Investigatory Powers Bill

Gavin Newlands Excerpts

Report: 2nd sitting: House of Commons
Tuesday 7th June 2016 Commons Chamber

[Tom Tugendhat]

The hon. and learned Lady is, I am afraid, picking on a hole in the Bill that is simply not there. [Interruption.] It is not there because the collection of bulk data is entirely categorised by the Bill. The Bill supervises entirely the ability to collect bulk data. The analysis is then done by trusted officers of the state. To accuse them of anything other than the highest forms of integrity would be an extraordinary statement to make in the House.

[Gavin Newlands (Paisley and Renfrewshire North) (SNP)]

Will the hon. Gentleman give way?

[Tom Tugendhat]

No, I am afraid I will not. I have given way enough.

It would be baffling to look at that list and accuse people of such integrity of having anything other than the best intentions. The important thing, however, is that we not only trust them, but supervise them. We trust but verify, as the old diplomatic phrase goes. The verification comes from the commissioners, which were listed yesterday, with their explanations, which the right hon. Member for Knowsley (Mr Howarth) was talking about yesterday. The supervision also comes from the Minister, and ultimately and eventually from the House.

I am therefore reassured that the Bill is not a snoopers charter or a grubby attempt to procure the information of the private citizens of these islands. On the contrary, this is an extremely effective Bill. It has been through months of discussion, and hours of detailed and deliberate interrogation. It has satisfied the extremely demanding standards of the Chair of the Intelligence and Security Committee, and the exemplary work of the former Director of Public Prosecutions, the hon. and learned Member for Holborn and St Pancras, whom I am pleased to see on the Opposition Front Bench.

The Bill comes to the House as a nigh-on complete work. Even so, the Government have considered and accepted amendments and further changes. We have not only a final but a polished copy of a Bill that is designed to do exactly what this country vitally needs. It does exactly what the Government are here to do. It keeps the people of these islands safe, whatever their background, origins, occupation or duties.

Fundamentally, it also protects the freedoms that we enjoy. Those freedoms are not, as the Americans put it, free. They are fought for every day, by the people on the list in schedule 4 that I have identified—our armed forces and our intelligence services. That is why I am so proud to be here today to speak up for the intelligence services who have asked for those powers; for the armed forces who require them; for the police who use them; and most importantly for the Government and, in this case, the official Opposition, who have so carefully crafted a legal document that will hold water today and for long into the future.

--- Later in debate ---

[Mr Grieve]

The hon. and learned Lady raises a relevant point. The Bill has not been amended, but we received sufficient assurances from the Government that the way in which the system would be operated, in terms of the internal workings of the agency, would be such as to meet the concerns we expressed. Indeed, the Solicitor General or the Minister may be in a position to confirm that. On that basis, despite the fact that we raised the point, we did not table an amendment on it. The hon. and learned Lady is quite right to pick it up. I have not wanted to detain the House for too long, otherwise I could take her through a list of areas on which, having had further discussion, we decided amendments were not required. She is right to focus on that and I hope very much the Minister is able to provide some confirmation. I am grateful to her for having raised it.

[Gavin Newlands]

Along with my hon. and learned Friend the Member for Edinburgh South West (Joanna Cherry), I represented the SNP in Committee. I am grateful for the opportunity to take part on Report.

I have many concerns about the Bill, and my hon. Friends have already outlined a number of areas where the SNP is sceptical about the Government’s case. This is a wide-ranging and complex Bill and time constraints prevent me from speaking to everything I would like to. However, I will focus my contribution on communications data and internet connection records. The measures in the Bill are not limited to internet access, email or telephony and include, explicitly, communication without human intervention. As it stands, the definition of communications data can tell us an awful lot about someone’s life. Stewart Baker, former senior counsel to the NSA in the United States, states that the content of a person’s communications data is redundant when we consider the amount of metadata that is already collected.

Communications data can be key in obtaining leads, solving crimes or preventing crime. However, I have a real issue with the length of the list of public bodies that would be able to access such personal and sensitive information on an individual without sufficient oversight in place. As we heard at the end of the previous debate and again at the start of this debate, from the hon. Member for Stevenage (Stephen McPartland), schedule 4 currently provides for a list of bodies that would be able to access retained data, including a range of regulatory bodies. Among them are the Food Standards Agency, the Gambling Commission, the Office of Communications, and the Health and Safety Executive. No fewer than 47 bodies are listed, a reflection of the tightly drawn nature of the Bill—or otherwise. That suggests that access to communications data may be granted for a range of purposes, which will almost certainly be disproportionate and inconsistent with the guidance offered by the European Court of Human Rights.

It is only appropriate that the correct level of protection and oversight is in place. The SNP tabled amendments 320 to 327 and 328 to 350 to ensure sufficient judicial oversight. The relevant public bodies must seek a warrant from a judicial commissioner, replacing the Secretary of State in the process where necessary. They also ensure that a threshold of reasonable suspicion would be necessary before a warrant is issued.

