Investigatory Powers (Amendment) Bill [Lords]

John Hayes Excerpts

2nd reading
Monday 19th February 2024 Commons Chamber

[James Cleverly]

I listened carefully to the right hon. Gentleman’s point. I am not sure it is directly relevant to this matter, but I take on board the points that he makes. He will forgive me if I do not address them directly at this point; I want to consider them properly.

The IPA is sound legislation, but the nature of these threats has evolved since 2016, and we are confronted by greater global instability and technological advances, and they demand that we act. Terrorists, child abusers, organised criminals and malign actors from hostile states have exploited technological advances. Our job is to ensure that the UK’s investigatory powers framework remains fit for purpose. The changes that this Bill proposes were informed by the independent review of the IPA published by Lord Anderson of Ipswich in June 2023. The Bill received cross-party and Cross-Bench support as it passed through the other place. Every Government amendment was accepted, and I thank the members of the Intelligence and Security Committee of Parliament for the productive way they engaged with and helped to shape the Bill.

In particular, we have agreed to tighten the drafting of clauses 22 and 23 in line with amendments proposed by the Intelligence and Security Committee. Those changes put beyond doubt that the Prime Minister may delegate warrants for the purposes of obtaining communications of parliamentarians in two, and only two, exceptional circumstances: the personal incapacity of the Prime Minister and a lack of access to secure communications. There is also a limit of five Secretaries of State to whom this responsibility could be delegated in those circumstances. Further to that, in respect of new part 7A, parliamentary scrutiny will be enhanced through a statutory requirement for the Secretary of State annually to inform the Intelligence and Security Committee about the new regime for bulk personal datasets.

[Sir John Hayes (South Holland and The Deepings) (Con)]

My right hon. Friend mentioned the ISC’s scrutiny of these matters. He will understand the concern about widening the number of people who can play the role previously played exclusively by the Prime Minister. I understand the reasons for that, but has he considered limiting that to those Secretaries of State who have warranting powers?

[James Cleverly]

We looked at that. There is a balance to be struck, and actually the bulk of those Secretaries of State to whom the function could be delegated in those two exceptional circumstances do have warranting powers—I think the Secretary of State for Defence is the only one who does not. My right hon. Friend’s point is a fair one, but the scope of the Bill is not much greater than that.

--- Later in debate ---

[Sir John Hayes (South Holland and The Deepings) (Con)]

Hegel said, “What is reasonable is real, and what is real is reasonable.” In facing the very real threats that pervade, it is certainly reasonable that we equip those missioned to keep us safe with the powers they need to do so. That is partly about putting in place a legislative framework that allows them to counter those threats, for we know what will happen otherwise. We sit in this Chamber graced by the coats of arms of our former colleagues Jo Cox and David Amess. We in this place know what it means when those missioned to keep us safe are unable to do so.

On that basis, I was proud and pleased to take the original Investigatory Powers Bill through this House—some veterans of its passage are in the Chamber tonight—and, in doing so, we were conscious of the need to strike a balance between, on the one hand, providing the powers and equipping the police and the security services with the necessary mechanisms to do their job and, on the other hand, retaining both the privacy of individuals and putting in place the necessary safeguards mentioned by the shadow Home Secretary, the right hon. Member for Normanton, Pontefract and Castleford (Yvette Cooper).

That balance was at the heart of our considerations then. I am conscious that I said in that debate:

“It is important to understand that privacy is at the very core of the Bill… The protection of private interests and the protection of the public are at the heart of all we seek to do”.––[Official Report, Investigatory Powers Public Bill Committee, 12 April 2016; c. 90.]

That remains so, but it is also important to recognise that we always anticipated that the legislative arena was bound to require a dynamic approach, of the kind we are discussing this evening, and that we would need to update the legislation to deal with the changing character of the threats I described. It comes as no surprise that the Government have introduced legislation to do just that, to add to what is already on the statute book and to make it more appropriate.

[Joanna Cherry]

The right hon. Gentleman and I often crossed swords during the passage of the 2016 Act, but we have since reached a point of rapprochement on discovering our mutual passion for the importance of freedom of expression. From what he is saying this evening, I think we can also agree on the importance of privacy. Of course, that comes from the right to a private and family life under article 8 of the European convention on human rights. Does he agree that it is unfortunate, given this Bill’s huge implications for our constituents’ privacy, that the Government have decided not to conduct a privacy impact assessment? Surely such an assessment is vital, and it is perhaps something upon which he and I can again, rather unusually, agree.

[Sir John Hayes]

Our agreements are becoming rather less unusual. I do not know whether that gives the hon. and learned Lady any pleasure, or whether it causes her pain. None the less, she is right that, when we consider such legislation, it is important that it is scrutinised to an even greater degree than we would normally expect in this place.

The 2016 Act was considered by three Committees of this House. It was subject to pre-legislative scrutiny by a Joint Committee of both Houses of Parliament and, indeed, the bulk powers, which have been mentioned, were subject to an independent review by David Anderson, who has since been elevated to become Lord Anderson.

The hon. and learned Lady is right that the need for scrutiny is profound, particularly when we equip organisations with extensive authority to invade private space. Of course, we will not know much of what they do. Many of the individuals involved in the security services and the police, and the work they do, are rightly unknown to all but a few, so it is all the more important that, in giving them such authority, we behave in the way that the hon. and learned Lady describes—I am now adding to the small, two-person coalition formed between us.

It is right that the legislation is updated to make it fit for purpose. The ISC, of which I am also proud to be a member, has been told of the need for urgent, targeted and necessary changes. When we consider this Bill, we should test whether its provisions are indeed urgent, targeted and necessary. I am not absolutely convinced that all we see before us passes that test, and I will say a little more about that when I come to clause 14 and its associated schedule.

There is more expertise in the Chamber tonight than I could possibly imagine but, by way of background for the wider audience, I will say a word about what the 2016 Act does and why this Bill therefore matters. The Act provides the law-enforcement and security services with the vital powers they need to keep us safe, and it does so in a way that is clear and transparent.

When we passed the Act into law, we ensured that the safeguard mechanisms were radically overhauled. The innovative double lock that we put in place was, at the time, unprecedented. As the shadow Home Secretary said, it does two things: it provides the necessary protection that she describes, but it also gives the security services confidence that what they are doing is not only authorised but thoroughly checked. It is also good for Ministers to know that the process has judicial oversight as well as political oversight.

There have been a number of changes since the Act was passed, both in the job done by the security and intelligence services and the police and in the reason they have to do that job, for the people who seek to do us harm are dynamic, too; they change what they do, and technology has also changed. All of that explains why this Bill is, in broad terms, welcome and necessary.

But the powers I describe are not given solely to the people I mentioned. They are also given to a number of other public bodies. This was debated at great length when the 2016 Act was considered in this place. These public bodies—ranging from local authorities to the Environment Agency, the Health and Safety Executive and all kinds of others—have proper legal functions. I am not debating that, but they are not quite of a kind with the security services and the police. To grant these bodies such intrusive powers was always controversial and, to put it mildly, was bound to give rise to some scepticism.

When Parliament considered the Act, we deliberated on that provision in great detail and took a very considered and cautious decision to restrict the use of the power, which we considered to be intrusive. As a result, the public bodies that I have described, including the Environment Agency, the Health and Safety Executive and local authorities, are required to take further procedural steps in order to compel the disclosure of communications data from telecommunications operators. They must obtain either an authorisation under the current IPA, a court order or other judicial authorisation, or regulatory powers in relation to telecommunications or postal operators, or they must obtain the communications data as secondary data as part of a valid interception or equipment interference warrant. So their ability to take advantage of the powers within the existing Act is both limited, particular and subject to those safeguards. The Bill before us seeks to remove that requirement for those further procedural steps in relation to a wide range of public regulatory authorities.

Worse still—I hope the Minister will correct this in his summation—we have yet to learn which those bodies are, as we have not seen a list of the authorities. I hope we will get that list, if not tonight—as it is a big ask for the Minister to read them all out in his 10-minute summation, I hope he will write to the House, and put a copy of the letter in the Library, explaining which bodies will enjoy those powers.

The Government’s argument for removing the restrictions I have set out is that a broader array of communications now fall into the category of communications data—the definition of communications data has broadened—and that a wider number of organisations now constitute telecommunications operators. As a result, it is said that the current restrictions prevent some regulatory authorities from acquiring the information necessary to carry out their statutory responsibilities. The problem with that argument is that unless we know what those regulatory functions are and unless we understand which bodies are involved in the supervisory functions, it is hard to know whether the changes before the House can be legitimised. I have no doubt that will be explored in Committee— I would be amazed if it is not—but it would be helpful if the Minister could be ahead of that further consideration and clarify which specific bodies will fall into this category.

As I said, the issue was highly scrutinised when we last debated these matters. At that time, the powers were tied to national security and serious crime circumstances only, to avoid impinging on the very privacy mentioned by the hon. and learned Member for Edinburgh South West (Joanna Cherry). For that reason too, Parliament granted the powers to a limited range of organisations. We should not brush that aside lightly. Colleagues will be aware of various reports of the intrusive use of investigatory powers by local authorities and other public bodies. The House would not be content to introduce sweeping powers for an unknown and potentially unlimited number of public bodies, when a previous Parliament decided that was too intrusive. I would like the Minister to satisfy the House about the necessity of the change, to specify to whom the change will apply, and to reassure us that there is no weakening of the core connection between the privacy of the individual and the necessary powers available to do what is legally right.

As I said earlier, in broad terms the Bill is welcome. It is important to understand that we need to update the legal framework in which those missioned to keep us safe operate, but the Bill can be improved during its scrutiny. I simply point out that when we debated the Act in its original form, we recognised that through scrutiny that Bill could be improved. As we continue consideration of this important measure, I hope that this Minister—one of my successors as Security Minister—will recognise the same.

