Data Protection Bill [Lords]

Jim Cunningham Excerpts

Money resolution: House of Commons & Programme motion: House of Commons
Monday 5th March 2018 Commons Chamber

[Tom Watson (West Bromwich East) (Lab)]

I refer hon. Members to my declaration in the Register of Members’ Financial Interests, and, at the risk of emptying the Chamber early this evening, I should start by reassuring the Minister that Labour will not be opposing this Bill on Second Reading. It is an important piece of legislation, and parts of it absolutely have to be incorporated into domestic law by May this year, and we do not intend to stand in its way.

But that is not to say that we are content with the Bill as it is. Many improvements have been made in the other place—many with cross-party support, and some, which I will discuss in more detail, against the wishes of the Government—but there are more changes that we need to make, and the Opposition will be pressing for them as the Bill proceeds through its Commons stages. I pay tribute to the work of peers on all sides, and in particular to my Labour colleagues, Lord Stevenson, Lord Kennedy, Lord Griffiths and Lord Grantchester, for their work on the Opposition Front Bench.

In 2016, I set up the independent Future of Work Commission to look at the challenges and opportunities created by the new technological revolution. Just as Harold Wilson spoke 54 years ago about the opportunities of the “white heat” of what was then cutting-edge technology, so we now need to make sure that we are seizing the opportunities that the new digital economy presents to us. That is where many of the jobs of the future lie—where the raw materials are not steel or minerals or plastics, but data. The commission concluded that, with the right policy framework around it, the new technologies of artificial intelligence, massive processing power and digital transfer can create as many jobs as they destroy and enhance many jobs that currently exist.

None of that is inevitable, however, because we are not doing enough to exploit the opportunities created by this new world of work. Britain is unprepared for the technological revolution. We think this demands strategic planning, as the policy choices we make now will shape how technological change will affect the work and lives of our citizens.

I think we all in this House accept that, as we leave the European Union, we need to make sure that we still have unhindered flows of data between the EU and the UK; anything else would do huge damage to our economy. As the House of Lords European Union Committee report on “Brexit: the EU data protection package” concluded,

“any arrangement that resulted in greater friction around data transfers between the UK and the EU post-Brexit could hinder police and security cooperation. It could also present a non-tariff barrier to trade, particularly in services, putting companies operating out of the UK at a competitive disadvantage.”

So it is vital that we get this Bill right.

We will be seeking more information from the Government than was forthcoming in the Bill’s passage through the other place on how we will allow continuous data flows once Britain is no longer a member of the EU and, in the EU’s terms, a “third country”. Data is the raw material of the digital economy. Businesses, individuals, Government agencies and others need to exchange and process data, but to do that safely, we need proper protections so that it cannot be stolen, used without our consent or misused. If we are to build a strong digital economy, we need strong foundations, because trade is built on trust. Consumers, particularly children and vulnerable adults, need to be better supported and protected. That is why my right hon. Friend the Member for Birmingham, Hodge Hill (Liam Byrne), who will be doing much of the heavy lifting on the Bill as it proceeds through Committee, has talked about the need for a new Bill of data and digital rights—a broad set of regulatory structures for data capitalism.

We hope that our proposals are more ambitious than the Government’s digital charter and less reliant on voluntary codes of conduct, which can be ignored by big social media and data giants. Instead, we believe we need a statutory code of enforceable rights offering people proper control over their own data, appropriate remedies when their data is misused and proportionate sanctions to deter unlawful data processing. Rights for children need to be at the core of this. Children make up one third of internet users worldwide, and one in five in the UK, so we welcome the improvements made by Baroness Kidron’s amendment on age-appropriate design, but we want to work with the Government to do more to ensure that children are properly served by the Bill.

We believe that a right of privacy is key to any strong regime of rights. It is easy for individuals to have their privacy invaded as a result of sharing data on the internet, so we will be pushing for the incorporation of article 8 of the charter of fundamental rights, with all the appropriate safeguards and balancing tests. We hope that the Government will see the benefit of this to a future adequacy decision with the EU.

[Mr Jim Cunningham (Coventry South) (Lab)]

I am sure that, like me, my hon. Friend has had a number of letters from people who are concerned about their privacy and their rights in relation to privacy.

[Tom Watson]

Yes, indeed. Privacy in the age of the net, with huge data flows and information in abundance, is the debate of the age. There is no doubt that this House will be discussing privacy in the years to come, beyond this Bill and beyond further regulation. In this particular Bill, however, we must ensure that privacy is not just entrusted to the delegated powers of the Minister and that it is a fundamental right that our citizens can start to develop.

Parliament is also considering the European Union (Withdrawal) Bill, which, in combination with this Bill, risks eliminating the GDPR as a check on the misuse of ministerial authority to undermine data privacy rights. It gives Ministers power to make secondary legislation to amend any retained EU law, which would include those governing data protection rights. The European Union (Withdrawal) Bill, as currently drafted, eliminates the important data protection rights of article 8, which would otherwise constrain Ministers’ ability to erode fundamental data privacy protections. So we want to make it explicit in the Bill that those protections cannot be eroded. Strong rights need strong enforcement and a proper mechanism to enable enforcement to take place. This is all the more vital where the data rights of children are involved. We therefore want to see the Bill amended to ensure that consumer groups that operate in the privacy field can act on behalf of data subjects without a particular complaint—a right of collective, not just individual, redress.

The Government have chosen not to implement article 80(2) of the GDPR, which gives greater ability for civil society and other representative bodies to act on behalf of citizens and mirrors consumer rights in goods and services. A super-complainant system would help to protect anonymity and create a stronger enforcement framework. Collective redress and representative action led by a recognised body would also help individuals to enforce their rights to data protection when their data is exposed, stolen or misused as part of a large data breach that affects multiple people. It would create a stronger enforcement framework, which would build and reinforce trust without overburdening existing institutions.

I want to turn to two amendments—improvements—made in the other place that the Government have already said they wish to overturn. Indeed, as soon as the votes had taken place, the Secretary of State tweeted that they were votes against press freedom—even though they were also votes in favour of a policy agreed by all parties in 2012, and for which he himself, the former Prime Minister and the current Prime Minister had previously voted. So it was no great surprise when the Secretary of State made his announcement last week about ditching Leveson part 2 and binning section 40 of the Crime and Courts Act 2013. His tweet, as I think he will recognise, somewhat pre-empted his consultation response. However, we live in a country where Parliament is sovereign, so the decision is not entirely up to him. It is up to us in this House. We can decide whether to keep the promises made by David Cameron—and by all parties—to the victims of phone hacking and other press abuse in 2012, or to break them.