Data Protection Bill [Lords]

Ed Davey Excerpts

Money resolution: House of Commons & Programme motion: House of Commons
Monday 5th March 2018 Commons Chamber

[Matt Hancock]

Yes, of course. Everyone who is a British citizen will have the right to make sure that data about them is held fairly and accurately, and in alignment with rigorous principles. The hon. and learned Lady raises obliquely the point that the Bill contains important exemptions, including those to allow MPs to act on behalf of constituents as part of their casework, and to ensure that we can properly police our borders. I will come to that in more detail later. Nevertheless, at the heart of the Bill is citizens’ ability to control the data that companies and other organisations hold about them.

[Sir Edward Davey (Kingston and Surbiton) (LD)]

Further to the point made by the hon. and learned Member for Edinburgh South West (Joanna Cherry), will the Secretary of State explain the legal basis for the immigration exemption from the general data protection regulation?

[Matt Hancock]

Yes, of course. Exemptions from the GDPR are allowed so that necessary activities can be carried out, including that of making sure that a minority of individuals cannot abuse data protection law with the sole intent of undermining immigration controls. That is provided for in the necessary exemptions. I know that this point was debated extensively in the other place, but we firmly believe not only that it is important to ensure that we can control our borders through immigration controls, but that this is provided for in the GDPR.

--- Later in debate ---

[Matt Hancock]

I agree that this is a strong set of data protection standards. We intend to stay aligned with the EU standards, not least because they are extraterritorial, which means that anyone wanting to do any business or transactions with EU citizens would have to follow them anyway. There is therefore a very strong case for alignment in this area. Indeed, we have set out that we want the Information Commissioner to remain engaged with the future development of technical standards because we expect the GDPR effectively to become a standard that is increasingly followed around the world by companies that want to engage with the EU, and because we believe that high data protection standards go hand in hand with the capability to innovate and provide for customers. The Prime Minister was, of course, clear about the detail on Friday.

[Sir Edward Davey]

I am afraid that the Secretary of State has not answered the question asked by the right hon. Member for East Ham (Stephen Timms). Is it not true that UK companies will be bound by rules that the EU will decide? Those rules will affect a huge amount of business, but we will have no influence over them after we leave the EU?

[Matt Hancock]

I thought I had answered the question—the right hon. Member for East Ham (Stephen Timms) was nodding, so I thought I had at least had a crack at it. As the Prime Minister set out on Friday, and as we set out for the first time last August, we will seek, through the Information Commissioner’s Office, to remain engaged in those technical discussions about the future of the rules. As was proposed in the Conservative party manifesto, the Bill also gives young people the right to have data about them removed once they are 18 years old.

The second element is transparency, which is absolutely vital. All citizens should be able to know what is happening to their data and how it is being used. The Bill requires data controllers to give people information about who controls data, the purpose of processing it, and how long it will be stored. That is especially crucial in a world in which emerging technologies such as artificial intelligence are making increasingly important ethical decisions. The Bill therefore provides powers for the restriction of automated decision making and safeguards for those whose data is used. Our new centre for data ethics and innovation will advise on those safeguards, so that we can promote innovation and respond quickly to changes in technology with clear and transparent guidelines that are based on openness and consent.

The third principle is security. The Bill enhances requirements relating to the security of data and strengthens enforcement for those who do not comply. Data security and innovation go hand in hand, and this move will benefit customers and all responsible businesses. The Data Protection Act 1998 has served us well and placed the UK at the forefront of global data protection standards, but the world has changed since 1998, and the Bill updates the position to make our laws fit for purpose in an increasingly digital economy and society. It modernises many of the offences under the Act and creates new offences to help us to deal with emerging challenges.

--- Later in debate ---

[Joanna Cherry (Edinburgh South West) (SNP)]

Like my hon. Friend the Member for Argyll and Bute (Brendan O'Hara), I broadly welcome the Bill and its aims. A strong data protection framework is essential for the protection of human rights, particularly the right to privacy. Having a strong data protection framework is also key to the granting of adequacy by the EU Commission following the UK’s exit from the European Union, which of course I very much regret. However, the Bill falls short in the protections it provides in a number of areas, many of which have been ably outlined by my hon. Friend.