--- Later in debate ---

[The Minister for Security (Tom Tugendhat)]

I thank hon. and right hon. Members from across the House for their contributions not just today, but throughout the many different stages of the Bill. I pay huge tribute to the Members of the other place who have contributed enormously, in particular Lord Anderson, who has been an exceptional asset to the passage of the Bill and the condition it is in, and Lord West who, as a member of the Intelligence and Security Committee, not only shepherded some extremely important amendments into the Bill, but was kind enough to say that it was the first time in 14 years that he had ever had an amendment accepted by the Government. I am delighted to say that it was to this Bill. It was because we are so committed to working with all parts of both Houses and with the ISC that we got so much through in the other place. [Interruption.] That said, many comments will no doubt be raised in this House. I can assure hon. Members, especially the right hon. Member for North Durham (Mr Jones), that I will approach all suggestions in the way that I have done to date. Where we may not agree—it may not be that he is right, or that I am right—it will be for good reason and I will set out my reasons in the appropriate way.

The Bill is about one fundamental thing: the security of the British people. We rightly heard from my hon. Friend the Member for Broxbourne (Sir Charles Walker) about the nature of freedom, but the truth is that freedom without security is impossible. It is a chimera. The Bill is about ensuring that the British people have the security to enable that freedom. That is an absolutely vital responsibility not just of this Government, but of this House and the other place. I am grateful for the work that the hon. Member for Barnsley Central (Dan Jarvis) and the shadow Home Secretary, the right hon. Member for Normanton, Pontefract and Castleford (Yvette Cooper) have put in to ensure the co-operative, bipartisan and open approach to the Bill, as is merited by the work of our fantastic intelligence services to provide security for our whole country.

As the British public would expect, we keep our approach to national security under constant review. Where we identify the need for change or improvement, we will not hesitate to act. That is why we have brought forward the Bill, which acts on the findings of the Home Secretary’s report and Lord Anderson’s independent review into the Investigatory Powers Act 2016. Hon. and right hon. Members will not need me to rehearse the arguments, but we have seen an extraordinary, rapid evolution in the nature of the threats since the 2016 Act: Russia’s threat to the whole of Europe and not just to Ukraine; the violence that Iran is trying to bring not just in the middle east but even on to our own shores; and the way technology has enabled hostile states not only to steal our technology but to introduce intelligence-gathering platforms into our country through the guise of car sales.

We have seen a change in the way technology works and a change in the nature of the threats, and we must keep up to date with those changes. That is why this work is so important. It is essential that the United Kingdom’s investigatory powers framework remains fit for purpose to help our intelligence agencies detect and stop some of the most serious threats posed to the UK and its citizens, including threats from terrorism, state threats, and child sexual abuse and exploitation.

Because these are exceptional powers, Members have rightly pointed out that they require appropriate, robust and, in this case, world-leading safeguards, and that is what we have sought to set out. The changes in the Bill are relatively narrow in scope, but unless we make them now, the ability of our agencies to tackle evolving threats will be increasingly constrained in the face of global instability, technological advances and state hostility, so now is the time to act.

Let me now deal with some of the points that have been raised. The hon. Member for Cumbernauld, Kilsyth and Kirkintilloch East (Stuart C. McDonald) raised a rather interesting point about the changes to “lawful authority” in clause 12 in respect of published data. The purpose of new subsection (3A) is for material that has already been published not to require additional authority for its disclosure by a telecommunications operator to a relevant public authority. The definition of “publish” and reference to “a section of the public” would not include private messages unless they had been made public in some other way—just as our sitting room could not be considered a public place unless we opened it up to the public. It would be our choice, and nothing to do with the nature of the building.

The hon. and learned Member for Edinburgh South West (Joanna Cherry), who has made important contributions through her chairmanship of the Joint Committee on Human Rights, raised questions about the transparency safeguards in the 2016 Act. Those extremely robust safeguards are centred on considerations relating to intrusion into privacy, and that will remain the case in the Bill. They include a requirement for investigatory powers to be used in a “necessary and proportionate” way, with independent oversight by the Investigatory Powers Commissioner and redress through the Investigatory Powers Tribunal.

My right hon. Friend the Member for South Holland and The Deepings (Sir John Hayes) contributed in his usual robust fashion to the debate—and, I should add, to the session that I was fortunate enough to have with the Intelligence and Security Committee, in which he was enormously helpful in assisting me with some changes to the Bill. He spoke about the five individuals who could be designated by the Prime Minister, and asked why we had not referred specifically to “those with warranting powers”. It is possible that a Minister with warranting powers who had that experience would then be moved to another Department, or indeed that the machinery of government change would alter the nature of the oversight. While we felt that it was right to limit the number to as few as possible, we also felt that it was right to have a relevant selection, which is why we left the number at five—after some very good consultation with the ISC, for which I am extremely grateful to my right hon. Friend the Member for New Forest East (Sir Julian Lewis) .

[Sir John Hayes]

My right hon. Friend has been immensely generous both in giving way and in his earlier comments about my role. Will he briefly deal with the issue of the other bodies with the regulatory function who can compel the release of communications data? As he will remember, the point I made was that the existing law obliges them to take further procedural steps before they do so. Why is that no longer deemed appropriate?

[Tom Tugendhat]

As my right hon. Friend will know, several powers in the earlier Bill—the one that he took through the House—were indeed overseen in various different ways. The Bill does not seek to undermine any of that oversight; what it seeks to do is clarify, in certain areas, where it is necessary. My right hon. Friend has highlighted individual agencies or bodies, and I should be happy to write to him to ensure he is aware of exactly where that is being covered.

The right hon. Member for North Durham spoke about prior judicial authorisation for ICRs. The purpose of the Bill is to try to streamline operations for the intelligence services in areas where the risk is of, as we are calling it, low or no expectation of privacy. He will have seen in the Bill what the expectation means, including areas where information has already been readily made public. I accept his commentary and I would be happy to enter into further conversations with him, but the reason we are not currently going down that route is simply that the existing law, the IPA 2016, allows the collection of bulk data with prior authorisation. This is intended to speed the process up. If we put in the measures he is referring to, we would effectively remain in the same place that we are now. That would make it harder for the volume of data that is now coming to be considered by the intelligence agencies. That is why we have made the provision for a subsequent approval rather than a prior approval. He is right to say that it involves a maximum of a year, although I think it unlikely that it would go to that maximum. That will be in cases where this is low or no expectation of privacy—after it has already been agreed by a judge to be in the correct category. I think the right hon. Gentleman might be looking at this through the other end of the telescope.

Investigatory Powers (Amendment) Bill [ Lords ] (First sitting)

John Hayes Excerpts

Committee stage & Report stage
Thursday 7th March 2024 Public Bill Committees

[Mr Kevan Jones (North Durham) (Lab)]

It is a pleasure to serve on this Committee with you in the Chair, Mrs Cummins.

My hon. Friend the Member for Barnsley Central said very clearly that there is general support for the Bill. The need for it is self-evident: things have moved on since the passage of the 2016 Act—indeed, they have moved on very quickly in terms of the amount of data there is, not only data that the security services have to deal with but data in general life.

Bringing the legislation up to date is important, but if we look at the Hansard reports of the debates in 2016, when the right hon. Member for South Holland and The Deepings took the original legislation through the House, we see that there was then, quite rightly, concern that the state acquiring bulk data was intrusive into people’s private lives.

Having read those Hansard reports a couple of days ago, I accept that some of the concerns expressed in 2016 were overblown, as are some of the concerns expressed about this Bill. Frankly, if the accusations regarding what our security services are able to do were true, they would be 10 times, if not 100 times bigger than the actual security services we have today. Nevertheless, it is important in a democracy to ensure that the security services act proportionately—I am confident that they do—and that there is the necessary oversight of their actions and how they deal with the data they have. It is not just parliamentarians who need reassurance in that regard, but the public. The public need reassurance about the data that the state is holding.

Examples have been given, but frankly, they are a bit silly, because things such as the electoral register, which you, Mrs Cummins, I and everybody else can access, fall under the existing regime. The expectation that the data will not be made public is ridiculous, and the same is true of some of the other examples that have been given. For instance, some datasets for machine learning are open on the internet for everybody to see. I do not have any problem with that and I do not think that anybody else does.

Oversight, which we will discuss later, is important. We are giving the security services the powers to determine what is low and what is no. Do I trust that they will have the protocols in place to ensure that that process is done fairly? Yes I do, but I have been on the Intelligence and Security Committee for the last seven years; I know exactly how the protocols work internally in those organisations. To reassure the general public, we need a definition of how this process will take place. I will not touch on that now, but later I will raise the question of how we will have independent oversight of that process.

Neither I nor anyone else is saying that we distrust how the security services will handle those datasets, but one thing the ISC has been very clear on is that if we are going to extend the security services’ powers, there needs to be a corresponding extension of oversight to balance that. I do not want to put in place oversight that prevents operational effectiveness; it would be silly to give the security services powers and then make it impossible or too onerous for them to operate in practice, but striking a balance is important in a democracy.

We broadly got that balance right in the 2016 Act. Looking at international comparisons, we are way ahead of many other democracies in how we deal with oversight of those potentially very delicate issues.

[Sir John Hayes (South Holland and The Deepings) (Con)]

I will not detain the Committee unduly, my Whip will be pleased to know. However, I feel it is important at this juncture—in part because, as the right hon. Member for North Durham says, I was responsible for taking the 2016 legislation through the House, and in part because of my current role on the ISC—to make some comment on the first part of this Bill, which deals with bulk powers. There are misassumptions about bulk powers. The Minister will be aware of how vital they are to the security and intelligence services and to the police. These powers are used in almost all investigations —95% of them—and they are critical if we are to deal with the changing character of the threat we face.

