Digital Economy Bill (Tenth sitting)

Debate between Calum Kerr and Chris Skidmore

Committee Debate: 10th sitting: House of Commons
Thursday 27th October 2016 Public Bill Committees

[The Parliamentary Secretary, Cabinet Office (Chris Skidmore)]

The clause will create a clear, permissive power for public authorities to disclose information that they hold for the purpose of research in the public interest. It will ensure that any personal information is processed before it is disclosed and that a person’s identity is not specified in the information, so that a person’s identity cannot be deduced from that information. It will establish a set of conditions to ensure that any processing of personal information is undertaken in a way that protects the privacy of individuals.

To maintain a truly innovative and competitive economy and to ensure that decisions taken on a range of economic and social issues are informed by the best possible evidence base, it is essential that we maximise the use of rich and varied sources of administrative information that is held across public data.

[Calum Kerr (Berwickshire, Roxburgh and Selkirk) (SNP)]

I am not sure whether the Minister is aware, but Scottish universities share all their research on the internet for the public to read, ensuring world-class Scottish research can help the world. Do the Government agree that such rules should apply to all publications resulting from the research and statistics chapters of the Bill?

[Chris Skidmore]

I think that it is up to each university to have a policy on what research should be published and when. There is a particular situation in Scotland, but other universities may decide that their research may be used for purposes that remain confidential. Publication is up to the universities and academic bodies to decide.

[Calum Kerr]

The Minister is absolutely right—perhaps I rushed my question. I was trying to emphasise the point that, when data are shared, will he match that transparency, so that citizens can see what public benefit has been drawn from the use of their data?

[Chris Skidmore]

I shall come in a moment to the UK Statistics Authority’s position on the use of national statistics; it would benefit enormously from these measures. The potential benefits from increased access to information extend far beyond the research community. It is generally accepted that increased research and development leads to improved productivity and therefore increased economic growth. Information is increasingly a key raw material.

The research community has for some time been prevented from making better use of information held by the public sector, due to a complex legal landscape that has evolved over time. As a result, public authorities are often uncertain about their powers to share information, leading to delays, in some cases lasting years. In the meantime, projects become obsolete or are abandoned.

The Administrative Data Taskforce warned in its 2012 report that the UK was lagging behind other countries in its approach to this issue. It called for a generic legal power to allow public authorities to provide information for research purposes. As well as providing that power, which will remove the uncertainty that has frustrated the research community, the clause will provide a set of conditions that must be complied with if personal information is to be shared.

The conditions can be summarised as the sharing and use only of information that has been de-identified to industry standards to remove information that would identify, or is reasonably likely to identify, an individual, and the requirements that those who process information that identifies a person take reasonable steps to minimise accidental disclosure and prevent deliberate disclosure of such information, that all those who process personal information or receive or use processed personal information are subject to an accreditation process overseen by the UKSA, whether they are researchers, technicians or those who provide secure environments for linking and accessing data, that research for the purposes of which the information is disclosed is accredited and that all those involved in the exercise of the power adhere to a code of practice that is produced and maintained by the UKSA.

The UKSA is the designated accredited body with a duty to maintain and publish registers of all those accredited for any purpose under the power. That includes all those who may be involved in preparing personal information for disclosure to researchers and the research project itself. The results or outcomes of the research project must be publicly available, to demonstrate that the research is for the public good. The UKSA has a duty to maintain and publish the criteria for accreditation, and all activity under the power will be subject to a code of practice issued by the UKSA. I hope that answers the hon. Gentleman’s concerns.

Turning to the willingness for this to happen, the clause represents an important step forward for research in the UK. It will allow greater opportunities to produce high-quality research, which, in the words of the Economic and Social Research Council, can place

“the UK at the forefront of the international scientific landscape.”

It will allow greater opportunities to improve our understanding of our economy and society.

I would like to put on record the comments of Sir Andrew Dilnot, the chair of the UKSA:

“The Digital Economy Bill, currently before the House of Commons Public Bill Committee, represents a unique opportunity to deliver the transformation of UK statistics. The existing legal framework governing access to data for official statistics is complex and time-consuming. The proposals in the Bill, by making use of data already held across Government and beyond, would deliver better access to administrative data and for the purposes of statistics and research, delivering significant efficiencies and savings for individuals, households and businesses. Decision-makers need accurate and timely data to make informed decisions, in particular about the allocation of public resource. This Bill will deliver better statistics and statistical research that help Britain make better decisions.”

Question put and agreed to.

Clause 56, as amended, accordingly ordered to stand part of the Bill.

