Lord Clement-Jones

The Digital Economy Act (DEA) 2017 Secretariat has no plans to publish application documents (e.g. pilot business cases, data protection impact assessments or memorandums of understanding) in relation to projects 341 and 476.

It is the voluntary responsibility of participating pilot organisations to publish any documentation in relation to applications. This is set out in paragraph 146 in the Code of Practice (CoP) for public authorities disclosing information under Chapters 1, 3 and 4 (Public Service Delivery, Debt and Fraud) of Part 5 of the DEA 2017.

On the publication of an end-of-pilot report on project 341, the DEA Secretariat publishes summary minutes from each Review Board meeting, which references organisational-led end-of-pilot reports. The decision to publish these reports are the responsibility of the relevant organisation.

I refer the noble Lord to the answer given to question HL8487 on 30th June.

In January 2024, Fujitsu said it would withdraw from bidding for contracts with new Government customers until the Post Office Horizon inquiry concludes – and it would only bid for work with existing Government customers where it already has an existing customer relationship with them, or where there is an agreed need for Fujitsu’s skills and capabilities. Fujitsu's bid approach is detailed in correspondence deposited in the Houses of Parliament libraries on 4 March 2024 (DEP2024-0247).

Details of public sector awards are publicly available on Contracts Finder & Find a Tender services. In addition to extensions available under Fujitsu’s existing contracts, Contracts Finder and Find a Tender provide details of twelve new Fujitsu contracts since July 2024. These awards are compliant with Fujitsu's commitment not to bid for work with new customers. The majority are for services already provided by Fujitsu and were put in place to ensure continuity of services whilst competitive procurements are being set up.

The Government is determined to hold those responsible for the Horizon scandal to account, and will continue to make rapid progress on compensation and redress. Fujitsu’s role in Horizon is one of the issues which is being reviewed by Sir Wyn Williams’s statutory inquiry. The Cabinet Office has been monitoring the situation, in addition to continuing its usual monitoring of Fujitsu as a strategic supplier. The Government will carefully consider volume 1 of the report, to be published on 8 July, which is limited in scope. Once the inquiry establishes the full facts, we will review its final report and consider any further action, as appropriate.

In January 2024, Fujitsu said it would withdraw from bidding for contracts with new Government customers until the Post Office Horizon inquiry concludes – and it would only bid for work with existing Government customers where it already has an existing customer relationship with them, or where there is an agreed need for Fujitsu’s skills and capabilities. Fujitsu's bid approach is detailed in correspondence deposited in the Houses of Parliament libraries on 4 March 2024 (DEP2024-0247).

Details of public sector awards are publicly available on Contracts Finder & Find a Tender services. In addition to extensions available under Fujitsu’s existing contracts, Contracts Finder and Find a Tender provide details of twelve new Fujitsu contracts since July 2024. These awards are compliant with Fujitsu's commitment not to bid for work with new customers. The majority are for services already provided by Fujitsu and were put in place to ensure continuity of services whilst competitive procurements are being set up.

The Government is determined to hold those responsible for the Horizon scandal to account, and will continue to make rapid progress on compensation and redress. Fujitsu’s role in Horizon is one of the issues which is being reviewed by Sir Wyn Williams’s statutory inquiry. The Cabinet Office has been monitoring the situation, in addition to continuing its usual monitoring of Fujitsu as a strategic supplier. The Government will carefully consider volume 1 of the report, to be published on 8 July, which is limited in scope. Once the inquiry establishes the full facts, we will review its final report and consider any further action, as appropriate.

In January 2024, Fujitsu said it would withdraw from bidding for contracts with new Government customers until the Post Office Horizon inquiry concludes – and it would only bid for work with existing Government customers where it already has an existing customer relationship with them, or where there is an agreed need for Fujitsu’s skills and capabilities. Fujitsu's bid approach is detailed in correspondence deposited in the Houses of Parliament libraries on 4 March 2024 (DEP2024-0247).

Details of public sector awards are publicly available on Contracts Finder & Find a Tender services. In addition to extensions available under Fujitsu’s existing contracts, Contracts Finder and Find a Tender provide details of twelve new Fujitsu contracts since July 2024. These awards are compliant with Fujitsu's commitment not to bid for work with new customers. The majority are for services already provided by Fujitsu and were put in place to ensure continuity of services whilst competitive procurements are being set up.

