Read Bill Ministerial Extracts
Investigatory Powers (Amendment) Bill [Lords] Debate
Full Debate: Read Full DebateDan Jarvis
Main Page: Dan Jarvis (Labour - Barnsley North)Department Debates - View all Dan Jarvis's debates with the Home Office
(9 months, 1 week ago)
Commons ChamberThe Investigatory Powers (Amendment) Bill is a technical but important piece of legislation that, as my right hon. Friend the shadow Home Secretary said in her opening remarks, we support. We support the Bill, which updates aspects of the Investigatory Powers Act 2016, because it is imperative that legal frameworks are updated to ensure that our security and law enforcement services keep up with changes to communications technology in an increasingly challenging and complex landscape of threats to our safety and our national security.
At the outset, let me pay tribute to the exceptional men and women who serve in our law enforcement and security services, often in the shadows and without recognition, to keep our country safe. We owe them all a deep debt of gratitude. I also thank officials at the Home Office, who have provided very helpful briefings on the Bill to the shadow Home Office team. I hope that the Minister will join me in paying tribute to our noble colleagues in the other place, especially Lord Anderson, Lord Sharpe, Lord Coaker, Lord Ponsonby and Lord West, among many others. They have already done a lot of the intellectual heavy lifting, digging into the technical details of the Bill to improve it ahead of its Second Reading today. Those contributions are most welcome, but the Bill still needs to be scrutinised in more depth to probe any remaining ambiguity and ensure that safeguards are strengthened. I will say a little more about that later.
As the shadow Home Secretary said, the Opposition will work in the national interest with the Government on national security because, as legislators, we all have a duty to ensure that the law is one step ahead of those who seek to harm us. As lawmakers, we have a duty to ensure that when technical Bills are before us on matters relating to national security, we scrutinise them carefully and get into the detail. Members on both sides of the House have fulfilled that important duty with a number of thoughtful and considered contributions in this debate, including the right hon. and learned Member for Kenilworth and Southam (Sir Jeremy Wright), who spoke, as always, with great authority and made important points about oversight and the interests of economic wellbeing. I am certain that we will return to those in Committee.
The right hon. Member for South Holland and The Deepings (Sir John Hayes), a former Security Minister, helpfully reflected on his experience of taking the original legislation through the House back in 2016, and made some important points about the role of public bodies. My hon. Friend the Member for Wallasey (Dame Angela Eagle), the newest member of the ISC, made an important point about the context in which we are having this debate, with authoritarian regimes around the world constantly seeking to test the will of democracies. She also made an important point about the balance between safeguarding our security and oversight and transparency.
The chair of the ISC, the right hon. Member for New Forest East (Sir Julian Lewis), spoke with his long-standing experience of these matters, and expressed clearly the view of the Committee. He made a number of important points, including about the safeguards that he will seek to include in the Bill. I am sure that we will return to that. He also made the important point about any increase in powers coming with an increase in oversight—a point reiterated by my right hon. Friend the Member for North Durham (Mr Jones), who I think is the longest serving member of the ISC. He spoke about the two-and-a-half legged stool, made a number of important points and provided a constructive challenge to Government. I hope that he will work with us, the other Committee members and the Minister in Committee to make some improvements to the Bill.
The hon. Member for Broxbourne (Sir Charles Walker) made a typically carefully considered speech. For someone who claimed not to be an expert, he made a number of important points, not least about surveillance needing to be proportionate. The hon. Member for Strangford (Jim Shannon) reflected, as he often does, on his own experiences of dealing with terrorism in Northern Ireland, and rightly paid tribute to all those who served to keep our country safe.
I will now turn to aspects of the Bill that could be improved. The measures outlined in the Bill continue to provide our law enforcement and security services with some of the most powerful measures that our state has at its disposal to keep us safe, intercepting private communications and retaining information where necessary. With those strong powers there must also be strong, robust safeguards, to guarantee their appropriate and proportionate use.
When the Minister responds, I would be grateful if he provided further assurances that the notices regime will be kept under constant review. Such assurances are important as the power to access telecommunications data through bulk personal datasets unlocks an individual’s digital footprints of their online activity. For those of a certain age—I do not have anybody in particular in mind—investigatory powers can conjure images of wiretapping telephone lines, and, for those of a very certain age, even steaming open letters. However, the modern reality is that the huge amounts of data produced every second could be sifted through and used by law enforcement and crime agencies when there is a lawful basis to do so. The Bill must therefore clearly establish a precedent of proportionality, such as further defining what is meant by low or no reasonable expectation of privacy, in clause 2, in relation to certain bulk personal datasets. I would be grateful if the Minister outlined how the Government intend to do that.
The UK’s use of investigatory powers should be clearly understood by our international partners. Vast amounts of telecommunications data, such as WhatsApps, are now stored in servers across many jurisdictions by multinational companies with sometimes complex corporate structures. I understand that Meta, for example, has stringent measures to protect those servers from cyber-attacks, preventing WhatsApp messages from being interfered with or accidentally deleted. If only the same stringent measures existed for some Members on the Government Benches—and the SNP Benches, for that matter.
Moving swiftly on, a warrant to intercept messages between two UK nationals in the UK could be stored on a server in another jurisdiction, leading to potential conflicts of law arising from clause 17, which would strengthen extraterritorial enforcement of retention notices. I would therefore be grateful if the Minister said something about the feedback the Home Office has had from international partners about potential conflicts of law that could arise from clause 17, and what actions have been taken to avoid potential conflicts. Can the Minister also say what recent feedback the Home Office has received from companies providing messaging services in the UK that use servers storing communications data in other countries?
Ensuring the utmost clarity in the measures outlined in the Bill must also include where they are applied in the most exceptional circumstances, such as when the Prime Minister cannot make a decision to sign off an interception warrant. The shadow Home Secretary rightly mentioned the importance of Prime Ministers treating these matters with the utmost seriousness. This was also discussed and debated in detail when the Bill was progressing through the other place, with the term “unable” being used if a Prime Minister cannot make a decision, compared with other terms such as “unavailable”. I expect the Minister will be relieved that I do not plan to spend too much time on this, but that is not to underplay its importance. The debate between noble colleagues on whether “unable” or “unavailable” was the most appropriate term may in part have been generated by the activities of two former senior figures in Government, neither of whom is still a serving Member of Parliament. For the benefit of the House, I will just say that one of them might have been a Foreign Secretary who became Prime Minister, and the other might have been a Prime Minister who became Foreign Secretary.
The Prime Minister plays a crucial role in making decisions on national security. May I remind the Minister, as other hon. Members have sought to do during this debate, that since 2014, successive Prime Ministers have failed to meet with the Intelligence and Security Committee? As we all know, the ISC is a senior Committee of Parliament that provides absolutely vital oversight on these crucial matters. We heard from the Chair, the right hon. Member for New Forest East (Sir Julian Lewis), who made some important points. Can I again ask the Minister why he thinks no Prime Ministers have made themselves available to the Committee for a decade now?
Furthermore, recent updates to the IPA 2016 after the ruling of the European Court of Human Rights in the case of Big Brother Watch and Others v. the United Kingdom provide further safeguards to protect sensitive information relating to freedom of expression, such as journalistic material, from the usual interception and retention regimes. Other elements of freedom of expression should have similar safeguards. Does the Minister think there should be similar exemptions in the Bill for communications relating to the vital work of trade unions? That was a point also made by the hon. and learned Member for Edinburgh South West (Joanna Cherry).
To conclude, this is an important Bill that demands strong and careful scrutiny. Our personal liberties and our national security depend on it. It is in the national interest to get the legislation right: to make sure it is both appropriate and proportionate in its scope. It must also be effective in maintaining the current powers our law enforcement and security services already have to disrupt and defeat criminals and malign actors who seek to harm us and undermine our way of life. On the Labour Benches, we will work with the Government as much as we possibly can in the national interest to get it right. I look forward to working with the Minister and other colleagues on that important endeavour as the Bill progresses through the House.
Investigatory Powers (Amendment) Bill [ Lords ] (First sitting) Debate
Full Debate: Read Full DebateDan Jarvis
Main Page: Dan Jarvis (Labour - Barnsley North)Department Debates - View all Dan Jarvis's debates with the Home Office
(8 months, 3 weeks ago)
Public Bill CommitteesIt is a pleasure to be here under your chairship, Mrs Cummins. The exceptional growth in volume and types of data across society globally since 2016 has affected the intelligence services’ ability to work and collaborate at the necessary operational pace. The existing bulk personal dataset safeguards do not account for the way that data and its availability have evolved since the Investigatory Powers Act 2016 was passed. This creates a negative impact on operational agility, while making it increasingly difficult for the intelligence services to develop the necessary capabilities.
Clauses 1 and 2 introduce an alternative regime for bulk personal datasets where there is low or no reasonable expectation of privacy—the so-called low/no regime. Clause 1 specifically provides a mechanism for the intelligence agencies to determine whether bulk personal datasets should be authorised under part 7 of the 2016 Act for sensitive datasets, or proposed new part 7A for low/no datasets.
It is a pleasure to serve under your chairship, Mrs Cummins. I rise to speak very briefly to clause 1, and to thank the Minister for his opening remarks.
