(1 year, 1 month ago)
Commons ChamberWhy are the Government ignoring the advice of the AI opportunities action plan to encourage the start-up and scaling of tech businesses in the UK and instead favouring market-dominant corporations from abroad over our own domestic businesses when awarding Government contracts?
(1 year, 3 months ago)
Commons ChamberIt is a privilege to respond to this debate on behalf of His Majesty’s official Opposition, and to speak to the new clauses and amendments. This is an ambitious piece of legislation, which will enable us to harness data—the currency of our digital age—and use it in a way that drives the economy and enhances the delivery of public services. Since its original inception under the Conservatives in the last Parliament, the Bill has also become the platform for tackling some of the most pressing social and technological issues of our time. Many of these are reflected in the amendments to the Bill, which are the subject of debate today.
I start with new clause 20. How do we regulate the interaction of AI models with creative works? I pay tribute to the work of many Members on both sides of this House, and Members of the other place, who have passionately raised creatives’ concerns and the risks posed to their livelihoods by AI models. Conservative Members are clear that this is not a zero-sum game. Our fantastic creative and tech industries have the potential to turbocharge economic growth, and the last Government rightly supported them. The creative and technology sectors need and deserve certainty, which provides the foundation for investment and growth. New clause 20 would achieve certainty by requiring the Government to publish a series of plans on the transparency of AI models’ use of copyrighted works, removing market barriers for smaller AI market entrants and digital watermarking and, most important of all, a clear restatement of the application of copyright law to AI-modelling activities.
I cannot help but have a sense of déjà vu in relation to Government new clause 17: we are glad that the Government have acted on several of the actions we called for in Committee, but once again they have chosen PR over effective policy. Amid all the spin, the Government have in effect announced a plan to respond to their own consultation—how innovative!
What is starkly missing from the Government new clauses is a commitment to make it clear that copyright law applies to the use of creative content by AI models, which is the primary concern raised with me by industry representatives. The Government have created uncertainty about the application of copyright law to AI modelling through their ham-fisted consultation. So I offer the Minister another opportunity: will he formally confirm the application of copyright law to protect the use of creative works by AI, and will he provide legal certainty and send a strong signal to our creative industries that they will not be asked to pay the price for AI growth?
I thank the Minister for making that statement at the Dispatch Box. As he knows, we need to have that formally, in writing, as a statement from the Government to make it absolutely clear, given that the consultation has muddied the waters.
I am sorry, but I said that in my speech, and I have said it several times in several debates previously.
I would therefore be grateful if the Minister said why there remains uncertainty among creatives about the application of copyright in this area. Is that not why we need to move this forward?
I now turn to Government amendment 34 and others. I congratulate my noble Friend Baroness Owen on the tremendous work she has done in ensuring that clauses criminalising the creation of and request for sexually explicit deepfake images have made it into the Bill. I also thank the Government for the constructive approach they are now taking in this area.
I should have said earlier that, as the shadow Minister knows, in Committee we changed the clause on “soliciting” to one on “requesting” such an image, because in certain circumstances soliciting may require the exchange of money. That is why we now have the requesting offence.
I thank the Minister for his clarification and reiteration of that point, and again for his work with colleagues to take forward the issue, on which I think we are in unison across the House.
New clause 21 is on directions to public authorities on recording of sex data. One does not need to be a doctor to know that data accuracy is critical, particularly when it comes to health, research or the provision of tailored services based on protected characteristics such as sex or age. The accuracy of data must be at the heart of this Bill, and nowhere has this been more high-profile or important than in the debate over the collection and use of sex and gender data. I thank the charity Sex Matters and the noble Lords Arbuthnot and Lucas for the work they have done to highlight the need for accurate data and its relevance for the digital verification system proposed in the Bill.
I have been very clear on this, and it is important in such a complex area to look at the detail and nuance of the challenges around—(Interruption.) Well, it is very easy to create a new clause where we click our fingers and say, “Let’s make this more illegal; let’s bring in x, y or z restriction.” As a responsible Opposition, we are looking at the detail and complexities around implementing something like this. [Interruption.] I have been asked a few questions and the hon. Member for Cheltenham (Max Wilkinson) might want to listen to the rationale of our approach.
One question is how to define social media. Direct messaging services such as WhatsApp and platforms such as YouTube fall in the scope of social media. There are obviously social media platforms that I think all of us are particularly concerned about, including Snapchat and TikTok, but by changing the age of digital consent we do not want to end up capturing lower-risk social media platforms that we recognise are clearly necessary or beneficial, such as education technology or health technology platforms. And that is before we start looking at whether age verification can work, particularly in the 13-to-16 age group.
Sorry, I am getting a bit lost. Does the Minister think, and does the Conservative party think, that the digital age of consent should rise from 13 to 16 or not?
For the fourth time, and as I have said, new clause 19 would effectively create a de facto position whereby there are restrictions on the use of inappropriate social media services by children. It seeks to tackle the challenges of implementation, age verification and the scope of social media. It says that there needs to be work to make sure that we can actually do so and that, when we can, we should move in that direction, unless there is overwhelming evidence that it is not needed, such as with the shaking out of the Online Safety Act.
Finally, I return to new clause 21. Sadly, it has been widely misrepresented. The laws in this area are clear: the Equality Act puts in place obligations in relation to protected characteristics. The Supreme Court says that “sex” means biological sex, and that public authorities must collect data on protected characteristics to meet their duties under the Equality Act. The new clause would put that clear legal obligation into effect, and build in data minimisation principles to preserve privacy. There would be no outing of trans people through the new clause, but where public authorities collect and use sex data, it would need to be biological sex data.
As ever, it is good to see you in the Chair, Madam Deputy Speaker. I thank all right hon. and hon. Members who have taken part in the debate. If I do not manage to get to any of the individual issues that have been raised, and to which people want answers, I am afraid that is because of a shortness of time, and I will seek to write to them. I thank the officials who helped to put the Bill together, particularly Simon Weakley—not least because he not only did this Bill, but all the previous versions in the previous Parliament. He deserves a long-service medal, if not something more important.
I will start with the issues around new clauses 1, 11, 12 and 13, and amendment 9. The Government completely share the concern about the vulnerability of young people online, which lots of Members have referred to. However, the age of 13 was set in the Data Protection Act 2018—I remember, because I was a Member at the time. It reflects what was considered at the time to be the right balance between enabling young people to participate online and ensuring that their data is protected. Some change to protecting children online is already in train. As of last month, Ofcom finalised the child safety codes, a key pillar of the Online Safety Act. Guidance published at the same time started a three-month period during which all in-scope services likely to be accessed by children will be required to assess the risk of harm their services pose to them.
From July, the Act will require platforms to implement measures to protect children from harm, and this is the point at which we expect child users to see a tangible, positive difference to their online experiences. I wish it had been possible for all this to happen earlier— I wish the Act had been in a different year—but it is the Act it is. The new provisions include highly effective age checks to prevent children encountering the most harmful content, and adjusting algorithms to reduce the exposure to harmful content. Services will face tough enforcement from Ofcom if they fail to comply.
The Act very much sets the foundation for protecting children online. The Government continue to consider further options in pursuit of protecting children online, which is why the Department for Science, Innovation and Technology commissioned a feasibility study to understand how best to investigate the impact of smartphones and social media on children’s wellbeing. This will form an important part of our evidence base.
(1 year, 5 months ago)
Public Bill CommitteesIt may assist the Committee to know that, when there is no great controversy about a clause and all I am doing is reminding people what is in the clause and the explanatory notes, I will move that the clause stand part formally. We are now starting to discuss part 5 of the Bill, which relates to GDPR. This clause is completely and utterly self-explanatory.
It is a pleasure to serve under your chairmanship again, Mr Turner. This part of the Bill relates to GDPR. Although there are some amendments that we will debate later, it makes sensible and long-overdue clarifications with regard to GDPR and the interaction with data protection, particularly through some updates to the use of secondary data for scientific research, which I suspect we will discuss when we come to the next clause.
Question put and agreed to.
Clause 66 accordingly ordered to stand part of the Bill.
Clause 67
Meaning of research and statistical purposes
I beg to move amendment 13, in clause 67, page 75, line 26, leave out
“and that is conducted in the public interest”.
This amendment removes words from new paragraph 2 of Article 4 of the UK GDPR (meaning of processing for the purposes of scientific research). The words were inserted at Report stage in the Lords.
The UK has a proud tradition of innovative research. Our researchers are at the forefront in fields from quantum computing to medicine—for example, leading on pioneering vaccine development during the covid-19 pandemic. Scientific research can bring life-changing benefits to our society and economy. Given that importance, the UK data protection framework contains certain accommodations for processing personal data for research purposes while maintaining key safeguards. The clause, as proposed by their lordships, would require an up-front public interest test for processing to be considered as scientific research and eligible for these accommodations. We disagree with that.
We agree with wanting to avoid misuse of the term “scientific research”, but as the Royal Society has said clearly, the reasonableness test that is now in the Bill provides adequate protection against that. The new test, provided by the Lords, would also be at odds with the internationally recognised Frascati definition, which does not mention an up-front public interest test.
Such a test would be a new burden on many researchers. The Royal Society is concerned that that could have a negative effect on the conduct of research. The Government agree and are especially concerned about the impact on basic and curiosity driven research. The public benefits from such research may not be known at the time, yet with hindsight may be overwhelming. Many of the great discoveries in scientific history, from penicillin to the electron, originated from research that had no anticipated public interest benefit. No one could know how valuable they would be to us now. Even the mRNA-based vaccines that saved millions of lives during the covid-19 pandemic drew on curiosity-driven research that for years had had no practical applications.