The Government is determined to hold those responsible for the Horizon scandal to account, and will continue to make rapid progress on compensation and redress. Fujitsu’s role in Horizon is one of the issues which is being reviewed by Sir Wyn Williams’s statutory inquiry. The Cabinet Office has been monitoring the situation, in addition to continuing its usual monitoring of Fujitsu as a strategic supplier. The Government will carefully consider volume 1 of the report, to be published on 8 July, which is limited in scope. Once the inquiry establishes the full facts, we will review its final report and consider any further action, as appropriate.

It is not a mandatory requirement to publish a Data Protection Impact Assessment (DPIA). We do have an obligation to let citizens know how we are processing their data, which we do via a privacy notice published on GOV.UK. We continually develop our DPIA to take into account the new identity verification journeys, such as the no photo ID route. Nevertheless, we are working on a publishable version of our DPIA which will be easy to digest for the public. The One Login programme meets with the Information Commissioners’ Office (ICO) on a monthly basis, engaging openly on programme developments, including iterations of the DPIA, and has been doing so since 2022.

A Government Communications Service assessment of the utility of provenance tools can be found in GCS Innovating with Impact Strategy, under the subheading ‘Tackling horizon challenges head on’, a copy of which is attached.

The upcoming iteration of G-Cloud will introduce a streamlined ‘Open Framework’ under the new Procurement Act. This will simplify the existing portfolio of agreements, enhancing access for small and medium-sized enterprises (SMEs) and challenger cloud providers.

The government is aware that there are aspects of design law which would benefit from simplification, consolidation and streamlining to make it easier for UK designers to protect their work.

The government’s consultation last year on changes to the UK design framework sought views on a range of measures to simplify the complexity of unregistered designs and help businesses who want to protect designs in the UK and EU. The government is currently reviewing responses to the consultation, and a response will be published later this year.

Since the criminal offence for unauthorised copying of a registered design was introduced by the Intellectual Property Act 2014, there is one reported case on record which included a conviction for an offence under section 35ZA of the Registered Designs Act 1949.

The government included a call for evidence on extending criminal sanctions to the unauthorised copying of unregistered designs in the consultation on changes to the UK designs framework which closed on 27 November 2025. At this stage, no decisions have been made and the evidence received is still being analysed. A government response to the consultation will be published later this year.

Fees are reviewed regularly to ensure the UK intellectual property framework remains accessible. The recent increase in statutory fees was a general uplift which did not alter the structure of designs fees.

The outcome of the recent consultation on changes to the UK designs framework may require a re-examination of the fee structure for designs, however the government is aware that users of the UK designs system value the low-cost of registering designs compared to other jurisdictions.

Following the judgement in PMS International Group Plc v Magmatic Limited [2016] UKSC 12, the UK IPO issued guidance to help applicants define their intended scope of protection when registering a design.

The government has undertaken an in-depth review of the legislative framework for designs, followed by a wide-ranging consultation which took place in the autumn of 2025. The consultation included proposals to improve the validity of registered designs, make the designs system more accessible to designers and small businesses and improve access to enforcement. A government response to the consultation will be published later this year.

The Government is committed to transparency and public trust in the use of data for artificial intelligence (AI) development.

The primary mechanism by which the Government informs the public about the use of data, including public administrative datasets, in AI systems is the Algorithmic Transparency Recording Standard (ATRS). This provides accessible and centralised information on GOV.UK about how and why algorithmic and AI tools are used, including the types of data involved in model development. Through mandatory reporting requirements, central government departments and relevant arm’s-length bodies are required to publish information documenting how algorithmic tools are used in decision making or interact with the general public. This must be done in line with the scope and exemptions policy on GOV.UK. For all other public sector organisations it is recommended as best practice. Algorithmic transparency records from UK public sector organisations are available on the Algorithmic Transparency Recording Standard Repository on GOV.UK.

In addition, the Government has published guidance on making government datasets ready for AI, which sets expectations that departments document dataset provenance, permitted reuse (including for AI development), legal basis, and ethical considerations, to support transparency and responsible data use.

Where personal data is used, UK data protection legislation requires data controllers to provide clear information about how personal data is used, including its use in automated or algorithm assisted decision‑making, through departmental privacy notices and related publications.

As public sector AI adoption accelerates, GDS leads the responsible, safe, and scalable use of AI to boost productivity, improve services, and unlock efficiencies where practicable.