At the outset of our consideration, we should all take the opportunity to pay tribute to the exceptional men and women who have served in our law enforcement and security services. We owe them a deep debt of gratitude. Let me say that the Opposition support the Bill, which updates aspects of the Investigatory Powers Act 2016. It is imperative that legal frameworks are updated to ensure that our security and law enforcement services keep up with the challenges to communications technology in an increasingly challenging and complex landscape of threats to our safety and national security. None the less, the important provisions proposed in this Bill need to be scrutinised carefully. The shadow Home Secretary and I made it clear on Second Reading that we will work with the Government to improve it in places, following the example of the constructive cross-party work that was done in the other place.
It is good to see you in the Chair, Mrs Cummins.
I echo what the shadow Minister says. We are all here to assist the brave personnel in our security and intelligence services, but that does not mean that we will not closely scrutinise this legislation. We did not oppose the Bill on Second Reading. Some parts are good, but we have indicated our serious concerns about other parts because we think the powers go too far. They have not been shown to be necessary and proportionate; rather, they are more for the convenience of the security and intelligence services. How these powers are drafted also causes us concern, because they seem to allow behaviours beyond what we were told the powers were going to be used for. At other times, it is the nature of the oversight that is a concern, as the Bill introduces potentially intrusive powers.
I have one other brief point to make, which I indicated I would make at last night’s meeting of the Programming Sub-Committee. I had hoped that this morning we could perhaps have had some witnesses to guide us through this process. I think that would have been very helpful. It was very helpful in 2016, when we were looking at the original legislation, and I regret that we do not have such an opportunity this morning.
The provisions on bulk personal datasets and so-called low/no datasets are an area where we fear that the legislation is rather more a matter of inconvenience than something that has been shown to be a necessity. That will emerge in the debate about clause 2, which contains quite a lot of the detail about how the regime is supposed to work. Basically, we have been told that there will be a significant increase in the use of bulk personal datasets. We have been told that scrutiny is too slow, so we will either have to remove it or, perhaps more accurately, water it down in relation to these so-called low/no datasets. Fundamentally, I do not like that argument. The Minister will need to make a compelling case.
When we discuss clause 2, it would be useful if the Minister told us how many bulk datasets are retained and examined each year currently; how many datasets it is envisaged will be retained and examined after these powers come into force; what percentage of the datasets he thinks would be considered low/no datasets; how long authorisation processes take currently and why they take that length of time; and why cannot we improve or accelerate that process in some way, rather than having to water it down in the way that this Bill suggests. We will ask the Minister for that sort of evidence, because he is asking us to do away with parts of the oversight system that were put in place in 2016, and we want to understand how that oversight system is causing a problem at the moment. If he cannot explain that, we cannot support this new regime.
What can I say? We have got a little further on clause 1 than I anticipated. I am grateful to my right hon. Friend the Member for South Holland and The Deepings, the right hon. Member for North Durham and other hon. Members who have spoken. Bulk personal dataset authorisation is clearly an important change, as my shadow, the hon. Member for Barnsley Central, has set out; I was interested to hear the suggestion from my right hon. Friend the Member for South Holland and The Deepings that this was the shadow Minister’s first step on the path to greatness and to leading the Opposition. I am grateful for the points that hon. Members have made.
The type of data that may fall into part 7A is indeed covered—things like news articles, academic papers, public and official records, and the sort of bulk personal data that many people would have access to routinely. The changing nature of the need to hold data has meant that bulk personal data must be authorised in a different way than was previously thought. Paragraphs 4.14 and 4.20 of the draft code of practice set out further details of the datasets that would fall under the section 22A test, of which the hon. Member for Barnsley Central is no doubt aware.
The hon. Member for Cumbernauld, Kilsyth and Kirkintilloch East touched on various aspects of data that might fall within this approach. He will remember that Lord Anderson noted in his independent review that MI5 and MI6 estimate that roughly 20% of their bulk personal data holdings would fall into the category of “low and no”; for GCHQ, the figure would be nearer to 8%. Clearly, these things will evolve. To answer the point made by the right hon. Member for North Durham, the simple fact is that our world is producing incomparably greater volumes of data than ever before. The need to understand, handle and triage that data is therefore essential.
It is worth making the point, right at the beginning, that creating and storing huge volumes of data is to nobody’s advantage, and particularly not that of the intelligence services. The only purpose of having or examining data is to enable investigatory operations to get to targets of interest. It is not about anything other than ensuring that investigations can be properly targeted against those who threaten the interests of the British people, under various existing laws. This measure does not change those laws; it merely assists the targeting.
Question put and agreed to.
Clause 1 accordingly ordered to stand part of the Bill.
Clause 2
Low or no reasonable expectation of privacy
I beg to move amendment 14, in clause 2, page 3, line 18, at end insert—
“(1A) This section does not apply to a bulk personal dataset unless it has been published in accordance with the Data Protection Act 2018.”
This amendment would ensure bulk personal datasets with low or no expectation of privacy have been published lawfully and in accordance with General Data Protection Regulation (GDPR) set out in the Data Protection Act 2018.
With this it will be convenient to discuss amendment 21, in clause 2, page 3, line 34, at end insert—
“(4) By way of example, bulk datasets of images obtained by CCTV and bulk datasets of Facebook posts are not to be considered datasets where the individuals to whom the data relates could have no, or only a low, reasonable expectation of privacy.”
Probing amendment regarding the scope of “low or no reasonable expectation of privacy”.
May I reflect on my gentle amusement at hearing the Minister’s remarks about a former shadow Security Minister and his onward passage to becoming Leader of the Opposition? I know that these are matters on which he speaks with great authority.
We have already had very helpful contributions from two senior Intelligence and Security Committee members. Questions about the meaning of “low or no reasonable expectation of privacy” in relation to BPDs have been raised throughout the Bill’s progress in the other place and on Second Reading in this House, including by members of this Committee. The amendment seeks to probe the meaning of the phrase, but I should be clear at the outset that I do not intend to divide the Committee on this or any other amendment on which I intend to speak.
I will set out two scenarios. It would be genuinely helpful if the Minister could clarify the limits to the factors relating to the Data Protection Act 2018. The first scenario is where the data can be attributed to a leak that, although unintentional, resulted in the unconsented publication of personal information in the public domain. Would a leak of the personal details and working patterns of the staff of Members of this House—a number of hon. Members will remember the one that happened in March 2017—be subject to a low or no reasonable expectation of privacy?
The second scenario is the deliberate and unlawful publication of personal information into the public domain. If there were a hack resulting in the unlawful publication of personal information into the public domain, would that information also be subject to a low or no reasonable expectation of privacy? Data breaches of that nature occur regularly: the personal information of more than 2 million Duolingo users was compromised last year. A user’s mastery of French verb conjugation is unlikely to be of interest to anyone, with the possible exception of our friends over the channel, but other personal information could be. The Duolingo data was put up for sale on the dark web, so it might be regarded as third party BPDs. It is important that the Minister clarifies the meaning of “low or no reasonable expectation of privacy” in relation to those two scenarios.
Labour Members are not opposed to the concept of “low or no reasonable expectation of privacy” in relation to BPDs. We want to ensure that the police and security services are not unnecessarily limited in their intelligence gathering, but there need to be parameters for what is considered fair game. There must be clarity on important definitions relating to personal data. I hope that the Minister will respond in the constructive spirit in which the amendment was intended.
Clause 2 will remove the need for further judicial authorisation for personal dataset retention and examination if the datasets are deemed to fit into the low or no category, for which there is already authorisation, or if there is urgency. Many personal datasets can be contained within one warrant, so we have lots of questions about how proposed new part 7A will work. Amendment 14 demands an explanation of how the regime fits alongside data protection standards and how it applies to leaked and hacked datasets, as opposed to those that are lawfully obtained.
Our amendment 21 simply seeks to push the Minister to give examples of personal datasets that would be considered to have a low or no reasonable expectation of privacy. I refer hon. Members to a letter from the Chair of the Joint Committee on Human Rights, my hon. and learned Friend the Member for Edinburgh South West (Joanna Cherry), which has been shared with us all:
“There is perhaps some ambiguity or confusion as to what data is envisaged to be caught by these provisions. For example, is it merely online encyclopaedias, Companies House registers or news articles; or would it also cover, for example, quite extensive discussions over the internet or mass voice or face images, as has been mentioned in evidence?”
That is the question that we are getting at here.
The whole concept of a reasonable expectation of privacy seems to have been borrowed from the US, where it has been criticised for permitting fairly intrusive surveillance at quite a considerable scale. To my mind, it difficult to grasp the concept or even understand how the test to be applied. It is bad not just for citizens in general, but for people who are having to make these decisions who are not absolutely clear whether or not they can consider a set of data to have a low or no expectation of privacy.
Would bulk datasets of CCTV images or Facebook posts be no/low? How can someone assess whether a bulk personal dataset falls into the category if they do not know all the information within it because they cannot see it until they have a warrant? If the dataset contains information about many thousands or millions of people, with different types of information about different people, how can there be one single level of expectation? People with a low expectation of complete privacy might reasonably have a high expectation that their data will not be retained and processed by the intelligence services.
Why is the sensitivity of the data not expressly mentioned in the Bill? That should surely be pivotal, particularly if the Government want to operate within our human rights obligations. There is no clarity in the Bill to reassure us that sensitive information such as health data would absolutely not be captured by these provisions. Why could that not be on the face of the Bill? Why is publication the important factor instead? Publication in the context of small Facebook groups, for example, does not mean that there are no expectations that security services would not hold that information.
