Digital Economy Bill (Eighth sitting)

Calum Kerr Excerpts

Committee Debate: 8th sitting: House of Commons
Tuesday 25th October 2016 Public Bill Committees

[Kevin Brennan]

The hon. Gentleman is right to probe me on that. The truth of the matter is that there is a convenient clause to which we could add our amendments, which starts things two months after Royal Assent. As I said, amendment 94 is a probing amendment and I am sure the Minister will tell us all the reasons why it is technically defective. I will not push it to a vote so I am prepared to hear that, but we want to use it as a method of finding out the Government’s position.

Section 73 was originally introduced to encourage the roll-out of cable and to help a fledgling platform compete against terrestrial television by ensuring that cable platforms had access to public service broadcasting content. The Government have agreed that this policy objective was met some time ago, and in July reported that they were

“satisfied that the objective of ensuring that PSB services (as well as other TV services) are available throughout the UK has been met, and therefore section 73 is no longer required to achieve that objective.”

Subsection (3) states:

“The Secretary of State may by regulations make transitional, transitory or saving provision in connection with the coming into force of this section.”

Inasmuch as this generally means that the state will repeal section 73 when it sees fit, there are concerns among some public service broadcasters about understanding more clearly the Government’s intentions in relation to the timetable for that repeal. It would not be such a pressing issue were section 73 merely a harmless hangover and simply moribund. However, as we have heard, it is more than a legal anachronism. It is a loophole through which taxpayers’ money is effectively funnelled into private businesses.

As we have heard, section 73 allows companies, such as TVCatchup and FilmOn, to live stream the content of public service broadcasters and other channels online without permission. In other words, the money the public pay through their licence fee pays for content that is then, in effect, given away for free to companies other than public service broadcasters. Those companies then monetise that public service broadcasting content by placing their own advertising around it.

Public service broadcasters are granted public funding and the other advantages we have talked about on the understanding that, in exchange, they are obliged to air content that works for the public’s benefit, rather than solely for the benefit of commercial interests. Section 73, in effect, allows TVCatchup and FilmOn to benefit from that same public funding, but those companies are clearly not held to the same standards. That amounts not only to the taxpayer unwittingly subsidising those businesses, it effectively directs funds away from PSBs and impacts on their ability to generate legitimate commercial revenues and to reinvest in the wider creative economy. Those live-streaming sites increase public service broadcaster reliance on public money and can fuel a vicious cycle of under-funding.

There is cross-party agreement that that is wrong and has to be put right, which is what the Government are seeking to do, but why do we have to rely on the Secretary of State to

“make transitional, transitory or saving provisions”

for repealing section 73? Is it not the case that broadcasters and the public deserve a more explicit timeframe, for the reasons I have laid out, so that this does not persist for any more time than is absolutely necessary? Not only is that fair, but it would provide more certainty for public service broadcasters and ensure that their investment in UK content is protected. Amendments 63 and 64, which the hon. Member for Selby and Ainsty tabled, would mean the repeal of section 73 immediately after Royal Assent, which offers one way forward. Our probing amendments offer another alternative if the Government need more time.

Public service broadcasters first wrote to the Intellectual Property Office to ask for the repeal of section 73 in 2008. In the meantime, TVCatchup has obviously made millions on the back of PSB content and the European Commission has launched infraction proceedings against the UK Government, on the basis that section 73 denies public service broadcasters their intellectual property rights for their content, which is guaranteed under the 2001 copyright directive. It would also be helpful to know from the Minister how he believes that infraction proceeding plays into our discussion on the amendment, the repeal of section 73, and what role it has to play if the Bill indeed repeals section 73. In short, will the Minister explain why he is not offering a clear timetable for repeal in the Bill?

[Calum Kerr (Berwickshire, Roxburgh and Selkirk) (SNP)]

I feel that I should thank you for your chairmanship, Mr Streeter; I feel a bit left out, given that the Opposition spokesperson did it. Thank you so much for your chairmanship. It is nice to see a smile at the top table.