Contextually it is important to note that when the 2016 Act was passed, the nature of the threat was metamorphosising, and that is even more the case now. The scale and character of the threats are altering all the time, so the legal powers available to those we mission to keep us safe need to be fit for purpose and up to date. We knew that when we passed the 2016 Act; we knew that the legislation was dynamic and that it would be supplemented over time to take account of that metamorphosis, which takes two forms. First, the threat now is probably greater from state actors, and secondly, it is greater from those inspired to do harm via the internet in particular. That situation makes an implicit case for the kind of measures the Minister has brought before us today.

Furthermore, there is a paradoxical change in the methodology used by those who seek to do us harm. Because of the nature of technology, those people are now able to do things that they were not able to do when we debated the original Act that this Bill amends. I describe the change as paradoxical because those people have simultaneously learned that they can do immense harm with a vehicle and crude weapon; we know that from some tragic cases in recent years. Those inspired people do not need a sophisticated organisation with all kinds of capabilities; they simply need the perverse, indeed perverted, will to do damage. All of those factors legitimise the case for the measures in the Bill, which we will consider over the coming hours and days—but not weeks I am pleased to say, unless something goes badly wrong.

--- Later in debate ---

[Mr Jones]

I have no reasonable expectation that those posts are private. I am not suggesting that the security services will want to look at North Durham mornings, but those posts are something that I have put in the public domain. That is fine, but it is different from what the hon. Member for Cumbernauld, Kilsyth and Kirkintilloch East was talking about. We might share a photograph or information on a small Facebook group, but do we expect everyone to have access to it? I am not sure that we do. Where does that fit into the definition of “reasonable expectation”? Would the individual think that it was available? That is the point.

[Sir John Hayes]

The right hon. Gentleman is making a persuasive argument about public expectations of what is reasonable versus what the Bill says and what the agencies do. He is right that there are good operational validations through the agencies’ protocols, but perhaps the best way of explaining the marriage between expectation and what is real would be by example. It would be helpful to hear some examples from the Minister of how the powers that are currently used, and those that will be used under the Bill, are necessary and proportionate; for all these things are about necessity and proportionality. By example, we can probably put this matter to bed.

[Mr Jones]

Yes. A point was also raised about leaked data. If something is leaked on the internet or any other portal and everyone has access to it, do we then assume that the security services think that it comes under “reasonable expectation”, even though the individual whose data it was perhaps did not want it out there?

I accept that under proposed new section 226B(4)(b),

“the authorisation is necessary for the purpose of the exercise of any function of the intelligence service”,

which is fine. I do not think that people will go on fishing expeditions—we will come on to that issue later— but I note that the phrase “economic well-being” appears later in the Bill, but not in this part. When I have raised the point before, the Government have argued that the phrase is used in other legislation and that they want to be consistent.

If nothing is to be changed in the Bill today or on Report, the Minister needs to put something on the record so that it when somebody challenges this provision in future, which they will, the Government’s intention is clear now and can be interpreted later.

--- Later in debate ---

[Stuart C. McDonald]

I am grateful for that. Could the Minister perhaps follow up on that in writing? That is useful to have on the record.

This discussion is mainly about amendment 23; the other amendments are all consequential. Basically, the amendments would remove the concept of category authorisations from the Bill. Again, I take the same approach as the shadow Minister; I will not be pushing any of these amendments to a vote, but they are designed to probe and allow for debate on some of the important concepts in the Bill.

It is this clause, and the notion of category authorisations, that leads to the restricted judicial oversight of the “low or no” categories that are being retained. It would be useful for the Minister to give us an example here of what a category authorisation might look like. I am not on the ISC, so it is hard for me to understand exactly how broadly they might be drafted. I absolutely appreciate that there are operational reasons why the Government might have to be careful about the examples they give. However, to provide some reassurance, I am sure it would be possible to put on record what one of these authorisations might look like, just so we know how broadly they will be drafted, or indeed how focused they will be.

The Minister spoke a little about oversight at the end of his previous contribution, but it is the oversight of category authorisations that causes me some concern. The tests for a category authorisation set out in proposed new section 226BA of the Investigatory Powers Act 2016 are simply that it must be classed as “low or no” and that the decision has been approved by a judicial commissioner. There are none of the other tests that are set out for the individual authorisation, such as it being necessary for the

“exercise of any function of the intelligence service,”

that it

“is proportionate to what is sought to be achieved,”

or that there are various arrangements in place.

It seems to me that the degree of oversight at the stage of granting a category authorisation is far more restricted. That has a knock-on consequence: when the judicial commissioner comes to review the granting of a category authorisation, they are only then considering whether it applies to a “low or no” group of datasets. The judicial commissioner, even on the low-level judicial review criteria, does not look at whether the category authorisation will be necessary or proportionate, or any of the other tests for the other authorisation.

[Sir John Hayes]

I do not want to do the Minister’s job for him, because I am sure he will say this anyway, but when an application is made by an agency for the acquisition and retention of bulk personal datasets, a specific case needs to be made in the warrant application, and a particular case has to be made where that application applies to exceptional material. That case is considered through the double-lock mechanism by both the judicial commissioner and the Minister. That case needs to specify the reason that it is necessary for operational purposes.

[Stuart C. McDonald]

It is useful to have that explanation. I understand that is the existing process, as the 2016 Act applies just now. However, my simple question concerns the fact that that does not seem to be what is set out here.

--- Later in debate ---

[Sir John Hayes]

I endorse what the right hon. Gentleman said. It is a straightforward matter. The Government could give way on this—because they already have the power to ask for it under existing arrangements—by making it a routine, light-touch process. I take the point that we do not want to impair the alacrity that is necessary for the agency. However, I think a simple change would satisfy the right hon. Gentleman, me, and many others.

[Mr Jones]

I agree entirely with the right hon. Gentleman. If the amendment goes into the wash-up of the Bill, things like that will have to be included anyway. I do not understand why the Government are dying in a ditch on quite a small amendment that would make no practical difference at all to the operation of this Bill. There are certain people—not including the Minister, who is quite a reasonable individual—who want to make sure that the ISC cannot claim credit for doing anything, which I think is quite sad. If the Minister cannot agree to the amendment as drafted, I echo the suggestion of my hon. Friend the Member for Barnsley Central that we draft an amendment that the Government are happy with on Report that fulfils our ambitions on oversight, but that is also practically and technically correct. [Interruption.]

--- Later in debate ---

[Tom Tugendhat]

Clause 3—

[Sir John Hayes]

We are making sufficient progress, which perhaps permits me to say a word about why, as we have now dealt with those publicly contentious matters around bulk powers, we can move to the next part of the Bill with greater confidence. The Minister has been crystal clear that he—like me, the right hon. Member for North Durham and other members of this Committee—understands fully the important role of oversight and checks and balances. Those checks and balances are multidimensional because of the role of both those elected to this House and the judiciary. I know he will want to expand on that a little as we come to the next part of the Bill.

--- Later in debate ---

[Dan Jarvis]

I am grateful for the Minister’s response. I have to say, I am struggling to think of a scenario in which it might be necessary and proportionate to examine the marked electoral register. This is something we will reflect on.

[Sir John Hayes]

I broadly support the Minister’s view of this, but the easiest way to establish the case for this is to be clear about its operational purposes. Clearly, one would not expect the Minister or the agencies to speak about the specifics of operations, but dealing with the operational purposes would help the shadow Minister and the Committee. I am sure the Minister would be happy to do that in broad terms, either now or in writing. It would be really helpful to go through the kinds of operational purposes associated with this inquiry. I do not know what the Minister and the shadow Minister think, but that is how I see it.

Investigatory Powers (Amendment) Bill [ Lords ] (Second sitting)

John Hayes Excerpts

Committee stage & Report stage
Thursday 7th March 2024 Public Bill Committees

[The Chair]

The question is that clause—

[Sir John Hayes (South Holland and The Deepings) (Con)]

Before you move to the vote, Mrs Cummins—forgive me for not rising with greater speed—I just wanted to test the Minister on clause 14 in particular. Clause 14 deals with the other public authorities that will enjoy the powers that the Bill affords. That was debated at length when the 2016 Act, which this Bill amends, was considered, and the Minister will recall that I also raised it on Second Reading.

It is of course true that a number of public bodies have lawful powers to intervene in a regulatory function where a malicious activity could have dire consequences. The Minister will have many examples to hand, but I will take just one for the purpose of illustrating my argument. The Environment Agency could intervene in the case of a watercourse that had been poisoned intentionally; that would be a criminal act resulting in an investigation and prosecution. One can imagine a circumstance where it would be necessary for that body to obtain communications data to discover how that occurred.

To be clear—the Minister will no doubt tell us—this is not the “what” being communicated, but the who, the when and the where. That is what we mean when we speak of the powers in the 2016 Act and this new Bill. We are not talking about the “what”; we know the telecommunications operator will be obliged to make available the content of communications data. The endeavour that the agency concerned will be involved in is finding out why something has happened. The “why” will of course be closely associated with the investigation and the possible subsequent prosecution.

--- Later in debate ---

[Tom Tugendhat]

As always, my right hon. Friend asks a pertinent question. I hope he will forgive me for saying that I very much hope that the letter I asked to be sent arrived in his inbox this morning. He may not have seen it, which I completely understand, as there are many pressing issues on his time. I have also attached it into the packet for the Bill and indeed copied it to the ISC secretariat, which has done such an important job in ensuring that we are all as one on this. I hope very much that that will answer my right hon. Friend’s questions. If it does not, he knows where I am—I would be delighted to clarify it further. As my right hon. Friend has very kindly asked, I shall give that list now, for the record: HM Revenue and Customs, the Financial Conduct Authority, the Department for Work and Pensions, the Treasury, the National Crime Agency, the Department for Business and Trade, and the Competition and Markets Authority.