That is research that we should be supporting, not stifling. An up-front public interest test could have a chilling effect on it, which is not in the long-term public interest. Our amendment would therefore remove the public interest test inserted by their lordships.
I listened carefully to the Minister’s remarks on the Government’s position on the public interest test, which was extensively debated in the other place. I have a great deal of sympathy with what their lordships were trying to achieve in parts of that amendment. We are talking about the secondary use of data for scientific research and, as I understand it, the public interest test is used in other types of scientific research tests—for example, with public health data. Therefore this is not something which is completely alien to the concept of defining scientific research. However, I do concede there is an issue with how one can define scientific research.
I think what people are nervous about—particularly in some of the conversations I have around this new definition of scientific research for use for secondary data processing—is this being hijacked by artificial intelligence data companies as a way of getting around some of the challenges with using big datasets for which they do not necessarily have licensing arrangements. I know we are going to come on to that later in the Bill. I would be grateful if the Minister could explain his thoughts and considerations about removing this public interest test. How would that interact with some of the concerns about AI and data use?
From a personal perspective, my concept of scientific research has an altruistic component to it. At least with the scientific research with which I was involved, the whole point was that it was information that is shared freely. Clearly there are challenges and considerations on which one needs to focus when it comes to research being done for commercial benefit. I know part of the debate in the other place was about commercial versus non-commercial research. It is important that scientific research can be commercial. In fact, it must be. However, I appreciate that there is a sentiment that their lordships were putting forward as part of the test.
I would be grateful if the Minister could address, first, some of the concerns around AI companies and secondly how we can capture the essence of scientific research so that when people are do secondary data analysis it is done properly. When it comes to the audit component, a lot of this data analysis is people marking their own homework. Some of the data is not going through human rights committees and being scrutinised in that sense. What assurances can the Minister give that the process will operate properly and that research that is scientific will be legitimately so once these clauses are passed?
First, the hon. Gentleman is right that there are other areas where there is a public interest test. In those other areas it is actually very narrow, however. The public interest test is currently only applied to research using special category data under schedule 1 to the Data Protection Act 2018 and public health data. It is quite specific. This is why we are nervous about extending the test across the whole of data protection. It is appropriate, we think, to have that extra protection for those particularly sensitive areas, but we think it would be disproportionate to make all researchers meet that standard, regardless of the type of data they are using.
The hon. Gentleman mentions AI companies, and the matter was of course raised in the Lords. It is worth reminding the Committee that the clause narrows rather than expands the definition of scientific research. As the provisions of the Bill make clear, web scrapers seeking to reuse personal data for purposes such as training AI models must have a lawful basis. Before even considering the meaning of scientific research, a web scraper would need to pass the balancing test to use the legitimate interest ground. The Information Commissioner’s Office outcomes report, published last year, emphasised that:
“Web scraping for generative AI training is a high-risk, invisible processing activity. Where insufficient transparency measures contribute to people being unable to exercise their rights, generative AI developers are likely to struggle to pass the balancing test.”
In other words, AI companies should not be doing precisely that which he is concerned they would.
The Minister says that the changes in the clause narrow the scientific test. That certainly was not my understanding and I would be grateful if he could clarify. Currently, under scientific research, only three criteria can be used under GDPR: statistical purposes, archiving, and genealogical-type purposes. The clause expands secondary data use under GDPR quite substantially.
If an area of research does not currently count as scientific research, it will not do so under the Bill. Researchers will benefit from having a clearer definition in legislation that reflects the language buried in the recitals and the current ICO guidance. We believe that improving clarity will reduce uncertainty, the risk of misinterpretations and misapplication of the law. The Government will of course monitor the reform’s impact and how researchers navigate the data protection framework. We think that will help us better understand if further changes are required.
The fundamental point is that their lordships inserted a public interest line that we are seeking to take out. They inserted it because they believed it would mean that no data would be used in a way that did not lead to eventual good outcomes. The truth is that when someone starts a piece of research based on curiosity they might have no idea what the final outcome will be. That is an important part of how most researchers work, whether in a commercial or non-commercial setting. That is why the Royal Society has unambiguously stated that if we retain their lordships’ public interest provision, it will have a chilling effect on research in the UK. That is why I commend the amendment to the Committee.
The matter turns on how we define public interest. I appreciate the concerns about the clause. Being a scientific purist, I could argue that even blue-sky research could be justified as in the public interest, provided that we all benefit from the fruits of that knowledge when it is shared. Notwithstanding that point, I will go back to the Minister’s comment. I understand that the point of the clause is to expand the definition of scientific research from the currently narrow criteria under GDPR, so there will be research that is currently not scientific research that will be permitted as a consequence of the clause.
I will try one more time to persuade the hon. Member, but I will be repeating myself. The Government are not expanding the meaning of scientific research. The Bill’s definition is completely in line with present ICO guidance, which states that commercial organisations can also carry out scientific research. Scientific research conducted by commercial organisations can have a life-changing impact, as many hon. Members have noted, but the definition does not cover any commercial activity: it only includes activities that could reasonably be viewed as scientific research.
Amendment 13 agreed to.
Clause 67, as amended, ordered to stand part of the Bill.
Clauses 68 and 69 ordered to stand part of the Bill.
Clause 70
Lawfulness of processing
As we have several provisions here, it might be worth me making some comments. Clause 80 strikes the right balance between helping organisations to make the most of emerging technologies that drive up economic growth and productivity, while maintaining public confidence. Organisations will be able to make decisions that have significant effects for individuals based solely on automated processes in wider circumstances than presently, but they must implement stringent safeguards.
Those safeguards include individuals’ right to challenge and obtain human intervention if they are not satisfied with the decision. Where law enforcement agencies process personal data for a law enforcement purpose, they will be able to apply an exemption to the safeguards in very limited circumstances, such as to safeguard national security. Where that happens, a human must reconsider that decision as soon as reasonably practicable after it is taken, and that review must be meaningful. For the intelligence services, where entirely automated decision making is used, we are making clarifications to provide greater confidence to controllers and the public.
Schedule 6 contains minor and consequential amendments to UK GDPR and the Data Protection Act. Those amendments repeal and replace references to the current rules on automated decision making with the reformed rules in clause 80 of the Bill to provide legal clarity.
On new clauses 1, 4 and 24, the Government’s algorithmic transparency recording standard, or ATRS, enables public authorities to publish information on how and why they are using algorithmic tools. That includes a description of the human role in the wider operational process of which the tool is part. More than 50 ATRS records are now published in the repository, with more to follow shortly. Where these amendments seek to ensure that such tools are evaluated, the blueprint for modern digital government, which was laid in Parliament in January, makes it clear that part of its role will be to offer specialist assurance support, including a service to rigorously test models and products before release. I hope this provides reassurance to the hon. Member for Harpenden and Berkhamsted.
I will address new clauses 7 and 26 together, as they intend to achieve the same effect. I would again like to reassure hon. Members—I am trying to offer a lot of reassurance to the hon. Lady and to the hon. Member for North Norfolk—that the data protection framework has stringent safeguards in place for solely automated decision making. The UK GDPR transparency obligations already require organisations to notify individuals about the existence of solely automated decision making and to provide meaningful information about the logic involved.
Under our reforms, after a decision has been made, organisations must also provide data subjects with information about that decision. These information requirements enable individuals to exercise the safeguards I mentioned earlier, and are in addition to the wider transparency requirements of the framework. The safeguards in the reformed article 22 are unnecessary for partly automated decision making, since these decisions already include meaningful human involvement by definition.
When it comes to high-risk decisions, there are already additional requirements for processing that can result in a high risk to the rights and freedoms of individuals, including automated decision making. Controllers must carry out an impact assessment for such processing activities and consult the Information Commissioner’s Office where such an assessment indicates a high risk to individuals in the absence of effective measures. That process ensures that potential risks are identified and addressed. I therefore hope that the hon. Members for Harpenden and Berkhamsted and for North Norfolk feel that they do not need to press their new clauses to a vote.
This is a really interesting set of clauses. The debate that we are having, and that they had in the other place, on automated decision making is particularly interesting.
Of course, automated decision making is here. It is everywhere in every part of our lives. I was just looking at the Spotify app on my phone, and my daylist suggested that I start off by listening to Front Line Assembly, which is an industrial metal band. It is probably because, going into the data Bill Committee on a Tuesday morning, I need something to get me started.
Ah, the temptation.
The point about automated decision making is that decisions can be made about people without their involvement, which can have substantial consequences, particularly when decisions are made in the public sector. Of course, automated decision making takes place all the time, day in and day out. We saw it on a huge scale during the covid pandemic when people had to sign up to universal credit, as there were checks on people’s basic characteristics and assets to assess their eligibility. Those decisions had quite a substantial impact on people, but the data points were actually quite simple and straightforward. As I understand it, no particular concern was raised about automated decision making in that context, apart from a few examples where people’s circumstances were remarkably unique.
The purpose of the Bill is to scale up, particularly when it comes to AI and more sophisticated decision making. We think the new clauses seek to place onerous and unnecessary obligations on Government bodies and public authorities. New clause 1, among other things, would require public bodies to give notice on a public register for each and every function they perform where automated decision making is used. New clause 4 would oblige the Secretary of State to put in place and maintain a public register of all semi-automated or fully automated decision-making tools used by public authorities in relation to individuals, with public bodies being precluded from using such tools in advance of their registration.
New clause 7 would provide service users with a range of powers to request information from data controllers in relation to the workings of wholly or partly automated decisions, and to purportedly high-risk decisions. I am amazed by the provisions suggested in new clauses 7 and 26 by the hon. Members for Harpenden and Berkhamsted and for North Norfolk. They seem to give quite extensive discretionary powers to the Secretary of State to define high-risk decisions and regulate them accordingly. I was surprised to see the extent of the powers handed over to the Secretary of State by these new clauses.