I will add a couple of brief points. I am surprised the hon. Member for Cardiff West earned only £10.60. I thought he displayed some creativity. I have never heard so many song lyrics or titles; I do not know if he is on commission for that. Hopefully, journalists across the country are googling—that is appropriate, given what we are discussing today—for what content he has earned £10.60, so that number may go up.

[The Minister for Digital and Culture (Matt Hancock)]

Other search engines are available.

[Calum Kerr]

Indeed—I thank the Minister. There is an interesting point here about the importance of parity across channels. The Scottish National party is clear in supporting the repeal of section 73. The hon. Member for Cardiff West made a point about the many different ways in which people can access content, which he articulated well, and the importance of being consciously competent across all areas when making legislative change. I am interested in hearing the Minister’s remarks on that.

We noted earlier the concerns specifically in relation to Virgin as a large cable company, but I want to put on the record very clearly that we absolutely support the Government in repealing section 73. As these models change and people access content in different ways, the ability for them to earn revenue from the content they produce becomes all the more important, because they cannot necessarily rely on its being consumed in a way that ensures that advertising revenues naturally flow. I emphasise that we support this, we welcome the Government’s bringing it forward but we would like a bit more clarity from the Minister around the broader picture.

[Matt Hancock]

I am delighted to respond to these points. I take this opportunity to commend the Opposition Front Benchers and, in particular, the hon. Member for Sheffield, Heeley, for how she proved, earlier in Committee, how it is possible to put points with great clarity and precision, such that on Thursday we rose early—somehow that seems unlikely today.

--- Later in debate ---

[Matt Hancock]

Hear, hear!

[Calum Kerr]

Oh, the curse of a word of praise from the Minister! I thank him none the less.

I support these two excellent new clauses tabled by Labour Members. I was delighted to hear the Minister say in response to the debate on the last clause, “We strongly support public service broadcasting.” Hot on the heels of that, the Opposition have provided him with an opportunity to put his money where his mouth is and show that he truly does. I think—at least, I hope—that we all support public service broadcasting, but there has been a lot of chat in this place about the PSB funding settlement and about it not encroaching on competition. Let us push beyond that to consider how to support public service broadcasters. Let us find a way to ensure that they maintain their place in an adapting world.

I will touch briefly on both clauses. New clause 14, on the review of listed events, is close to my heart. I note that the football World cup is one of them; I do not know whether we can table an amendment to ensure that Scotland has a chance of getting there—

[Kevin Brennan]

You’re going too far.

[Calum Kerr]

I thought so. At least when we eventually get there, we will not expect to win it, unlike others.

[Christian Matheson (City of Chester) (Lab)]

Like in 1978?

--- Later in debate ---

[Calum Kerr]

“We’re on the march with Ally’s Army. We’re going to win the World cup.”

[The Chair]

Order.

[Calum Kerr]

I will keep to the subject with a bit of brevity and levity.

I support the Labour move to review this whole area to ensure that we have a set of listed events that is fit for purpose and, more importantly, to ensure that the protection will continue. Likewise, we fully support new clause 17 on prominence. The Committee has spent a lot of time talking about the changing digital landscape. There is no doubt that if we do not introduce measures to protect listings, the public service broadcasters will disappear, slide down the pecking order and be harder to find. We will then be on the slow road to an argument that says that public service broadcasting is not as popular as it once was, but the reality will be that it is just difficult to find.

I conclude by thanking the Labour party for beating me to it with both amendments, to which I should have added my name and which I fully endorse.

[Graham Jones]

It is a pleasure to serve under your chairmanship for the first time, Mr Streeter. My hon. Friend the Member for Cardiff West encouraged me to talk about children’s programmes—I was thinking about “Play Away”—and I apologise for not being here earlier. I was observing a NATO training exercise as part of the armed forces parliamentary scheme.