My right hon. Friend reminds me of that famous scene in “Yes, Prime Minister”—thank God defence is held at central authority, or we would not have to worry about the Russians; we would have a civil war in two weeks. His point about local authorities having intelligence powers is valid. They do not have the same intelligence powers as MI5—let us be absolutely clear about that. That is not what we are offering.

[Sir John Hayes]

It does the Minister great credit that he has made that list available during the course of our consideration. That is very important. What I had feared might happen was that we might not get it while we were in Committee. In fact, I have not actually seen it, but I am grateful to him for making it available, at least, during our consideration.

[Mr Kevan Jones (North Durham) (Lab)]

This is an area that concerns me. I am quite certain the security services have protocols on how to deal with such things, but it worries me that the DWP is on that list. Having been involved in work on the Horizon Post Office scandal for many years, I know the DWP did not cover itself in glory on some of those cases. Can the Minister reassure the Committee that there are protocols governing when and how it will use those powers? That, I think, would give the public some assurance that there is a standard for how they will be used.

--- Later in debate ---

[Tom Tugendhat]

I will happily ask. The right hon. Gentleman is asking for internal management structures, though.

[Sir John Hayes]

I am grateful to the Minister for offering me a second bite of the cherry. Perhaps I can offer a Hegelian synthesis between him and the right hon. Member for North Durham. We talked earlier about operational purposes, but we have to be careful about that: in the case of the agents of the police, one cannot publish purposes in fine detail, because that would be unhelpful. However, in broad terms, perhaps the way forward on this is to illustrate the kind of purposes that the bodies the Minister described might employ, within the legal constraints that he just set out. Perhaps that is the way forward; it would certainly satisfy me, and I cannot think that would not help to satisfy the right hon. Member for North Durham, who is a reasonable man—not my right hon. Friend, but a right hon. Gentleman and a personal friend, which is better than being a right hon. Friend.

[Tom Tugendhat]

As always, I welcome my right hon. Friend’s contribution. That is covered in many areas in the letter I wrote to him.

--- Later in debate ---

[Tom Tugendhat]

I am delighted to clarify that the letter was emailed to my right hon. Friend the Member for South Holland and The Deepings. He is a traditionalist in many ways, but I believe he has entered the electronic age.

[Sir John Hayes]

I had it printed out on parchment.

[Stuart C. McDonald]

I beg to ask leave to withdraw the amendment.

Amendment, by leave, withdrawn.

Clause 12 ordered to stand part of the Bill.

Clauses 13 and 14 ordered to stand part of the Bill.

Schedule agreed to.

Clause 15

Internet connection records

Question proposed, That the clause stand part of the Bill.

--- Later in debate ---

[Mr Jones]

I agree with the hon. Member for Cumbernauld, Kilsyth and Kirkintilloch East, and the ISC feels strongly on this issue. We are clearly speaking English and the Minister is speaking Japanese, because this is about understanding what is actually being given to the agencies without any judicial oversight, which is being dismissed as if these powers are no greater or more intrusive.

As the Committee will know, under the IPA an internet connection record is a form of communications data. It contains data on who has accessed something: it does not actually provide the content of what they have seen or been in contact with. However, under the IPA information can be sought to develop knowledge of who is speaking to who. I think the ISC see the value of this for not only security services but issues around child protection and organised crime, as has already been argued. We are giving the security services and agencies a degree of authorisation here, which I would argue they have not had up until now.

We then come to the argument made by the Minister and the Government that these regulations are not any more intrusive than what we have at the moment. I would argue differently because the power is broad. Previously, targeted discovery condition A, under section 62 of the IPA, required that the agency and officer know the service and precise time of use to discover the identity of an individual, so that they actually know what they are targeting. The Minister used the words “fishing expedition”—this regulation will be a fishing expedition. By default, it will bring in a broader range of individuals who have nothing to do with the target the agencies are looking at the time and connection records for, and are of no interest to the agencies or anybody else.

The Government are arguing that this regulation is no more intrusive—but it is, if we are dragging in a large number of people in that way. Actually, by not having any judicial oversight, they are allowing the agencies to agree that internally. Although the intrusion is not deeper, it is certainly a lot broader than what we have at the moment. The Bill says that the new powers can only be used for “national security” and the catch-all phrase

“economic well-being of the United Kingdom”.

I am still yet to be convinced of that terminology, but I understand that the Minister and the civil service like consistency across Bills, and that is why it is in this Bill.

Under sections 60A and 61 of the IPA, requests to obtain an ICR are like requests to obtain other communication data: they have to be “necessary and proportionate”, which runs through all of this. Again, the Government are allowing the agencies to decide what is necessary and proportionate. I am not suggesting for one minute that they are going to go on a fishing expedition, but again there is a problem with the Government’s approach to the Bill, and certainly with the agencies’ approach. They want these powers, and I do not personally have an objection, but we have to look at how other people, who are not drowned in the detail of this Bill, will perceive them. Some opponents would say, “Why should I be dragged into this?” It is really about giving public confidence; as the right hon. Member for South Holland and The Deepings said this morning, when the IPA was passed, it was about trying to reassure people.

It would be very simple to ensure that this regulation has independent judicial oversight, as the hon. Member for Cumbernauld, Kilsyth and Kirkintilloch East has just said. I know the catch-all phrase that the Minister will come back with, because I am a quick learner: he will say, “The IPC has the ability to look back at anything.” Again, that is the haystack—where is the needle? It would be better and more reassuring if they were to have some judicial approval in advance. I will give the Committee one example. Let us suppose that we are looking at train records and patterns of behaviour on WhatsApp or a train-ticketing website. There is possibly a valid reason to do that—to see someone’s patterns of travel, and so on—but it will scoop up a lot of innocent internet users. The assurance here is that they will not be of interest and therefore they will not be part of it, but their information is being dragged into the system. Then a decision has to be made as to which ones people are interested in and which ones they are not.

That is a big change. I accept that it would not be the exact content that somebody accessed, but the connections would be there. It does not sit comfortably with me to leave such a big change to the security services. Knowing them as well as I do, I do not suspect that they will use the provision illegally or for alternative motives, but we have to reassure the public, and I do not think this does that. Would that be onerous? I am not sure that it would be. This comes back to the point that we have made about the ISC all the way through. If we are giving the security services extra powers, we need the counterbalance of a safeguard.

As the right hon. Member for South Holland and The Deepings said this morning, that was exactly how the IPA was approached. Clearly, he was a very good Minister, because he accepted amendments and suggestions, whereas only one has been accepted for this Bill so far. The Minister spoke this morning about working with the ISC. The Minister speaks to us, but he does not necessarily listen to what we say or take a great deal of interest in what we propose. This is an important point. It comes back to the fundamental point that if extra powers are going to be given, it is only right that they come with responsibilities and safeguards.

New condition D removes the existing requirement for the exact service and the precise time of use to be known. Basically, it will now be possible to do a sweep, which will mean dragging people in. Therefore, I cannot see the problem in having some oversight of these powers. I would like to know why the Minister thinks that condition D is not more intrusive. It is more intrusive, because a lot more people will be affected by it. I think the Government are hiding behind the idea that because it is not possible to identify what the individuals have actually seen, it is not really interesting. If that is the case, why have it in the first place? I know the reason for that, but it would be interesting to know what thought has gone into this and how many people will be dragged in. It obviously depends on how the provision would be used in practice. If we went down the street and said to people that we are giving these powers without any judicial oversight—the Minister will say that IPCO can always look at it, and I understand all that—I think that most people would be quite worried. We would give reassurance by providing that important oversight.

This provision certainly needs to be looked at. Is it of benefit and am I convinced that this is a new power that the agencies need? I am, and I think it is right, but coming back to the previous point, we have to ensure that we do not do anything that undermines what is done or that gives ammunition to those people who want to cast aspersions on what is actually done.

I think I know the arguments that the Minister will put forward. We will no doubt come back to this matter on Report, when there will, I think, be amendments from members of the Committee; and if we have an election wash-up, this is one proposal that I think will be pressed by the Opposition.

[Sir John Hayes]

To supplement what the right hon. Gentleman has said, this was part of the original legislation and it is and always has been a controversial aspect of it. There are two things that I would emphasise here. First, it is really important to understand that the kinds of inquiries that would necessitate the use of this power are exceptional. When we considered the original Bill in Committee, one of the arguments was around a criminal threshold: in what circumstances would the public bodies that we are talking about need to avail themselves of the powers? I am on the record as saying at that time that I entirely agreed with the then shadow Minister’s argument that it should not be permitted for minor crimes. In other words, the bodies that the Minister listed earlier would not be using the powers on a routine, daily basis for all kinds of things that they are lawfully entitled to do; they would take advantage of the powers in exceptional cases in which very serious matters were at hand. That would be a helpful way of assuaging some of the doubts raised by the right hon. Member for North Durham.

--- Later in debate ---

[Mr Jones]

Or we could have what was suggested earlier: when the power is used, that is reported to the Investigatory Powers Commissioner, so that it is aware of what is going on and can do something if it has concerns. At the moment, it is presented with a haystack and has to look for the needle.

[Sir John Hayes]

Exactly. That point was made when we debated the original Act, and I think that I committed at the time to those kinds of things being detailed in the annual report. To clarify a point that was made earlier, David Anderson was clear at the time, and has been since, that we cannot detail the operational purposes of the agencies if doing so would compromise them. The techniques and approaches that they necessarily use in the performance of their duties could be compromised if we were to talk in detailed terms about the character of their operational activities. However, we can speak in broader terms about the kinds of circumstances in which powers might be used—and all the more so for the other public bodies, in a sense, because even if a serious criminal investigation is taking place, those investigations are not typically as secret as they might necessarily be in respect of the security and intelligence community.