The new clauses are especially burdensome and unnecessary, given the widespread use of automated decision making for initial assessments in the Department for Work and Pensions, as I alluded to earlier. Automated decision making is a subject of significant debate, and clause 80 includes more safeguarding measures in proposed new article 22C of the UK GDPR. Those safeguards include requirements on data controllers to provide information to data subjects about significant decisions being taken through solely automated processing, the right to contest those decisions and the right to seek human intervention at the request of the data subject.
Our view is that clause 80, as drafted, provides a proportionate approach to the protection of individual rights, and that these tools will help with potential speed and, importantly, efficiency gains, which I mentioned earlier with regard to the use of automated decision making for universal credit in the response to covid. The basic functions of Government and public authorities rely on widespread automated decision making.
I think the hon. Member for Runnymede and Weybridge thinks I was trying to calumniate him earlier by suggesting that he does not pay for his music, but I was not making that suggestion at all.
Clause 81 amends article 25 of the UK GDPR to strengthen the obligations for providers of information society services likely to be accessed by children, such as social media platforms and streaming services, by requiring them to actively consider the protection of children’s data when designing their services, and to ensure that appropriate organisational and technical measures are in place to safeguard young users.
The clause sets out the higher protection matters that ISS providers must consider when designing their services, including how best to protect and support children when processing their personal data. The duty also requires data controllers to consider the fact that children merit specific protection because they may be less aware of the risks and their rights, and the fact that children’s needs vary with age and development. When considering how to comply with the new duty, ISS providers will be greatly aided by the age-appropriate design code issued by the Information Commissioner’s Office, which sets out comprehensive guidance for ISS providers on using personal data in a way that complies with data protection principles and respects the best interests of children.
New clause 21, in the name of the hon. Member for Harpenden and Berkhamsted, would in effect increase the age of consent for social media from 13 to 16. I am happy to listen to her comments, but much of this was debated in Friday morning’s private Member’s Bill debate—I think that is partly what led her to table the new clause—and in the Westminster Hall debate a few weeks ago. I am happy to respond to her comments, but we will be resisting her new clause.
At the heart of new clause 21 is the aim to restrict access to certain social media platforms by children under the age of 16. I am very sympathetic to the motivations of the hon. Member for Harpenden and Berkhamsted.
I rise to speak primarily to new clause 27. The Government are committed to the independence of the regulator, which will continue to be accountable to Parliament. The Bill does not introduce a statement of strategic priorities, as the hon. Member for Harpenden and Berkhamsted seems to suggest in her new clause, nor does the Secretary of State issue discretionary guidance to the regulator. Neither the Bill nor existing legislation provides for the Secretary of State to amend or reject a code of practice. I therefore do not see that this new clause is necessary.
I have a specific point on the text of new clause 27. We do not support this curtailment of powers, particularly in this context. I am sure that the Secretary of State will consult as a matter of course in carrying out his duties, whatever they are, and a specific requirement to consult the Science, Innovation and Technology Committee, notwithstanding its prowess and stature, would be inoperable.
Clause 95(1) relates to artificial intelligence and copyright and the related reporting requirement on the Information Commissioner. I will set out our fuller reasoning on copyright shortly, but for now, I merely state that we believe that now is not the right time to place an additional reporting obligation on the Information Commissioner in the Bill. Government amendment 22 would therefore remove subsection (1), which was added to the Bill on Report in the Lords.
Subsection (2) requires the Information Commissioner to publish key performance indicators. The Government take the performance and accountability of UK regulators seriously. Regulators undertake important functions across our economy and society, and the Information Commissioner’s Office is no exception, so it is important that Parliament and other stakeholders have the right means to hold them to account. Publishing such metrics is best practice and a transparent way of providing measurable analysis of the ICO’s performance year on year. This forms part of a package of additional reporting requirements, alongside those in clause 91 and the report on regulatory action in clause 102, which we will discuss later. Together, they will increase understanding and transparency about priorities, performance and enforcement activities.
Clauses 135 to 139 are in this group, although we will vote on them later. They set out further requirements regarding copyright and AI, and I urge that they do not stand part of the Bill. These clauses require regulations to be made to ensure compliance with copyright law by web crawlers and general AI models, and transparency about the use of web crawlers and the works they scrape. There is also an enforcement requirement for the Information Commissioner, and provision on a review of technical solutions.
The Committee well knows, because I have mentioned it several times, that I agree with many of the points raised in debate on the clauses and the importance of transparency for rights holders in the creative industries. It was one of the key principles in the consultation we published on copyright and AI that closed on 25 February. We want genuine transparency about what is used in training AI, alongside rights holders’ control of their work and appropriate access to training material for AI. However, although I accept the intention behind the amendments—that is, clauses 135 to 139, which were added in the Lords—we do not believe that the Bill, which is a data measure, is the right vehicle for action.
We received more than 11,000 detailed and heartfelt responses to our public consultation on AI and copyright. Many set out specific views on transparency, technical standards and a range of the questions that we asked in the consultation. We are taking care to read each response. Although we believe that action needs to be taken on transparency and web crawlers, as well as other issues relating to AI and copyright, it is only right that we carefully consider all the viewpoints and evidence before acting. We have heard loud and clear the message that stakeholders do not want us to rush to legislate on this topic, and we intend to heed this message. Yesterday the Secretary of State met representatives of the creative industries and repeated that point.
The engagement will not end with this consultation. I have already stated our intention to create working groups to move the conversation forward, including on technical solutions. Industry often comes up with the best ideas, so I want to harness that, whether it is greater transparency about AI training or standards on web crawlers, metadata and watermarking. Whatever the solution, we want to be confident in its efficacy and, critically, in its simplicity and accessibility. We have said repeatedly that we will not move forward in this sphere unless we are confident we can give rights holders greater control over the use of their works. Once we have analysed the responses to the consultation, we will publish proposals. Clauses 135 to 139, which were added to the Bill on Report in the House of Lords, should not stand part of the Bill.
Opposition new clauses 17 to 20 also relate to AI and copyright. I am grateful for the way in which the shadow Minister, the hon. Member for Runnymede and Weybridge, has advanced these suggestions. These new clauses would require the Secretary of State to issue a statement on the application of UK copyright law to the activities of web crawlers and artificial intelligence models. One of the new clauses sets out the possibility of this being a copyright notice, issued by the Intellectual Property Office. They also require the Secretary of State to produce two reports, one of which should include a plan for transparency regarding the use of copyright materials with AI; the other should be on access to data and how to reduce market entry barriers for start-ups and smaller AI enterprises. Finally, they would require the Secretary of State to publish a technical standard for a machine-readable digital watermark, which would allow rights holders to label their content for the purposes of licensing.
As the House is aware, these amendments relate to matters that are at the heart of the government’s approach to AI and copyright. Indeed, the recently closed consultation sought views precisely on these issues. I commend my Conservative colleagues on the spirit of these amendments, but ask that they not be pressed at this time. I hope we can have further discussions on how we move forward on Report. While the amendments may indeed offer useful steps for the Government to take in solving issues of AI and copyright, proper analysis and policy development is likely to take longer than the proposed timeframes included in the clauses, given the 11,000 responses we received to the consultation. In addition, we would not wish to pre-empt the consultation, which some of these proposed clauses may do.
That said, I hope that I can discuss the issues raised by the amendments further with Members from both Opposition parties, to discuss whether we might be able to agree on similar proposals as we move forward. As I say, we take these issues seriously. As I am the Minister for Creative Industries and a Minister in the Department for Science, Innovation and Technology, I take a special interest in this and agree with the spirit of what these amendments seek to achieve, but I ask that new clauses 17 to 20 not be pressed at this stage.
Equally I thank the Minister for the spirit in which he has conducted this debate. It is an important one, which has captured the focus of a great many people, not only those in the creative and AI sectors whose livelihoods absolutely depend on us getting this right, but all of us who love and benefit from the products of the UK creative industries.
I will discuss clauses 135 to 139, which the Government are seeking to remove, before I speak to the new clauses that stand in my name and those of other Opposition Members. While there are problems with clauses 135 to 139, they do reflect the creative industries’ well founded and much publicised concerns about the manner in which AI developers conduct data mining activities to train their models and for generative activities. I should declare an interest; I recently attended the Brit awards with my wife with support from the British Phonographic Industry, so I received hospitality in the last couple of weeks.
The Minister can interpret that how he wishes. We must ensure that our creative industry is supported to thrive while harnessing the technological and economic benefits of growing our domestic AI capability. The amendments in this area from the other place touch broadly on a number of important principles, which we support. They include the application of copyright law to data mining and AI-generative activity, which is covered in clause 135; the need for high transparency in how AI models are trained and the materials used for that purpose; and the importance of identifying sound technical solutions so that copyrighted content can be identified by web crawlers and AI models excluded from training and generative activity.
However, these matters and their solutions are complex from technological, legal and societal perspectives. We totally recognise the challenges of legislating in this area. Our international counterparts face the same challenges in trying to strike an effective balance between supporting our AI industries and supporting our creative sector. It is not a zero-sum game. There is clear scope for collaboration and mutual benefit if we get this approach right. As the shadow Secretary of State for Science, Innovation and Technology, my hon. Friend the Member for Havant (Alan Mak), stated in the Chamber, creative industries are telling us that the Government’s solution—set out in their consultation as their preferred option—is “not fit for purpose”. We need to engage carefully with the feedback received from industry stakeholders to come up with the right solutions in this area.
