is a new stage of the Bill, I need to refer again to my entry in the register of interests. I have no current financial interest in any of the regulated companies for which I used to work, in one of which I held a senior role for a decade.

I welcome Amendment 7 and those following from it which change the remote access provision. The change from “remote access” to “view remotely” is quite significant. I appreciate the Minister’s willingness to consider it and particularly the Bill team’s creativity in coming up with this new phrasing. It is much simpler and clearer than the phrasing we had before. We all understand what “view remotely” means. “Access” could have been argued over endlessly. I congratulate the Minister and the team for simplifying the Bill. It again demonstrates the value of some of the scrutiny we carried out on Report.

It is certainly rational to enable some form of viewing in some circumstances, not least where the operations of the regulated entities are outside the United Kingdom and where Ofcom has a legitimate interest in observing tests that are being carried out. The remote access, or the remote viewing facility as it now is, will mean it can do this without necessarily sending teams overseas. This is more efficient, as the Minister said. As this entire regime is going to be paid for by the regulated entities, they have an interest in finding cheaper and more efficient methods of carrying out the supervision than teams going from London to potentially lots of overseas destinations. Agreement between the provider and Ofcom that this form of remote viewing is the most efficient will be welcomed by everybody. It is certainly better than the other option of taking data off-site. I am glad to see that, through the provisions we have in place, we will minimise the instances where Ofcom feels it needs data from providers to be taken off-site to some other facility, which is where a lot of the privacy risks come from.

Can the Minister give some additional assurances at some stage either in his closing remarks or through any follow-up correspondence? First, the notion of proportionality is implicit, but it would help for it to be made explicit. Whenever Ofcom is using the information notices, it should always use the least intrusive method. Yes, it may need to view some tests remotely, but only where the information could not have been provided in written form, for example, or sent as a document. We should not immediately escalate to remote viewing if we have not tried less intrusive methods. I hope that notion of proportionality and least intrusion is implicit within it.

Secondly, concerns remain around live user data. I heard the Minister say that the intention is to use test data sets. That needs to be really clear. It is natural for people to be concerned that their live user data might be exposed to anyone, be it a regulator or otherwise. Of course, we expect Ofcom staff to behave with propriety, but there have sadly been instances where individuals have taken data that they have observed, whether they were working for the police, the NHS or any other entity, and abused it. The safest safeguard is for there to be no access to live user data. I hope the Minister will go as far as he can in saying that that is not the intention.