Clause 57

Provisions supplementary to section 56

Amendments made: 150, in clause 57, page 53, line 24, at end insert—

‘( ) In its application to a public authority with functions relating to the provision of health services or adult social care, section 56 does not authorise the disclosure of information held by the authority in connection with such functions.”

This amendment and amendments 168 to 170 ensure that Chapter 5 of Part 5 applies to a public authority with functions relating to the provision of health services or adult social care and other functions, but that in such a case the powers to disclose in the Chapter only apply to information held in connection with the other functions.

Amendment 151, in clause 57, page 53, line 28, leave out “56” and insert “56(1)”.—(Chris Skidmore.)

See the explanatory statement for amendment 142.

Clause 57, as amended, ordered to stand part of the Bill.

Clause 58

Bar on further disclosure of personal information

Amendments made: 152, in clause 58, page 53, line 38, leave out “56(9)” and insert “56(3B)”.

See the explanatory statement for amendment 142.

Amendment 153, in clause 58, page 54, line 2, at end insert “(including section56(3B))”.

See the explanatory statement for amendment 142.

Amendment 154, in clause 58, page 54, line 6, at end insert—

“(da) which is made for the prevention or detection of crime or the prevention of anti-social behaviour,”.

This amendment and amendment 157 create a further exception to the bar on the further disclosure of information which is disclosed under clause 56 (so that it can be processed for disclosure under that section), allowing disclosure for the prevention or detection of crime or the prevention of anti-social behaviour.

Amendment 155, in clause 58, page 54, line 7, leave out

“(whether or not in the United Kingdom)”.

This amendment removes the provision stating that a criminal investigation for the purposes of clause 58(3) may be within or outside the United Kingdom. This is for consistency and on the basis that a reference to a criminal investigation covers an investigation overseas in any event.

Amendment 156, in clause 58, page 54, line 10, leave out

“and whether or not in the United Kingdom”.

This amendment removes the provision stating that legal proceedings for the purposes of clause 58(3) may be within or outside the United Kingdom. This is for consistency and on the basis that a reference to legal proceedings covers proceedings overseas in any event.

Amendment 157, in clause 58, page 54, line 11, at end insert—

‘( ) In subsection (3)(da) “anti-social behaviour” has the same meaning as in Part 1 of the Anti-social Behaviour, Crime and Policing Act 2014 (see section 2 of that Act).”

See the explanatory statement for amendment 154.

Amendment 158, in clause 58, page 54, line 21, leave out subsections (5) and (6) insert—

‘( ) A person commits an offence if—

(a) the person discloses personal information in contravention of subsection (2), and

(b) at the time that the person makes the disclosure, the person knows that the disclosure contravenes that subsection or is reckless as to whether the disclosure does so.

This amendment applies to the disclosure of personal information in contravention of subsection (2) of clause 58. It has the effect that it is an offence to do so only if the person knows that the disclosure contravenes that subsection or is reckless as to whether it does so.

Amendment 159, in clause 58, page 54, line 39, leave out “56(9)” and insert “56(3B)”. —(Chris Skidmore.)

See the explanatory statement for amendment 142.

Clause 58, as amended, ordered to stand part of the Bill.

Clause 59

Information disclosed by the Revenue and Customs

Amendment made: 160, in clause 59, page 54, line 43, leave out “56(9)” and insert “56(3B)”.—(Chris Skidmore.)

See the explanatory statement for amendment 142.

Clause 59, as amended, ordered to stand part of the Bill.

Clause 60

Code of practice

Amendments made: 161, in clause 60, page 55, line 19, at end insert—

‘( ) The code of practice must be consistent with the code of practice issued under section 52B (data-sharing code) of the Data Protection Act 1998 (as altered or replaced from time to time).”.

This amendment requires a code of practice issued under clause 60 by the relevant Minister and relating to the disclosure of information under clause 56 to be consistent with the data-sharing code of practice issued by the Information Commissioner under the Data Protection Act 1998.

Amendment 162, in clause 60, page 55, line 24, leave out “56” and insert “56(1)” —(Chris Skidmore.)

See the explanatory statement for amendment 142.

Clause 60, as amended, ordered to stand part of the Bill.

Clause 61

Accreditation for the purposes of this Chapter

Amendments made: 163, in clause 61, page 56, line 7, leave out “56” and insert

“subsection (1) of section 56”.

See the explanatory statement for amendment 142.

Amendment 164, in clause 61, page 56, line 9, leave out “section” and insert “subsection”.

See the explanatory statement for amendment 142.

Amendment 165, in clause 61, page 56, line 11, leave out “section” and insert “subsection”.

See the explanatory statement for amendment 142.

Amendment 166, in clause 61, page 56, line 23, leave out “56” and insert “56(1)”.

See the explanatory statement for amendment 142.