As the Minister mentioned, new clauses 17 to 20 recognise that putting together a specific plan in great detail on how to solve this problem needs to be done by chewing through the information from the ongoing consultation and through extensive engagement with the people who are actually going to do this stuff and the people who will be affected by it. In effect, the proposals are end-point clauses, about the world we want to see in the future, where our AI and creative sector can work together and we get all the benefits from both. It is where we want to get to. It is a bit less about putting together the journey plan of how we get there, with the exception of the fact that the Government need to crack on and sort this out—[Interruption.] Well, he’s the Minister. It comes with the job.
New clause 17 is intended to require the Government to confirm the application of existing copyright law to creative content mined by AI web crawlers and models in the same way that it would apply to other offline content. The Opposition feel that there is no ambiguity about the application of copyright law in this context. However, the Government have consistently suggested, in their consultation on copyright and artificial intelligence and elsewhere, that the legal position is unclear. In effect, that has created ambiguity and given rise to significant concern and objection from the creative sector. It deters smaller AI enterprises and start-ups from developing their products.
Running counter to that is the near existence of a possible future opt-out. I have heard evidence that AI companies are now thinking, “Let’s hang on before we buy licensed content, because we might get it for free anyway if this applies going forward.” If the aim was to give confidence to the AI sector, as was dealt with by the consultation, that has not happened either.
Clarity is needed for both the creative and AI industries, but not in the form of a wholesale exemption from copyright law for development and generative activity undertaken by AI models. The Government should make a clarificatory statement about the existing application of copyright law in this area. That certainty is the foundation block of sound policy aimed at supporting the creative industries to harness the economic value of their work, so I commend new clause 17 to the Committee.
New clause 18 requires the Government within three months of Royal Assent to lay before Parliament a plan to put forward proportionate and effective measures to ensure transparency in the use of copyright materials in training, development and generative activities of AI models, with emphasis on the proportionate and effective nature of the measures. At a high level, ensuring transparency in this area will help to ensure that information is available for rights holders to discern where and how their work has been used, and seek payment for the use of their work where appropriate.
New clause 18 seeks to address the widespread concerns of creative rights holders that they do not know when their material is being used, which acts as a block to any form of enforcement of their rights or licensing going forward. However, the approach to transparency must be proportionate. In particular, transparency obligations should not be so onerous that they stifle the market for AI start-ups and smaller enterprises in their infancy, when these entities should form the lifeblood of our future technological economy. One could envisage a situation where, if we get the legislation on this wrong, the recording and storing of information that has created a model, in its extreme triviality, could in effect become a bigger dataset than the set used in the first place— hence the focus on the importance of proportionate and effective measures.
The timing of the action to be taken by the Secretary of State under the new clause—within three months of Royal Assent—is intended to give the Secretary of State a proper opportunity to consider the feedback of the creative and AI industries and other stakeholders received under the recently concluded consultation on copyright and AI. I am ambitious for the Minister and the Government. I know he slightly deprecated his ability to get on and try to put something together, but I have faith in him to drive this forward. The feedback should help to formulate a plan that is both effective and workable, so I commend new clause 18 to the Committee.
New clause 19 requires the Secretary of State within three months of Royal Assent to lay before Parliament a plan to reduce barriers to market entry for start-ups and smaller AI enterprises, specifically in relation to access to data to train their models. The Government’s now concluded consultation on copyright and artificial intelligence specifies that one of its key aims is to support wide access to high-quality material to drive the development of leading AI models in the UK.
The AI opportunities action plan commissioned by the Government made a series of recommendations relating to the need to unlock public and private datasets to enable innovation by UK start-ups and researchers in order to attract international talent and capital. Although the imbalance in access to resources between established companies and start-ups and small and medium-sized enterprises is in the nature of markets, failing to address that in this context risks reinforcing a situation where AI development activity remains the preserve of a relatively small number of established operators. I am thinking particularly of those that have been able to set up now, using datasets that have not had to comply with whatever provisions will eventually be put in place to regulate this area.
The Prime Minister indicated in his response to the action plan that DSIT would look at how to take this policy area forward. New clause 19 calls on the Government to put their money where their mouth is, and come up with a proper plan to turbocharge not only growth in our AI sector, but diversity and competition among operators of all sizes, by coming up with a plan to reduce the barriers to market entry that the accessibility of data presents.
Given the increasing adoption and use of AI by digital Government and the mechanisms of the state, it is critical for our national security and our national resilience to have a functioning domestic AI market that we can draw on for our use. The timescale for the Secretary of State to publish his report provides an opportunity for industry and stakeholder feedback to be taken into account when developing effective plans. For those reasons, I commend new clause 19 to the Committee.
Finally, new clause 20 requires the publication of a technological standard. I hope that the previous three new clauses are relatively uncontroversial, and I particularly hope that this new clause is the most uncontroversial of all. It is based on an amendment that was moved by my noble Friend Viscount Camrose in the other place, but which was withdrawn on receipt of reassurances from the Minister. The new clause requires the Government to publish a technological standard for machine-readable watermarks for the purpose of identifying the licensed content when it is encountered by web crawlers and AI models.
The development of such a standard would greatly enhance the ability of rights holders to protect their work, and to support enforcement of creative rights by creating a record of where and how content has been used. The development of a technological standard will be incredibly useful, even if the Government decide to take forward the flawed opt-out proposals and even if they are not ultimately adopted. This technological standard would be used in whatever situation we find ourselves in over the next few years in this industry.
This proposal would provide web crawlers and AI models with clear signposting that the content is not available for training or generative activity. Where that is properly deployed and observed by AI models, it will reduce the need for rights holders to take action to seek compensation for infringement of their copyright. The new clause does not ask the Government to commit to a specific solution, and nor should it, but it requires them to commit to identifying such a solution within a reasonable period. Let the industry sort it out. One of the challenges that has been going through my mind when exploring this area is why, from a point of principle, the market has not fixed this in the first place, and why we are where we are now in trying to resolve these issues. The new clause will promote transparency and certainty for the creative and AI industries, and I commend it to the Committee.
I am tempted, because we both clearly share a love for the Sugababes, to just draw a reference to that. Of course, the creative industries also have quite a lot of experience of using other creative materials licensed from other producers. For the Sugababes song “Freak Like Me”, I am fairly sure that the sample is directly taken from Gary Numan’s “Are ‘Friends’ Electric?”, and presumably they came to some sort of arrangement in organising that. This sharing of data is not unusual for the creative sector.
I have often wondered whether Kylie’s song “Padam Padam” is a reference to Edith Piaf’s “Padam padam…” because they are also quite similar. This is, of course, a well traversed space for people working in the copyright sphere: trying to make sure that people are not passing off or using other people’s work without permission. The economic and moral rights of rights holders are well established in UK law. We started the process of legislating for that in 1709, under Queen Anne. Dickens had an ambition to make sure that people could not just take copies of his books to America and sell them for free without any payment to him, which is part of why we ended up with an international copyright regime. We do not want to undermine that.
Transparency is key, and it was one of the elements that we put into our consultation. We need to be careful about precisely how that transparency works out. The hon. Gentleman referred to proposed new clause 18, which he wants us to do something on within three months. As ambitious as he may be for me, that is a remarkably short period of time for parliamentary drafting. After all, a version of the Bill was first introduced four years ago, yet it still does not have Royal Assent. He refers to the terms “proportionate and effective” in that proposed new clause. To go back to “Hamlet”, aye, there’s the rub. What do proportionate and effective mean, and how do you balance the two? Different sectors will have difficult and competing sets of agendas and we may, in some shape or other, have to arbitrate.
The hon. Gentleman is right to say that no one, anywhere in the world, has come to a proper settled position on this issue. In the United States of America, for instance, a lot of AI companies have been relying on fair use, under the slightly different copyright system there, but the most recent federal case found in favour of Reuters against an AI company—the court said that scraping material was not fair use. The EU has not yet fully developed its proposals and has not decided how to implement its transparency requirements. It could be argued that that is one reason why there has not been much additional licensing, which was one of the EU’s declared goals.
There is also the question of how to enforce transparency. The clause—in a provision tabled by the admirable Baroness Kidron—specifically gives that enforcement power to the Information Commissioner. I am not sure that is the right place to put that power, or that the Information Commissioner has the expertise or resources for it. Undoubtedly, if there are to be new transparency requirements, we must have some form of enforcement.
All those things suggest to me that it is not right to put this power as an addendum to this Bill. The matter should be seen in the round, after a consultation, and there should be a proper primary legislation process, which may not happen for another 12 to 18 months, or even two years. I do not know.
The Secretaries of State for Culture, Media and Sport and for Science, Innovation and Technology, and myself, are keen to get to a place where there is more licensing of copyrighted material by AI companies. I do not think anybody expects that the labour of others should be handed over to third parties without recompense or control. That, in itself, is not simple. It might be simple for the Design & Artists Copyright Society to do all the licensing for artists and photographers, but how could that be done for people who works as individuals, rather than as part of a collecting society? That is another set of issues that need to be addressed.
I know there are places in the world where one can buy an AI-generated book, and it might be perfectly readable. We might all have authors who we think have worked in that way in the past. But when I read a book, watch a film, or listen to a piece of music, I want to know that it has a human involved in it. Human creativity is a vital part of what renders that process of creativity so important. I think of humans as fundamentally social beings. One of the worst things that can be done to a human being is to put them in solitary confinement, because that denies our fundamental social being. What is so special about all the creative industries is that they enable a connection from human being to human being. I am passionate about not losing that or the value inherent in that.
Amendment 22 agreed to.
Clause 95, as amended, ordered to stand part of the Bill.
Clauses 96 to 103 ordered to stand part of the Bill.
Schedule 10 agreed to.
Clauses 104 to 108 ordered to stand part of the Bill.
Schedule 11 agreed to.
Clause 109 to 112 ordered to stand part of the Bill.
Schedule 12 agreed to.
Clauses 113 to 115 ordered to stand part of the Bill.
Schedule 13 agreed to.