I want to focus on the immigration exception. Many of my hon. Friends and I have had emails from constituents who are particularly concerned about it. I am indebted to the Bar Council and the Immigration Law Practitioners Association for the briefings they have provided. Like others, they have pointed out, as I said in my intervention on the Secretary of State, that paragraph 4 of part 1 of schedule 2, which provides for the immigration exemption, is not reflective of the stated permissible exemptions under article 23 of the GDPR. If the Bill goes ahead unamended, it could cause us great problems for any finding of adequacy when we leave the European Union.

If enacted, that exemption will allow the Home Office, for the purposes of immigration control, to deny individuals access to their personal data—information that people can currently access by making a subject access request. The availability of that information is often vital to the fairness of legal proceedings in which individuals need to enforce or protect their rights. For example, for an individual effectively to challenge detention or an unlawful decision by the Home Office, or to make an application for immigration or asylum, they need to understand their own immigration history and to know what information the Home Office holds about them.

This is the information on which claims and legal challenges are often based. When both sides do not have access to the same information, the fairness of legal proceedings is inevitably compromised. Subject access requests are the only route through which legal practitioners can obtain access to that information and understand what are often complicated immigration histories. We all, as Members of Parliament, have experience of complicated immigration histories of people who come to see us in our surgeries. The reality is that many of these people do not have access to the relevant documents, or an accurate recollection or legal understanding of their circumstances. These concerns are not fanciful; they are very real.

To give an example, when someone is held in detention, they do not have access to their paperwork, for obvious reasons. They need their solicitor to be able to make a request to the Home Office to get the necessary information. Another important example is applicants who have been the victims of domestic violence, who have often been controlled by their partners for years. We introduced legislation in Scotland recently to deal with coercive control and recognise it as a real problem in domestic abuse. When a woman, or indeed a man, has been the subject of coercive control for many years before seeking help with immigration matters, a subject access request may be the only way of establishing the basis of any application for settlement and of obtaining independence from an abusive partner.

[Sir Edward Davey]

I am grateful to the hon. and learned Lady for giving way; she is making an excellent speech. Is it not ironic that the Government are planning to consult on improving protections for women who are the victims of domestic violence, but in the Bill they are taking protections away from some of the most vulnerable of them?

[Joanna Cherry]

Indeed it is ironic, and actions speak louder than words. I will certainly raise that matter with the Under-Secretary of State for the Home Department, the hon. Member for Louth and Horncastle (Victoria Atkins), who very decently has offered to meet me to discuss legislation that the Government have in mind about domestic abuse.

Those are just two examples of when it is very important for legal advisers to be able to make a subject access request to the Home Office and not to be met by the sort of brick wall that this immigration exemption, if enacted, would allow. I say “just two examples” because the Immigration Law Practitioners Association has produced, in an annexe to its briefing, a large number of real-life cases that illustrate the very wide range of circumstances in which subject access requests are used and are essential.

It is a sad fact that the Home Office has a well catalogued track record of making unlawful decisions. In a recent answer to a House of Lords question, the other place was told that in the 10 years to 2015, 250,000 appeals were allowed against the Home Office. Allowing the Home Office an exemption from subject access requests in immigration matters will have the effect of insulating the Government from challenges to unlawful decision making, and that is just not right. The Home Office does not apply the law as it has been mandated to by Parliament—or with the consistency that it should. That is why it loses so many cases in the courts.

We often come to the House to hear criticisms of Home Office procedures. While we cannot rectify those procedures under the auspices of the Bill, what we can do is not allow the status quo to get any worse. I exhort the Government to remove this exemption from the Bill, particularly as there are other exemptions in it that the immigration authorities can seek to rely on for the processing of personal data in accordance with their statutory duties and functions, or in the case of an offence having been committed.

This broad-ranging exemption will impact substantially on human rights, and it may also impact on an adequacy decision from the European Commission. Indeed, EU citizens today expressed their concern that these exemptions might have an impact on their ability to enforce their residency rights after Brexit, under the agreements currently being brokered. I urge the Government to look at this very carefully. They have yet to give any reasonable justification for the inclusion in the Bill of this very broad exemption, and I look forward to hearing one, if it is brought forward.