Perhaps those two grounds—greater sight of the processes in those bodies and clarity about the circumstances in which the powers can be used; in other words, exceptionally and for very serious matters—would be helpful ways of dealing with some of the points raised by my colleague on the ISC, the right hon. Member for North Durham.

[Tom Tugendhat]

As usual, right hon. and hon. Members have raised some excellent points. Let me be clear: it is not true to say that there is no judicial oversight. To say that there is no judicial oversight would be correct if the IPC were not in place. I know what the right hon. Member for North Durham is going to say, but that is a form of judicial oversight.

As to the way in which the authorisations work, I hope that I have been clear—I will repeat it to ensure that I am—that an investigating officer would have to make an application to use the powers. That would have to go to a senior officer in their service who is not in their chain of command: someone who is not overseeing the operation or in their management chain—a separate element. Any abuse of that system could mean that that individual, or those individuals, are in violation of section 11. I know that the right hon. Member for North Durham takes his responsibilities on the ISC exceptionally seriously and is fully aware that sometimes there can be a pressing need for operational action at pace. That is what this is also designed to help. It is important that officers have the ability to act under a regulatory framework that means that abuses are, at worst, extremely limited due to various constraints.

--- Later in debate ---

[Tom Tugendhat]

Let me just finish the point; I know the hon. Member will come back to me.

Condition D is no more intrusive, and it does require the serious crime threshold, which does add an extra layer before it can be used. I hear the hon. Member’s point; the condition still requires proportionality and necessity, so it could not be simply anybody who is using Facebook, because clearly that is not proportionate. It still requires that targeting; it still requires those Venn diagrams, if he likes, to close over a target; and, even then, it requires the serious crime threshold.

[Sir John Hayes]

The key thing to understand here is that the agencies have always had the ability to intercept communications data. Communications data is one’s letters. Communications data is one’s phone calls. We speak about communications data now, mindful of the way that people communicate now, and we think of the internet and telephones, but the process of intercepting communications has been a core part of the work of the agencies since the agencies began, so we need to put this in context.

The difference here is the nature of how people communicate. It is right to say that—I rise to be helpful to the Minister—the character of encryption, in particular, is making it harder, even in the kind of serious cases that have been described, for those who are missioned to keep us safe to do so by accessing the information they need. So it is right that the law needs to be updated. The critical thing for me, therefore, is this matter of the threshold, which was debated when we debated the original Act.

As far as I understand, this Bill does not change the threshold; it reinforces the threshold. If that is the case and, as has been said, exceptionality is a measure of significance and not complexity—some cases will be complicated, but it is about significance—then the only outstanding difference, as the Minister has said, is oversight. I think the reporting in the annual report matters—the right hon. Member for North Durham made that point—and that would be a small concession to make, if I can describe it as such. I take the point about alacrity, too. What we cannot do is slow down the process by making it bureaucratic.

I think there is an easy way out of this. Being very clear about thresholds, as the Minister very helpfully has been today, is perhaps the way out of it. To clarify that in writing might be helpful.

[Tom Tugendhat]

I will give way to the right hon. Member for North Durham.

--- Later in debate ---

[Tom Tugendhat]

I suspect we are not going to come to an agreement on this, so I will probably leave it after this point. The IPCO oversight means that IPCO can look at a request at any point. The maximum period it can go without looking at it is 12 months, but it can look at any point. We have said that requests for communications data must be approved by the Investigatory Powers Commissioner’s Office

“except where they are urgent or are for the purpose of national security”.

That interaction, which the right hon. Gentleman rightly supports, is already there, so I do not accept it is lacking.

On the question of proportionality, the amount of information that one may need to investigate a paedophile network, for example, may mean being slightly vaguer about the specific time, whereas following a known individual may require different forms of flexibility and proportionality. I am afraid I am going to be very cautious about setting out what each one means, because these principles will have to adapt and be applied as appropriate.

[Sir John Hayes]

We are going to have to close this down and move on because we have other things to do. Perhaps the way through is, as was suggested a few moments ago, that this be reviewed over time. If in the annual report we have a really thorough examination of how the measure has been applied and in what circumstances—in broad terms, of course, because we do not need the details of the crimes—that would give us the assurance we need. Our Committee has made that point emphatically. That would be a terribly good way out of this and it would not be a huge step. If the Minister agrees to that, I would certainly be satisfied.

[Tom Tugendhat]

It is not for me to tell the ISC what it should look into, but I would be surprised if it did not want to look into this in great depth.

[Sir John Hayes]

I think the Minister might have misunderstood. Forgive me; I did not mean that. I meant that this could be reviewed in the IPCO annual report. That would obviously be considered by the ISC in the way he describes. I think we need a summary of how this will work in practice and a commitment that we do that now. He sort of talked about a retrospective review. Rather than debate this further now, that would be a very good way forward.

[Tom Tugendhat]

I am entirely supportive of the idea that IPCO should update the ISC and the Secretary of State about how it is working and provide information so that a proper view can be taken. I think that is entirely appropriate.

--- Later in debate ---

[Tom Tugendhat]

Government amendments 3 and 4 require that any Secretary of State to be designated by the Prime Minister as an alternative approver must have the necessary operational awareness of the warrantry process to undertake the role. This change will replace the current drafting inserted in the House of Lords relating to “routine duties”, which is over-restrictive and will undermine the resilience of the triple-lock process that the clauses seek to safeguard.

Requiring relevant operational awareness will ensure the necessary flexibility and resilience while maintaining a proportionate scope for delegation. It will allow scope to include those who may be new to their role and do not yet carry out such duties routinely, or who no longer carry them out routinely due to machinery-of-government changes but have valuable pre-existing knowledge that makes them a suitable alternative approver.

[Sir John Hayes]

I am grateful to the Minister for the fact that his amendment goes some way to dealing with the issues that I and others raised in relation to the change from existing practice. At the moment, the Prime Minister provides the element of what has been described as the triple lock. The Government proposal is that other Secretaries of State should perform the role when the Prime Minister is unable to for a number of reasons. My anxiety, reflected by the Intelligence and Security Committee, is that those Secretaries of State who act for the Prime Minister in such circumstances should be people with operational experience. Typically, that would mean people with warranting powers—people accustomed to the business of issuing warrants, with all that that suggests.

The Government amendment speaks of operational awareness. I think “operational experience” is a better turn of phrase, although I accept the Government’s point that if there was a new Secretary of State—a new Home Secretary would be a good example—they would not necessarily have experience. By definition, they would be new in the job, whether that was the Home Secretary or Foreign Secretary and so on. It might be possible to speak of experience and responsibilities, so it could be either responsibilities or experience. Of course, the Government rightly say that a former Home Secretary, Foreign Secretary or Northern Ireland Secretary who was then doing a different job in Government could be one of the people designated, so I take that point.

The issue here is ensuring that the people who perform the role are competent to do so, and I know that is something on which we agree. It is really a matter of the semantics, but semantics are not always insignificant. I am aware of bolshevism and liberalism, but I would not want anything to do with either of them. I am aware of the separatist case on the United Kingdom, but awareness is as far as I want to go with that—I say that without contention or, indeed, acrimony of any kind. I am not sure that “awareness” is quite the right word, and I simply offer that semantic but not insignificant point to the Minister for his consideration.

--- Later in debate ---

[Mr Jones]

May I make a simple suggestion, then? “Necessary operational awareness” is clunky language; surely what is meant is operational experience. That would cover it, would it not?

[Sir John Hayes]

Given what the Minister said about a change in Government—I do not expect one, but I suppose it is a remote possibility—perhaps the words “operational responsibility or experience” would cover the point made and be slightly tighter than “awareness”. Also, there is the matter of notifying the PM. The Committee made the good suggestion that the PM should be notified as soon as practicable, which may be something with which the Minister agrees. If the Prime Minister were indisposed because of illness or whatever, they would be notified as soon as is practicable that a warrant had been issued.

[Tom Tugendhat]

On the second point, I am sure that, like me, my right hon. Friend finds it absolutely inconceivable that that PM would not be notified. I am not convinced that that must be in primary legislation. I find it genuinely inconceivable that the Prime Minister would not be notified at the earliest opportunity. Obviously, if they could be notified immediately, the provision would not be required.

--- Later in debate ---

[Mr Jones]

But, Minister, let us be honest: a lot of things that we would have taken for granted were ignored in Downing Street over the last few years. Until Boris Johnson became Prime Minister, it had been a great part of our constitution that convention was followed. Surely it would therefore be better to have the point about notification in the Bill; otherwise, we are leaving it to the free will of convention. I would have trusted convention, but we have had Boris Johnson as Prime Minister.

[Sir John Hayes]

I want to help the Minister, because I do not necessarily agree with the right hon. Member for North Durham; occasionally, he and I do disagree, despite the impression that we have created in this Committee. Notification could be covered in a piece of statutory guidance that supports the Bill. It could state that the Prime Minister should be notified as soon as reasonable practicable, exactly in the terms just described. How’s that?

[Tom Tugendhat]

As is so often the case, I absolutely agree with my right hon. Friend.

--- Later in debate ---

[Peter Dowd]

Further to that point of order, Mrs Cummins. May I say a particular thanks to you for chairing this Committee today in such a fantastic and eloquent way?

[Sir John Hayes]

Further to that point of order, Mrs Cummins. Since we are having further points of order, I want to say to the Minister, and the shadow Minister, how grateful I think most of the Committee are for the way this Bill has been conducted. This is a really good example of how a measure can be considered in Committee in a way that is not nakedly partisan or, worse, spiteful. I simply say to the Minister that I do regard the original Act as my child, and I see him as its foster parent, so he had better do a good job.

Bill, as amended, to be reported to the House.