I rise to talk about retransmission charges, and I will do so briefly because I am conscious of the time. We obviously have a listening Minister who is deeply concerned about these matters, and I hope he will go away and give due consideration to some of the points that have been raised, perhaps coming back with some thoughts of his own and some changes that could improve the Bill. On retransmission charges, repealing section 73 of the Copyright, Designs and Patents Act 1988—the intellectual property rights element—is important and welcome. It will put Virgin on an equal footing with the public service broadcasters in the marketplace of buying and selling channels.

I will return to that second issue and the financial impact in a moment, but I will first highlight an anomaly. Unless there has been a change in the last few days, the Bill does not include satellite channels, which fall under the Communications Act 2003. The Sky platform is exempt from the Bill and will not be liable for retransmission charges, which seems to be a market anomaly—I stand to be corrected by the Minister. We should have a level playing field for everyone. Sky benefits significantly not only from the five public service broadcast channels but from some of the other channels—my hon. Friend the Member for Cardiff West has just mentioned S4C and Alba, among others—and the radio stations. Sky has a huge commercial advantage in not paying for receiving something that is very complementary to its platform. We are applying a principle to Virgin, and the Bill should treat Sky equally.

We demand a lot from public service broadcasters, particularly the BBC, for which we pay a licence fee, and it is only right that the BBC should be able to recover some of that money for the licence fee payer in the commercial marketplace, rather than the service being literally given away to some platform providers. There is obviously a commercial benefit to the Sky platform or, for that matter, any satellite platform that automatically has to deliver PSBs under the 2003 Act. There ought to be something that provides clarity and a level playing field, because without it, Sky has another advantage among the many it already has.

--- Later in debate ---

Again, I quote from the Government’s consultation.

[Calum Kerr]

It is good to see the shadow Minister back in her place. She is making an excellent start to this section of the debate, pulling out many of the key issues. I am afraid that the ministerial team might not like the scrutiny that the process is supposed to provide—and essentially does. The point about transparency is critical and there is a confidential submission that points out that transparency does not prevent people from doing anything; it simply requires them to be accountable for what they do. We have recently seen the case of HMRC outsourcing to Concentrix the ability to collect tax credits. Data from another source were used, and we all know the damage that can be done when that is not done well.

[Louise Haigh]

I am grateful for that intervention. I am very aware of the Concentrix case and will come on to it shortly.

On the inclusion of non-public sector authorities and the Government’s intention to strictly define the circumstances and purposes under which data sharing with such organisations will be allowed, their statement of intent was clear. However, only one paragraph in the 101-page draft code mentions non-public sector organisations. That paragraph says that an assessment should be made of any conflicts of interest that the non-public authority may have but it does not give any examples of what those conflicts of interest might look like, so perhaps the Minister will elaborate on that when he responds. It states that a data-sharing agreement should identify whether any unintended risks are involved in disclosing data to the organisation—the risk regarding Concentrix was just highlighted—but the code of practice does not list any examples or set out how specified persons might go about ascertaining those. It also states that non-public authorities can only participate in a data-sharing agreement once their sponsoring public authority has assessed their systems and procedures to be appropriate for the secure handling of data, but it does not give any sense of what conditions they will be measured against or how officials should assess them.

That is not the kind of reassurance that was provided in the Government’s consultation response. Given that these are draft codes, I hope the Minister will take what I have said away and improve them, not least because of the recent scandal relating to the US multinational company, Concentrix, which was contracted by HMRC to investigate tax credit error and fraud. Concentrix sent letters to individuals—mostly working single mothers across the country receiving tax credits—in what was essentially a large-scale phishing exercise. Not only did it get things catastrophically wrong by cancelling benefits that it should not have cancelled and leaving working mothers destitute over many weeks and months in some cases, but it performed serious data breaches in sending multiple letters to the wrong individuals and disclosing personal information.