I share the concerns that led to amendments being passed by the Lords, and the cross-party concerns expressed in this House last week when the Government announced their decision to renege on the commitment to hold the second part of the Leveson inquiry. I was very glad to hear the points of order earlier on what Sir Brian Leveson actually said in his letter about his desire for Leveson part 2 to go forward.

I am not convinced by the reasons given by the Government for their decision to ditch any plans for Leveson 2. I endorse what the hon. Member for Rhondda (Chris Bryant) said in this House last week: he said that Members

“should be able to speak without fear or favour.”—[Official Report, 1 March 2018; Vol. 636, c. 971.]

That principle is as important as the freedom of the press, because the need for Members of Parliament to speak without fear or favour comes from the same right as the freedom of the press: the right to free speech and freedom of expression. I am sorry to have to say that I believe that the UK Government have acted out of fear of the press barons, and through favour, because so many of those press barons share their narrow right-wing agenda. There have been many genuine victims of press abuse, from grieving parents—everyone knows whom I am speaking about—to the relatives of those who died in the Hillsborough disaster, and they deserve better than this.

My hon. Friend the Member for Argyll and Bute made it very clear that it is not acceptable that the House of Lords should seek to legislate on matters devolved to Scotland; previously, section 40 applied only to England and Wales. As this is a devolved matter, what happens on press regulation in Scotland is for the Scottish Parliament. Although my colleagues in the Scottish Government have no plans to legislate in this area at the moment, there is debate within the SNP, as in the other political parties, about the best way to ensure that the terrible abuses uncovered by Leveson do not happen again.

In this House, promises were made by the UK Government to implement Leveson’s recommendations, and suspicions have rightly been raised about the motivation for the U-turn in the Conservative party manifesto—a U-turn that was completed with last week’s announcement. It is important to be clear that this is a volte-face on a previous cross-party agreement. I have yet to be convinced that there is not still the same need for the section 40 legislation, and I have previously tried to debunk some of the myths when I have spoken about it in this House.

Let us not sweep these issues under the carpet—let us have a full and frank debate about them—but we should not let the Leveson issues completely dominate the debate about the Data Protection Bill, because it covers very important issues beyond Leveson, of which I have mentioned only one: the immigration exemption. I look forward to debating these matters further as the Bill progresses through the House.

--- Later in debate ---

[Sir Edward Davey (Kingston and Surbiton) (LD)]

It is interesting to follow the hon. Member for North East Somerset (Mr Rees-Mogg). The House should reflect on his speech. Obviously, he was full of great rhetoric, but for some of us, he was playing the man and not the ball, but the House should discuss the ball—the substance—because that is key. I say to him, in language I know he understands, that veritas is a good defence.

I want to speak about the actual Bill, not amendments made in the other House. This piece of legislation is very welcome. It emanates from the EU, and I am delighted that the Government are implementing it. This regulation was being formed when I was a junior Minister in the then Department for Business, Innovation and Skills, and Britain was very supportive of it and was leading on it. Indeed, I served on the Competitiveness Council and formed a like-minded group for growth, on which Britain was leading the way in Europe in developing further the single market in energy and in digital services. It was clear that this regulation was essential for British business, because Britain was leading in digital services and needed this to support our businesses trading across the EU and to give consumers the confidence that this brings. It was a key area for business for Britain, and we pushed it.

It is therefore particularly ironic that we are transposing this regulation into UK law just as we are pulling out of the EU. The legislation before us is excellent; it has cross-party support; and it is a perfect example of why Brexit is a bad idea for the UK. We were highly influential in the conception and birth of this regulation as a member of the EU, but thanks to Brexit, we will not be at the conception and birth of a daughter of this EU regulation. There is bound to be a daughter of the GDPR, given the speed with which these technologies are developing. Inside the EU, the UK fashioned this regulation; we were a rule maker, and we were in control. With Brexit, we will not have a vote, we will be a rule taker, and we will have lost control. There could not be a clearer example of how Brexit will actually weaken Britain’s democracy and sovereignty—the precise reverse of what was promised to the people. Although I welcome this legislation in general, I do fear for the future.