My hon. Friend is absolutely right. The reality is that once papers are effectively public, the argument for privacy somewhat falls away. That is exactly where we are getting to in this area, which is why we have looked at how to oversee it and the different elements within it. Part 7A explains the oversight regime clearly and section 226A really gets to the nub of it.
It is important that we focus there, where the argument comes back to the essential element: when considering whether intelligence services have applied the test correctly, the judicial commissioner will apply the same principles that a court would apply on application for judicial review. We therefore have an internal legal process overseeing this before it would even get to any legal challenge. That is why it is more robust than some voices have gently suggested, and covers many of those internal challenges.
I beg to ask leave to withdraw the amendment.
Amendment, by leave, withdrawn.
I beg to move amendment 22, in clause 2, page 4, leave out lines 27 to 30.
This amendment is consequential on Amendment 23.
Again, I get all that, and I do not think that we are really at cross-purposes. However, we are talking about 12 months of access to datasets without necessarily having them before a judicial commissioner.
I do not think that anyone disputes that this is a slightly weaker form of oversight, which is because the services want to access this material at scale and regard the existing oversight mechanisms as cumbersome, slow and whatever else. We still ask the question of whether there is another way to do that that would still involve judicial commissioners but happen much more randomly and at scale. However, we will go away and consider that. I repeat my request—I know it is not easy—for some examples to reassure members of the public on how exactly this will work. That would be useful. In the meantime, I do not intend to push the amendment to a vote. I beg to ask leave to withdraw the amendment.
Amendment, by leave, withdrawn.
I beg to move amendment 15, in clause 2, page 5, line 14, at end insert—
“(4) The head of an intelligence service, or a person acting on their behalf, must notify the Investigatory Powers Commissioner as soon as is reasonably practical after a decision has been taken to include a bulk personal dataset within a category authorisation in effect under this section.”
This amendment would require that the Investigatory Powers Commissioner is notified when a new bulk personal dataset is added by an intelligence agency to an existing category authorisation.
With this it will be convenient to discuss amendment 38, in clause 2, page 11, line 21, at end insert—
“(1A) The report provided under subsection (1) must include an annex listing the bulk datasets retained or retained and examined under each category authorisation granted during the relevant period.”
This amendment would require information about the scale and nature of use of category authorisations to be provided to the Intelligence and Security Committee.
The issue of closing the gap between adding a bulk personal dataset to an existing category authorisation was raised on Second Reading by my right hon. Friend the Member for North Durham, who has a long-standing interest in these matters. I agree with the argument he made on Second Reading and the simple solution he proposed to close the gap: a one-line email to the Investigatory Powers Commissioner as soon as reasonably practical.
Any such email would not be seeking real-time approval and would not necessarily be reviewed by the Investigatory Powers Commissioner in isolation, but rather as part of a wider trend of what is being added to existing category authorisations. Labour does not seek to create additional work for the men and women who serve in our police and security services. On the contrary, a simple arrangement —to send a single-line email—would enhance wider oversight arrangements, while keeping extra requirements for the police and security services to an absolute minimum. In response to my right hon. Friend on the matter on Second Reading, the Minister said the IPA 2016
“allows the collection… with prior authorisation”
and that
“This is intended to speed the process up.”—[Official Report, 19 February 2024; Vol. 745, c. 556.]
We do not intend to slow the process down through the amendment, as any such notification would be made after it had happened. I therefore ask the Minister whether the problem is the act of notifying the Investigatory Powers Commissioner as soon as reasonably practical, or the potential volume of notifications, that mean he deems it an unworkable arrangement. I would appreciate if he could be as open as possible in answering those questions. If the Government do not accept the amendment, perhaps a conversation could take place between my right hon. Friend the Member for North Durham, the Minister and myself to agree a practicable solution.
As my hon. Friend the Member for Barnsley Central said, I raised the matter on Second Reading. In no way do I or other members of the ISC want to slow down the process or give more work to the hard-working men and women of our security services. However, as I understand it, the only reason put forward by the Government was that it would impair operational agility.
The amendment proposes, and what I proposed, is not for the security services to go through an authorisation, as my hon. Friend just said; it is literally an email saying, “This is what we are doing.” Members might ask why that is important. It is important because we are giving the security services new powers in the Bill and for IPCO to be informed in real time. I accept the retrospective look at them, but at least if there was a trend, we could see it.
The Government have also tried to argue that there is no need for more oversight because it is a low or no dataset, much lower than those governed by the existing section 7 of the IPA. We have just had the argument about the definition of “low” and “no”, but it means that we are giving the security services additional powers here. I am not for one minute suggesting that the internal protocols within those security services will lead to things that are just a free-for-all, as some might suggest, but it gives that assurance that there is oversight of what is happening in real time.
If we were asking for authorisation of each one, I would accept that it would be too burdensome and would slow down the process, but this is literally a one-line email so the IPCO knows what is needed. I do not understand why the Government are resisting that, except that—let us be honest, Minister—we have form on this. With the National Security Bill, there was an idea that it would be a weakness on the Government’s part to accept any amendments from the ISC. However, there was one slight change made with Lord West’s amendment, so there is possibly a change of attitude. I accept that the Minister respects the ISC—I am not sure it is the same for many people higher up in Government. But that should not be a reason not to accept this very simple amendment, which I think would give people reassurance that there is some real-time oversight of this. If an election was called in the next few weeks, this Bill—
Well, the right hon. Gentleman could make a virtue of a necessity if he wishes. I certainly will. I shall enjoy meeting him to discuss this, and I hope that he will take that commitment in the spirit with which it is made.
I think that this has been a useful debate. There have been a number of sensible and constructive contributions from both sides of the Committee. The Minister has made a commitment to sit down and discuss this further, and I am grateful for that undertaking. As I have said, we do not intend to push this amendment to a vote.
I am grateful to my hon. Friend the Member for Bootle. I am happy to give way to the Minister if he wants to respond directly to that point.
The point about these powers is indeed to make better use of resources. One challenge is that many intelligence officers are tied up doing things that are no longer genuinely necessary for the protection of personal privacy, but they are following processes that, were they to be working for a private organisation —a company or whatever—would no longer be necessary because bulk personal data could simply be bought. Therefore, what we are actually looking at doing is using resources much more efficiently and therefore helping the protection of the British people, from a better financial position. However, the point made by the hon. Member for Bootle on resources is always one that I welcome.
I have nothing further to add, other than to beg to ask leave to withdraw the amendment.
Amendment, by leave, withdrawn.
Clause 2 ordered to stand part of the Bill.
Clause 3
Duration of bulk personal dataset warrants
Question proposed, That the clause stand part of the Bill.
I thank my right hon. Friend. Clause 3 amends the duration of bulk personal dataset warrants under section 213 of the IPA from six to 12 months. BPDs tend to be used to support long-term strategic intelligence activities, and a longer warrant duration will enable the value of the BPD to be better demonstrated, which will provide the relevant Secretary of State with a more accurate picture of the necessity and proportionality when an application for renewal is made. The existing part 7 safeguards will remain in place, including the double lock by the judicial commissioner.
Question put and agreed to.
Clause 3 accordingly ordered to stand part of the Bill.
Clause 4 ordered to stand part of the Bill.
Clause 5
Third party bulk personal datasets
I beg to move amendment 16, in clause 5, page 14, line 34, at end insert—
“(4) A third party BPD warrant may not authorise the examination of a dataset consisting of the contents of the marked electoral register.”
This amendment would prevent a third-party bulk personal dataset consisting of the electoral register, which sets out whether people have voted, from being examined by the intelligence services.
Amendment 16 relates to third-party BPDs, specifically the use of the marked electoral register, which is a copy of the electoral register usually arranged by a polling station area or ward with names crossed off to indicate who has voted. Copies are available for political parties to buy from local authorities and add to their records, which aid with canvassing and voter engagement on the basis that a person who has previously voted has a higher propensity to vote again, and for that purpose alone.
Compared with the electoral register, the marked electoral register contains a record of individuals who have exercised their democratic right at the ballot box. The Opposition understand entirely that it would be appropriate for copies of the marked electoral register to be examined in an investigation into electoral fraud. Any attempts to undermine our democratic process must be dealt with with the utmost seriousness. However, we do not believe that it is appropriate or proportionate for information relating to voting records, contained in such documents, to be authorised as a third-party BPD. That could establish links between individuals or better understand a subject of interest’s behaviour.
More widely, we have concerns about records of democratic activity, such as any relating to trade union membership, being examined as a third-party BPD. Does the Minister agree that copies of the marked electoral register should be used to defend and strengthen our democratic processes, and for those purposes alone, and that safeguards should be in place to protect other data relating to democratic activity from being examined as a third-party BPD?
I thank hon. Members for their points. The examination of third-party bulk personal datasets by the intelligence services is vital to their role of protecting the national security and economic wellbeing of the United Kingdom and preventing and detecting serious crime.
Clause 5 places an explicit statutory regime around the intelligence services’ examination, in situ, of bulk datasets held by third parties. The regime would apply only to the intelligence services, in line with the wider part 7 BPD powers in the IPA. The clause puts in place robust oversight and safeguards. For example, third-part dataset warrants are to be subject to a double lock, and the decision to authorise the warrant will need to be approved by both the Secretary of State and an independent judicial commissioner. The Investigatory Powers Commissioner and his office will oversee the regime to ensure the intelligence services’ examination of third-party datasets is both necessary and proportionate. That relates to the point made by the hon. Member for Cumbernauld, Kilsyth and Kirkintilloch East about proportionality and need.