Implementation of the Government's Memorandum of Understanding (MoU) with Google DeepMind is underway but is still in its early phases for many commitments, including AI datasets.

The MOU with Google DeepMind supports the Government’s AI Opportunities Action Plan, the work of the AI Security Institute, and our AI for Science Strategy.

The Digital Economy Act 2017 requires all persons who are involved in disclosing or using information under the public service delivery, debt and fraud powers to have due regard to the Code of Practice for public authorities disclosing information under Chapters 1, 3 and 4 (Public Service Delivery, Debt and Fraud) of Part 5 of the Digital Economy Act 2017 in so far as they are relevant, when they disclose or use information under these powers.

It is also a legal requirement for many organisations including government bodies and agencies that process personal data, to register with the Information Commissioner’s Office in accordance with the Data Protection (Charges and Information) Regulations 2018 unless they are exempt.

The Digital Economy Act 2017 (DEA) contains data sharing powers that allow specified authorities to share information, including personal data, for specific purposes. Anyone sharing information under Chapters 1- 4 of Part 5 of the DEA is required to have regard to the relevant Code of Practice when doing so. This states that those authorities, listed in schedules 4-8 and Chapter 2 of the DEA, should enter an information sharing agreement (ISA) when sharing data under these powers.

The codes of practice provide details to practitioners on how information sharing powers under the DEA must be operated. Those relating to public service delivery (PSD), debt and fraud and civil registration place a requirement on the Data Controller(s) to set out information about their ISA within a publicly available register.

The register, operated by Government Digital Service (GDS) and publicly available on GOV.UK, provides a central repository of all data shares made under the powers provided by Chapters 1 - 4 of Part 5 of the DEA. It is a key transparency measure which outlines details of each data share, including the bodies involved, why it is shared, for how long and the expected benefits.

The register currently contains 525 entries and 464 public bodies. It is available at https://www.digital-economy-act-register.data.gov.uk.

While GDS is responsible for maintaining the register, the DEA’s statutory Code of Practice makes clear that responsibility for the accuracy of register entries rests with the public authorities involved in each data share, except in relation to the debt and fraud provisions, where responsibility falls under the debt and fraud secretariat.

The government is actively considering what exceptions could be made to regulation 6, and we shall update the House in due course.

Any regulations would be developed and drafted by the Department for Science, Innovation and Technology. The Information Commissioner’s Office (ICO) will publish recommendations for the government on this issue. The Government will consult the ICO and other interested stakeholders on the development of any regulations, as we are legally required to by the provisions in section 112(3) of the Data (Use and Access) Act 2025.

Throughout the project looking into new exemptions to regulation 6 of the Privacy and Electronic Communications Regulations (described in previous answers HL12548), we have we regularly meet with the ICO to discuss the evidence they are gathering. This includes evidence from technical experts and industry representatives.

The ICO will make recommendations to the government next year about this matter and we will consider those recommendations and the evidence supporting them.

As noted in the answer to HL12548, HL12549, HL12551, the Government is currently exploring options for additional exemptions to the cookie consent rules in the Privacy and Electronic Communications Regulations. It will consider the Information Commisisoner’s Office’s recommendations in this area carefully in due course.

Officials have met with the Professional Publishers Association and other trade associations to discuss how this work could support online advertisers, whilst preserving high standards of privacy for web users. The government will undertake further engagement with relevant stakeholders to consider the impact and design of any new proposals before deciding how to proceed.

As noted in the answer to HL12548, HL12549, HL12551, the Government is currently exploring options for additional exemptions to the cookie consent rules in the Privacy and Electronic Communications Regulations. It will consider the Information Commisisoner’s Office’s recommendations in this area carefully in due course.

Officials have met with the Professional Publishers Association and other trade associations to discuss how this work could support online advertisers, whilst preserving high standards of privacy for web users. The government will undertake further engagement with relevant stakeholders to consider the impact and design of any new proposals before deciding how to proceed.

As noted in the answer to HL12548, HL12549, HL12551, the Government is currently exploring options for additional exemptions to the cookie consent rules in the Privacy and Electronic Communications Regulations. It will consider the Information Commisisoner’s Office’s recommendations in this area carefully in due course.

Officials have met with the Professional Publishers Association and other trade associations to discuss how this work could support online advertisers, whilst preserving high standards of privacy for web users. The government will undertake further engagement with relevant stakeholders to consider the impact and design of any new proposals before deciding how to proceed.