The arguments on judicial warrantry have already been rehearsed at length and I do not intend to detain the House long on this issue, particularly as my hon. and learned Friend the Member for Edinburgh South West speaks with a lot more authority on that subject than I do. Suffice it to say, I think hon. Members should pause and reflect on the lack of oversight. Decisions concerning necessity and proportionality can only be made properly by someone who is truly independent from the operations of the organisation.

Clause 54 contains the first mention of internet connection records. Subsection (6) defines ICRs in such general terms as to render the definition pointless. In that regard, I welcome some of the comments from the shadow Home Secretary and the Minister in their courting across the Dispatch Box a little earlier.

--- Later in debate ---

[Mr Alistair Carmichael]

The point about the arm’s- length retention gets to the heart of the matter. The concerns expressed by the Opposition Front-Bench team all surround the question of a threshold, but the threshold will never be of any significance to those out there waiting to hack into this information, as we have seen only too clearly with the recent experience of TalkTalk.

[Gavin Newlands]

I could not agree more with the right hon. Gentleman. I will come to that point shortly.

The question of who retains the information is secondary to the fact that it will be retained and accessible in the first place. The Government have, true to form, merely contracted out data retention to the private sector. Many people share unease about the security of this information. As we have seen recently, private providers are susceptible to sophisticated hacking operations. The consequences, should this information get into criminal hands, are deeply worrying. Indeed, the Joint Committee on the Draft Communications Data Bill shared similar concerns when it said that storing weblog data, however securely, carried the risk that it might be hacked into or fall accidently into the wrong hands.

[Andy Burnham]

I am listening carefully to what the hon. Gentleman is saying, and he is obviously aiming some of his comments in Labour’s direction. In a world where people are making fewer voice telephone calls—and if he is proposing that he would not want to collect this data—how would he propose the authorities go about locating a missing child in the early hours after the disappearance?

[Gavin Newlands]

rose—

[Mr Speaker]

Order. I wish to say, before the hon. Gentleman develops his case, that although I absolutely understand that he speaks for his party from the Front Bench and is entitled to develop his case, I would gently point out that another seven Members wish to contribute, several of whom sat on the Committee, and I most certainly wish to include the Chair of the Joint Committee on Human Rights. It is not a criticism, but I am sure he will tailor his contribution to take account of that fact.

--- Later in debate ---

[Mr Speaker]

The answer to the right hon. Gentleman, who has considerable experience in these matters, not least from when he was on the other side of the fence, as a very senior Whip, is that it is always open to the Government to table an alternative programme motion. That is not a matter for the Chair. The amendments were, of course, all on the paper at the point at which the House agreed the programme motion.

I ought just to say for the avoidance of doubt that the hon. Gentleman who has the floor is not in any way being criticised; I simply wanted to make him aware of the level of demand. I think we ought now to proceed. I would happily sit here all night for colleagues to debate these matters, but I rather doubt there would be the same enthusiasm among Government Whips for such a proposition.

[Gavin Newlands]

Thank you very much, Mr Speaker; I have almost forgotten what the intervention was—[Interruption.] I do not doubt that, but to answer it, we do not know what ICRs are at the moment. They are not clearly defined—the shadow Home Secretary made that point himself earlier; nor do we know how effective they will be. People in the industry tell me that current technology, such as Tor, virtual private networks and what have you, may render them useless. We do not know what ICRs are at the moment, so I have to be honest with the shadow Home Secretary: I do not have all the answers.

[Joanna Cherry]

My hon. Friend sat on the Bill Committee with me and will remember that we heard evidence that if, for example, he wanted to see whether a missing child had been on Facebook, all that the internet connection record would show was whether they had been on Facebook, not whom they had been in contact with. Does he therefore agree that the utility of internet connection records for tracing missing children, which we all recognise is of the utmost importance, is perhaps being rather overblown?

[Gavin Newlands]

I wholeheartedly agree with my hon. and learned Friend.

Before I was intervened on the first time, I was saying that the Joint Committee on the draft Communications Data Bill said that

“storing web log data, however securely, carries the possible risk that it may be hacked into or may fall accidentally into the wrong hands, and that, if this were to happen, potentially damaging inferences about people’s interests or activities could be drawn.”

It is clear that the intelligence services and the police need powers that befit the digital age in order to keep us safe and to catch perpetrators. However, when seeking to introduce powers as intrusive such as ICRs, it is incumbent on the Government to ensure that their case is watertight. As my hon. and learned Friend said in Committee, we very much hope to be an independent country writing our own security policy, so we do not take our opposition to such measures lightly.

In drafting such a proposition, with such a loose definition, the Government are asking us all to trust them and to sign a blank cheque to allow the wide use of such powers without knowing what their full impact, costs or consequences will be. The Home Office has said that companies will be reimbursed for the additional costs placed on them, but that commitment does not appear in the Bill. The Government have earmarked £175 million to reimburse companies for the costs of meeting their new responsibilities. However, most in the sector believe that is a vast underestimation of what the true costs will eventually amount to. Owing to uncertainty about the extent and definition of ICRs and the extension of communication service providers that will be affected by the proposed provision, the cost is difficult to estimate, but industry figures have told me that they expect it to be anywhere between £1 billion and £3 billion.