To answer the point made by the hon. Member for Barnsley Central, we do not consider it appropriate to exclude specific types of dataset from those for which a third-party dataset warrant can be sought. The reason is, as he knows, that we can begin to go down very tricky routes on this area, as the intelligence services have a requirement to keep safe not just our democracy but our wider nation. Therefore, limiting those different arguments can be problematic. What we are aiming to do is ensure the proportionality requirement is the test applied by both judicial commissioners and the Investigatory Powers Commissioner.
The Secretary of State may issue a warrant authorising the examination of a third-party dataset only where it is necessary and proportionate—that is going to be quite a high bar in some of the areas asked about—for the intelligence service to examine the dataset to which the warrant relates. That decision will be double-locked by an independent judicial commissioner who, among other things, is required expressly to review the Secretary of State’s conclusions in respect of necessity and proportionality when deciding whether to approve the decision to issue a warrant. That is already in the Bill. Each decision will be made on a case-by-case basis and will be subject to prior judicial approval.
I am grateful for the Minister’s response. I have to say, I am struggling to think of a scenario in which it might be necessary and proportionate to examine the marked electoral register. This is something we will reflect on.
I broadly support the Minister’s view of this, but the easiest way to establish the case for this is to be clear about its operational purposes. Clearly, one would not expect the Minister or the agencies to speak about the specifics of operations, but dealing with the operational purposes would help the shadow Minister and the Committee. I am sure the Minister would be happy to do that in broad terms, either now or in writing. It would be really helpful to go through the kinds of operational purposes associated with this inquiry. I do not know what the Minister and the shadow Minister think, but that is how I see it.
That is a helpful and useful suggestion. I am happy to proceed on that basis, if the Minister is.
On that basis, I beg to ask leave to withdraw the amendment.
Amendment, by leave, withdrawn.
Clause 5 ordered to stand part of the Bill.
Clause 6
Minor and consequential amendments
Question proposed, That the clause stand part of the Bill.
Clause 6 makes minor amendments to the 2016 Act to reflect the introduction of parts 7A and 7B, including making it clear that the Investigatory Powers Commissioner is responsible for oversight of the part 7B regime.
Question put and agreed to.
Clause 6 accordingly ordered to stand part of the Bill.
Ordered, That further consideration be now adjourned. —(Scott Mann.)
Investigatory Powers (Amendment) Bill [ Lords ] (Second sitting) Debate
Full Debate: Read Full DebateDan Jarvis
Main Page: Dan Jarvis (Labour - Barnsley North)Department Debates - View all Dan Jarvis's debates with the Home Office
(8 months, 3 weeks ago)
Public Bill CommitteesAs always, I welcome my right hon. Friend’s contribution. That is covered in many areas in the letter I wrote to him.
In an earlier response to comments by the right hon. Member for South Holland and The Deepings, the Minister helpfully mentioned the letter that I think has been sent to the right hon. Member and possibly other members of the Committee. Can the Minister confirm that that letter will also be sent to the Opposition?
To be absolutely clear, the letter was in response to my right hon. Friend the Member for South Holland and The Deepings, so it was sent to him, it was copied to the secretariat of the ISC and it is in the Bill pack. The hon. Member for Barnsley Central therefore has access to it.
The notice review mechanism is an important safeguard. If operators are dissatisfied with a notice that they are given, or with any part of it, they have a statutory right to refer it to the Secretary of State for a review. Clause 18 is essential to ensure that operators do not make any technical changes during the review period that would have a negative impact on existing lawful access capabilities.
Operators will not be required to make changes to specifically comply with the notice. However, they will be required to maintain the status quo. If there was lawful access at the point at which a notice was given, access to data must be maintained by the operator while the notice is being comprehensively reviewed. This will ensure that law enforcement and intelligence agencies continue to have access to vital data during that period in order to keep people safe.
To be clear, companies can continue to make technical changes or roll out new services during the review period, so long as lawful access remains unaffected. The status quo will apply only to services or systems specified within the notice; anything outside the scope of the notice will be unaffected. If, at the conclusion of a review, the Secretary of State confirms the effect or varies the notice, maintaining the status quo will be vital to ensure that law enforcement and intelligence communities do not lose access to data during the review period that they would otherwise have been able lawfully to obtain. In the Lords, the Government amended the Bill to introduce a timeline for the review of a notice.
I will be very brief. I am grateful for the Minister’s remarks, but I want to raise the concerns of some telecommunications operators and of organisations representing the sector about clauses 18 and 19. These include a view that the role of the proposed new notices regime would hinder and even veto product development.
I know that the Minister and his Department have engaged with stakeholders about those concerns, as have Labour Members. I would be grateful if the Minister briefly set out whether recent engagement has taken place with stakeholders with regard to these matters, and whether he has any further plans to address the concerns that they have expressed about clauses 18 and 19.
I want to make a similar case. We are now getting into territory where I struggle to understand exactly what is going on, because I am not a tech geek. We are speeding past this measure almost as if it were inconsequential, but the language in some of the briefings that we have received about it is pretty dramatic.
The bundle that was emailed to Committee members this morning includes evidence from Apple that I think needs to be addressed:
“At present, the SoS must navigate important oversight mechanisms before they can block the offering of a new product or service they believe will impact…ability to access private user data.”
Apple summarises the suite of clauses that the Committee is considering, including the requirement in clause 18 to maintain the status quo during the review process, as allowing the Secretary of State
“to block, in secret, the release of a product or service even before the legality of a Technical Capability Notice can be reviewed by independent oversight bodies. The effect of this amendment will be to, extraordinarily, hand the SoS the power to block new products or services prior to their legality being ascertained. This result upends the balance of authority and independent oversight Parliament struck in the IPA.”
Given the new definition of “telecommunications operator” in clause 19, Apple has also warned that there will be serious implications for conflicts with other laws, including the EU GDPR and with US legislation.
As well as Apple, we have heard from various other organisations. TechUK has highlighted problems with broadening the definition of “telecommunications provider” before control of provision of a telecoms service, including to UK users, is established overseas. It also highlights the potential conflict of laws. What if the domestic law in the country in which a company is based does not allow for compliance with the notice that the Home Secretary has delivered? That company might not even be able to raise the issue of a conflict of laws, because it would be sworn to secrecy under the Bill.
According to TechUK, the proposed changes mark a departure in the way that the UK approaches the extraterritorial reach of the UK or UK laws and the consequential conflicts of laws. That was all recognised in the 2016 Act, in which a partial solution was found in the form of a UK-US agreement. Currently, however, the Government have not set out any plans to work towards equivalent solutions.
In relation to clause 21, I will raise similar concerns from other experts, but it is clear that some very serious companies and organisations have significant concerns about what the combination of these notices may end up delivering. Those concerns need addressed.
I rise to speak briefly to Government amendments 3 and 4, which Labour welcomes. The principle of the appropriate Secretary of State giving approvals under section 26 of the Act was raised in the amendments proposed by Lord Coaker and Lord West in Committee in the other place. The amendments are an important further clarification regarding which Secretaries of States are eligible to be delegated the prime ministerial authority on investigatory powers relating to members. Necessary operational awareness demonstrated by the right people is, of course, crucial to ensure that the right decisions are made on what are, after all, very sensitive matters. I am mindful of the remarks made by the right hon. Member for South Holland and The Deepings, so it would perhaps be helpful if the Minister could say something about how recent—mindful of the debate about whether “recent” is the right word—this operational awareness should be.
I have said what I am going to say on the matter.
Amendment 3 agreed to.
I beg to move amendment 17, in clause 22, page 47, line 26, at end insert—
“(2G) If a warrant is issued by an individual designated by the Prime Minister, the Prime Minister must be informed of that decision as soon as it is reasonably practical to do so.”
This amendment would require the Prime Minister to be notified of a decision of a designated Secretary of State to authorise the interception of certain elected representatives’ communications as soon as is reasonably practicable.
With this it will be convenient to discuss amendment 18, in clause 23, page 48, line 21, at end insert—
“(7F) If a warrant is issued by an individual designated by the Prime Minister, the Prime Minister must be informed of that decision as soon as it is reasonably practical to do so.”
This amendment would require the Prime Minister to be notified of a decision of a designated Secretary of State to authorise a targeted equipment interference warrant relating to one of certain elected representatives as soon as is reasonably practicable.
I am conscious of the debate that has just taken place, so I anticipate what the Minister may say in response. Let us give him another go anyway.
Amendments 17 and 18 relate to the decision of a designated Secretary of State to authorise the interception of elected representatives’ communications and interference with equipment relating to elected representatives. As the Minister will know, two similar amendments were proposed by Lord West in Committee in the other place. The reason for tabling the amendments in Committee in the Commons is that the Opposition believe that the Prime Minister’s overall involvement in the warrants must be retained, even if, in designated cases, it could be retrospective. As I said, I am mindful of the debate that has just taken place.
In the other place, Lord Sharpe rejected Lord West’s amendment on the basis that the oversight arrangements for warrant decisions taken by a designated Secretary of State, which include review by the judicial commissioner, are sufficient scrutiny. I understand that argument, but I wonder why it should not be the case that a Prime Minister is at least notified about decisions to issue warrants that they have had to delegate due to their being unable to do so. Furthermore, would a Prime Minister not being notified of a decision unnecessarily diminish their operational awareness in making future decisions to issue warrants?