We have made it very clear that the Bill could have done with considerably more work before it was brought before the House. I understand that the civil servant who wrote part 5 has now left, or is in the verge of leaving, the employ of the civil service, so there is even more reason for us to work cross party and with expert organisations on improving the proposals.

As I have said, public trust in Government handling of data is not strong. Unfortunately, the public have not been given any reason to put their concerns to rest. The recent National Audit Office report, “Protecting information across government”, revealed the prevalence of weak controls on the protection and management of personal information in Government. Any continuation of the existing poor information management identified by the NAO, or the further weakening of cyber-security and data protection implied by part 5, is likely to have negative economic and social impacts.

As the Information Commissioner’s Office commented:

“It is important that any provisions that may increase data sharing inspire confidence in those who will be affected. Our research shows that the public are concerned about who their data is shared with and reflects concerns that they have lost control over how their information is used. Even apparently well-meaning sharing of data such as GP patient records for research purposes can arouse strong opinions.”

This is an important time to strengthen cyber-security and the minimisation and protection of data, which is why it is so important to get this part of the Bill right. A huge prize is on offer, but this has the potential of going the way of the care.data scandal. Frankly, it is astonishing that neither Ministers nor civil servants have learnt their lessons from that very regrettable episode, because there was absolutely nothing wrong with the principle of care.data either; it attempted to achieve exactly the kind of aims as the Bill’s reforms.

The idea was to create a database of medical records showing how individuals have been cared for across the GP and hospital sectors. Researchers believed that the information would be vital in helping them to develop new treatments as well as assessing the performance of NHS services. The records would be pseudo-anonymised, meaning that the identifiable data would be taken out. Indeed, they would just contain the patient’s age range, gender and the area they lived in. However, researchers could apply for the safeguards to be lifted in exceptional circumstances, such as during an epidemic. That would have needed the Health Secretary’s permission.

The concept had the backing of almost the entire medical community, many charities and some of the most influential patient groups. The UK’s leading doctors told us how access to so many NHS records would help them to understand the causes of disease, quickly spot the side effects of new drugs and detect outbreaks of infectious diseases.

The problem with care.data was that the advantages and the principles upon which the data would be shared were simply not communicated by the Government or by NHS England, and so it attracted the criticism of bodies as disparate as the British Medical Association, the privacy campaign group Big Brother Watch and the Association of Medical Research Charities. Such was the botched handling of the publicity surrounding care.data that, by April 2014, the launch was aborted. However, it emerged the following June that nearly 1 million people who had opted out of the database were still having their confidential medical data shared with third parties, because the Health and Social Care Information Centre had not processed their requests.

A review by the National Data Guardian, Dame Fiona Caldicott, found that care.data had caused the NHS to lose the trust of patients, and recommended a rethink. That prompted the then Life Sciences Minister, the hon. Member for Mid Norfolk (George Freeman), to announce that the scheme was being scrapped altogether, even though £7.5 million had already been spent on constructing a database, printing leaflets, setting up a patient information helpline and researching public attitudes to data sharing.

The Caldicott review established a set of Caldicott principles, with the primary one being that the public as well as the professionals should be involved in data-sharing arrangements. Dame Fiona Caldicott proposed a simple model that gives people the option to opt out of any of their information being used for purposes beyond care. She said:

“We made it slightly more complicated by saying it was worth putting to the public the choice of having two separate groups of information to opt out of – [those being] research and information used for running the health service. If you put all of the possible uses of data currently in the system together and asked people to opt in or out of that, it’s actually asking them to make a choice about a very big collection of information. [People] may want to have the possibility of saying, ‘Yes, I’d like my data to be used for the possibility of research, but I don’t want it to be used for running the health service’.”

She also made it very clear that the benefits of data sharing and what it means need to be communicated clearly to the public, as there is a lot of confusion around how the data are shared.