Investigatory Powers (Amendment)Bill [Lords]

John Hayes Excerpts

Report stage
Monday 25th March 2024 Commons Chamber

[Dan Jarvis]

The right hon. Gentleman has made two important points, both of which I agree with, about redaction and about the attendance of the Prime Minister. I do not think it unreasonable to expect that once a year the Prime Minister should seek to meet what is a very important cross-party Committee of this House. I should be happy to give way to the Minister should he wish to add his own views on this matter, but given the basis of my sense of where the House is and given previous debates, I think most Members will agree that it is not unreasonable to ask the Prime Minister to turn up once a year.

[Sir John Hayes (South Holland and The Deepings) (Con)]

The hon. Gentleman’s point is made more potent by the fact that the matters the ISC considers are not typically—in fact, not at all—partisan. It operates on a non-partisan basis, although of course its members are drawn from both sides of the House, and the material that it studies is not seen through a party-political prism in any way; this Minister has engaged in sensible and meaningful discussion with members of the ISC in exactly that spirit during the passage of this legislation. Similarly, a meeting with the Prime Minister would be conducted in a way to which I think no Prime Minister could reasonably object .

[Dan Jarvis]

The right hon. Gentleman speaks about these matters with a great deal of authority, not just as a member of the Committee but as a former Security Minister, and I think he has described the situation very well. I hope the Prime Minister is listening; I hope the Prime Minister accepts what I consider to be the reasonable and constructive invitation that has just been extended to him by the right hon. Gentleman; and I hope the Prime Minister does take the opportunity in the near future to sit down with the ISC and discuss what are, after all, very important matters.

New clause 2 would ensure that an annual report was published on measures in the Bill, and in the Investigatory Powers Act 2016, to defeat and disrupt technology-enabled serious organised crime and technology-enabled threats to our national security. We tabled the new clause because we must ensure that the law is always one step ahead of those who seek to harm us. The police and the security services are not best able to protect us today with the laws to counter the threats of yesterday, which is why we support this Bill to update the 2016 Act, which is now eight years old, but there is an opportunity to go further. The annual report proposed in the new clause would help to ensure that any changes required to primary legislation relating to investigatory powers were identified and implemented as quickly as possible. That would strengthen our legislative framework on national security, and weaken the capability and resolve of criminals and our adversaries.

I think that this is a genuine opportunity for the Government to work better with, and to constructively challenge, telecommunications operators and the wider communications technology industry on the requirements to use investigatory powers—a process that would be separate from the new notices regime included in part 4. A statutory requirement to produce an annual report on investigatory powers to counter threats to our security and safety would strengthen national security, as well as strengthening the oversight and safeguarding of measures to keep us safe. Those are two principles that guide this Bill and the 2016 Act, and that is why we will seek to push the new clause to a vote later this evening.

--- Later in debate ---

[Sir David Davis]

I start from the perspective that we are highly likely to regret some elements of this Bill within the next 10 years, and I will come back to that in a moment. I will also start by commending the Minister for Security, my right hon. Friend the Member for Tonbridge and Malling (Tom Tugendhat), for his approach. It has not always been like this. The real precursor of this Bill was the Data Retention and Investigatory Powers Act 2014, all stages of which was taken in one day because the Government of the day claimed it as an emergency, even though they had spent three months thinking about it and even though they took nine months to implement it afterwards, such was the emergency. As a result, I challenged it in the High Court, and it was struck down. The Investigatory Powers Act 2016, which this Bill amends, was in effect the replacement for that. It was not a terrific improvement, but it was an improvement. As I say, the Minister’s approach to this Bill has been much more democratic, much more open and much more valuable.

[Sir John Hayes]

I said that we are not going to be partisan in this debate, and the shadow Minister started in that vein, but my right hon. Friend has been highly contentious about the Bill that I took through the House. Bear in mind that it had pre-legislative scrutiny with a Committee of both Houses, it had at least three reports in advance of being considered by this House, and it was debated in this House at length, in the same spirit that I mentioned earlier, and many amendments were tabled, many of which were accepted by the Government. I have described the pretty full consideration and scrutiny that it received, which is why it is such an essential piece of legislation, as the Minister will confirm, and is used by the security services and the police every day.

[Sir David Davis]

I will not go over it again, but the High Court and the Court of Appeal came to a different view from that of my right hon. Friend, I am afraid, and that is why the legislation was struck down.

Some of the elements of this Bill are not very wise. The Opposition have agreed that the pre-notification of tech companies will act to drive business away from our shores. That is, as I said earlier, the opposite of what the German Government are doing, and we are going to have to modify our approach to deal with some of our allies along the way.

I also have serious concerns about the bulk collection of data, which the Scottish National party has tabled an amendment on. I think it was Stalin who once said that, at a certain point, quantity has a quality all of its own. That is certainly true of information technology and bulk data. It was interesting to listen to the earlier brief debate on so-called “no expectation” and “low expectation of privacy”, by the way. Those are completely different things. They sound similar but they are completely different, as will become clear, I suspect, when the SNP spokesperson speaks to that amendment. Even today, “low expectation of privacy” data can tell a Government with quite primitive software vast amounts about our lives and about what we are doing every minute of every day, but with artificial intelligence that is going to be multiplied many times and become much more powerful than before.

To give colleagues a feel for how this might work, let us look back to the covid period, which in some senses was almost Orwellian. The Government had three different disinformation units of various sorts that looked at everybody’s comments. If someone commented on flaws in the modelling of the virus, questioned where the virus came from or quite properly stated that the vaccine did not stop transmission—it stopped deaths, but it did not stop transmission—this would lead to all their low or zero expectation of privacy documentation and all their online stuff being monitored by the Government. A number of Members of this House were monitored on that basis—in my view, entirely wrongly. That was all within the law as it stood then, so it was not massively important, but it nevertheless demonstrates the mindset of Whitehall when dealing with these things.

Today, however, nine out of 10 of us—if not more—carry a smartphone. That makes it easy to access our shopping habits, our purchase history, our bank records, our automatic number plate recognition records, and on and on and on. Do we really want the agencies of Government to be able to peer into all that data? It belongs to people who are, remember, entirely innocent of any crime. Our entire approach to law and order in this country has been to focus on people against whom there is a reasonable expectation or a reasonable suspicion, not to monitor everybody. It seems to me that this intrusive surveillance is a dangerous route to take and, as I say, I think we might regret it within 10 years, because the power of artificial intelligence will make this bulk data much more informative than we are conscious of today. I worry about it. I did not put an amendment down on it because others have done so, but it is something that we must concern ourselves with in the longer run.

One of my two principal concerns today is how the Bill relates to the expansion of powers around the surveillance of Members of this House. Until 2015, it was widely understood that the Wilson doctrine protected MPs’ communications from interception. This protection was repeated in unequivocal terms by successive Prime Ministers—even Tony Blair, who is not someone with a great reputation for worrying about Members’ civil liberties. Despite clear and unambiguous statements that MPs and peers would not be placed under surveillance, the Investigatory Powers Tribunal held in 2015 that the doctrine had been unilaterally rescinded by the Government.

In an attempt to ease concerns, the Investigatory Powers Act 2016 created a regime—the one we have now—whereby a Secretary of State must first secure the approval of the Prime Minister and a judicial commissioner before authorising the interception of an MP’s communications. Frankly, I have served under nine Prime Ministers as a Member of Parliament, and I cannot say I am happy that all of them would have taken a very responsible approach to exercising this power. This is an almost judicial power that is given to a person whom it is our job to challenge and hold to account every day.

The Bill seeks to expand the list of people who can sign off on the surveillance of MPs way beyond that, from the Prime Minister to effectively five Secretaries of State. There was a long argument in the Lords and in Committee about introducing words such as “unable” or “unavailable.” I think they had in mind that Boris Johnson was sick and laid up for a month or so and perhaps could not act in that capacity. Even by that logic, we do not need five Secretaries of State to be able to deputise, unless we are imagining a mass-casualty event in the Cabinet. Frankly, this seems far more like a precursor to a general loosening of the policy than a serious and sensible protection of the ability to sign this off. I worry about that, and I do not like it at all.

I do not like the idea of the surveillance of MPs except under incredibly strict circumstances. I am not casually asking for MPs to be somehow above the law, not at all. This protection is vital to safeguarding what we do. We are here to hold the Government to account, not the other way round. The relationship between constituents and their elected representatives is sacrosanct. It is the bedrock upon which our representative democracy stands, and constituents expect that, as they should. But it is not just constituents who rely on the sanctity of their communications with Members.

It is truer and more obvious today than at almost any time in my 30-odd years in this House that, in doing our job, we deal with campaigners—think of the sub-postmasters—journalists, whistleblowers, victims of injustice who may be terrified of being identified and, of course, other Members of Parliament, and that is just a few. They all trust us to keep what they tell us absolutely rock solid, private and confidential.

This Bill will do nothing but further undermine people’s trust in bringing serious matters to our attention. The Horizon scandal, Mid Staffs, sweetheart tax deals with large companies, the mistreatment of prisoners by the British Army, involvement in rendition and torture, and dishonest briefings for immoral wars—every single one of them was brought to our attention by a whistleblower who, in many cases, faced criminal prosecution if they were discovered. Are people likely to continue blowing the whistle with a loosening of the Wilson doctrine? I do not think so.

If I had my way, I would amend the Investigatory Powers Act to prevent communications to and from Members of Parliament from being intercepted at all. At the very least, I would change this proposal to require that the Prime Minister secures the approval of a Supreme Court judge before signing off on any warrant permitting the interception of a Member’s communications. That would take the process completely outside the normal approach under which the Investigatory Powers Tribunal and all the machinery around it routinely says yes to requests, day in and day out. Calling for, allowing or permitting the interception of the communications of a Member of this House or the other place ought to be something clearly extraordinary in the life of a Prime Minister. A Supreme Court judge is far more likely also to have the authority required to face down poorly justified demands, which has not always happened in the past. The Executive should not wield the power to order the surveillance of Members of this House at their sole discretion. The very senior judiciary should provide a vital check on that power.