My amendment would require the Prime Minister to be informed of a decision taken by a designated Secretary of State on their behalf as soon as the circumstances that have prevented the Prime Minister from approving a warrant in the first place have passed. I hope the Minister and the Committee will understand the emphasis on the important nuance in the difference between review and notification. Mindful of the earlier debate, I hope that the Minister will consider accepting the amendments.
For want of repeating myself, I will probably leave that to stand.
I suspect that we may return to this matter on Report. On the basis of the remarks made by the Minister, I beg to ask leave to withdraw the amendment.
Amendment, by leave, withdrawn.
Question proposed, That the clause stand part of the Bill.
With this it will be convenient to discuss the following:
Clause stand part.
Clause 23 stand part.
New clause 1—Requirement for the Prime Minister to appear before the Intelligence and Security Committee—
“After section 26 of the Investigatory Powers Act 2016, insert—
‘26A Requirement for the Prime Minister to appear before the Intelligence and Security Committee
(1) The Prime Minister must appear before the Intelligence and Security Committee of Parliament to provide oral evidence on the matter set out in subsection (2).
(2) The matter is decisions made by the Prime Minister or an individual designated under section 26 to—
(a) give approval to issue warrants to intercept and examine communications of Members of Parliament;
(b) interfere with equipment belonging to Members of Parliament;
(c) other relevant decisions relating to Members of Parliament in the interests of national security
(3) The duty in subsection (1) applies once every session of Parliament.
(4) Subsection (1) does not apply if the Intelligence and Security Committee does not require the Prime Minister to attend.’”
This new clause would require the Prime Minister to appear before the Intelligence and Security Committee to provide oral evidence on decisions made to approve warrants to intercept and examine communications of MPs or to interfere with equipment belonging to MPs, and other relevant decisions relating to MPs.
New clause 4—Interception notification for Members of Parliament etc.—
“After section 26 of the Investigatory Powers Act 2016 (Members of Parliament etc.) insert—
‘26A Interception notification for Members of Parliament etc.
(1) Upon completion of conduct authorised by a warrant under section 26, or the cancellation of a warrant issued under that section, a Judicial Commissioner must notify the subject of the warrant, in writing, of—
(a) the conduct that has taken place, and
(b) the provisions under which the conduct has taken place.
(2) The notification under subsection (1) must be sent within thirty days of the completion of the conduct or cancellation of the warrant.
(3) A Judicial Commissioner may postpone the notification under subsection (1) beyond the time limit under subsection (2) if the Judicial Commissioner assesses that notification may defeat the purposes of an ongoing serious crime or national security investigation relating to the subject of the warrant.
(4) A Judicial Commissioner must consult the person who applied for the warrant in order to fulfil an assessment under subsection (3).’”
This new clause would require members of a relevant legislation who are targets of interception to be notified after the fact, as long as it does not compromise any ongoing investigation.
Clauses 22 and 23 will increase the resilience and flexibility of the warrant system. They will ensure the effective processing of warrants that authorise the interception of, or the use of equipment interference to obtain, the communications of a Member of a relevant legislature when the Prime Minister cannot fulfil their duties due to medical incapacitation or a lack of access to secure communications. The changes will enable the authorisation process to function in an agile manner, thereby enabling the important work of the intelligence agencies to continue while maintaining a high bar for the authorisation of some of the most sensitive warrants.
I rise to speak to new clause 1, which relates to oversight by the Intelligence and Security Committee of warrants to intersect and examine the communications of Members or the interference with equipment relating to Members. The context of the new clause will be clear to those who followed the debates in the other place about the role of the ISC. To be absolutely clear, I am not seeking to debate the Wilson doctrine—I know that Members will be relieved to hear that.
The purpose of the new clause is to probe and seek further safeguards for the ISC to provide essential oversight of this extremely sensitive matter, codified by the 2016 Act as part of a wider context of decisions made by the Prime Minister in the interests of national security. Members of this Bill Committee who also serve on the ISC will know that successive Prime Ministers have, unfortunately, not appeared in front of that Committee since, I believe, 2014. As a result, there has been no opportunity for direct accountability over prime ministerial decision making on warrants to intercept and examine Members’ communications, or on interference with equipment relating to Members.
On the point about notification: forgive me, but it is inconceivable that it should be required in law to inform somebody that they have been subject to an investigation by the intelligence services in such a way. I would be delighted to discuss with the hon. Member for Cumbernauld, Kilsyth and Kirkintilloch East in a more secure environment why, for a whole series of reasons, that may not be such a good idea. On the question of the Prime Minister appearing before the ISC, my friend the hon. Member for Barnsley Central knows my views—I have expressed them on many occasions—but that is way above my pay grade.
For now!
Question put and agreed to.
Clause 22 accordingly ordered to stand part of the Bill.
Clause 23
Equipment interference: Members of Parliament etc
Amendment made: 4, in clause 23, page 48, line 15, leave out from “and” to end of line 17 and insert—
“(b) has the necessary operational awareness to decide whether to give approvals under subsection (3) or (6).”—(Tom Tugendhat.)
This amendment replaces the reference to an individual being required in their routine duties to issue warrants under the Investigatory Powers Act 2016 with a reference to an individual being required to have the necessary operational awareness to decide whether to give approvals under section 111 of that Act.
Clause 23, as amended, ordered to stand part of the Bill.
Clause 24
Issue of equipment interference warrants
Question proposed, That the clause stand part of the Bill.
The Bill makes minor changes to the equipment interference regime, specifically in relation to the warrantry processes associated with its authorisation. The purposes behind those changes are to correct minor drafting errors in the IPA to provide greater clarity, and to improve the efficiency of the warrantry process for equipment interference.
Question put and agreed to.
Clause 24 accordingly ordered to stand part of the Bill.
Clauses 25 and 26 ordered to stand part of the Bill.
Clause 27
Bulk equipment interference: safeguards for confidential journalistic material etc
I beg to move amendment 19, in clause 27, page 50, line 9, at end insert—
“(2A) Where a senior official acts on behalf of the Secretary of State under subsection (2), they must inform the Investigatory Powers Commissioner of the selection for examination of BEI material as soon as reasonably practicable.”
This amendment would require a senior official acting on behalf of the Secretary of State who has selected BEI material for examination when there has been an urgent need to do so to inform the Investigatory Powers Commissioner as soon as reasonably practicable.
Amendment 19 would require a senior official acting on behalf of the Secretary of State who has selected bulk equipment interference material for examination, when there has been an urgent need to do so, to inform the Investigatory Powers Commissioner as soon as is reasonably practical. It would ensure that every reasonable oversight arrangement was in place concerning the Bill’s investigatory powers provisions.
The amendment does not suggest that the Investigatory Powers Commissioner retrospectively reviews the approval, but instead proposes that they be informed to ensure that there are the most comprehensive and effective oversight arrangements on investigatory powers. We intend not to burden the police and the security services with additional duties, but to ensure that there is the maximum possible oversight with the minimum possible additional work. I hope that the Minister will at least agree with the intentions of the amendment and consider its merits in further strengthening the Bill’s oversight arrangements.
I welcome the amendment, and not only do I agree with it, but I feel that we have already done it. My understanding is that the provision duplicates what already occurs in practice under the current regime, as well as the changes made by clause 27. Currently, the Investigatory Powers Commissioner is already effectively notified when a senior official acting on behalf of the Secretary of State, in urgent circumstances, approves the selection for examination of journalistic material derived from bulk equipment interference. Clause 27 already inserts into the IPA new section 195A(2), which will ensure that the Investigatory Powers Commissioner is notified as soon as is reasonably practical by the Secretary of State when a senior official approves the use of criteria to select for examination journalistic material in reliance on an urgent approval. Effectively, the senior official is informing on behalf of the Secretary of State, or indeed the Secretary of State is informing on behalf of the senior official. We all very much hope it is the former of the two.
Clause 27 enhances the safeguards already afforded to journalistic material within the IPA, and the Government recognise the importance of journalistic freedom within free and democratic societies, which is why we are introducing this measure. Under the current regime, the Investigatory Powers Commissioner must be informed when a communication that contains confidential journalistic material or sources of journalistic material is retained following its examination for purposes other than its destruction. The clause introduces a requirement for prior independent approval by the IPC before any search criteria are used to select such material. Prior independent approval is also required before it is removed.
I am grateful to the Minister for that clarification. On that basis, I beg to ask leave to withdraw the amendment.
Amendment, by leave, withdrawn.
Clause 27 ordered to stand part of the Bill.
Clause 28
Exclusion of matters from legal proceedings etc: exceptions
Question proposed, That the clause stand part of the Bill.
Clause 28 will amend schedule 3 to the Investigatory Powers Act 2016 to provide exceptions for disclosures of intercepted materials to inquiries or inquests in Northern Ireland or Scotland into a person’s death. The clause will create parity with existing provisions for coroners in England and Wales. It also adds an exception to enable panel members of the Parole Board in England and Wales to access intercepted materials when considering parole applications and any subsequent appeals. It will also enable relevant coroners in Northern Ireland and sheriffs investigating deaths in Scotland to access intercepted material in connection with their inquiry or inquest.
Question put and agreed to.
Clause 28 accordingly ordered to stand part of the Bill.
Clause 29
Freedom of information: bodies dealing with security matters
Question proposed, That the clause stand part of the Bill.