Clause 116 ordered to stand part of the Bill.
Ordered, That further consideration be now adjourned. —(Kate Dearden.)
(1 year, 5 months ago)
Public Bill CommitteesClause 121 and schedule 15 make clear that information standards published under section 250 of the Health and Social Care Act 2012, as amended by the Health and Care Act 2022, will include standards relating to information technology or IT services used, or intended to be used, in connection with the processing of information related to the provision of health and adult social care in England.
For the health and adult social care system to work effectively, data needs to be processed in a standardised way using common specifications, which goes to some of the points made by the hon. Member for North Norfolk in quoting Government publications. These provisions are an important step towards creating a modern health and adult social care service, where systems are integrated and staff have quicker access to patient data, freeing up time that can be spent with patients.
In previous debates, several Members have referred to physical records, and I have referred to one hospital in Doncaster that employs 42 members of staff solely to carry around physical records. There are still departments in many parts of the NHS in England that are producing more physical, handwritten notes every day of the week. That must be nonsense; it must make it more difficult for us to deliver connected services in future and it cannot be in the interests of the patient, because we would want the patient to be able to hold in their hand an app with everything that relates to their own medical health, almost like a medical passport of their own. That simply is not possible if all the different bits of the NHS in England cannot work together. Government amendment 14 is a technical change to ensure that any personal data processed in the exercise of the public censure power, set out in schedule 15, is subject to the relevant existing data protection legislation.
New clause 3 would require researchers to keep and publish records about the health and social care data that they have processed for research. There are already extensive transparency requirements for health data, and the Information Commissioner’s Office provides detailed advice to the public on their data rights. The law only allows confidential patient information to be used for research without consent when it has been approved by the Health Research Authority. There are detailed arrangements for this approval, based in law, and the transparency arrangements include published registers of approved applications showing what data is used for what purpose and by whom. I hope therefore that the hon. Member for Harpenden and Berkhamsted will accept that this means her new clause is not necessary.
This part of the Bill is a concatenation of different provisions relating to data, which is one of the reasons why I think the Bill is so glorious; it covers such a wide scope of things to sort out. I will speak to some of the deeper debates that we will have later, but I am quite glad to start off by speaking to clause 121. As a former doctor—my wife is a doctor too—I particularly welcome these provisions and the opportunity they provide to ensure that health data can be shared properly.
I would say to the Minister that the issue is not merely carrying around patient notes; certainly, in my experience the issue is whether patient notes turn up in the first place at all. As somebody who does not work in the health service any more, I see the other side, where the burden is quite often on the patient to provide their notes or to give information repeatedly that different parts of the system already have. That is a wholly inefficient way of doing things. One of the benefits of having the NHS set up as it is must surely be the ability to have coherent approaches to the sharing of data, so that we do not have this situation with notes.
It is not merely an inconvenience. Patients can be exposed to repeated tests and repeated imaging, all of which have a degree of iatrogenic harm and risk, plus delays to progressing. My former field of work was psychiatry, and the places where I worked were very quick to adopt electronic patient records, noting not only the importance of data sharing, but the risk of retraumatising people when repeated disclosures of traumatic events are required—in part, I worry, because that data is not shared as effectively as it could be.
I raised the point on Second Reading that changes in this area will need to be supported by ensuring that hospitals and healthcare settings have access to IT of sufficient quality to support the new systems. Can the Minister provide an update on his strategy—although I recognise it is not precisely his strategy; it is shared with the Department of Health and Social Care—on renewing NHS IT infrastructure and ensuring that the necessary kit is put in place so that the provisions can be rolled out to maximum advantage? This is about not merely the sharing of data, but the fact that faxing information is no longer required, and we must have the computer infrastructure necessary for data sharing.
Clause 124 delivers on the Labour manifesto commitments to further support coroners, and procurators fiscal in Scotland, to access information held by online services after a child’s death. This is a very sensitive issue, and we have tried to address it as such. The provision will require Ofcom, when informed by a coroner, to issue a data preservation notice to specified online service companies. That will help to ensure that those online service companies retain all the relevant data they have on a child so that it will be available on request should a coroner later require it as part of an inquest into a child’s death. The clause demonstrates the Government’s commitments to keeping children safe online and supporting families that have endured unimaginable losses. I am conscious that some might want us to go further; further to the conversation we had earlier, we might be able to have a fruitful discussion on that before we reach Report.
On new clause 29, I reassure the hon. Member for Harpenden and Berkhamsted that there are already strong powers to ensure that companies comply with data preservation notices. Those include the power to issue fines for non-compliance of up to £18 million, or 10% of qualifying worldwide revenue, and the ability to hold senior managers criminally liable for non-compliance. Those sanctions will help to ensure that online services comply with any notice issued under section 101 of the Online Safety Act 2023. Under a provision in that Act, the Secretary of State must already review the effectiveness of the Act’s regime, including the data preservation measures, between two and five years after it comes into force and must produce a report detailing his findings, which will then be laid in Parliament. I therefore hope that the hon. Member will not feel the need to press her new clause to a vote.
This is not the appropriate place to discuss new clause 30, but I hope that there will be ample opportunity on Report for further discussion of the broader issue, which is of great importance.
I propose that the clause does not stand part of the Bill. Clause 140, which was tabled in the House of Lords, is a regulation-making power that would enable terms relating to core personal data attributes to be defined consistently across data held by public authorities. The intention behind this measure is that the power could be used to define the term “sex”. We seek to overturn this clause for the following reasons.
The Government believe that public sector data, including data about sex and gender, should continue to be collected based on the specific data requirements of those collecting the data, and their users, which differs across contexts. That is in line with the data minimisation principle set out in the data protection legislation. We do not think it is appropriate to have core personal data attributes defined in regulations in the way that is proposed.
Furthermore, setting out such definitions using secondary legislation could create confusion where terms are already defined in legislation, and so—depending on the approach taken—could cut across the existing definitions. For example, defining sex could cut across the existing legal framework and undermine protections in the Gender Recognition Act 2004 and the Equality Act 2010.
I am, however, keen to reassure the Committee that the Government recognise the importance of harmonising data and have already commenced important work on standards across Government—via a cross-Government working group led by the Data Standards Authority—to define the core attributes of a person. Last year, the Office for Statistics Regulation published guidance on collecting and reporting data about sex and gender identity, and in December 2024 the Government Statistical Service published a work plan for harmonised standards in this space.
The Government’s belief is that such matters are crucial and more appropriately considered holistically outside the Bill. The intention of the Bill is not to define or remark on the definitions of sex and gender, or other core personal data attributes. I therefore recommend that the clause does not stand part of the Bill.
As the Minister noted, the clause is a provision that was introduced in Committee in the other place, along with clause 28(3) and (4), and clause 45(6), which have now been removed from the Bill pursuant to our decisions in Committee.
Clause 140 aims to ensure the accuracy of data underpinning digital forms of verifying identity, and more broadly. To a degree, it is ironic that we live in a world where we have to debate data dictionaries when it comes to the definition of sex, but I think the point about data dictionaries more generally, over and above the focus on sex data in this debate, is nevertheless sound.
We are aware of the Government’s argument that the clauses inserted in the other place pertaining to data accuracy—in particular, clause 45(6)—are not compatible with certain provisions of the European convention on human rights and the Gender Recognition Act 2004. I am grateful to the Minister for writing to the Committee on that, among other matters, but I do not think that his explanation gives any rationale for the removal of clause 140.
We strongly disagree with the Government’s position for the reasons I set out last week, but I will not rehash those arguments now. Rather, I want to make a simple argument in favour of retaining the clause on data dictionaries that the Government intend to remove. Clause 140 grants the Secretary of State the power to make regulations establishing the definitions and associated metadata for core personal data attributes. The Secretary of State may require that those definitions are used for, among other things, personal data recorded by public authorities, under subsection (1)(d), and the digital verification service, under subsection (1)(a).
My noble friend Lord Lucas compellingly stated the case in support of his data dictionary amendment in the other place, saying that
“if we are to live in a data-rich world, we really need a set of well-understood, good definitions for the basic information we are collecting.”—[Official Report, House of Lords, 28 January 2025; Vol. 843, c. 237-238.]
It really is that simple: giving the Secretary of State the power to define those core personal data attributes so that a consistent approach can be taken across the board by public authorities and entities engaged in digital verification services.
My question for the Minister is, therefore: what is the objection to the Secretary of State having that power to clarify the meanings of those essential terms, which we need to define data attributes? A clear definition of data attributes, and in particular the meaning of sex, is a foundational building block that will help to ensure that the data we collect can be harnessed for good-quality research on which sound public policy decisions can be based.
In the other place, the DSIT Minister, the noble Lord Vallance of Balham, acknowledged the need for data to be “based in truth” and “consistent and clear”. However, he opposed this clause on the basis that the Government would prefer to consider the matter of data accuracy and consistency holistically, outside the scope of the Bill. In that regard, he pointed to ongoing research in the field, including the Sullivan review of data, stats and research on sex and gender, which was commissioned by the previous Conservative Government, and the findings of which this Government would like to take into account in developing their policies in the area.
I welcome the fact that the Government intend to take a closer look at the importance of data accuracy, especially in relation to the collection of sex data, but there is no need to kick the can down the road. The clause compels the Secretary of State to do nothing—well, not in an active sense—[Interruption.] If only. It does not compel the Secretary of State in an active sense, but it does give him the important power to put definitions of core personal data attributes in place once the important Sullivan review and other studies have been published and considered. As we have mentioned a few times, the Bill has gone through many iterations and a long legislative period. We believe that this clause will be useful, if not essential, for resolving some of these issues.