--- Later in debate ---

[Mr Jones]

That would be helpful. That would give reassurance to the public and provide a test of how the system works. As I have said, I am comfortable with the process of authorisation, but the public must be comfortable with it as well.

[Sir John Hayes]

I note the right hon. Gentleman’s proper consideration of the balance between privacy and security, which lies at the heart of the Bill, but I also recognise the Minister’s concern that we must not make the process too unwieldy and bureaucratic. I wonder whether the right hon. Gentleman might invite the Minister to commit to a regular report going to IPCO as authorisations are made. That might be monthly, but it would at least mean that there was some iterative process of a kind that might reassure the right hon. Gentleman, me and others about that balance.

[Mr Jones]

I understand where the right hon. Gentleman is coming from. Our original idea about having an email was explained when I met the Minister and his civil servants. I think that that would really cut across some of the processes that we have in place. The suggestion that has been made would be one way of doing it, but IPCO already has the powers to look at such things. The only problem with doing that is that we would then have to set up someone in the agencies to produce another report. I do not want to do anything that holds up their work, and I think that that might do it.

Possibly the Minister’s suggestion of how Sir Brian Leveson is going to do it will give the public some reassurance. Let us not forget that Sir Brian has the power to take action if things are not being done correctly. If we read his reports, we can see that he is not fearful of doing these things. A fair compromise has been put forward. I think we have one and a half victories so far—

--- Later in debate ---

[Mr Jones]

No, I would not quite say it is two. Hopefully, I might get another one on my other amendment, and then we can all go home happy.

[Sir John Hayes]

Is this an example of my being more hardline than the right hon. Gentleman? It seems like it to me, but perhaps not.

[Mr Jones]

I would not have thought that the right hon. Gentleman could be seen as hardline on anything, pussycat that he normally is. He portrays himself as hardline, but I know from working with him very closely on the ISC that he cares about this information. He has referred to the Investigatory Powers Act as his baby. It has grown up a little bit and is now being brought into the modern age. I should put on the record again his dedication and work as a Minister to bring in the original Act, which was groundbreaking for this country. It has stood the test of time. We know that we will be back here, so the measures will change. I have no problem with that. It is just that, as technology changes, things will change.

May I finish by thanking the members of our security services for the work that they do? I also thank them for the way that they have engaged with the ISC on the Bill. Hopefully, with the changes that have been brought forward, we can reach agreement on the Bill and our security services will have the ability to face up to the challenge that is coming forward: the ever growing use of larger datasets, and the more sophisticated way in which state actors and non-state actors have access to technology. That will enable the security services to do what we all want to do, which is to keep individual citizens and, just as importantly, our democracy safe.

--- Later in debate ---

[Stuart C. McDonald]

I am grateful to the right hon. and learned Member for that intervention. He possibly makes a fair point. If I recall correctly, the wording of that proposed new subsection was borrowed from another part of the Bill. I might be wrong about that; I need to go away and have a look. I suppose the argument would simply be that if a category authorisation is to any extent being abused, it is right that the category authorisation is cancelled, and if somebody wants to come back with something similar, they can do so. However, I am not without sympathy to his point. I take it in the spirit in which it was intended, and will reflect upon it.

Let me move on from the question of oversight in relation to bulk personal datasets to the issue of “no” or “low” expectations of privacy in relation to such datasets, and how that test will operate in practice. Throughout the passage of the Bill, we have been repeatedly given some very easy examples of so-called “low/no” bulk personal datasets. For example, we have spoken about phone books, academic papers, public and official records, and other data that many people would have access to routinely. It was helpful that, in relation to what is now our amendment 9, the Minister said in Committee that Facebook posts and CCTV pictures would be considered sensitive and would not be caught by these provisions. It is very helpful to have that on the record.

None the less, it would to be useful to have greater precision in the Bill. Amendment 8 would take out reference to “low” expectations of privacy altogether, so that only “no” expectations would be covered by the new provisions. To us, “low” is such a difficult question to adjudicate—low expectations in particular. That is especially the case when we are dealing with datasets of potentially huge numbers of very different people with very different reasons for having very different expectations of privacy, particularly in how that would relate to different organisations. We cannot think of a single dataset example provided during the passage of the Bill that would not be adequately covered by “no reasonable expectation of privacy”. If that is the case, if that is really all the Bill will be used for, why not just accept the amendment? It would be useful to have an understanding of what “low” expectation of privacy is designed to cover.

Amendment 15 brings us to internet connection records. In 2016, the Government emphasised the very targeted nature of the ICR powers, but here we are being asked to incrementally expand those powers so that they are slightly less targeted. To us, that means that the independent assessment of proportionality and necessity is pivotal, so we think that it should be subject to advance judicial oversight. Even the explanatory notes accept that there are difficulties in formulating sufficiently targeted queries, noting that

“such queries are highly susceptible to imprecise construction”

and that “additional safeguards” are required.

For us, the required additional safeguard is judicial oversight. We were led to believe that the powers would be used only exceptionally, so it is hard to see how a judicial authorisation requirement would cause any significant problem. The Government argue that there may be times when warrants are needed on an emergency basis, but that could be dealt with by having emergency processes or very limited exceptions—it is not an argument against a general rule of advance judicial oversight.

I turn to the impact on technology companies of the Bill’s various provisions relating to notices—although the right hon. and learned Member for Kenilworth and Southam probably made more sensible and eloquent points than those I am about to make. The written evidence that the Bill Committee received shows that tech companies, academics and human rights and privacy campaigners are still a million miles away from the Government in their understanding of how the provisions will work and of the impact that they will have on products and services. Apple wrote to the Committee that these provisions

“would dramatically disrupt the global market for security technologies, putting users in the UK and around the world at greater risk.”

It is frustrating and disappointing that we did not have the opportunity to explore those differences in detail through witness testimony. The Minister did his best to reassure us, and he made some important arguments about extraterritoriality and conflicts of laws, but given the serious concerns that have been raised, it is worth again asking the Minister to explain why those witnesses are wrong and he is correct. In particular, the Government’s explanation that the new pre-notification requirement in clause 21 is

“not intended as an approval mechanism”

has not dampened concerns. Apple argued in evidence to the Committee that

“Once a company is compelled to provide notice of a new security technology to the SoS, the SoS can immediately seek a Technical Capability Notice to block the technology.”

Other provisions in the Bill around maintaining the status quo during notice review periods work in tandem with these provisions to deliver what Apple and others see as a de facto block on adoption of new technology—that is the risk that they are highlighting, and it is what the Minister must address in his speech. It is why we have tabled amendments to take out some of those provisions. It is also why we have tabled amendment 19: an alternative that would introduce advance judicial oversight and, hopefully, a degree of reassurance that the new notification notice regime under clause 21 will not deliver the unintended effects that many fear.

Finally, I put on the record our support for the amendments tabled by members of the Intelligence and Security Committee, whose work on the Bill has been as helpful as ever—I congratulate them on their one-and-a-half victories so far. As is often the case when it comes to Bills of this type, we also put on record our support for several of the amendments tabled by the right hon. Member for Haltemprice and Howden (Sir David Davis), some of which are similar to amendments that we tabled in Committee, while others are similar to amendments that we supported during the passage of other Bills, including the National Security Act 2023. In particular, new clause 3, which is designed to place an absolute prohibition on the UK sharing intelligence with foreign Governments where there is a real risk of torture or cruel, inhuman or degrading treatment, is long overdue and would close a serious gap in the law. For us, that is self-evidently the right thing to do.

[Sir John Hayes]

As you will know, Madam Deputy Speaker, and as other Members have made reference to, I was the Minister who took the original Bill, which this Bill amends, through the House—indeed, it became the Investigatory Powers Act 2016.

The purpose of that legislation was both to draw together a number of the capabilities of the agencies necessary for them to keep us safe, and to put in place a series of mechanisms to ensure that there was proper scrutiny and accountability for those powers. We introduced the principle of a double lock, whereby both politicians and judicial commissioners were necessary to authorise some of those very powers. They matter because of the threats we face. Those threats are, as has been said by a number of contributors, metamorphosising. They were bound to do so, and we anticipated that when the original Act was considered in this place.

I accept the argument used by the shadow Minister, the hon. Member for Barnsley Central (Dan Jarvis), that that does not end here tonight. Those threats will continue to change, and it will be necessary to update the legislation to reflect those changes, for our security services and police need two things to do the job that we expect them to do on our behalf: capacity—namely, skills and resources—and capability, which includes legislative powers.

--- Later in debate ---

[Tom Tugendhat]

rose—

[Sir John Hayes]

The Minister is going to satisfy me immediately, it seems.

[Tom Tugendhat]

I will satisfy my right hon. Friend immediately and, I hope, save him time in his speech. Local authority trading standards teams are responsible for a range of legislation where enforcement requires investigation and may need to draw on communications data. The idea is that the powers in this Bill will be in keeping with those powers, not for them to be expansive, so my right hon. Friend is right: it is for serious crimes, as has already been set out.

[Sir John Hayes]

That is excellent—it helps, because the schedule associated with that part of the Bill does not make that explicit. I hope that the Minister, having given that binding assurance to the House, will reinforce it in the explanatory notes associated with the Act and in the code attached to it.

[Tom Tugendhat]

indicated assent.

[Sir John Hayes]

I am seeing the Minister nodding. He might want to say a word or two more when he sums up.

[Mr Kevan Jones]

May I gently suggest that the right hon. Gentleman goes back to the Minister now, just to pin down exactly what he is agreeing to? We on the ISC have no problem with the idea of our security services having these powers, and I do not think the public would either. They would be less comfortable, as I and the right hon. Gentleman are, with other organisations having them.