Clauses 30 to 33 are typical clauses that are included in the vast majority of legislation. Clause 30 allows the Secretary of State, by regulations made by statutory instrument, to make provision that is consequential on this Act. Clause 31 details the extent of the Bill. The Bill extends and applies to the whole of the United Kingdom, with the exception of measures contained in clause 28, in which subsection (2) applies to England and Wales only and subsection (3) applies to Northern Ireland and Scotland only.
As national security is a reserved matter, a legislative consent motion is required from Scotland only in relation to a small number of clauses in part 2—the oversight aspect—of the Bill. I am pleased that the Scottish Government have recommended that legislative consent be given.
Clause 32 details when the Bill commences. Part 6 comes into force on the day on which the Bill is passed; the other provisions come into force on such day as is appointed by regulations made by the Secretary of State.
Question put and agreed to.
Clause 30 accordingly ordered to stand part of the Bill.
Clauses 31 and 32 ordered to stand part of the Bill.
Clause 33
Short title
Amendment made: 5, in clause 33, page 56, line 1, leave out subsection (2).—(Tom Tugendhat.)
This amendment removes the privilege amendment inserted by the Lords.
Clause 33, as amended, ordered to stand part of the Bill.
New Clause 2
Report on the Prime Minister’s engagement with the Intelligence and Security Committee
“After section 240 of the Investigatory Powers Act 2016 insert—
“240A Report on the Prime Minister’s engagement with the Intelligence and Security Committee
(1) The Secretary of State must publish a report about the Prime Minister’s engagement with the Intelligence and Security Committee in relation to the investigatory powers regime and lay the report before Parliament.
(2) The report must be published within six months of the passage of the Investigatory Powers (Amendment) Act 2024, and annually thereafter.””—(Dan Jarvis.)
This new clause would ensure the Secretary of State publishes a report on the engagement, including any meeting held, between the Prime Minister and the Intelligence and Security Committee in relation to the investigatory powers regime.
Brought up.
I recognise that we have already had an extensive debate on this matter. I do not intend to detain the Committee any longer, and there is therefore nothing further I wish to say about new clause 2, so I do not wish to move it.
New Clause 3
Impact of Act on EU data adequacy decisions
“Within six months of the passage of this Act, the Secretary of State must publish a report assessing the potential impact of this Act on EU data adequacy decisions relating to the United Kingdom.”—(Dan Jarvis.)
This new clause would require the Secretary of State to publish a report on potential impact of the provisions within this Bill on the requirements necessary to maintain a data adequacy decision by the EU.
Brought up, and read the First time.
I beg to move, That the clause be read a Second time.
New clause 3 relates to the impact of the Act on EU data adequacy decisions. When a similar measure to this new clause was proposed by my noble Friend Lord Coaker during the Bill’s passage through the other place, the response from the Minister, Lord Sharpe, confirmed the UK Government’s regular contact with the European Commission about the Bill to ensure that any changes are understood. We welcome that but, as I hope the Minister will understand, such engagement is a continuous process, not a single event or even a series of events. As part of this continuous process, we believe that the Secretary of State should publish a report assessing the potential impact of the Act on EU adequacy decisions.
As Lord Coaker said in the other place:
“The adequacy agreement is dependent on the overall landscape of UK data protections”.—[Official Report, House of Lords, 23 January 2024; Vol. 835, c. 688.]
That is even though the UK protections require some further work. However, given the time pressures, Mrs Cummins, that is all I will say about new clause 3.
First, I welcome the interactions we have had on this point, as well as the work of Lord Coaker and Lord Sharpe to ensure that this is widely understood. The work that has been done is important. We face the challenge that although we obviously commit to fulfilling our side of the TCA and the various agreements we have struck, this is really a matter for the European Commission to determine, so it is not one that we can pass into UK law. It is really a matter for them.
I have nothing further to add. I beg to ask leave to withdraw the motion.
Clause, by leave, withdrawn.
On a point of order, Mrs Cummins. I would like to express my extreme personal thanks to Tom Ball and the Bill team, Phoebe, the Lucys, and the many others who have contributed brilliantly to ensure that this Bill has proceeded with speed and professionalism. I thank not only the members of the Committee, but all Members of many parties, and particularly the ISC, which has contributed so much to this Bill, despite what the right hon. Member for North Durham claims. May I say a particular thanks to my very good friend and shadow, the hon. Member for Barnsley Central? It is an enormous pleasure to think that we have gone from fighting the Queen’s enemies to passing the King’s laws together.
Further to that point of order, Mrs Cummins. I join the Minister in warmly extending my thanks on behalf of Labour to all members of the Public Bill Committee and all the officials, both in the Department and in the House, who have done a sterling job in getting us to this point. I am grateful to the Minister for his collegiate approach, which I very much hope we will be able to maintain during the further passage of the Bill. Thank you, Mrs Cummins.
Further to that point of order, Mrs Cummins. May I say a particular thanks to you for chairing this Committee today in such a fantastic and eloquent way?
Investigatory Powers (Amendment)Bill [Lords] Debate
Full Debate: Read Full DebateDan Jarvis
Main Page: Dan Jarvis (Labour - Barnsley North)Department Debates - View all Dan Jarvis's debates with the Home Office
(8 months ago)
Commons ChamberI beg to move, That the clause be read a Second time.
With this it will be convenient to discuss the following:
New clause 2—Requirement for the Secretary of State to publish an annual report on technology-enabled serious and organised crime and technology-enabled threats to national security—
“After section 234 of the Investigatory Powers Act 2016, insert—
“234A Requirement for the Secretary of State to publish an annual report on technology-enabled serious and organised crime and technology-enabled threats to national security
(1) The Secretary of State must publish a report on technology-assisted crime insofar as it relates to measures set out in this Act and the Investigatory Powers Act 2016.
(2) The report must be published within one year of the passing of the Investigatory Powers (Amendment) Act 2024, and annually thereafter.””
This new clause would ensure the Secretary of State publishes an annual report on technology-enabled serious and organised crime and technology-enabled threats to national security insofar as it relates to measures set out in this Act and the Investigatory Powers Act 2016.
New clause 3—Prevention of torture or cruel, inhuman or degrading treatment or punishment—
“(1) The Investigatory Powers Act 2016 is amended as follows.
(2) Before section 260 (and the cross-heading before that section), insert—
“Prevention of torture or cruel, inhuman or degrading treatment or punishment 259A Prevention of torture or cruel, inhuman or degrading treatment or punishment
No public authority may take any action, whether retention, examination, disclosure, handing over to any overseas authority or any other action authorised by this or any other enactment, in relation to material obtained in accordance with the provisions of this Act if the public authority knows or believes that action—
(a) would result in torture or cruel, inhuman or degrading treatment or punishment, or
(b) presents a real risk of resulting in torture or cruel, inhuman, or degrading treatment or punishment.””
New clause 4—Members of Parliament: interception and examination of communications and equipment interference—
“(1) The Investigatory Powers Act 2016 is amended as follows.
(2) In section 26 (targeted interception warrants and targeted examination warrants: Members of Parliament etc.), after subsection (2), insert—
“(2A) The Secretary of State may not issue the warrant if it relates to communications sent by, or intended for, a member of the House of Commons.”
(3) In section 111 (targeted equipment interference warrants: Members of Parliament etc.), after subsection (7), insert—
“(7A) A warrant may not be issued under this section if it relates to—
(a) communications sent by, or intended for, a member of the House of Commons, or
(b) a member of the House of Commons’s private information.””
This new clause would remove the ability of the Secretary of State to authorise the interception of the communications of, or the obtaining of communications intended for, or private information belonging to, Members of Parliament.
New clause 5—Interception notification for Members of Parliament etc.—
“After section 26 of the Investigatory Powers Act 2016 (Members of Parliament etc.) insert—
“26A Interception notification for Members of Parliament etc.
(1) Upon completion of conduct authorised by a warrant under section 26, or the cancellation of a warrant issued under that section, a Judicial Commissioner must notify the subject of the warrant, in writing, of—
(a) the conduct that has taken place, and
(b) the provisions under which the conduct has taken place.
(2) The notification under subsection (1) must be sent within thirty days of the completion of the conduct or cancellation of the warrant.
(3) A Judicial Commissioner may postpone the notification under subsection (1) beyond the time limit under subsection (2) if the Judicial Commissioner assesses that notification may defeat the purposes of an ongoing serious crime or national security investigation relating to the subject of the warrant.
(4) A Judicial Commissioner must consult the person who applied for the warrant in order to fulfil an assessment under subsection (3).””
This new clause would require members of a relevant legislature who are targets of interception to be notified after the fact, as long as it does not compromise any ongoing investigation.
Amendment 7, page 3, line 9, leave out clause 2.
Amendment 8, in clause 2, page 3, line 17, leave out “, or only a low,”.
Amendment 24, page 3, line 18, at end insert—
“(1A) This section does not apply to a bulk personal dataset unless it has been published in accordance with the Data Protection Act 2018.”.
This probing amendment would mean that individual and category authorisations for bulk personal datasets would not apply to bulk personal datasets unless they had been published in accordance with General Data Protection Regulation (GDPR) set out in the Data Protection Act 2018.
Amendment 9, page 3, line 34, at end insert—
“(4) By way of example, bulk datasets of images obtained by CCTV and bulk datasets of Facebook posts are not to be considered datasets where the individuals to whom the data relates could have no, or only a low, reasonable expectation of privacy.”.
