Data Protection in the Areas of Police and Criminal Justice (EU Directive)

Keith Vaz Excerpts

Tuesday 24th April 2012 Commons Chamber

[Mr Slaughter]

I do, and I was going to deal with that matter after raising a number of specific points of concern.

I am grateful to the European Scrutiny Committee for its report, which states that

“there is now the possibility of establishing a comprehensive data protection framework ensuring both a high level of protection of individuals’ data in the area of police and judicial cooperation in criminal matters and a smoother exchange of personal data between Member States’ police and judicial authorities, fully respecting the principle of subsidiarity.”

The report then adds:

“The Commission concludes that the practical difficulties encountered by a number of Member States in distinguishing between rules for domestic and cross-border data processing could be solved through a single set of rules covering data processing both at national level and in a cross-border context”.

The aim might be laudable, but the solution appears to say that, in order to avoid confusion, principles of subsidiarity should in fact give way to an overarching system controlled centrally. One consequence of that that the Minister has already alluded to is an extension of the scope of data processing to include domestic processing for the purpose of policing and judicial co-operation. In other words, the directive will regulate the passing of data between purely domestic organisations, such as neighbouring county police forces, and I share the Minister’s concern in raising that.

In the area of data protection, the draft directive is stronger and, I think, should be broadly welcomed. It includes: new rights of access and information for data subjects, such as the identity of the data controller, the purpose of the data processing and the period for which the data will be stored; a right for data subjects directly to demand the erasure of their personal data by the data controller; an obligation on data controllers to inform supervisory authorities and data subjects of data breaches, informing the former within 24 hours of discovery and the latter without undue delay; and an obligation for data controllers or processors to appoint data protection officers. The incorporation of human rights legislation—the Human Rights Act 1998—into UK law by the previous Labour Government has improved the right to privacy and to protection from intrusion into family life, but we still have some way to go.

[Keith Vaz (Leicester East) (Lab)]

I agree with everything that my hon. Friend has said so far, but will he look in particular at the issue of Europol and how this exchange of information affects our obligation to it?

[Mr Slaughter]

I am happy to do that, and I am even happier to note the support from my Back Benchers—the almost unanimous support—[Interruption.] No, 50% might be a better figure.

The key to the balance that I have talked about is the drafting of the directive within very prescribed bounds to restrain the opportunities for data sharing, thus the controls for in-country transfer, to which the Minister has referred, are restricted—if one accepts what the draft directive says. As currently drafted, it covers data transferred between two UK regional police forces with no cross-border elements, but that will apply to the UK only when such processing is pursuant to an EU measure on police or judicial co-operation, and that is indeed what the draft directive states.

I just worry that sometimes the intention is not carried out in practice, and I cite—on a perhaps analogous subject—from the same Guardian article today this note of caution:

“Last week the European parliament ratified plans to allow airline passenger records, including credit card details, for all transatlantic flights between Europe and the US, including in and out of the UK, to be handed over to the US department of homeland security to be stored for 15 years.”

If these proposals are to go ahead, they need to do so in such a way that there are the tightest possible controls on the exchange of data.

--- Later in debate ---

[Keith Vaz (Leicester East) (Lab)]

I intend to speak very briefly. The hon. Member for Camborne and Redruth (George Eustice) made an eloquent and thoughtful speech, which indicated that we ought to spend much more time discussing justice and home affairs issues on the Floor of the House. I would like a debate on the European arrest warrant, because it has created enormous problems for the British judicial system. However, we have only an hour and a half and there are probably only about 30 minutes left, so I will be brief and raise only one point with the Minister, which is about the operation of Europol.

Last Friday, the European Commission had a meeting to which it invited the Chairs of the Home Affairs Committees of all the EU countries to discuss the future of Europol. I am concerned about how the directive might affect the way in which the Europol databases operate. I support what the Government are trying to do. They are clear that the reason why they want better data sharing among our EU partners is to combat Europe-wide crime. We have to share data if we are to deal with the organised criminal gangs that exist in the EU in so many areas of criminal activity, including drugs and human trafficking. However, we need to be careful about who gets the data and what use they make of them. That is why I am such a strong supporter of Europol. Anyone who has visited it will know that it has a particularly British dimension. The information that we give that organisation is kept very much under our control.

The Minister mentioned the case of a Romanian who came to this country and whose criminal record tracked him back to Romania. I would have thought that Europol should provide that assistance. It does not necessarily have to be done through bilateral help. I raise with the Minister the case of the Albanian who worked in a hotel in the midlands and beheaded his manager after a row with him. Only after he had committed that terrible criminal act was it discovered that he was wanted in Sweden and Switzerland on other charges before he came to the United Kingdom.

In looking at data sharing, I am concerned that we do not have enough information about those who come into this country. The Minister described the case of the Romanian and I have described the case of the Albanian—this is not an attack on eastern Europe, but since we have mentioned the nationality of these people, we may as well be open about it. It would have been better if we had known about the offences committed by those people at the time of their arrival. I do not think that the directive would have ensured that that information was provided, although perhaps I am wrong. However, it is important to know the criminal background of those who arrive at our borders and who come to live and work in this country. That would be sensible data sharing, as opposed to data sharing after the event. I hope that in his winding-up speech—if he does not make one, perhaps he will write to me—the Minister will speak about the implications of the directive for Europol.

Finally, I pay tribute to the European Scrutiny Committee and its Chairman. They do a splendid job. It is important that we have more such debates on the Floor of the House, even though they might sometimes be an irritant to Ministers. As with pre-summit debates in the House, which seem to have gone by the board, it is important that we have as much time as possible to discuss directives that will have far-reaching effects in the justice and home affairs area of EU policy.