Amendment 167, in clause 61, page 56, line 38, at end insert—

‘(6A) The Statistics Board—

(a) may from time to time revise conditions or grounds published under this section, and

(b) if it does so, must publish the conditions or grounds as revised.

(6B) Subsection (6) applies in relation to the publication of conditions or grounds under subsection (6A) as it applies in relation to the publication of conditions or grounds under subsection (2).”—(Chris Skidmore.)

This amendment enables the Statistics Board to revise the conditions and grounds it establishes for the accreditation and withdrawal of accreditation of people and research for the purposes of information sharing under Chapter 5 of Part 5 of the Bill.

Clause 61, as amended, ordered to stand part of the Bill.

Clause 62 ordered to stand part of the Bill.

Clause 63

Interpretation of this Chapter

Amendments made: 168, in clause 63, page 57, line 18, leave out subsection (2) and insert—

‘(2) A person is not a public authority for the purposes of this Chapter if the person—

(a) only has functions relating to the provision of health services,

(b) only has functions relating to the provision of adult social care, or

(c) only has functions within paragraph (a) and paragraph (b).

(2A) The following are to be disregarded in determining whether subsection (2) applies to a person—

(a) any power (however expressed) to do things which are incidental to the carrying out of another function of that person;

(b) any function which the person exercises or may exercise on behalf of another person.”.

See the explanatory statement for amendment 150.

Amendment 169, in clause 63, page 57, line 21, leave out “subsection (2)(a)” and insert “this Chapter”.

See the explanatory statement for amendment 150.

Amendment 170, in clause 63, page 57, line 30, leave out “subsection (2)(b)” and insert “this Chapter”.—(Chris Skidmore.)

See the explanatory statement for amendment 150.

Clause 63, as amended, ordered to stand part of the Bill.

Clause 64

Disclosure of non-identifying information by HMRC

Question proposed, That the clause stand part of the Bill.

Digital Economy Bill (Eighth sitting)

Debate between Calum Kerr and Chris Skidmore

Committee Debate: 8th sitting: House of Commons
Tuesday 25th October 2016 Public Bill Committees

[Chris Skidmore]

On the individual point of audit, I will have to write to the hon. Lady. I will further consider her amendments and speak about them when we discuss three-year reviews. I want to ensure that bodies sharing information under the public service delivery power, for instance, strictly observe and follow codes of practice. Although I welcome the intention of the amendments, I think they are unnecessary. The Bill sets out the key conditions for disclosing and using information, including what can be shared by whom and for what purposes. We followed the common approach taken by the Government to set out details of how data are shared in the code of practice.

I want to return to the hon. Lady’s question of whether we use “have regard to” or “comply with”. The wording, “have regard to” already follows common practice in legislation, as illustrated in section 25 of the Immigration Act 2016 and section 77 of the Children and Families Act 2014. As the power covers a range of public authorities and devolved territories we want the flexibility that I mentioned about how the powers are to be operated, so that we can learn what works and adapt the code as necessary. To put it into the Bill, as I mentioned, would hamper that ability to adapt for future purposes. If bodies fail to adhere to the code, the Minister will make regulations that remove their ability to share information under that power, as is indicated, indeed, in part 11 of the code of practice, which states:

“Government departments will expect public authorities wishing to participate in a data sharing arrangement to agree to adhere to the code before data is shared. Failure to have regard to the Code may result in your public authority or organisation being removed from the relevant regulations and losing the ability to disclose, receive and use information under the powers”.

Amendment 106 requires the Minister to run a public consultation for a minimum of 12 weeks before issuing or reissuing a code of practice. The code of practice is essentially a technical document that sets out procedures and best practice with guidance produced by the ICO and Her Majesty’s Government. Clause 35 requires the Minister to consult the Information Commissioner and other persons, as the Minister thinks appropriate. I think that that strikes a good balance. Indeed, as I mentioned, we have been working closely with the ICO to ensure that there is confidence in the codes and the Information Commissioner states:

“I am pleased to report that significant progress has been made since my evidence session and I am content that my main concerns about the codes have now been addressed”.

I think it is very important to put that on record.

[Calum Kerr]

I welcome the Minister to his place. He comes across, to me, as rather bullish now, despite the damning evidence we heard over a very condensed couple of days. Does he think that he has cracked it now, that these codes of practice are all fit for purpose and that we should be sufficiently reassured?

[Chris Skidmore]

The codes of practice remain in draft form and obviously we are in Committee having a discussion around the nature of what is in the codes of practice. We had criticisms last week of, “Where are the codes of practice?” We were still in the process of a conversation about the codes of practice with the Information Commissioner’s Office to ensure that the Information Commissioner was content. If she is content with the codes of practice as they currently stand, I am not one to go against the ICO. I am not saying that that is a form of complacency, although maybe the hon. Gentleman is, but I trust the ICO’s decision and am confident in its ability to deliver on the codes as they currently stand.