Getting those basic definitions right is essential. If we do not, there could be mistakes that could become entrenched in the records of public authorities. That could lead to skewed research findings on important societal matters, such as health disparities and outcomes across the sectors, as well as employment opportunities and equal pay. For those and many other good reasons, let us take this opportunity to get the basics right.
In that regard, I encourage the Minister to heed the timeless words of Julie Andrews with which he opened Committee stage. As far as definitions for core data attributes are concerned,
“Let’s start at the very beginning,
A very good place to start.”
Mr Turner, I have confidence in confidence alone; I have confidence in you—if we are going to do Julie Andrews.
This is obviously a serious matter. The clause pretends to be just a regulation-making power that would allow the Government to publish a data dictionary by regulations. It is framed as a means to promote data consistency, but its actual intent is to push the Government to set a single definition of the term “sex” through a public authority data dictionary that public authorities would need to have regard to when processing data. As I have said several times in debates already, that is inappropriate. The whole purpose of data is that it is set within a context and that that context changes. For instance, the data that is required for the running of a hospital or prison is different from that required for the hiring of a car or the purchase of a property. That is why we think it is important that we do not go down this route.
The Opposition are again trying to give the Secretary of State more powers to do things by regulation, but it would be completely inappropriate to develop this data dictionary by secondary legislation, which would be unamendable and therefore subject to only minimal debate. I completely agree with the noble Lord Vallance that data has to be consistent and accurate, but it also has to be in the context for which it is being used. That is the key determinant that some Members have not understood in the Government’s argument. I still suggest that clause 140 does not stand part of the Bill.
Question put, That the clause stand part of the Bill.
I just want to make two points. I was a bit confused by the timings in this new clause. I think we all agree on the importance of data adequacy, but my understanding is that, by three months post Royal Assent, we will already have to have a data adequacy agreement in place, given the time that it will take to achieve Royal Assent.
The other point I wanted to make was that I think this might be the last time that I get to speak on behalf of His Majesty’s Opposition in this Bill Committee, so I want to thank Members, officials and the Chairs for taking part in our proceedings. I look forward to further debate on Report.
First, I should have also thanked the Under-Secretary of State for Justice, my hon. Friend the Member for Pontypridd (Alex Davies-Jones), because she has been intimately involved in bringing forward the measures that we debated in the last group. My apologies for forgetting that, Mr Turner.
On new clause 2, I completely agree that EU data adequacy is vital, but I completely disagree with the new clause, because I think it is technically deficient. One reason for that is the timeline that it lays out of three months, by which time I hope we might be able to have made progress. I also think that it undermines the independence of the process that the European Commission has to go through. The European Commission has already confirmed that its review of its two adequacy decisions for the UK are currently under way—ahead of the deadline, which is good. As Lord Vallance stated in the House of Lords, DSIT and the Home Office have dedicated teams supporting the European Commission’s technical review, as required.
I acknowledge the unilateral nature of the adequacy assessment made by the European Commission. For that reason, it is important to provide the European Commission with the discretion needed to complete its process, which I am afraid new clause 2 would undermine. So, for that reason, I am resisting the blandishments of the Liberal Democrats.
I listened carefully to the hon. Lady’s comments, and I want to reflect on one point. She presented, or at least seemed to present, a tension between public interests and the commercial use of data. It is really important that we recognise that a lot of health research, particularly pharmaceutical development, is for commercial purposes, with a huge amount of benefits for health as a consequence.
I do not think it is to right to try to sabotage the use of data for commercial purposes, because it has huge benefits for the care and treatment of people. We depend on pharmaceutical companies to spend the risk money, for which a state organisation would never have the appetite, to develop the new drugs of the future. It is important to be quite careful when one is thinking about commercial interests versus non-commercial interests for scientific research.
The hon. Member for Harpenden and Berkhamsted said that this is her last contribution to the debate, so in the words of the “The Little Mermaid”, I suppose we are poor, unfortunate souls. I thank her for tabling these new clauses, and she raised issues that were also discussed in the other place.
On new clause 6, as my noble Friend Baroness Jones noted in the House of Lords, the Government support giving individuals greater agency over their data and a robust regime of data subject rights. We have already announced our intention to publish a call for evidence on the potential role of data intermediaries. It is important that we establish a firm evidence base before we make any changes to people’s data rights, so I hope that that makes new clause 6 unnecessary.
On new clause 25, as I have just said, we have already published a call for evidence on the potential role of data intermediaries, which is why we need to proceed carefully before going down the route offered by the new clause. Finally, on new clause 28, the Government acknowledge that there are various models of data intermediaries, including those that manage voluntarily contributed personal data for the common good, such as data co-operatives and trusted research environments.
We have already announced our call for evidence, which will seek views on various aspects relevant to data intermediaries, including the delegation of data subject rights to third parties, barriers preventing data intermediaries from operating at full capacity and risk factors associated with significant growth in their activities. This will also include views on different models of data intermediaries, including those focused on data altruism, as the hon. Lady mentioned. Given that we have already announced our intention to act in these areas, I very much hope that the hon. Lady will be content to withdraw the motion.
(1 year, 5 months ago)
Public Bill CommitteesStrictly speaking, it is a misnomer to say that we do the Bill line by line; we do it clause by clause, or grouping by grouping. The first grouping contains clause 1 and new clause 15, which was tabled by the Liberal Democrat spokesperson, the hon. Member for Harpenden and Berkhamsted.
Clauses 1 to 26 establish regulation-making powers to implement smart data schemes. I think this part of the Bill is universally accepted, or it was in a previous version of the Bill—this is at least the third version of the Bill that a House of Commons Committee has considered line by line, clause by clause or grouping by grouping. These clauses were part 3 of the old Bill, but it is none the less important that we go through each of the clauses segment by segment, because this is a newly constituted House of Commons, with different Members and political parties, and therefore we have to consider them fully.
As many hon. Members will know, smart data involves traders securely sharing data with the customer or authorised third parties at the customer’s request. Those third parties may use the data to provide the customer with innovative services, including account management services or price comparisons. This has already been spectacularly successful in open banking.
Clause 1 defines the key terms and scope of part 1, which covers clauses 1 to 26. Subsection (2) defines the kinds of data to which part 1 applies: “customer data”, which is information specific to a customer of a trader, and “business data”, which is generic data relating to the goods, services or digital content provided by that trader. It also defines “data holder” and “trader” to clarify who may be required to provide data. That covers persons providing the goods, services or digital content, whether they are doing so themselves or through others, or processing related data.
Subsections (3) to (5) set out who is a customer of a trader. Customers can include both consumers and businesses such as companies. Subsection (6) recognises that regulations may provide for data access rather than transfer.
I commend clause 1 to the Committee and urge hon. Members to resist the temptations offered by the hon. Member for Harpenden and Berkhamsted, who tabled new clause 15. I thank her for her interest in smart data. We had a very good conversation a week ago. I am glad to be able to confirm that, following some pressure from the Liberal Democrats in the other place, the Government announced that the Department for Business and Trade intends to publish a strategy document later this year on future uses of those powers. Since the hon. Member’s new clause asks for a road map and we are saying that there will be a strategy, the difference between us may just be semantic.
The strategy document will lay out the Government’s plans to consult or conduct calls for evidence in a number of sectors. It is important that we implement those powers only after having properly spoken with relevant parties such as consumer groups and industry bodies in the sector. Clause 22 also requires consultation before commencement in any sector. As such, we think the best approach is to use powers in part 1 of the Bill to implement smart data schemes that fit the identified needs of the relevant sector. The strategy document will set out the Government’s plans for doing so. For that reason, I ask the hon. Lady to withdraw her new clause.
It is a pleasure to serve under your chairmanship, Mr Turner, and I thank all hon. Members taking part in the Committee as well as the officials. As the Minister said, this is the third iteration of this Bill and it has been extensively covered in Committee before. We rely on and thank former Members and those in the other place who worked on the Bill to get it to where it is. I am pleased that the Government are taking the Bill forward and that it is one of the early Bills in the Session.
There is much to say about the Bill that is positive, and not just because it is a reformed version of our previous two Bills. Although, ironically, the Bill does not reference the term “smart data”, clause 1 brings forward smart data and smart data schemes. That will help to open up a digital revolution, which will build on the successes of open banking in other sectors. We very much support that.
We support technical amendments to the Bill to make sure it works properly, but I am intrigued why these amendments are necessary at such a late stage, bearing in mind the multiple layers of scrutiny that the Bill has gone through. Can he explain where he received the feedback about the necessity of the proposed changes?
As the hon. Gentleman says, these are technical changes, and sometimes we just have to go through it again and again to make sure that we have got things right. Amendment 4, for instance, was simply a matter of working out that the grammar did not really work. Sometimes, it is just a question of filleting, I am afraid, and that is what we have been doing.
Amendment 1 agreed to.
Amendments made: 2, in clause 8, page 13, line 16, after second “specified” insert “documents or”.
This amendment provides that regulations may require enforcers to publish or provide documents as well as information, making the regulation-making powers in relation to enforcers consistent with the powers in relation to decision-makers and interface bodies (under clauses 6(9) and 7(4)(k)). See also Amendments 3 and 5.
Amendment 3, in clause 8, page 13, line 18, leave out “information about” and insert—
“documents or information relating to”.
See the explanatory statement for Amendment 2.
Amendment 4, in clause 8, page 13, line 18, leave out—
“, either generally or in relation to a particular case”.
This amendment leaves out unnecessary words. Power for regulations to make provision generally or in relation to particular cases is conferred by clause 21(1)(a).
Amendment 5, in clause 8, page 13, line 20, leave out “information about” and insert—
“documents or information relating to”.—(Chris Bryant.)
See the explanatory statement for Amendment 2.
Clause 8, as amended, ordered to stand part of the Bill.
Clause 9 ordered to stand part of the Bill.