Absolutely nothing has changed since that disaster and the subsequent review, so it is concerning not to see those basic principles included in the Bill. I am interested to hear the Minister’s response to those principles laid out by the National Data Guardian. The public need to be able to trust organisations that handle their data and they need to retain control over those data. Both those things are essential to build confidence and encourage participation in the digital economy. The principles have been debated over the past several years at the European level, and we should be told here and now—today—whether the Government intend to implement the EU’s General Data Protection Regulation. If they are, why is the Bill not compliant with it?

The new EU GDPR and the law enforcement directive were adopted in May and will take effect from May 2018. The GDPR includes stronger provisions on: processing only the minimum data needed; consent; requirements on clear privacy notices; explicit requirements for data protection by design and by default; and on carrying out data protection impact assessments.

Although the Government’s arrangements for exiting the European Union have yet to be decided, it seems likely that the GDPR will take effect before the UK leaves, so the Government will have to introduce national level derogations prior to its implementation. If that is the case, there will have to be a thorough consideration of the impact of the new legal framework on all aspects of the Bill affecting data sharing, including implementation arrangements. Indeed, as the Information Commissioner said when giving evidence to the Committee two weeks ago:

“There may be some challenges between the provisions and the GDPR… There would ?be a need to carefully review the provisions of this Bill against the GDPR to ensure that individuals could have the right to be forgotten, for example, so that they could ask for the deletion of certain types of data, as long as that was not integral to a service.”––[Official Report, Digital Economy Public Bill Committee, 13 October 2016; c. 112-13, Q256.]

The GDPR states that data are lawfully processed only if consent has been given by the individual, which is completely lacking in this section of the Bill. It also gives data subjects that right to withdraw consent at any time:

“It shall be as easy to withdraw as to give consent.”

Controllers must inform data subjects of the right to withdraw before consent is given. Once consent is withdrawn, data subjects have the right to have their personal data erased or no longer used for processing.

--- Later in debate ---

[Chris Skidmore]

On the individual point of audit, I will have to write to the hon. Lady. I will further consider her amendments and speak about them when we discuss three-year reviews. I want to ensure that bodies sharing information under the public service delivery power, for instance, strictly observe and follow codes of practice. Although I welcome the intention of the amendments, I think they are unnecessary. The Bill sets out the key conditions for disclosing and using information, including what can be shared by whom and for what purposes. We followed the common approach taken by the Government to set out details of how data are shared in the code of practice.

I want to return to the hon. Lady’s question of whether we use “have regard to” or “comply with”. The wording, “have regard to” already follows common practice in legislation, as illustrated in section 25 of the Immigration Act 2016 and section 77 of the Children and Families Act 2014. As the power covers a range of public authorities and devolved territories we want the flexibility that I mentioned about how the powers are to be operated, so that we can learn what works and adapt the code as necessary. To put it into the Bill, as I mentioned, would hamper that ability to adapt for future purposes. If bodies fail to adhere to the code, the Minister will make regulations that remove their ability to share information under that power, as is indicated, indeed, in part 11 of the code of practice, which states:

“Government departments will expect public authorities wishing to participate in a data sharing arrangement to agree to adhere to the code before data is shared. Failure to have regard to the Code may result in your public authority or organisation being removed from the relevant regulations and losing the ability to disclose, receive and use information under the powers”.

Amendment 106 requires the Minister to run a public consultation for a minimum of 12 weeks before issuing or reissuing a code of practice. The code of practice is essentially a technical document that sets out procedures and best practice with guidance produced by the ICO and Her Majesty’s Government. Clause 35 requires the Minister to consult the Information Commissioner and other persons, as the Minister thinks appropriate. I think that that strikes a good balance. Indeed, as I mentioned, we have been working closely with the ICO to ensure that there is confidence in the codes and the Information Commissioner states:

“I am pleased to report that significant progress has been made since my evidence session and I am content that my main concerns about the codes have now been addressed”.

I think it is very important to put that on record.