However, I have one massive concern about the Bill. It relates not to what came from the EU, but to what Whitehall has done to the legislation. It used to be called “gold-plating”, but in this case I would call it “dirt-smearing” the regulation. I refer, of course, to the immigration exemption in schedule 2. I am disturbed about that for a number of reasons, some of which other Members have mentioned. However, to get the Minister’s attention, I should say that if the legislation is passed with that exemption, that will put at risk the chances of the UK’s obtaining a data adequacy agreement prior to Brexit—something essential for business and vital for security. The immigration exemption is not allowed under the EU’s regulation; it will be found to be illegal. It is clearly in breach of the EU’s charter of fundamental rights, undermining article 8 on the protection of personal data, article 20 on equality before the law and article 21 on non-discrimination.

Take the central example of what the exemption will mean for citizens from other EU countries—the 3 million here already and those who will come in the years ahead. Does the Minister really expect the Commission and the EU’s Brexit negotiators to turn a blind eye to the theft of data protection rights from EU citizens that the immigration exemption represents? It is a clear and evident breach of faith with the December agreement on EU citizens. There is simply no way that the EU could or should grant the UK a data adequacy agreement if we intend to take data protection rights from its citizens with this measure. That is before Brexit; if we do not secure a data adequacy agreement while we are in the EU, it will be far more difficult and demanding as a third country. The granting of data adequacy for third countries involves a more stringent examination of how national security data is dealt with.

I say candidly to those on the Treasury Bench that if they want their Brexit negotiations to proceed as smoothly as internal Tory party politics allows and to secure the data adequacy agreement that British business desperately needs, they will have to drop that immigration exemption—not water it down, not caveat it, but drop it.

Moreover, the exemption is insulting to freedom, the rule of law and access to justice. What it means, as others have said, is that an individual cannot know why he or she has had their case refused by the Home Office. The Home Office will be under no duty at all to disclose the information in a person’s file and the information used to make the decision. That is an affront to natural justice. In any dispute about how a case has been administered, it is surely self-evident that officials should have to provide that information.

To help Government Back Benchers who care about the rule of law even more, I should say that this affront could affect a British citizen. The administrative mistake might well be that someone has incorrectly been considered not to be British. In the many briefings that we have been given for this debate, there is example after example of British citizens being denied justice, with their very nationality being denied. Only a subject access request by an individual’s lawyer can end up revealing such basic errors of the Home Office.

Let us face it: the Home Office holds the prize for the largest number of mistakes made, week in, week out, by any Department. To take just one example, the Home Office has a shocking 10% error rate on immigration status checks alone. The Conservative party may be happy to take away access to justice and the rule of law from British citizens, but I am not.

Let us look at the impact on fairness. The best way to illustrate how deeply unfair the immigration exemption would be is with a few examples—real life examples, which is to say real people. Let me take some examples from the Law Society brief. It takes the case of Z, a failed asylum seeker attempting to reopen his case:

“The Home Office refused to reopen the case, saying that he had previously left the UK voluntarily and had received a resettlement grant from the Home Office. The SAR revealed that a third person had assumed his identity, and had applied for and secured voluntary return and the grant had subsequently been removed. The file further revealed that there was no cross-checking of signatures, photographs, or fingerprints on the Voluntary Assisted Returns scheme.”

This would have had serious consequences for the individual had the subject access request not revealed the identity theft, but, of course, under this immigration exemption there will be no such right to make that request.

We have talked about issues around domestic violence. We have heard the example of a woman applicant, the victim of domestic violence, who had no knowledge of the immigration applications made for her because her husband had all the papers. A subject access request would be her only path to sorting out her immigration status.

There are many examples showing how unfairly this will work in practice. Another example of Home Office mistakes on identity is the case of a nurse who had been working in the NHS and living lawfully in the UK for many years, but whose application to naturalise as a British citizen was denied because of her alleged poor immigration history. The brief says:

“A SAR was made and it became clear that the Home Office had mixed her up with another Nigerian woman with a slightly similar name and a poor immigration history. Following the SAR, she was able to challenge the Home Office.”