This is a probing amendment regarding the scope of “low or no reasonable expectation of privacy”.
Amendment 10, page 5, line 7, leave out “any dataset that falls” and insert “all datasets that fall”.
This amendment would clarify that all the datasets covered by a category authorisation must be “low or no privacy” and not just some of them.
Amendment 11, page 11, line 2, at end insert—
“226DZA Notification and review of bulk personal datasets retained under category authorisations
(1) This section applies where a category authorisation has been approved by a Judicial Commissioner under section 226BB.
(2) The head of an intelligence service, or a person acting on their behalf, must notify the Judicial Commissioner within 28 days of a bulk personal dataset being retained or retained and examined under the category authorisation.
(3) The notification under subsection (2) must include a description of the dataset and the data it includes, the purpose for which it is being used and the number of individuals whose data is contained in the dataset.
(4) The Judicial Commissioner, on reviewing any notifications received under subsection (2), must cancel the category authorisation if the Commissioner considers that section 226A no longer applies to any dataset that falls within the category of datasets described in the authorisation.
(5) The Judicial Commissioner, on reviewing any notifications received under subsection (2), must cancel the relevant individual authorisation if the Commissioner considers that the condition in section 226B(4) is not met in relation to that bulk personal dataset.”
This amendment would provide for ex-post facto judicial oversight of the use of category authorisations, including the conditions for individual authorisations made under them.
Amendment 13, in clause 12, page 34, leave out lines 5 and 6 and insert—
“(e) where the communications data has been made publicly or commercially available by the telecommunications operator or postal operator”.
This amendment would align the new provisions with existing Communication Data Codes of Practice.
Amendment 12, page 34, leave out lines 5 and 6.
This amendment would remove one of the example cases where a relevant person has lawful authority to obtain communications data from a telecommunications operator or postal operator, being where the data has been “published”.
Government amendments 3 to 6.
Amendment 14, page 36, line 2, leave out clause 15.
Amendment 15, to clause 15, page 36, line 35, at end insert—
“(c) the Investigatory Powers Commissioner agrees with the judgment of the officer made in accordance with paragraph (b)”.
This amendment would ensure that all use of new powers in relation to Internet Connection Records was subject to oversight by the Investigatory Powers Commissioner.
Amendment 16, page 38, line 11, leave out clause 18.
Amendment 17, page 44, line 39, leave out clause 21.
Amendment 18, in clause 21, page 45, line 3, at the beginning insert “Subject to subsection (1A),”.
This amendment is consequential on amendment 19.
Amendment 19, page 45, line 6, at end insert—
“(1A) The Secretary of State may not give a relevant operator a notice under this section unless the notice has been approved by a Judicial Commissioner.
(1B) In deciding whether to approve a notice under this section, a Judicial Commissioner must review the conclusions of the Secretary of State as to the matters referred to in subsections (5) and (6)”.
This amendment would introduce judicial oversight of new powers to issue communications providers with notices requiring them to notify the Secretary of State of relevant changes to the service.
Amendment 25, page 47, line 28, leave out clause 22.
This amendment is consequential on NC4.
Amendment 20, in clause 22, page 48, line 13, leave out
“has the necessary operational awareness to decide whether”
and insert
“is either required in their routine duties to issue warrants under section 19 or section 102 or has the necessary operational experience”.
This amendment would permit the Prime Minister to nominate a Secretary of State to act for the Prime Minister under this section if they are required in their routine duties to issue warrants under section 19 or section 102 of the Investigatory Powers Act 2016 or if they have the necessary operational experience.
Amendment 21, page 48, line 14, at end insert—
“(2DA) The Prime Minister must be notified of the individual’s decision as soon as it is reasonably practicable to do so.”.
This amendment would require the Prime Minister to be notified of the decision of the designated Secretary of State as soon as is reasonably practicable.
Amendment 27, page 48, line 21, at end insert—
“(2G) The Prime Minister may not give approval under this section unless it has been authorised by a judge of the Supreme Court.”.
This amendment would require the authorisation of a judge of the Supreme Court before the Prime Minister could approve the interception of the communications of a Member of Parliament.
Amendment 26, page 48, line 22, leave out clause 23.
This amendment is consequential on NC4.
Amendment 22, in clause 23, page 49, line 13, leave out
“has the necessary operational awareness to decide whether”
and insert
“is required in their routine duties to issue warrants under section 19 or section 102 or has the necessary operational experience”.
This amendment would permit the Prime Minister to nominate a Secretary of State to act for the Prime Minister under this section if they are required in their routine duties to issue warrants under section 19 or section 102 of the Investigatory Powers Act 2016 or if they have the necessary operational experience.
Amendment 23, page 49, line 14, at end insert—
“(7DA) The Prime Minister must be notified of the individual’s decision as soon as it is reasonably practicable to do so.”.
This amendment would require the Prime Minister to be notified of the decision of the designated Secretary of State as soon as is reasonably practicable.
Amendment 28, page 49, line 18, at end insert—
“(7F) The Prime Minister may not give approval under this section unless it has been authorised by a judge of the Supreme Court.”.
This amendment would require the authorisation of a judge of the Supreme Court before the Prime Minister could approve the obtaining of communications intended for, or private information belonging to, a Member of Parliament.
It is a privilege to open debate on Report of this important Bill. At the outset, it is worth reiterating that Labour supports the Bill, which updates aspects of the Investigatory Powers Act 2016. That is because it is imperative that legal frameworks are updated to ensure that our police and security services keep up with changes to communications technology. Doing so ensures that they are always one step ahead of criminals and malign forces who seek to harm us and undermine our national security.
I hope the Minister, and all Members who were present in Committee, agree with me that we had a constructive debate, testing the Bill’s proportionality and robustness. Some matters relating to third-party bulk personal datasets and the oversight process for the addition of new BPDs to existing category authorisations have been largely resolved to the satisfaction of Labour Members, but other important matters still need to be addressed. I will speak first about the new clauses and amendments that stand in my name, before dealing with some of those tabled by other Members.
New clause 1 seeks to ensure that the Secretary of State publishes an annual report on the engagement between the Prime Minister and the Intelligence and Security Committee regarding the investigatory powers regime. A very similar amendment was tabled in Committee, but was withdrawn after a lengthy debate on the ISC oversight arrangements did not make any meaningful progress despite helpful contributions from my right hon. Friend the Member for North Durham (Mr Jones) and the right hon. Member for South Holland and The Deepings (Sir John Hayes). We tabled this new clause because the Government must recognise that the ISC has a vital role to play in the democratic oversight of some of the most powerful measures that the state has at its disposal to keep us safe, to intercept communications and to interfere with equipment.
The ISC is and should be the only Committee of Parliament that can appropriately hold a Prime Minister to account on investigatory powers. There must be accountability at the highest level, and the Prime Minister is no exception. However, many Members, not least members of the ISC, know that this important mechanism is not just broken but has stopped working altogether. Not since 2014 has a Prime Minister appeared before the Committee, but, when asked about successive Prime Ministers’ lack of appearance, the Minister said that such decisions were above his pay grade. That might well be true, at least for now, so if the Minister cannot commit himself to reinstating the convention of Prime Ministers’ appearing before the Committee, the new clause would, at the very minimum, ensure that this new convention of non-attendance is reviewed annually, and scrutinised by this House and the other place. I therefore give notice of our intention to push the new clause to a vote.
Does my hon. Friend agree that it is not above the Minister’s pay grade to be able to confirm that the conventions and arrangements that give the ISC a particular constitutional place in the way our system works ought to operate, even if they have not done so for the last 10 years? Does he, like me, look forward to being able to hear the Minister—rather than dismissing this important concern about the dereliction of a constitutional duty—give us an assurance that this will be the case in the future?
My hon. Friend has made an important point, and one with which I suspect the overwhelming majority of Members would agree.
I was the Minister who took through the House the Bill that created the ISC. At the time, the intention was that it would evolve to become a very powerful Committee, but it did not absolve the entire House from some responsibility. Two elements are involved here. One has just been mentioned by the hon. Gentleman—the Prime Minister’s appearance before the Committee—and the other is minimal redaction of the reports that the Committee creates. One of the problems we have encountered in recent years is excessive redaction of those reports. Has the hon. Gentleman any views on that?
The right hon. Gentleman has made two important points, both of which I agree with, about redaction and about the attendance of the Prime Minister. I do not think it unreasonable to expect that once a year the Prime Minister should seek to meet what is a very important cross-party Committee of this House. I should be happy to give way to the Minister should he wish to add his own views on this matter, but given the basis of my sense of where the House is and given previous debates, I think most Members will agree that it is not unreasonable to ask the Prime Minister to turn up once a year.
The hon. Gentleman’s point is made more potent by the fact that the matters the ISC considers are not typically—in fact, not at all—partisan. It operates on a non-partisan basis, although of course its members are drawn from both sides of the House, and the material that it studies is not seen through a party-political prism in any way; this Minister has engaged in sensible and meaningful discussion with members of the ISC in exactly that spirit during the passage of this legislation. Similarly, a meeting with the Prime Minister would be conducted in a way to which I think no Prime Minister could reasonably object .
The right hon. Gentleman speaks about these matters with a great deal of authority, not just as a member of the Committee but as a former Security Minister, and I think he has described the situation very well. I hope the Prime Minister is listening; I hope the Prime Minister accepts what I consider to be the reasonable and constructive invitation that has just been extended to him by the right hon. Gentleman; and I hope the Prime Minister does take the opportunity in the near future to sit down with the ISC and discuss what are, after all, very important matters.
