Data Protection Bill [Lords]

Ed Davey Excerpts

3rd reading: House of Commons & Report stage: House of Commons
Wednesday 9th May 2018 Commons Chamber

[Margot James]

I will write to the hon. Lady and I hope to give her reassurance. This new higher bar concerns NHS data and that would obviously not catch within it errors on a tax return.

As now, the memorandum of understanding would also continue to operate when there are concerns about the welfare and safety of a missing individual—for example, vulnerable children and adults. That has always been the case. Personal information will only be disclosed to the Home Office or agencies under the purview of the Home Office. This is a significant restriction on the Home Office’s ability to use data held by the NHS. It is estimated that the change will exclude over 90% of the requests that have been satisfied to date.

[Sir Edward Davey (Kingston and Surbiton) (LD)]

The Minister talks about a memorandum of understanding giving reassurance to the House. I refer her to part 2 of schedule 2, which talks about exemptions from the general data protection regulation in respect of crime and taxation. Surely, the rights of individuals to have their data protected under that provision would address all these issues, and it would potentially supersede the memorandum of understanding.

[Margot James]

I will come on to the exemptions in terms of criminal activity and immigration in a wider context than NHS information in due course.

My right hon. Friend the Minister for Immigration is committed to sending a copy of an updated MOU to the Health and Social Care Committee shortly, but as I have indicated, the significant narrowing of the MOU will have immediate effect. This commitment is consistent with the intention underpinning new clause 12. I trust that on that basis, my hon. Friend the Member for Totnes and her colleagues will not press new clause 12. I am sure that if she has any questions, she will intervene on me, or that when she makes her remarks later, I might be invited to intervene on her. I thank my hon. Friend and all her Committee members for their work to establish higher principles in this area.

I turn to Opposition amendments 16 and 15 and Government amendments 141 and 142, on immigration. Amendment 15 would remove the provisions relating to effective immigration control in schedule 2. In responding to the amendment, I want to address some of the continued misunderstandings that have arisen around the purpose and scope of the provision, and I hope to persuade the House that this is a necessary and proportionate measure to protect the integrity of our immigration system. It has been suggested that the provisions have no basis in the GDPR, but article 23 expressly allows member states to restrict certain specified rights for the purpose of safeguarding

“other important objectives of general public interest of a…Member State”.

The maintenance of effective immigration control is one such objective.

[Sir Edward Davey]

Will the Minister confirm that article 23 of the GDPR does not specify immigration?

[Margot James]

It does not rule out immigration and it does allow the restriction of certain specified rights—not wholesale restrictions—for the purpose of safeguarding

“other important objectives of general public interest”.

The purpose is to provide a derogation for member states wide enough that they can pursue an overall Government policy in the general public interest. I would conclude that immigration is one such example. It has been suggested that the provisions represent a blanket carve-out of all a data subject’s rights. That is certainly not the case. I would like to reassure the right hon. Gentleman that we are being very selective about the rights that could be disapplied. The exemption will be applied only on a case-by-case basis and only where it is necessary and proportionate.

--- Later in debate ---

[Margot James]

Apparently not.

[Sir Edward Davey]

rose—

[Margot James]

I will give way for the last time to the right hon. Lady, if the right hon. Gentleman does not mind.

--- Later in debate ---

[Margot James]

Thank you, Madam Deputy Speaker. I might as well give way to the right hon. Member for Kingston and Surbiton (Sir Edward Davey) now.

[Sir Edward Davey]

I am grateful to the Minister. To help other Members consider amendment 15, let me point out that one of the data protection provisions that are being exempted for immigration purposes is the right to make subject access requests. It is critical to the rule of law for people and their representatives to know on the basis of what information the Home Office has made its decisions. The Bill provides no safeguards, no balance, and no restrictions to the use of that law by Home Office officials. As we heard from the right hon. Member for Normanton, Pontefract and Castleford (Yvette Cooper), those are simply not in the Bill. It is entirely wrong for the House to be asked to pass a Bill that does not contain real safeguards for the people involved, given what happened in the Windrush cases.

[Margot James]

I will continue to make some progress, as I feel that those points have already been made.

The application of the exemption does not set aside all data subjects’ rights, but only those expressly listed. A further limitation is that exemptions can be applied only where compliance with the relevant rights would be likely to prejudice the maintenance of effective immigration control.

[Sir Edward Davey]

What does that mean?

[Margot James]

It is an established term. It is used in the Immigration Act 2014 and the Freedom of Information Act 2000 uses a similar term, namely “operation of immigration controls”.

--- Later in debate ---

[Liam Byrne]

There is no right to digital literacy under the Bill, which is why we propose the five rights as the core of new schedule 1 in which, as the Minister knows, we go much further. The provision sets out rights to equality of treatment, security, free expression, access, privacy, ownership and control, the right not to be discriminated against as a result of automated decision making, and rights on participation, protection and removal.

Rights are sometimes scattered through thousands and thousands of pages of legislation, which is where we are on data protection today. That is why from time to time, as a country, we decide to make bold declaratory statements of what principles should guide us. These are methods of simplification and consolidation, and we are pretty good at that in this country. When we press our proposal to enable the creation of such a bill of rights to a Division a little later, we hope that it will be the call that the Government need to begin the process of consultation, thought, argument and debate about the digital rights that we need in this century and what they need to look like. Rights should not be imposed from the top down; they should come from the grassroots up, and the process of conversation and consultation is long overdue. To help the Government, we will accelerate that debate during this year.

