Criminal Justice Bill (Seventh sitting)

Carolyn Harris Excerpts

Committee stage
Tuesday 16th January 2024 Public Bill Committees

[Chris Philp]

I will do my best to conclude prior to 11.25, when the Committee might consider adjourning.

Clause 20 and schedule 3 create a new power for UK law enforcement and other investigative agencies to suspend IP addresses and domain names that are being used in serious crime. Under the power, law enforcement will be able to apply for a court order requiring the organisation responsible for providing the IP address or domain name to prevent access. Sadly, we have all too often seen that criminal actors use domain names and/or IP addresses to carry out crime including fraud and malware dissemination, targeting the vulnerable. When IP addresses and domain names are being used to conduct criminal activities, law enforcement agencies need to be able to block access, preventing the crime occurring.

In the UK, the police and other law enforcement agencies currently use public and private partnerships, and industry will, in the majority of cases, voluntarily suspend domain and IP addresses used for criminal purposes. This has led to the UK being generally one of the safest jurisdictions in the world. However, voluntary suspension is not an option in all cases. In particular, the majority of cyber-crime emanates from outside the UK, where the same voluntary arrangements are not available. Quite often, internet infrastructure providers based overseas will only take action when a court order is handed down. This measure will provide for such a court order to be obtained. Overseas infrastructure providers are much more likely to comply with a court order than a simple request made by the police without a court order.

We reviewed the Computer Misuse Act 1990 in 2021. As part of that, we invited views from stakeholders. Responses indicated that although much of the 1990 Act remains effective, more could be done in cases where the UK wants to take action against offences committed from overseas. The main function of these provisions is to ensure that UK law enforcement and certain investigative agencies can act to suspend IP addresses and domain names where they are being used for criminal activity with a link to the UK. Schedule 3 enables UK law enforcement agencies listed in paragraph 12 of the schedule to apply for a court order, which they can serve on entities based outside the UK.

[Carolyn Harris (Swansea East) (Lab)]

Will this apply to illegal gambling sites and crypto casinos? Will the Gambling Commission have the authority to have these addresses pulled down?

[Chris Philp]

If illegal activity were taking place, which would include illegal gambling, then the provisions of the clause would apply. As to whether the Gambling Commission can make the application or whether it would have to be the police, to answer that question we will have to refer to schedule 3 on page 91 and look at the list of entities. The hon. Member will see that paragraph 12(2)(e) does include

“a member of staff of the Gambling Commission of at least the grade of executive director.”

Indeed, paragraph 12(1)(a)(v) also expressly references the Gambling Commission, so I hope that answers the question about the Gambling Commission’s powers. I obviously prepared that in advance, anticipating her question—as Members of the Committee could surely see!

That is very helpful and will strengthen our hand with overseas entities that might not respond to a polite request but are willing to act when there is a court order. I hope that is something that we can all get behind. It will help protect our constituents from online crime, particularly fraud, but other forms of illegal activity, including illegal gambling. I pay tribute to the hon. Member for Swansea East for her work combating gambling harm, which I saw at first hand during my time as Minister for technology and gambling a couple of years ago.