[Sir John Hayes]

The Minister may want to intervene on me again to do exactly what the right hon. Gentleman has suggested.

[Tom Tugendhat]

On the grounds that it will save me time when I wrap up at the end of the debate, I will make it clear now. His Majesty’s Treasury is responsible for civil enforcement of financial sanctions regulations, and some information that is essential to carrying out its civil enforcement functions is now communications data, such as the timestamp on online banking transactions. His Majesty’s Treasury cannot currently use its information powers to compel that information to be provided by a telecoms operator, so to go back to the statement I made earlier, local authority trading standards teams are responsible for a range for legislation where enforcement requires investigation and may need to draw on communications data.

[Sir John Hayes]

That is very helpful and, I think, goes a fair way towards what I want to achieve. The Minister has therefore made clear that the power will not be permissive. If he uses those very words—forgive me for putting them into his mouth, Madam Deputy Speaker—that would also help. These are going to be rarely used, particular powers associated with regulatory or legal functions of local authorities, not permissively available to those local authorities at their whim. That is clear as crystal, is it not?

[Tom Tugendhat]

If my right hon. Friend will forgive me, I will use the words I am using. Those powers will be used as infrequently as we all hope they will be, but they will be used in keeping with the law as described. If the frequency increases, it will be because of the need to act; I am very cautious about saying that these crimes will disappear, and therefore the frequency will change. I am not willing to predict that criminality now.

[Sir John Hayes]

I entirely understand. I used the example myself of trading standards: in Lincolnshire, we have an issue with the sale of illegal cigarettes that has become not a trivial matter, but one of organised crime. It is not restricted to my county or locality: it is a national problem, and it is of course an example of where a local authority, working closely with the police, might well need to use those powers. By the way, those local authorities will be working with other agencies too: because money laundering is involved, His Majesty’s Revenue and Customs might be involved, and so on and so forth. That is a good example of where those powers might be useful in catching very serious criminals indeed, but the word I wanted the Minister to use is that these powers are not permissive. He will understand what I mean by that, and I cannot see why that would present any problem at all, given the reasonable, sensible man he is.

[Tom Tugendhat]

I apologise to my right hon. Friend. These powers are not permissive in the sense that they are expansive: they are permissive only in the sense applied to them by this law, with the restriction of the powers that local authorities already have. They are not to be used in any way other than as set out very clearly in the Bill.

[Sir John Hayes]

I think that is helpful. The Minister will remember that when we debated the original Bill that became the Investigatory Powers Act, one or two newspapers used the term “the snoopers’ charter”, and images were used of local authorities using those powers to investigate people’s rubbish to make sure they were recycling properly, for example. I do not want to add unnecessary levity to our consideration tonight, because we are dealing with very serious matters indeed, but the Minister will understand how that kind of misunderstanding—indeed, misinformation—could do far more harm than good.

[Tom Tugendhat]

Again, just to clarify for my right hon. Friend, this Bill offers no greater expansion than his own Bill did in 2016. In the same way he ensured that Bill was no snoopers’ charter, I assure him that this one is not either.

[Mr Kevan Jones]

rose—

[Sir John Hayes]

I was going to say that I have done this matter to death, but I can see that the right hon. Gentleman wants to intervene.

[Mr Kevan Jones]

I think the Minister is getting another “dancing on the head of a pin” award for his explanation. What I think the right hon. Gentleman is trying to get on the record—perhaps not for the benefit of people in this House who understand this Bill, but for the wider public—is that the way the Bill will be used is that it will include, for example, a local authority when an investigation is being driven by a security issue, such as in his example of organised crime in cigarette smuggling.

[Sir John Hayes]

Yes, exactly. The right hon. Gentleman has put it very clearly, and the sense of what the Minister has said has reassured me that it is not the Government’s intention to extend those powers beyond the very strict legal limits associated with the kind of organised crime that he and I have both cited. For me, that is considerable progress. The right hon. Gentleman spoke earlier about half a win; I think that is three quarters of a win, at least. For that reason, I feel that I can move on to my next request of the Minister.

We spoke earlier about IPCO, and its role and association with Government. As the Minister will know and as the right hon. Member for North Durham referred to, this legislation provides for a report to be made available to the ISC on an annual basis. There has been some concern that that report might be rather different from the one that is made available to Ministers and others, and my anxiety is that it should not be different. All that it should exclude is current operational matters; nothing else should be excluded from what my Committee considers, and clearly, it needs to be the same as what IPCO gets. We cannot have three or four different reports.

[Tom Tugendhat]

I can give my right hon. Friend that assurance.

[Sir John Hayes]

That is a 100% win. It is not half a win or three quarters of a win; it is just a win. So we are making huge progress tonight, partly due to the diligence of the members of the ISC and other Members of this House, including the official Opposition, but largely due to the reasonableness of the Minister. He is a listening figure, and he is growing in stature and reputation as a result. I am delighted that the Minister has agreed to the fourth of my requirements.

--- Later in debate ---

[Jim Shannon]

You are most kind, Madam Deputy Speaker. When you get to my age, you do not count the years, but you make the years count.

It is an absolute honour and pleasure to follow the right hon. Member for Chipping Barnet (Theresa Villiers). May I put on the record my thanks to her for her time as Secretary of State for Northern Ireland? We appreciate her commitment and efforts over those years. Her intelligence about and interest in Northern Ireland have not dissipated because she is no longer the Secretary of State for Northern Ireland; indeed, they have added to the occasion.

It is a pleasure to speak on the Bill, which, as the Minister will know, I have done on numerous occasions. I am aware of the complexity of the issue and of the need to give privacy its rightful place in our national security. As others have done, I put on the record my thanks to all the security and intelligence services for all that they have done and still do. We owe them a great debt.

During the previous debate, I asked the Minister for his assurances regarding whether the right balance had been struck, yet I have still been contacted by constituents who continue to express their concerns. I will not detain the House for long—about five minutes—but will highlight again the concern that my constituents continue to express, to give them one last chance to receive assurances on the Floor of the House.

My constituents’ remaining concerns relate to something that we in this place have much cognisance of and that we treasure: the freedom within a democratic society to live our lives in peace as long as we are not adversely affecting the lives of others. That is a precious right, and one that none of us in the House wants to remove. I will refer to clauses 1 and 2 and highlight four companies that have expressed concerns to get the Minister’s response. My constituents have highlighted the following:

“In addition to the concerns of civil society, I would like to draw your attention to some of the comments submitted in evidence to the Bill’s Committee from the tech industry.

Apple: ‘In addition to impacting the safety of billions of users around the world who rely on security technologies developed by Apple and other companies, the Bill in its current form would undermine fundamental human rights. In fact, just this year, the European Court of Human Rights held that requiring a company to provide a means to decrypt all encrypted communications on its platform violated the right of privacy in Article 8 of the European Convention on Human Rights.’

TechUK: ‘This could impede the ability of TechUK members to modify products and services over time to protect users from active security threats, to innovate, and enhance their services for their users.’

Information Technology Industry Council: ‘We strongly encourage greater scrutiny of these implications so that the Bill will not have a chilling effect on a company’s ability to conduct business or in current or future innovations, and that it will serve to further international efforts on shared goals around trust and security.’

Computer and Communications Industry Association: ‘Over time, this will push tech firms to refocus product development away from addressing the priorities of UK consumers, towards Government demands for access. The obstacles the new regime creates will be a drag on innovation and therefore undermine the quality of digital services on offer.’”

[Sir John Hayes]

I am listening carefully to the hon. Gentleman’s speech, not least because it is his birthday. Let me put it to him in this fashion. I think that the public have as much to fear from those corporate organisations as they do from any democratically elected Government. I am much more concerned about the way that they gather and sell data, and, dealing with the matter of expectation, the vast majority of people do not know that they are doing it. Rather than more a more permissive attitude towards those organisations, I want to see a less permissive one.

[Jim Shannon]

I thank the right hon. Gentleman for his intervention. I share those concerns, but I wish to put on the record my concern for my constituents in relation to how the changes are interpreted and how they will affect people.

I will give the last sentence of the quotation from the Computer & Communications Industry Association:

“They could risk deterring investment in improving service for UK consumers and contribute to a sense that the UK is not a safe market in which to invest.”

Those are the four tech companies, and the questions are on the record—I put them in Hansard—so that perhaps the Minister can give me an answer. Will he outline what mitigations are in place for the matters affecting those four companies in order to secure the tech industry’s place in the fabric of our lives in the United Kingdom?

I am pleased that the Minister has accepted amendment 23, which was tabled by the right hon. Member for North Durham (Mr Jones). The Democratic Unionist party was minded to support that amendment, but, because it has been accepted, we will not need to do so.

While I am aware of valid concerns, I am also aware of the need for this Bill, which the gallant Minister will know about better than most in the House. He served in Northern Ireland, so he understands the implications for us in Northern Ireland and the lives that we have led for some years. I was a part-time soldier in the Ulster Defence Regiment and in the Territorial Army for 14 and a half years. I have been a recipient of security intelligence and know how it can save lives. I am here today because of intelligence, which found out what the IRA’s intentions were. That is a fact. That has affected not just me; over the years, the intelligence services have saved the lives of other hon. and gallant Members. I have many friends who served and who are alive today because of the intelligence service or the Security Service. I had many other friends who unfortunately are not alive today; I remember them as well, so I do.

We must remember that the whole objective of the Bill is to keep us safe, to keep us secure and to ensure that our lives with our families can continue. I do hope that a balance has been struck, as the Minister outlined, because freedom is a prize worthy of getting it right. I know that the Minister wants to get it right, and I want it to be right. Madam Deputy Speaker, you want it to be right as well. Let us do it and get it right tonight.