Clause 10
Financial penalties
Again, it might be more convenient if I speak to the clauses first and come back to the amendments, because then it is more self-explanatory, but I may need to speak at greater length here.
Open banking has revolutionised the UK retail banking sector by enhancing competition and introducing innovative services. Establishing a long-term regulatory framework for open banking will pave the way for its future growth, and this framework will rely on the FCA having the powers necessary for effective regulation and oversight. Clause 14 therefore empowers the Treasury to enable or require the FCA to set rules for interface bodies and participants in smart data schemes, ensuring compliance with essential standards. Clause 15 sets out further detail about the regulation-making powers conferred on the Treasury by clause 14.
These provisions create a clear framework for delegating rule-making powers, ensuring effective regulation, proper funding and mechanisms to address misconduct by scheme participants, with clear objectives for the FCA’s oversight of smart data schemes. Regulations may enable or require the FCA to impose interface requirements relating to an interface body, as set out for the smart data powers more broadly in clause 7, and to require fees to be paid by financial services providers to cover interface body costs.
Clause 15 further provides that such regulations must impose certain requirements upon the FCA, including a requirement, so far as is reasonably possible, to exercise functions conferred by the regulations in line with specified purposes, and a requirement that the FCA must have regard to specified matters when exercising such functions. Additionally, regulations under clause 15 may empower or require the FCA to impose requirements on individuals or organisations to review their conduct, to take corrective action and to make redress for loss or damage suffered by others as a result of their conduct.
Clause 16 covers the Treasury’s ability to make regulations enabling the FCA to impose financial penalties and levies. The regulations may require or enable the FCA to set the amount or method for calculating penalties for breaches of FCA interface rules. The regulations must require the FCA to set out its penalties policy, and may specify matters that such a policy must include. Additionally, the Treasury may impose itself, or provide for the FCA to impose, a levy on data holders or third-party recipients of financial services data under the scheme to cover its regulatory costs, with the funds being used as specified in the regulations. Only those capable of being directly impacted should be subject to the levy.
Penalties and levies are a necessary part of smart data schemes, including in financial services, to allow the FCA to penalise non-compliance and recover the costs of its regulatory activities. The clause ensures that any penalties or levies are subject to proportionate controls.
Clause 17 gives the Treasury the power to amend section 98 of the Financial Services (Banking Reform) Act 2013 through regulations. This will allow the Treasury to update the definitions of the FCA’s responsibilities and objectives in that section, so they can include new functions or objectives given to the FCA by regulations made under part 1 of this Bill. That will ensure that the FCA’s new duties fit into the existing system for co-ordinating payment system regulators, helping maintain a consistent approach across the financial sector. Regulations made under the clause will be subject to the affirmative procedure.
We have tabled Government amendments 7 to 9 to ensure that the Treasury may delegate to the FCA powers to set rules for action initiation, as well as data sharing. We think this is vital to ensure that open banking continues to work properly and is in line with the policy as set out elsewhere.
I apologise, Mr Turner: I misspoke earlier with regard to our position on the Government amendments. Rather than offering positive support, I meant to say that we will not oppose the technical amendments.
What does the FCA think about these amendments? Has the Department consulted the FCA?
I am not sure whether we have specifically—I am looking to my left for inspiration. I am getting vague inspiration, although it is remarkably non-productive. If the hon. Member would like to intervene for a little longer, perhaps I will be able to be more inspired.
I thank the Minister for giving way. I appreciate that it is a technical question and I hope he is able to give a response. Equally, I appreciate that he may have to write to me in due course. I see that there are papers coming his way.
To quote Richard II, methinks I am a prophet new inspired. Yes, this is all based on a consultation with the FCA. The FCA is content with us proceeding in this direction. I hope that, on that basis, the shadow Minister—I am trying to differentiate between his not opposing and supporting, but I think on the whole in Parliament, if you are not against us, you are for us. I think in this measure he is for us.
Part 2 of the Bill is about digital verification services. Those are obviously a very important part of the Bill; they lay out how we want to move into a new era and they are essential to many businesses being able to deliver their services effectively. They are also important to the Government being able to deliver some of the things we hope for—in terms of greater productivity in the delivery of services—and, frankly, to turning Government-provided services into services that feel as intuitively available and accessible as those provided by the private sector.
Clause 27 defines digital verification services and sets out the scope of provision in part 2, which runs from clauses 27 to 55, to help secure their reliability. New clause 9, which we will hear about in a few moments, has been tabled by the hon. Member for North Norfolk. It would require organisations to offer non-digital verification services where practicable. The provision would change the voluntary nature of part 2 by imposing new obligations on businesses.
I fully support the idea of digital inclusion, which is why as the digital inclusion Minister I introduced our first action plan last week; we are the first Government to bring one forward in 10 years. However, we believe that the new clause is unnecessary because we are already prioritising digital inclusion. The office for digital identities and attributes will monitor the inclusivity of certified services, and include findings in the annual report that must be published under clause 53, which we will come to later.
In addition, there are already legislative protections in the Equality Act 2010 for protected groups. If in future the Government find evidence suggesting that regulatory intervention is appropriate to ensure that individuals have equal access to services across the economy, then we will consider appropriate intervention. I reassure the House that digital inclusion is a high priority for the Government, which is why we have set up the digital inclusion and skills unit within the Department for Science, Innovation and Technology, and why just last week we published the digital inclusion action plan, setting out the first five immediate steps we are taking towards our ambition of delivering digital inclusion for everyone across the UK, regardless of their circumstances.
We want to be able to deliver as many services digitally as possible, in a way that is fully accessible to people. However, we also accept that many people are not engaged in the digital world, and that there must also be provision for them. For those reasons, I hope the hon. Member for North Norfolk feels comfortable not pressing his new clause to a vote.
Digital verification services are important, and will make a big change when rolled out as part of this legislation. The provision is entirely right, particularly on the proportionality of data disclosure. Reading through some of the various reports and briefings we have received, the example used is of someone going into a nightclub: why should a scanned copy of their driving licence be consumed and contained by whoever the data holder is, when all they need to do is prove their age? These services will open the door to allow the proportionate disclosure of data. There is a both a data assurance component and a section on privacy, so we are glad that the Government are taking these measures forward.
I sympathise with the intention of new clause 9, in the name of the hon. Member for North Norfolk, which is to make sure that we do everything we can to support people who are digitally excluded. That ensures that people are not locked out and that there is a degree of reciprocity, so that as we digitalise more, the opportunity remains for people to access non-digital base services. I am not sure about the scope of the binding duty in the provision and about how the duties on small providers, as opposed to a duty on public service providers, play out politically. I think those are different things. Nevertheless, I support the sentiment of the new clause.
Amendments 10 and 11 seek to remove certain provisions that were introduced in Committee in the other place. I thank Sex Matters for its work, but also many people in this policy area who have tried to focus on the importance of data accuracy and validity when it is used.
I hope we all agree that it is important that data, when it is collected—in fact it is a principle of data collection and maintenance—is accurate and correct and that there is no point holding or using data if it is incorrect. Biased data is worse than no data at all. Therefore, I do not understand—especially given the extra use of the data that will come as part of digital verification services—why the Minister and the Government are not keen on the provision to stipulate that public bodies that hold sensitive data should be certain of its accuracy, particularly when the data is going to be passed on and used as part of digital verification services. I am confused by the resistance to ensuring that the data is correct, particularly when we anticipate that it will be used as part of a far bigger spectrum. It will be consumed by a digital verification service in which it is not routine to go back and look at the original paper records. The only dataset to be relied on will be some Oracle Excel spreadsheet or whatever database is used by public authorities.
This debate has become more acute with regard to the importance of sex data. It is critical that sex data is available to protect public spaces and to be used in scientific research to allocate someone’s sex as part of medicine and healthcare. I speak as a former doctor, and I guess I should declare an interest in that I am married to a doctor. The use of sex data is critical in medical screening programmes, such as cervical screening and prostate screening, to understand and interpret investigations. It is critical that the data is accurate; otherwise, there is a danger that research will not be appropriate or will produce bad results, and there is also a potential degree of medical harm. It is critical that we get sex data correct when it is being used.
I do not agree with the argument that requiring the disclosure of sex data is either disproportionate or somehow a breach of the European convention on human rights. The whole point of digital verification services is proportionate disclosure. In fact, we have heard speeches from both sides of the Committee about proportionate disclosure, and limiting the amount of personal data that is passed on as part of a digital verification service.
My challenge is, quite simply, that if somebody is collecting sex data as part of a verification system, why are they doing so? If they do not need to know what someone’s sex is, it should not be collected. Digital verification services allow people to choose their proportionate disclosure. There will be times when sex data is required for renting a property—that example has been used before—because people may want to rent properties in single-sex accommodation. I may argue that is a proportionate disclosure. If it is a standard rental property in another situation, it is probably a non-proportionate disclosure. Another argument has been made that it is needed to triangulate data to verify ID. Again, that does not seem to work, because the whole point of a digital verification service is to allow someone to have a digital ID framework and use different points to verify.
The perversity of this debate is that these schemes and their proportionate disclosure protect people’s identities. They protect people from non-disproportionate disclosure. We need to make sure that the data we are using is accurate and correct, and that it says what we want it to say when someone is inquiring about somebody’s sex. If somebody is asking for sex data but they do not need it, people should be able to say no, which the existing provisions allow for.
What is the point of politics if we do not have a debate? We strongly disagree with the interpretation that the provisions are somehow incompatible with ECHR rights. They totally support people’s privacy rights under article 8 regarding proportionate disclosures. If somebody needs to have someone’s sex data, they need sex data. They do not need gender data. The provisions allow for it, and if somebody does not need sex data, they should not be collecting it in the first place.