Under this Bill, she would not have been able to do that, and the NHS would have lost a diligent trained nurse.

There are so many other such examples, Madam Deputy Speaker, that I could detain the House longer than you would feel was sensible, so I will not read them out. None the less, I say to Ministers that they exist. If they bothered to read them—I urge them to do so—they would see that these are real people. If this legislation goes through with the immigration exemption, the Ministers on the Front Bench would be responsible for ruining the lives of hundreds, if not thousands, of innocent people, because they would have given the Home Office—the Executive—too much power, which means that it could not be held to account.

Data Protection Bill [Lords]

Ed Davey Excerpts

3rd reading: House of Commons & Report stage: House of Commons
Wednesday 9th May 2018 Commons Chamber

[Margot James]

I will write to the hon. Lady and I hope to give her reassurance. This new higher bar concerns NHS data and that would obviously not catch within it errors on a tax return.

As now, the memorandum of understanding would also continue to operate when there are concerns about the welfare and safety of a missing individual—for example, vulnerable children and adults. That has always been the case. Personal information will only be disclosed to the Home Office or agencies under the purview of the Home Office. This is a significant restriction on the Home Office’s ability to use data held by the NHS. It is estimated that the change will exclude over 90% of the requests that have been satisfied to date.

[Sir Edward Davey (Kingston and Surbiton) (LD)]

The Minister talks about a memorandum of understanding giving reassurance to the House. I refer her to part 2 of schedule 2, which talks about exemptions from the general data protection regulation in respect of crime and taxation. Surely, the rights of individuals to have their data protected under that provision would address all these issues, and it would potentially supersede the memorandum of understanding.

[Margot James]

I will come on to the exemptions in terms of criminal activity and immigration in a wider context than NHS information in due course.

My right hon. Friend the Minister for Immigration is committed to sending a copy of an updated MOU to the Health and Social Care Committee shortly, but as I have indicated, the significant narrowing of the MOU will have immediate effect. This commitment is consistent with the intention underpinning new clause 12. I trust that on that basis, my hon. Friend the Member for Totnes and her colleagues will not press new clause 12. I am sure that if she has any questions, she will intervene on me, or that when she makes her remarks later, I might be invited to intervene on her. I thank my hon. Friend and all her Committee members for their work to establish higher principles in this area.

I turn to Opposition amendments 16 and 15 and Government amendments 141 and 142, on immigration. Amendment 15 would remove the provisions relating to effective immigration control in schedule 2. In responding to the amendment, I want to address some of the continued misunderstandings that have arisen around the purpose and scope of the provision, and I hope to persuade the House that this is a necessary and proportionate measure to protect the integrity of our immigration system. It has been suggested that the provisions have no basis in the GDPR, but article 23 expressly allows member states to restrict certain specified rights for the purpose of safeguarding

“other important objectives of general public interest of a…Member State”.

The maintenance of effective immigration control is one such objective.

[Sir Edward Davey]

Will the Minister confirm that article 23 of the GDPR does not specify immigration?

[Margot James]

It does not rule out immigration and it does allow the restriction of certain specified rights—not wholesale restrictions—for the purpose of safeguarding

“other important objectives of general public interest”.

The purpose is to provide a derogation for member states wide enough that they can pursue an overall Government policy in the general public interest. I would conclude that immigration is one such example. It has been suggested that the provisions represent a blanket carve-out of all a data subject’s rights. That is certainly not the case. I would like to reassure the right hon. Gentleman that we are being very selective about the rights that could be disapplied. The exemption will be applied only on a case-by-case basis and only where it is necessary and proportionate.

--- Later in debate ---

[Margot James]

Apparently not.

[Sir Edward Davey]

rose—

[Margot James]

I will give way for the last time to the right hon. Lady, if the right hon. Gentleman does not mind.

--- Later in debate ---

[Margot James]

Thank you, Madam Deputy Speaker. I might as well give way to the right hon. Member for Kingston and Surbiton (Sir Edward Davey) now.