[Calum Kerr]

I welcome the Minister to his place. He comes across, to me, as rather bullish now, despite the damning evidence we heard over a very condensed couple of days. Does he think that he has cracked it now, that these codes of practice are all fit for purpose and that we should be sufficiently reassured?

[Chris Skidmore]

The codes of practice remain in draft form and obviously we are in Committee having a discussion around the nature of what is in the codes of practice. We had criticisms last week of, “Where are the codes of practice?” We were still in the process of a conversation about the codes of practice with the Information Commissioner’s Office to ensure that the Information Commissioner was content. If she is content with the codes of practice as they currently stand, I am not one to go against the ICO. I am not saying that that is a form of complacency, although maybe the hon. Gentleman is, but I trust the ICO’s decision and am confident in its ability to deliver on the codes as they currently stand.

[Calum Kerr]

I thank the Minister for that mildly reassuring answer that the codes of practice are a work in progress. We welcome that, but in the spirit of helping improve them, I hope that he will consider some of the feedback from Big Brother Watch, which I thought gave the Committee excellent advice. Although Big Brother Watch recognises that the draft codes published by the UK Statistics Authority on research and statistics are detailed and comprehensive, it says that the draft codes published by the Cabinet Office and the Home Office are the polar opposite, offering very little detail or clarity.

[Chris Skidmore]

The codes are quite extensive in terms of being able to provide the material information that is there. They have gone through an extensive process. Although we had evidence from certain critical witnesses drawn by Opposition Members, there was also significant support for data-sharing measures and the ability to have flexibility through the codes.

As for considering how to go forward, the codes are now published—the hon. Gentleman can read them for himself—and the ICO is now content with the codes. That is a great position from which the Government intend to move forward. In terms of whether the codes are comprehensive, it is set out that the Government have a duty to consult the ICO and territorial Ministers. That is important, and we are following a process and a journey over which the Bill has been developed for a number of years. We are content that we are on track.

I welcome the intention of amendment 99 that only the minimum and necessary information is shared under the power to achieve the objective. The principles are set out in the Data Protection Act 1998. The public service delivery power will need to operate in compliance with the 1998 Act. The principle of data minimisation is also strongly embedded in the code of practice, to which specified persons who use the power must have regard.

In addition, the public service delivery power is intended to act as a more conventional gateway to allow public authorities to share information without the need for central oversight by Whitehall. It is important to reflect on that. Rather than having the dead hand of Whitehall overlooking a measure that should allow for local flexibility and local freedom, we expect a large number of local authorities to use the power to deliver their troubled families programmes. A central monitoring power could impose significant resourcing burdens, which we felt were unnecessary given the intended positive outcomes for citizens. On that basis, we feel that the amendment is unnecessary.

Amendment 95 intends to modify the definition of “personal information”. The definition in the Bill is consistent with section 39 of the Statistics and Registration Service Act 2007, which relates to the confidentiality of personal information. It has been drafted with that consistency in mind. The amendment proposes a definition that includes a vague group of persons. We believe it unsuitable because of its vagueness, and it risks causing confusion.

Amendment 96 requires that data subjects be allowed to request and correct as necessary personal information relating to them that is disclosed under the public service delivery powers. The amendment is unnecessary because the data subject already has those rights under the Data Protection Act 1998. In addition, the impact of such an amendment on public authorities would be significant. An assessment would need to be made of how many requests could be made to public authorities, and of the resulting resourcing requirements in terms of staff and any supporting technical infrastructure. Work would also need to be carried out to ensure that we can verify the identity of individuals requesting access to data and assess the risk of corrections and modifications to data held being made for the purposes of committing fraud.

I understand the intention of the amendments, and I hope that the hon. Member for Sheffield, Heeley will understand that the Government believe that progress has been made, as well as provision for ensuring that the sharing of data is proportionate. The regard for individuals’ privacy is central to the Bill and is set out in the code of practice, and the Government have put in place measures to work with the ICO and other civil society groups on that. I urge her to withdraw the amendment.