The clause creates a permissive information gateway. This will enable public authorities to share information relating to an individual with registered digital verification services, when requested by the individual. The gateway enables digital identity checks to be made against public authority data, thereby increasing the trustworthiness of identity and eligibility checks across the economy.
Clause 45 also makes it clear that the power does not authorise disclosure of information that would breach the data protection legislation or the Investigatory Powers Act 2016. However, disclosure of information under the clause would not breach any obligations of confidence owed by the public authority or any other restrictions on the disclosure of the information. The clause also enables public authorities to charge a fee for the disclosure of information under the clause.
I am not going to rehash the previous debates. Clearly, the Committee has made its decision, no matter how disappointing that is. I just wanted to pick up the Minister’s previous point about the use of common sense in arbitration decisions when it comes to access to protected same-sex spaces. I fully support using common sense, but how does that play out in a situation where somebody has gone through a digital verification service that has used data that is held by a local authority, but that has been changed at a later date—that is, in effect, gender data? How will that be resolved?
I think that I will have to write to the hon. Gentleman. We have agreed the amendment, so that is slightly rehashing the debate. I am happy to write to him and he will have that before we come back for Thursday’s Committee sitting.
Question put and agreed to.
Clause 45, as amended, accordingly ordered to stand part of the Bill.
Clause 46
Information disclosed by the Revenue and Customs
Question proposed, That the clause stand part of the Bill.
I am sure Members were wondering when we were going to get to a code of practice, and this is the clause that introduces it. Clause 49 requires the Secretary of State to prepare and publish a code of practice for the disclosure of information under the information gateway created in clause 45. The code of practice will provide guidance and best practice for such disclosure, including what information should be shared, who it should be shared with and how to share it securely.
In preparing and revising the code, the Secretary of State must consult with the Information Commissioner, devolved Governments and other appropriate persons. The code will be laid before Parliament before it is finalised. The first version of the code will be subject to the affirmative procedure and subsequent versions to the negative procedure, allowing proper parliamentary scrutiny.
Will the code of practice include information on the proportionate disclosure of data through the DVS scheme?
Yes.
Question put and agreed to.
Clause 49 accordingly ordered to stand part of the Bill.
Clause 50
Trust mark for use by registered persons
Question proposed, That the clause stand part of the Bill.
(1 year, 8 months ago)
Westminster HallWestminster Hall is an alternative Chamber for MPs to hold debates, named after the adjoining Westminster Hall.
Each debate is chaired by an MP from the Panel of Chairs, rather than the Speaker or Deputy Speaker. A Government Minister will give the final speech, and no votes may be called on the debate topic.
This information is provided by Parallel Parliament and does not comprise part of the offical record
It is a pleasure to serve under your chairmanship, Mr Dowd. I thank my hon. Friend the Member for Farnham and Bordon (Gregory Stafford) for securing this important debate. As was clear from his speech and his diligent, razor-sharp focus on targeting the delivery of gigabit broadband in different parts of his constituency, he is a true community champion. His constituents are lucky to have him.
That is a theme of the debate. All Members have spoken about individual parts of their constituency where broadband is a challenge. That goes to show how important our digital backbone is in the United Kingdom. I will resist the temptation to mention parts of my constituency, such as Queen’s Road or Ellesmere Road in Weybridge, where we have done work to deliver gigabit broadband. The debate demonstrates how important the issue is. It is one that inevitably and invariably gets the attention of Members of Parliament, so that they advocate for their constituents and try to deliver it.
Project Gigabit demonstrates simply that where there is a will, there is a way. Back in 2019, 7% of properties had what is defined as “gigabit access” or 1 gigabit per second. In April 2024—the last official stats we have—that had reached 81%. In fact, it is believed that the 85% target, due to be reached in ’25, has already been reached. That is a huge roll-out of gigabit broadband to households over the past five years of a Conservative Government.
There are of course people who do not have gigabit broadband, and it is critical that we work to ensure that they can have that vital accessibility. That is absolutely not just about being able to watch this debate in HD—to listen to my dulcet tones and to see the spots on my face; it is about industry and connectivity, and the events of covid showed just how important that is. Look at the £5 billion investment allocated to the project; some data shows that that is probably a £60 billion contribution to the UK economy.
How do we go about rolling out the delivery of gigabit broadband across the country? We as Conservatives know that the way to do it is to get industry involved and work with it. That is why 80% of the gigabit broadband target is linked to industry bringing it through, although we recognised that to get to the further 20% of roll-out, we needed to bring in subsidy and break down barriers. That is where we move from the initial phase of Project Gigabit, which was to do with industry delivering, to now, with the public subsidy we have seen over the past few years.
A great concern, however, is future inequalities, in particular in delivery to rural areas versus urban areas. The great concern is that over the next six months to a year, there will be a reallocation of priority away from rural areas to urban areas.
I do not know where the hon. Gentleman got that from.
The Minister chunters from his seat, but in his speech, please can he assuage that concern? The way to do so is to provide transparent data on the prioritisation of funding and the roll-out.
(1 year, 9 months ago)
Commons ChamberWe welcome the recent update on the expansion of 4G to rural areas under the shared rural network project, particularly for businesses and farmers who are under such pressure at the moment, with the recent Treasury announcements. Which Secretary of State should we thank for the planning approval and funding of this vital infrastructure project?
We support developing all the plans set out under the shared rural network and Project Gigabit—those plans were regularly announced by the previous Government, but they never actually put any money into the budget. There was never a line in a Department for Science, Innovation and Technology budget that said, “This money is guaranteed for the future.” We are putting our money where our mouth is and we are determined to ensure everybody has proper connectivity. Frankly, that is essential for people’s businesses, whether they are farmers or running any other kind of business, up and down the land. We will deliver that.
(5 years, 10 months ago)
Commons ChamberWe face a difficult winter. Many areas of England are under heightened restrictions, including Elmbridge, part of which forms part of my constituency. We face the national challenge of a new disease, with a population that is largely unexposed to it and has built no immunity to it through either prior infection or other means, such as vaccination. It spreads easily and quickly, and can make people in high-risk groups, particularly the elderly, seriously ill. It can spiral out of control and overwhelm our health service.
I supported the first lockdown and I support the current restrictions. As an NHS doctor, I say with all my body and soul that we cannot let the NHS be overwhelmed. But lockdowns and restrictions are deeply harmful in themselves. The long-term effects will be profound—a higher burden of disease from poverty, with associated costs in lives; loss of livelihoods; misery and damage from isolation, and reduction in liberties. We need a way out.
My constituents are feeling it—especially those who are now in tier 2 restrictions in Elmbridge—and I pay tribute to them for their resolve. They rightly ask me, “What’s the way out? How does this end? How do we escape the cycle of lockdown?” The current strategy is to suppress until there is a vaccine, but what if there is never a vaccine? As people start to tire of lockdown, increasing coercion and punitive measures are being put in place. On my commute from Runnymede and Weybridge, I travel to Waterloo station, and I have seen the signs there change—from a £100 fine for not wearing a face mask, to £3,000, to £6,000—in the course of a few months. It is inevitable that greater coercion will be needed. When does that stop?
Coercion is illusory. It works briefly, but after a while it fails, unless we take people with us and they own the decision. Of course, in a public health response to an infectious disease, we cannot have a free-for-all, but at the same time, in my constituency, I see people at low risk from covid who ignore the guidance because it will not directly affect them and all they see is harm from restrictions. I see people at high risk ignoring guidance because life is short and they want to see their grandkids. I see people terrified of covid hiding away from the world. Day in, day out, people make decisions about their health risks, such as to smoke or not to smoke—indeed, given that 76,000 people die every year from smoking, probably more people have already died this year from smoking than from covid. People decide whether to put salt on their chips, or not to eat chips. We all make compromises and trade-offs, but rather than the state deciding those trade-offs, we must find a way to let people decide their own.
Is not the problem that whether I choose to have salt on my chips is a matter for my health, but when I take risks with covid, I take them not just for myself but for everybody else with whom I interact, and for the whole of society?
I thank the hon. Gentleman for his intervention, and I will come to precisely that point in due course.
I supported the first lockdown, and I support the current restrictions, but we need a way out that works, irrespective of the invention of a vaccine. We need a way out that supports people to take their own decisions and respects free choice but, as the hon. Gentleman said, we must also protect society from an infectious disease. Such a system needs to be sustained for a long time, and those measures will need to be in place for a long time.
It is easy to criticise, but it is more difficult to put forward other options. We therefore need a debate about what a plan B could look like. We started with a national lockdown, but that was too blunt. We rightly moved to targeted measures, which are better, but still not great. The geographical area is too large, and people do not live their lives by local authority boundaries. The next logical step is to shrink the geography further—to the household or individual—and to have a system that allows people to make decisions for themselves regarding their own risks and the people they come across socially or at work.
We must use our testing capabilities in a targeted, risk-based manner, so that those at high risk, should they choose to, can shield and have support to do that. Those at low risk would be able to live their lives more freely, should they choose to do so. At the same time, we must ensure that things do not spiral out of control, with broader measures and restrictions available in reserve if needed. We must invest in our NHS surge capacity, and carry out research into vaccines and treatments.
The challenge, of course, is how we support those at medium risk, or those who live or work with high-risk individuals, and we need to have that debate. Lockdowns are not a cure for covid. They only regulate the pressure on the health service and, important as that is, in time they can, and will, be worse than the disease itself. We need to have that difficult debate and there is no easy solution. While I suggest that we wait for the phase 3 trials of vaccines, which come out imminently, we must start putting flesh on the bones of a plan B, based on individual choice, and consider a pilot in the UK. To get through this pandemic, whatever we do will be difficult. Difficult decisions have to be made, and more difficult decisions remain to be made.