[Sir Edward Davey]

I am grateful to the Minister. To help other Members consider amendment 15, let me point out that one of the data protection provisions that are being exempted for immigration purposes is the right to make subject access requests. It is critical to the rule of law for people and their representatives to know on the basis of what information the Home Office has made its decisions. The Bill provides no safeguards, no balance, and no restrictions to the use of that law by Home Office officials. As we heard from the right hon. Member for Normanton, Pontefract and Castleford (Yvette Cooper), those are simply not in the Bill. It is entirely wrong for the House to be asked to pass a Bill that does not contain real safeguards for the people involved, given what happened in the Windrush cases.

[Margot James]

I will continue to make some progress, as I feel that those points have already been made.

The application of the exemption does not set aside all data subjects’ rights, but only those expressly listed. A further limitation is that exemptions can be applied only where compliance with the relevant rights would be likely to prejudice the maintenance of effective immigration control.

[Sir Edward Davey]

What does that mean?

[Margot James]

It is an established term. It is used in the Immigration Act 2014 and the Freedom of Information Act 2000 uses a similar term, namely “operation of immigration controls”.

--- Later in debate ---

[Liam Byrne]

There is no right to digital literacy under the Bill, which is why we propose the five rights as the core of new schedule 1 in which, as the Minister knows, we go much further. The provision sets out rights to equality of treatment, security, free expression, access, privacy, ownership and control, the right not to be discriminated against as a result of automated decision making, and rights on participation, protection and removal.

Rights are sometimes scattered through thousands and thousands of pages of legislation, which is where we are on data protection today. That is why from time to time, as a country, we decide to make bold declaratory statements of what principles should guide us. These are methods of simplification and consolidation, and we are pretty good at that in this country. When we press our proposal to enable the creation of such a bill of rights to a Division a little later, we hope that it will be the call that the Government need to begin the process of consultation, thought, argument and debate about the digital rights that we need in this century and what they need to look like. Rights should not be imposed from the top down; they should come from the grassroots up, and the process of conversation and consultation is long overdue. To help the Government, we will accelerate that debate during this year.

The second point I wish to make is about amendment 15, which would ensure that the rights set out in the GDPR would stretch to everyone in this country. It would mean that the Government would not be permitted to knock out selective rights for certain people who just happen to be newcomers to this country. The proposal to withhold data rights from migrants and newcomers is a disgrace and does not deserve to be in the Bill. In Committee, Ministers were unable to tell us why the Bill’s crime prevention provisions could not be stretched to accommodate their ambitions for immigration control. The Minister has not been able to give us a succinct definition of “immigration control” today, and we have not been able to hear about the lessons learned from Windrush. Frankly, the debate has been left poorly informed, and we have had promises that letters will be sent to hon. Members long after tonight’s vote.

[Sir Edward Davey]

I totally agree with the right hon. Gentleman’s point. He says that this is about newcomers and immigrants, and I am sure he will agree that it also applies to British citizens’ ability to get their immigration file. Can he confirm that that is the case?

[Liam Byrne]

I am not sure that that is the case. British citizens have confirmed rights under the GDPR—that is safeguarded under EU legislation—but the risks I am worried about are the same ones as the right hon. Gentleman. I spent two and a half years in the Home Office. I recognised many of the errors that were made by the former Home Secretary in the situation that we inherited back in 2006, so I do not think that lessons have been learnt from Windrush, or that many lessons have been learnt from errors over the past eight to 10 years. The Home Office is a great Department of State, with tremendous strengths. It has fantastic civil servants who do an amazing job, without the resources to do it properly and very often without the level of support they need from their Ministers, but it is a human institution and such institutions make mistakes. To correct those, we have tribunals and courts through which people can test decisions made by officials without the disinfectant of sunlight. Unless we equip those individuals with everything they need to make their case effectively, we risk injustice. After our debates over the past month, we must do everything we can so that we never run that risk again.