[Calum Kerr]

I thank the Minister for that mildly reassuring answer that the codes of practice are a work in progress. We welcome that, but in the spirit of helping improve them, I hope that he will consider some of the feedback from Big Brother Watch, which I thought gave the Committee excellent advice. Although Big Brother Watch recognises that the draft codes published by the UK Statistics Authority on research and statistics are detailed and comprehensive, it says that the draft codes published by the Cabinet Office and the Home Office are the polar opposite, offering very little detail or clarity.

[Chris Skidmore]

The codes are quite extensive in terms of being able to provide the material information that is there. They have gone through an extensive process. Although we had evidence from certain critical witnesses drawn by Opposition Members, there was also significant support for data-sharing measures and the ability to have flexibility through the codes.

As for considering how to go forward, the codes are now published—the hon. Gentleman can read them for himself—and the ICO is now content with the codes. That is a great position from which the Government intend to move forward. In terms of whether the codes are comprehensive, it is set out that the Government have a duty to consult the ICO and territorial Ministers. That is important, and we are following a process and a journey over which the Bill has been developed for a number of years. We are content that we are on track.

I welcome the intention of amendment 99 that only the minimum and necessary information is shared under the power to achieve the objective. The principles are set out in the Data Protection Act 1998. The public service delivery power will need to operate in compliance with the 1998 Act. The principle of data minimisation is also strongly embedded in the code of practice, to which specified persons who use the power must have regard.

In addition, the public service delivery power is intended to act as a more conventional gateway to allow public authorities to share information without the need for central oversight by Whitehall. It is important to reflect on that. Rather than having the dead hand of Whitehall overlooking a measure that should allow for local flexibility and local freedom, we expect a large number of local authorities to use the power to deliver their troubled families programmes. A central monitoring power could impose significant resourcing burdens, which we felt were unnecessary given the intended positive outcomes for citizens. On that basis, we feel that the amendment is unnecessary.

Amendment 95 intends to modify the definition of “personal information”. The definition in the Bill is consistent with section 39 of the Statistics and Registration Service Act 2007, which relates to the confidentiality of personal information. It has been drafted with that consistency in mind. The amendment proposes a definition that includes a vague group of persons. We believe it unsuitable because of its vagueness, and it risks causing confusion.

Amendment 96 requires that data subjects be allowed to request and correct as necessary personal information relating to them that is disclosed under the public service delivery powers. The amendment is unnecessary because the data subject already has those rights under the Data Protection Act 1998. In addition, the impact of such an amendment on public authorities would be significant. An assessment would need to be made of how many requests could be made to public authorities, and of the resulting resourcing requirements in terms of staff and any supporting technical infrastructure. Work would also need to be carried out to ensure that we can verify the identity of individuals requesting access to data and assess the risk of corrections and modifications to data held being made for the purposes of committing fraud.

I understand the intention of the amendments, and I hope that the hon. Member for Sheffield, Heeley will understand that the Government believe that progress has been made, as well as provision for ensuring that the sharing of data is proportionate. The regard for individuals’ privacy is central to the Bill and is set out in the code of practice, and the Government have put in place measures to work with the ICO and other civil society groups on that. I urge her to withdraw the amendment.

Digital Economy Bill (First sitting)

Debate between Calum Kerr and Chris Skidmore

Committee Debate: 1st sitting: House of Commons
Tuesday 11th October 2016 Public Bill Committees

[Calum Kerr]

Okay. I do not think you understood my question, but I will leave it there.

[The Parliamentary Secretary, Cabinet Office (Chris Skidmore)]

Q Mr Moorey, let us return to your comments about Which? being hamstrung by a lack of data sharing. Could you give a fuller explanation of that? Will you put on record the views of Which? about the public services delivery power, and the potential benefits that it might bring, particularly to the most vulnerable in society?

Pete Moorey: As I said, we are broadly supportive of the measures in the Bill. We are hamstrung from two perspectives. The first is a service delivery perspective. When we are delivering something such as our Which? elderly care website, we want to have the richest possible data available to help people make decisions. Yet on occasions when we have gone to certain local authority providers or certain care home providers, we have had an inability to gather that data and provide it in a comparable way. There is also the need to get that information in a clear and comparable format so that organisations like us can do that much better. It is something we have worked on a lot over the past few years with regard to universities. We are starting to see some of the data coming through at the kind of level that students want when they are making those choices. Clearly, having such legislation would better allow us to do that.