Exchanging Data with non-EU Countries

Liam Byrne Excerpts

Tuesday 23rd October 2018 General Committees

[The Chair]

We now move on to questions to the Ministers. As we have two Ministers, perhaps Members could indicate which one they are directing their question at. This will go on until 3.37 pm, unless we get a Division, in which case injury time will be added.

[Liam Byrne (Birmingham, Hodge Hill) (Lab)]

May I preface a couple of questions with some initial thoughts, Mr Evans? I congratulate my hon. Friend the Member for Bristol North West on bringing this matter to the Committee.

[The Chair]

I advise the shadow Minister to be brief, because there will be further opportunities to speak when the debate starts.

[Liam Byrne]

Of course; I appreciate that, Mr Evans.

Like me, my hon. Friend will have been alarmed by the catena of platitudes from both Ministers this afternoon about the importance of data, the importance of trade and the importance of data to trade. We heard absolutely nothing about whether the Ministers are confident of securing an adequacy agreement, especially in the event of a no deal Brexit. As is eloquently set out in the paperwork for today’s hearing, the Ministers know as well as we do that this has to be signed off not only by the European Commission, but by the European Parliament, the article 29 working group and the European data protection supervisor.

Given the imminence of Brexit, I am extremely concerned that we have heard nothing about a timetable or a level of confidence. My question is blunt: in the event of a no deal Brexit, are the Ministers prepared to guarantee to the House this afternoon that a data adequacy agreement will be secured and that free data flows will continue?

[Margot James]

I thank the right hon. Gentleman for his question. I cannot give him a categorical assurance that an adequacy agreement will be in place at any particular point during the negotiations. I can tell him that the UK Government have made it clear to the Commission that we are ready to commence discussions on a future adequacy agreement, even though the Commission has not indicated that it is yet ready to start such discussions. If we are successful in securing the transition and implementation period, we will stand ready to begin those preliminary discussions on an adequacy assessment during that period. Indeed, we stand ready now, but the Commission has indicated that it is not yet ready.

We agree that our primary goal is to secure an adequacy agreement. Through the recent publication of a technical notice, we have various provisions in place that should allow for the free transfer of data during the period in which we are discussing adequacy but have not yet secured it.

[Liam Byrne]

I do not know whether you prefer me to ask these questions standing up or sitting down, Mr Evans.

[The Chair]

Standing up.

[Liam Byrne]

Thank you, Mr Evans. I am grateful for the Minister’s answer, but perhaps she could go further and tell us the precise timetable her officials have given her for what needs to be agreed when. Ultimately, we need to know when an adequacy agreement needs to be in place to ensure the free flow of data after we have left the European Union, which the Prime Minister assures us will happen at the end of March. Given that long stop date, as it were, what is the timetable for securing the necessary agreements from the European Parliament, the article 29 working party and the European data protection supervisor?

[Margot James]

As I said, the UK is ready to begin preliminary discussions on an adequacy assessment now. I cannot give a cast-iron timetable, because I cannot speak for the European Commission, which is the vital party to such discussions. The ball is in its court. We have indicated that we are ready and willing to start adequacy discussions. We anticipate that those discussions will take place during the transition and implementation period. Through the technical notice, we have established the arrangements that we would put in place if there were to be a gap between our departure from the European Union and the timing of the future framework. We all know what is going on—on both sides—on many fronts, not just data protection.

[Liam Byrne]

My last question is to press the Minister on a single point: by what date must an adequacy agreement be reached and in place to ensure that the free flow of data continues?

[Margot James]

The Government will ensure the free flow of data, even if there is a gap between the time at which the United Kingdom obtains an adequacy decision and the time at which we leave the European Union. We are scheduled to leave the European Union at the end of March next year. We anticipate that there will be an implementation period that takes us a further 20 months. During that implementation period, we anticipate discussions with the Commission on an adequacy decision.

We cannot guarantee exactly when that adequacy decision will be made. I reassure all members of the Committee that on our departure from the European Union we will be 100% aligned with European data protection law, particularly the provisions of the GDPR. The right hon. Member for Birmingham, Hodge Hill and I shared many discussions during proceedings on the Bill. When it received Royal Assent in May this year, it put us in 100% alignment with EU data protection law. We can be optimistic that an adequacy decision will not require the usual length of time that it takes the Commission to bestow such decisions on other third countries. However, the right hon. Gentleman will understand that I cannot give a guarantee on that, because to do so is not in the UK Government’s gift. The decision will be forthcoming from the European Union.

If the right hon. Gentleman wants me to tell members of the Committee what will happen if we do not have an adequacy decision, either as we leave the European Union next March or even after the implementation period, I am happy to do so, but he looks as though he wants to intervene.

[Liam Byrne]

I am much less sanguine than the Minister about the possibility of an adequacy agreement. As she knows, we will not have article 8 to rest on after we leave the European Union. We have also sketched into the Data Protection Act 2018 sweeping exemptions from the GDPR for anyone who happens to be an immigrant, so I think the European Parliament will have some serious questions for the Minister about the adequacy agreement. Do we need an adequacy agreement in place to cover the implementation period, or not?

[Margot James]

I am not sanguine about anything to do with this; it is a serious matter. I may be optimistic, but there is a lot of work to be done, and I cannot guarantee when an adequacy decision will be made. I can only state categorically that it is the Government’s intention to prioritise discussions in relation to adequacy with the European Union, such that we get an adequacy decision as soon as it is practically possible for the European Commission to grant us one.

We have put in place some exemptions to the GDPR, as have other member states, but we have done so in a framework that permits member states to apply such derogations and exemptions. Other member states will have put in place similar or different exemptions. I contest the right hon. Gentleman’s statement that the exemptions are “sweeping” in respect of immigration. I remember the debates well. The powers are extremely contained, and they were amended on Report to constrain them even further.

I can answer questions about the measures that we will put in place if there is a gap between the granting of an adequacy decision and our departure from the European Union—and, indeed, after the implementation period, assuming the implementation period is agreed.

Motion made, and Question proposed,

That the Committee takes note of European Union Document No. 5191/17, a Communication from the Commission to the European Parliament and Council on Exchanging and Protecting Data in a Globalised World, and an Unnumbered European Union proposal for provisions on Cross-border data flows and protection of personal data and privacy; welcomes the adequacy framework as an effective means of ensuring a free flow of data from the EU to third countries; and further notes that in the context of the UK leaving the EU it provides the right starting point.—(Margot James.)

--- Later in debate ---

[Liam Byrne]

I am slightly alarmed by the content of this afternoon’s debate. Perhaps it might be easier for everyone if I tabled several parliamentary questions to follow up on the debate.

I am not clear whether adequacy discussions have begun in detail; I am not clear whether an adequacy agreement is needed for the implementation period; and I am not sure about the Minister’s level of confidence that an adequacy agreement will crystallise and be in place by the time the implementation period finishes. I have heard nothing about the Government’s assessment of the attitude in the European Parliament and the other organisations that have to sign off the decision. I am afraid that today’s debate has opened rather more questions than it has closed.

Question put and agreed to.