--- Later in debate ---

[Sir Edward Davey]

The right hon. Member for Normanton, Pontefract and Castleford (Yvette Cooper) made a very powerful speech in favour of amendment 15, and I would like to associate myself and my party with all the comments she made. In particular, I underline the point she made that the Home Office powers in the Bill have no limit and are completely subjective.

The Under-Secretary of State for the Home Department, the hon. Member for Louth and Horncastle (Victoria Atkins), is sitting on the Government Back Benches, talking to a colleague. She is a respected lawyer who has practised law. Imagine if she had a client who was being denied reunification with their family, was not allowed to work, was being deported from this country and was not able to have access to the information on which that decision was made. That would go against all the principles of the rule of law of which this country is proud and which this House has upheld century after century, yet she, as a Home Office Minister, is allowing that to happen.

I urge the hon. Lady to think about that and, as the right hon. Member for Normanton, Pontefract and Castleford said, go to the new Home Secretary, who said he would take a new approach and sweep away some of the past, and ask him to think again and allow amendment 15 to proceed tonight. As the right hon. Lady said, there will be another opportunity with another immigration Bill coming up soon. The Home Office Minister and the Home Secretary can rest assured that the powers under paragraph 2 in schedule 2 relating to criminal actions would cover all the examples that Ministers in Committee, on Second Reading and in the other place have given for why they think this proposed legislation is required.

[Yvette Cooper]

The Secretary of State for the Department for Digital, Culture, Media and Sport is now back in his place. Does the right hon. Gentleman agree that it would simply take a phone call between him and the Home Secretary to agree that this measure could be suspended? The whole issue could be revisited in the immigration Bill coming down the track in due course. It could be removed from this Bill now for the sake of the Windrush generation.

[Sir Edward Davey]

The right hon. Lady is absolutely right, and it is the Windrush generation who should be in our minds above all.

The right hon. Lady mentioned the need—this will be dependent on the EU negotiations—to ensure that we have access to data for national security and for fighting crime. That is in the Government’s interests as they negotiate Brexit, in particular with respect to the rights of EU citizens. I am fairly convinced that when the Commission really wakes up to the implications of paragraph 4 in schedule 2, it will say that this is acting in bad faith. The Government have agreed a settlement for the 3 million EU citizens in this country and the EU citizens who may wish to come to this country in the years ahead. The Bill will take away the rights they thought they would have. I therefore say to Ministers on the Front Bench and those on the Back Benches that they have just a few minutes or so to think again before it is too late.

[Daniel Zeichner (Cambridge) (Lab)]

I want to endorse new clause 4, which was so ably set out my right hon. Friend the Member for Birmingham, Hodge Hill (Liam Byrne) from the Opposition Front Bench. I went on the Bill Committee with a sense of optimism and excitement, perhaps naively, because it seemed that so much needed to be done at the moment. Almost every day new issues arise—I hardly need to say that for me, “Cambridge” and “analytics” is an unfortunate combination. In the past few days, there have been facial recognition issues in the Welsh police and Amnesty International has raised the issue of gang lists. I hoped that we could rise to the challenge. However, I fear that although the Bill is hundreds and hundreds of pages long—in the pre-digital age, it would probably have been described as being the size of a telephone book—as Members have observed, does anyone really know what it means? That is why we needed a simple set of rights that people could understand. The sad thing is that people in the wider world are doing such good work and we should be looking at it. Look at what Tim Berners-Lee and Nigel Shadbolt are doing to try to transfer the data away from the big tech companies to make it our data. That is key, and it is the underlying principle of the GDPR, but I am not sure that we have been able to translate it into legislation.

I make two final observations. First, the golden thread running through much of this is data adequacy, which was referred to by the Chair of the Home Affairs Committee, my right hon. Friend the Member for Normanton, Pontefract and Castleford. In too many places there are genuine concerns, not just from Opposition Members but from Members in the other place, about our being tripped up on data adequacy, which is so important.

Finally, on the Information Commissioner’s role, a huge amount is being passed to her. We can have every confidence in her, but does she really have the resources, power and expertise? Most importantly, we are outsourcing some huge, really important judgments to the Information Commissioner, but I think it should be the role of this place to make those judgements in future, and I fear that we will come back to those points later in the day.