Draft Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) (Amendment) Regulations 2024

Debate between Julia Lopez and Kit Malthouse

Tuesday 21st May 2024 General Committees

[Julia Lopez]

First, I thank my right hon. Friend the Member for North West Hampshire for his speech. One of the rationales behind the draft regulations is to avoid double regulation. I cannot say that they are deregulatory; we are simply avoiding duplication.

[Kit Malthouse]

You were doing so well, Julia!

[Julia Lopez]

I know—I do apologise. My understanding—I also apologise for not being an expert when it comes to vehicles and transport, which fall within the DFT’s remit—is that vehicle regulation is done at UN level on some of these matters.

I thank the hon. Member for Newcastle upon Tyne Central for her support and for bringing to bear her considerable expertise in technology. I agree with a number of the points that she made. She is right to be concerned about whether the sector has been given due notice. We have been in touch with the sector throughout. It was made clear that there would be exemptions and exceptions to the regime, and we are bringing the draft regulations forward now so that the sector can have those exceptions as swiftly as possible.

On some of the questions about automated vehicles, as I said, the Department for Transport intends to mandate UN regulation No. 155, but the automotive industry and its supply chain are already beginning to comply with that regulation, as it has been mandatory for new types of passenger and goods vehicles in the EU since July 2022. I shall certainly ask DFT Ministers to get back to the hon. Lady on some of the specific points that she made about transport and vehicles. I very much agree with her about the need to make sure that accessibility is at the heart of these new regulations. I have responsibility for telecommunications, and she will be aware that we have brought in a number of new security requirements.

On whether there are certain types of risk-based approach that we should take to new technologies, that is certainly the case. These are baseline security requirements that are intended to give flexibility according to the type of product. We are also looking at which types of data we should seek to protect and safeguard and which we should not be too concerned about. I assure hon. Members that that work is under way. These are areas of fast-moving technological development, and we in the Department try to make sure that we have maximum flexibility so that we do not have to come back and legislate every time there is new technology in the market. Hopefully, that will mean that we can avoid bringing hon. Members into these Committee rooms too frequently.

I am grateful for the engagement by all hon. Members as this legislation has gone through the House. It is a couple of years ago now that we went through Committee stage of what became the PSTI Act—we felt the pain of it together. That Act is now on the statute book and implemented, and we are bringing forward the exceptions so that it works well for the automotive market.

Question put and agreed to.

Science, Innovation and Technology

Debate between Julia Lopez and Kit Malthouse

Thursday 27th April 2023 Ministerial Corrections

[Kit Malthouse (North West Hampshire) (Con)]

… May I take the Minister back to the subject of compliance costs? I understand that the projected simplification will result in a reduction in those costs, but does she acknowledge that a new regime, or changes to the current regime, will kick off an enormous retraining exercise for businesses, many of which have already been through that process recently and reached a settled state of understanding of how they should be managing data? Even a modest amount of tinkering instils a sense among British businesses, particularly small businesses, that they must put everyone back through the system, at enormous cost. Unless the Minister is very careful and very clear about the changes being made, she will create a whole new industry for the next two or three years, as every data controller in a small business—often doing this part time alongside their main job—has to be retrained.

[Julia Lopez]

We have been very cognisant of that risk in developing our proposals. As I said in my opening remarks, we do not wish to upset the apple cart and create a compliance headache for businesses, which would be entirely contrary to the aims of the Bill. A small business that is currently compliant with the GDPR will continue to be compliant under the new regime. However, we want to give businesses flexibility in regard to how they deliver that compliance, so that, for instance, they do not have to employ a data protection officer.

[Official Report, 17 April 2023, Vol. 731, c. 70.]

Letter of correction from the Minister for Data and Digital Infrastructure:

An error has been identified in the speech I gave on Second Reading of the Data Protection and Digital Information (No. 2) Bill.

The correct statement should have been:

Data Protection and Digital Information (No. 2) Bill

Debate between Julia Lopez and Kit Malthouse

2nd reading
Monday 17th April 2023 Commons Chamber

[Julia Lopez]

I am delighted, in turn, to hear my hon. Friend call me the Secretary of State—I am grateful for the promotion, even if it is not a reality. I know how passionate he feels about open data, which is a subject we have discussed before. As I said earlier, I am pleased that the Under-Secretary of State for Business and Trade is present, because this morning he announced that a new council will be driving forward this work. As my hon. Friend knows, this is not necessarily about legislation being in place—I think the Bill gives him what he wants—but about that sense of momentum, and about onboarding new sectors into this regime and not being slow in doing so. As he says, a great deal of economic benefit can be gained from this, and we do not want it to be delayed any further.

[Kit Malthouse (North West Hampshire) (Con)]

Let me first draw attention to my entry in the Register of Members’ Financial Interests. Let me also apologise for missing the Minister’s opening remarks—I was taken by surprise by the shortness of the preceding statement and had to rush to the Chamber.

May I take the Minister back to the subject of compliance costs? I understand that the projected simplification will result in a reduction in those costs, but does she acknowledge that a new regime, or changes to the current regime, will kick off an enormous retraining exercise for businesses, many of which have already been through that process recently and reached a settled state of understanding of how they should be managing data? Even a modest amount of tinkering instils a sense among British businesses, particularly small businesses, that they must put everyone back through the system, at enormous cost. Unless the Minister is very careful and very clear about the changes being made, she will create a whole new industry for the next two or three years, as every data controller in a small business—often doing this part time alongside their main job—has to be retrained.

[Julia Lopez]

We have been very cognisant of that risk in developing our proposals. As I said in my opening remarks, we do not wish to upset the apple cart and create a compliance headache for businesses, which would be entirely contrary to the aims of the Bill. A small business that is currently compliant with the GDPR will continue to be compliant under the new regime. However, we want to give businesses flexibility in regard to how they deliver that compliance, so that, for instance, they do not have to employ a data protection officer.

BBC Local Radio: Proposed Reduction in Provision

Debate between Julia Lopez and Kit Malthouse

Tuesday 1st November 2022 Commons Chamber

[Julia Lopez]

I am grateful to the right hon. Gentleman for raising the NUJ’s concerns. It is important that many people get their training in local media organisations, which gives them a great grounding for going national. It is regrettable that these proposals come in Journalism Matters Week, at a time when there are a whole host of challenges facing local journalists.

[Kit Malthouse (North West Hampshire) (Con)]

I share the alarm expressed across the House and by the Minister at this move. I represent a part of Hampshire that often finds it hard to identify itself in the BBC schedules, squeezed as it is between BBC Radio Solent, which concentrates on the urban areas to the south of the county that are an hour away, and BBC Radio Berkshire, in a different county altogether, yet the BBC does just enough in my part of the world to make sure that the commercial sector cannot function or thrive in North West Hampshire. I urge the Minister not to mess about with this debate, which we have had many, many times over the years about the BBC. May I suggest that she talks to the Competition and Markets Authority about it doing a full review of the impact of the BBC on the commercial sector, both locally and nationally?

[Julia Lopez]

I thank my right hon. Friend for raising the issues in Hampshire. The mid-term review, which is a relatively new innovation, is looking at some of these questions on competition and market impact. If he has further details that he would like to feed into that about his local challenges in that regard, I would be happy to receive them, because the Department is looking at all these issues, and we expect to report next year.