The second point I wish to make is about amendment 15, which would ensure that the rights set out in the GDPR would stretch to everyone in this country. It would mean that the Government would not be permitted to knock out selective rights for certain people who just happen to be newcomers to this country. The proposal to withhold data rights from migrants and newcomers is a disgrace and does not deserve to be in the Bill. In Committee, Ministers were unable to tell us why the Bill’s crime prevention provisions could not be stretched to accommodate their ambitions for immigration control. The Minister has not been able to give us a succinct definition of “immigration control” today, and we have not been able to hear about the lessons learned from Windrush. Frankly, the debate has been left poorly informed, and we have had promises that letters will be sent to hon. Members long after tonight’s vote.

[Sir Edward Davey]

I totally agree with the right hon. Gentleman’s point. He says that this is about newcomers and immigrants, and I am sure he will agree that it also applies to British citizens’ ability to get their immigration file. Can he confirm that that is the case?

[Liam Byrne]

I am not sure that that is the case. British citizens have confirmed rights under the GDPR—that is safeguarded under EU legislation—but the risks I am worried about are the same ones as the right hon. Gentleman. I spent two and a half years in the Home Office. I recognised many of the errors that were made by the former Home Secretary in the situation that we inherited back in 2006, so I do not think that lessons have been learnt from Windrush, or that many lessons have been learnt from errors over the past eight to 10 years. The Home Office is a great Department of State, with tremendous strengths. It has fantastic civil servants who do an amazing job, without the resources to do it properly and very often without the level of support they need from their Ministers, but it is a human institution and such institutions make mistakes. To correct those, we have tribunals and courts through which people can test decisions made by officials without the disinfectant of sunlight. Unless we equip those individuals with everything they need to make their case effectively, we risk injustice. After our debates over the past month, we must do everything we can so that we never run that risk again.

--- Later in debate ---

[Sir Edward Davey]

The right hon. Member for Normanton, Pontefract and Castleford (Yvette Cooper) made a very powerful speech in favour of amendment 15, and I would like to associate myself and my party with all the comments she made. In particular, I underline the point she made that the Home Office powers in the Bill have no limit and are completely subjective.

The Under-Secretary of State for the Home Department, the hon. Member for Louth and Horncastle (Victoria Atkins), is sitting on the Government Back Benches, talking to a colleague. She is a respected lawyer who has practised law. Imagine if she had a client who was being denied reunification with their family, was not allowed to work, was being deported from this country and was not able to have access to the information on which that decision was made. That would go against all the principles of the rule of law of which this country is proud and which this House has upheld century after century, yet she, as a Home Office Minister, is allowing that to happen.

I urge the hon. Lady to think about that and, as the right hon. Member for Normanton, Pontefract and Castleford said, go to the new Home Secretary, who said he would take a new approach and sweep away some of the past, and ask him to think again and allow amendment 15 to proceed tonight. As the right hon. Lady said, there will be another opportunity with another immigration Bill coming up soon. The Home Office Minister and the Home Secretary can rest assured that the powers under paragraph 2 in schedule 2 relating to criminal actions would cover all the examples that Ministers in Committee, on Second Reading and in the other place have given for why they think this proposed legislation is required.

[Yvette Cooper]

The Secretary of State for the Department for Digital, Culture, Media and Sport is now back in his place. Does the right hon. Gentleman agree that it would simply take a phone call between him and the Home Secretary to agree that this measure could be suspended? The whole issue could be revisited in the immigration Bill coming down the track in due course. It could be removed from this Bill now for the sake of the Windrush generation.

[Sir Edward Davey]

The right hon. Lady is absolutely right, and it is the Windrush generation who should be in our minds above all.

The right hon. Lady mentioned the need—this will be dependent on the EU negotiations—to ensure that we have access to data for national security and for fighting crime. That is in the Government’s interests as they negotiate Brexit, in particular with respect to the rights of EU citizens. I am fairly convinced that when the Commission really wakes up to the implications of paragraph 4 in schedule 2, it will say that this is acting in bad faith. The Government have agreed a settlement for the 3 million EU citizens in this country and the EU citizens who may wish to come to this country in the years ahead. The Bill will take away the rights they thought they would have. I therefore say to Ministers on the Front Bench and those on the Back Benches that they have just a few minutes or so to think again before it is too late.

[Daniel Zeichner (Cambridge) (Lab)]

I want to endorse new clause 4, which was so ably set out my right hon. Friend the Member for Birmingham, Hodge Hill (Liam Byrne) from the Opposition Front Bench. I went on the Bill Committee with a sense of optimism and excitement, perhaps naively, because it seemed that so much needed to be done at the moment. Almost every day new issues arise—I hardly need to say that for me, “Cambridge” and “analytics” is an unfortunate combination. In the past few days, there have been facial recognition issues in the Welsh police and Amnesty International has raised the issue of gang lists. I hoped that we could rise to the challenge. However, I fear that although the Bill is hundreds and hundreds of pages long—in the pre-digital age, it would probably have been described as being the size of a telephone book—as Members have observed, does anyone really know what it means? That is why we needed a simple set of rights that people could understand. The sad thing is that people in the wider world are doing such good work and we should be looking at it. Look at what Tim Berners-Lee and Nigel Shadbolt are doing to try to transfer the data away from the big tech companies to make it our data. That is key, and it is the underlying principle of the GDPR, but I am not sure that we have been able to translate it into legislation.

I make two final observations. First, the golden thread running through much of this is data adequacy, which was referred to by the Chair of the Home Affairs Committee, my right hon. Friend the Member for Normanton, Pontefract and Castleford. In too many places there are genuine concerns, not just from Opposition Members but from Members in the other place, about our being tripped up on data adequacy, which is so important.

Finally, on the Information Commissioner’s role, a huge amount is being passed to her. We can have every confidence in her, but does she really have the resources, power and expertise? Most importantly, we are outsourcing some huge, really important judgments to the Information Commissioner, but I think it should be the role of this place to make those judgements in future, and I fear that we will come back to those points later in the day.