New clause 2 would ensure that an annual report was published on measures in the Bill, and in the Investigatory Powers Act 2016, to defeat and disrupt technology-enabled serious organised crime and technology-enabled threats to our national security. We tabled the new clause because we must ensure that the law is always one step ahead of those who seek to harm us. The police and the security services are not best able to protect us today with the laws to counter the threats of yesterday, which is why we support this Bill to update the 2016 Act, which is now eight years old, but there is an opportunity to go further. The annual report proposed in the new clause would help to ensure that any changes required to primary legislation relating to investigatory powers were identified and implemented as quickly as possible. That would strengthen our legislative framework on national security, and weaken the capability and resolve of criminals and our adversaries.
I think that this is a genuine opportunity for the Government to work better with, and to constructively challenge, telecommunications operators and the wider communications technology industry on the requirements to use investigatory powers—a process that would be separate from the new notices regime included in part 4. A statutory requirement to produce an annual report on investigatory powers to counter threats to our security and safety would strengthen national security, as well as strengthening the oversight and safeguarding of measures to keep us safe. Those are two principles that guide this Bill and the 2016 Act, and that is why we will seek to push the new clause to a vote later this evening.
I hope that this evening will end with a measure of agreement. On the subject of the tech companies, I understand from information I have received that Apple, techUK, the Information Technology Industry Council and the Computer & Communications Industry Association have expressed concerns. Is the shadow Minister aware of their concerns and what this means for their ability to administrate and do their work, and does he agree that what we have tonight is a consensus that protects not just them but ordinary members of society?
I know that the hon. Member takes these matters incredibly seriously, and he has raised an important point. To be absolutely fair to the Minister and to his Department, I know that this is a matter that the Government have considered very carefully, and that there has been an extensive process of consultation with a range of tech companies—I have met a number of them myself—but I think it only fair to conclude that while of course there are important contributions to be made by tech companies to this debate, these are ultimately matters for the Government and the House to determine. Having said that, new clause 2 would provide a helpful and constructive mechanism for the Government, and we have tabled it in a genuine attempt to be helpful and to monitor very closely the significant challenges that our national security faces from serious and organised crime as a consequence of rapid developments in technology.
I thank the hon. Gentleman for the spirit in which he has addressed this issue, and he deserves a proper response. There is a valid concern that this is a process of engagement with tech companies, and there needs to be a partnership. I will be frank with him: I do not support new clause 2, for the very simple reason that the way in which this interaction takes place has evolved a lot, even in the two years that I have been in post. I suspect that during the four or five years that this House will supervise the Bill, under the next Government and in the five years beyond that, the interaction will evolve again.
What concerns me is that we could write into law a system of oversight and regulation that does not properly address the way in which tech companies are involved in this area. Therefore, the best answer is to have a more iterative process, which I have no doubt the fantastic civil servants with whom I have the privilege to work will adapt. Whoever takes over from me in 20 or 30 years’ time will no doubt want to iterate that as well.
I am grateful to the Minister for clarification on the response to new clause 2. He understands that we have tabled it because we genuinely think that it is a mechanism that—let us be honest about it—would not be particularly onerous for the Government, and would be helpful in focusing minds across Government. I completely agree with the point he made about his civil servants, who have been excellent throughout the passage of the Bill. We just happen to differ on this issue, because the Opposition think that the new clause would provide a useful forum for the Government to consider the challenges. He is absolutely right about the rapid evolution of technology, and we think it would be no bad thing to condense Government thinking into a report that would be issued on an annual basis.
I thank the hon. Gentleman for giving way again. May I address the iterative issue that the Minister and he both raised? It is not just the development of technology that is important here; it is also about the development of other countries’ security systems. For example, the Germans are putting in place laws that require end-to-end encryption—the very thing that we were worried about—so we will have to manoeuvre over the course of the coming years to make sure that what we do fits not just with the technology companies, but with what our allies are doing.
That is a very important point, and I completely agree. These are complex and difficult matters of public policy, and I completely understand that none of this is easy from the Minister’s perspective. However, if the right hon. Gentleman does not mind my saying so, his point strengthens the case for new clause 2, because we think it would provide a useful mechanism for the Government to track the development of these important matters, but also provide a mechanism for Members of this House to hold the Government to account on them. I am very grateful for the points he has made.
Before turning to amendment 24 on BPDs, which stands in my name, I would be very grateful if the Minister could say whether any progress has been made on arrangements to notify the Investigatory Powers Commissioner when adding new BPDs to existing category authorisations. It might not be in the Bill, but we think that even a reference to it in the IPC’s annual inspection would be helpful progress on this matter. The Minister, my right hon. Friend the Member for North Durham and I have discussed that, and I would be grateful if the Minister could said something about it.
I acknowledge the amendments on BPDs that were tabled by the hon. Member for Cumbernauld, Kilsyth and Kirkintilloch East (Stuart C. McDonald). Both of our parties have concerns about the definition of “low or no expectation of privacy” for BPDs, which we debated in a pretty constructive fashion on Second Reading and in Committee. However, Labour does not oppose the concept of “low or no expectation of privacy” for BPDs, which is why we will not support amendment 7, which was tabled by the SNP spokesman. Instead, amendment 24, which stands in my name, seeks further clarification on how “low or no expectation of privacy” will be applied to BPDs, with the aim that the parameters must be as clear as possible for the House to understand.
In Committee, the Minister used the Panama papers as an example of leaked and widely republished material being defined as a BPD with a low or no expectation of privacy. I understand why the Minister chose to use that example, but most other leaked documents containing personal information do not attract anywhere near the same level of media attention. Again, I would be grateful if the Minister took this opportunity to provide another example of information from a leak without widescale press coverage that would be suitable for the designation of a bulk personal data set with a low or no expectation of privacy.
As always, the hon. Gentleman is quite right to highlight the areas I touched on. The important thing about the Panama papers was that they changed. They would have enjoyed a high level of privacy, but with republication they became “low/no”. It would not be right to say that any leaked document enjoys “low/no”, but the law should reflect the reality of the data that is currently being held. When data goes from being secret to being effectively public, it would be absurd to hold the intelligence services to a different standard from that which would apply to any of us, who would be able to access it on a website.
I accept what the Minister has just said, but where is the threshold for publicity? As he said, the Panama papers were widely distributed in the public domain, but somebody’s Facebook feed might be put into the public domain. If it gets into the national newspapers and on the internet, or it is shared by a certain number of people, do we then determine that it is in the public domain? We need to be very careful about this.
My right hon. Friend is undoubtedly right: we do need to be very careful. In the end, the Government have to take a view about where they draw the line. These are very difficult decisions that have to be made. We had really useful and constructive debates in Committee about where the line should be drawn, but the issue will no doubt continue to be debated in the future.
Before I draw my remarks to a close, I will briefly speak to other amendments on the Order Paper, including those tabled by my right hon. Friend the Member for North Durham, other members of the ISC, and the right hon. Member for Haltemprice and Howden (Sir David Davis). We support amendment 23, which stands in the name of my right hon. Friend the Member for North Durham. It is very similar to the amendments we proposed in Committee regarding the Prime Minister’s delegation to a Secretary of State to issue a warrant to interfere with equipment relating to a Member. The amendment sets out that the Prime Minister must be informed of a decision taken by a designated Secretary of State on their behalf as soon as the circumstances that prevented the Prime Minister from approving a warrant in the first place have passed.
We believe that the Prime Minister’s overall involvement in those warrants must be retained, even if it is retrospective in designated cases, so it was a positive step that the Minister said he would look into including such a provision in the statutory guidance, in response to the very sensible points made by the right hon. Member for South Holland and The Deepings. However, we believe this does not go far enough, when this important notification arrangement should be on the face of the Bill.
This House should consider as many scenarios as possible when it comes to arrangements for prime ministerial power delegation on investigatory powers, even if scenarios of Cabinet members desperately trying to undermine the Prime Minister by any means possible perhaps belong more appropriately in “House of Cards” or “The Thick of It”. [Interruption.] I am sure that Conservative Members would have no idea about those kinds of activities; I am happy to take their word for that. But these are important matters, and we must seek to legislate carefully. The amendments tabled by the ISC are thoughtful and constructive, and I hope that, even at this late stage, the Government will consider accepting them.
I rise to confirm that we on these Benches support the Third Reading of this Bill. It is the first duty of every Government to keep their people safe. It is right that we take the opportunity to pay tribute to the exceptional men and women who serve in our police and security services, often in the shadows and often without recognition, working tirelessly to keep our country safe. We owe them all a debt of gratitude. We also owe it to them, as Members of this House, to provide them with the powers they need to discharge their duties. The Bill does that, in part, because it has been the product of constructive cross-party efforts both in this House and in the other place.
I wish to take the opportunity to thank the Minister for his work on the Bill. I wish him well with future endeavours. I also thank the SNP and all those Members who have contributed to this process, particularly those members of the ISC, who have made an outstanding contribution to proceedings.
On behalf of the whole House, I express our thanks to the civil servants working in the Home Office who have done an exceptional job, as have the Clerks of this House, who have worked very hard on what is after all a technical Bill.
It is always welcome when collegiate, cross-party working takes place in this House. I am very grateful that, on this occasion, we have been able to work together on getting this important Bill right.
Question put, That the Bill be now read the Third time.