I appreciate that the Minister, in a letter to the Committee, reiterated the Government’s intention to bear the cost of implementation, but without clearer information we cannot expect Parliament to sign a blank cheque. Between £175 million and £3 billion is a rather large range, and at a time when disabled people are losing benefits and the WASPI women cannot get the pension they were promised, this seems a rather anomalous and large black hole in potential Government spending. I have said in the past that the Government know the cost of everything and the value of nothing, but in this case they do not even know the cost.

This is a global problem and as such requires a global solution, and it is important that we reflect on what other countries have done to address the issue and that we learn any lessons from their experiences. It is unfortunate, therefore, that a similar scheme of logging data in Denmark has recently been abandoned. That scheme operated for seven years, and although I accept that there were differences in that scheme, there were many similarities. Upon its abandonment, the Danish security services expressed their view about the difficulty of being able to make proper and effective use of the large amount of data that had been gathered. It seems that, instead of spending their valuable time locating criminals, the security services will spend most of it working on spreadsheets and filtering out the useless from the useful. It should be noted that the Danish ICR model was proving too expensive and the cost spiralled out of control, that Australia considered the proposal but decided not to pursue it, and that, as we have heard, the United States is rescinding many of its intrusive powers and moving in the opposite direction.

It is for those reasons that we believe the case for ICRs has simply not been made. The Government have failed to convince us, and those working in the industry, that ICRs are necessary, proportionate and in accordance with the law. We tabled an amendment to remove them from the Bill, but it was not accepted, which leaves us no option but to vote against the Bill in its entirety. That is not a step that we take lightly, but, ultimately, it is a necessary step.

In the event that we are unsuccessful in bringing down the Bill, we will still attempt to ameliorate aspects of it in order to protect smaller companies, especially those that supply lifeline and low-profit services to rural communities. New clause 26, which I tabled along with SNP colleagues, would exclude the providers of rural or community access communication services and small service providers from the obligation to collect and retain data. I have mentioned the deep concern in the sector about the expense that the Bill will impose on industry. I am sure that the Government will not want to put any businesses in a perilous situation, particularly those that operate with smaller cash flows and tighter margins in rural Scotland in order to provide a vital service for their local communities.

The Committee was provided with written evidence stating that smaller internet service providers were still subject to the same demands as the much larger organisations that operate on the world stage. Organisations such as HUBS are supplying vital internet connections to some of the most remote communities. If the Government railroad these clauses through the House without proper regard for the impact they will have, they will seriously endanger those small businesses and restrict internet use for some of our rural communities.

[Dr Murrison]

Will the hon. Gentleman give way?

[Gavin Newlands]

I am afraid not, because I do not have time. Plenty of other Members want to speak.

You will pleased to hear, Mr Speaker, that I am nearing the end of my speech. [Hon. Members: “Hear, hear.”] Thank you.

We live in a digital age. I therefore welcome the Government’s proposed digital economy Bill, and, indeed, the Chancellor’s commitment to match the Scottish Government’s commitment to universal broadband provision. The digital economy Bill is intended to make the United Kingdom a world leader in digital provision. However, according to many in the industry, this Bill will completely undermine that goal before the draft Bill has even been printed.

It is only right and proper for the Government to consider and propose new powers that our security agencies can use to keep us safe, but in many parts of the Bill the Government fail to make the case that the powers they want to introduce will be effective, are necessary, are in line with our right to privacy, and cannot be challenged in the courts. It is for those reasons that the SNP are still unconvinced of the merits of the Bill, and will vote against its Third Reading later this evening.

[Will Quince (Colchester) (Con)]

I rise to support new clause 19, which stands in my name. It is a scoping amendment, which I do not intend to press. A large number of amendments have been tabled so I will be extremely brief, but I want to pay tribute to my hon. and learned Friend the Solicitor General, who has been incredibly receptive to the concerns that I have raised throughout this process.

We all remember the examples of local authorities using powers inappropriately, whether that has involved rummaging through our bins or spying on paper boys to determine whether they have the right to work. I welcome the steps that the Government have taken to try to address that, including the creation of a new criminal penalty for the misuse of these powers. However, I believe that more needs to be done to ensure that the wider public can be confident that we will not see a repeat of history, and will not see councils misusing the powers in the future.

New clause 19 would introduce a requirement that when a judicial commissioner approves an authorisation for telecommunications data for a designated senior officer of a local authority, that senior officer must notify his or her chief executive before the authorisation has taken effect. I believe that that will help for two reasons. It will discourage over-zealous officers from applying for authorisations if they know that their chief executives will see those authorisations before they take effect, and, in the event that a council officer is found to have misused the powers, the chief executive will be accountable. Chief executives will never be able to say that they did not know what was happening in their authorities.