As noted in the answer to HL12548, HL12549, HL12551, the Government is currently exploring options for additional exemptions to the cookie consent rules in the Privacy and Electronic Communications Regulations. It will consider the Information Commisisoner’s Office’s recommendations in this area carefully in due course.

Officials have met with the Professional Publishers Association and other trade associations to discuss how this work could support online advertisers, whilst preserving high standards of privacy for web users. The government will undertake further engagement with relevant stakeholders to consider the impact and design of any new proposals before deciding how to proceed.

This Government recognises the importance of supporting the growth of the UK’s publishing sector - one of our most successful and long-standing creative industries.

We welcome the Information Commisisoner’s Office’s (ICO) work in this area. The ICO are currently examining whether additional exceptions to the cookies consent requirements in the Privacy and Electronic Communications Regulations 2003 could be made to support online advertising while maintaining users’ privacy standards. We will be considering the ICO’s recommendations, and their potential impact, carefully in due course.

This Government recognises the importance of supporting the growth of the UK’s publishing sector - one of our most successful and long-standing creative industries.

We welcome the Information Commisisoner’s Office’s (ICO) work in this area. The ICO are currently examining whether additional exceptions to the cookies consent requirements in the Privacy and Electronic Communications Regulations 2003 could be made to support online advertising while maintaining users’ privacy standards. We will be considering the ICO’s recommendations, and their potential impact, carefully in due course.

The Privacy and Electronic Communications Regulations (PECR) require online advertisers to seek consent to place cookies (and similar technologies) on users’ devices. But certain uses of cookies are a lower risk to privacy than others, and privacy enhancing techniques such as pseudonymisation can further reduce risk. As part of the Data (Use and Access) Bill this government introduced reforms to PECR that enabled more than £17m annually in compliance savings. The government is working with the Information Commissioner’s Office (ICO), industry, and others to assess whether new exemptions under PECR could be used to promote growth and innovation in the advertising, creative, and publishing industries while maintaining high privacy standards for users.

The Privacy and Electronic Communications Regulations (PECR) require online advertisers to seek consent to place cookies (and similar technologies) on users’ devices. But certain uses of cookies are a lower risk to privacy than others, and privacy enhancing techniques such as pseudonymisation can further reduce risk. As part of the Data (Use and Access) Bill this government introduced reforms to PECR that enabled more than £17m annually in compliance savings. The government is working with the Information Commissioner’s Office (ICO), industry, and others to assess whether new exemptions under PECR could be used to promote growth and innovation in the advertising, creative, and publishing industries while maintaining high privacy standards for users.

The Privacy and Electronic Communications Regulations (PECR) require online advertisers to seek consent to place cookies (and similar technologies) on users’ devices. But certain uses of cookies are a lower risk to privacy than others, and privacy enhancing techniques such as pseudonymisation can further reduce risk. As part of the Data (Use and Access) Bill this government introduced reforms to PECR that enabled more than £17m annually in compliance savings. The government is working with the Information Commissioner’s Office (ICO), industry, and others to assess whether new exemptions under PECR could be used to promote growth and innovation in the advertising, creative, and publishing industries while maintaining high privacy standards for users.

The Government recognises its dependence on a small number of key suppliers for cloud services. As set out in the Blueprint for Modern Digital Government, we are addressing this by establishing the Digital Commercial Centre of Excellence to strengthen digital procurement capability and improve supplier management. This includes working with Government Commercial Agency on the National Digital Exchange which is intended to make it easier for public sector organisations to access services from new cloud service providers, including SMEs. Together with the Procurement Act 2023, this will help ensure competition, innovation and resilience in government cloud services.

The Government recognises the importance of resilience in cloud services. Following the outages in October, the Department for Science, Innovation and Technology worked with affected providers and the Government Cyber Coordination Centre to assess impacts and strengthen contingency planning. Alongside this, the forthcoming Cyber Security and Resilience Bill will improve resilience standards. In February 2025, DSIT published guidance supporting multi-region cloud adoption to help departments improve resilience. I also refer the Noble Lord to the answer given on 4 November 2025 to Question HL11169.

The Government’s strategy to support replacing animals in science commits to, from 2026, publish biennially a list of alternative-methods research and development priorities, to coalesce UK scientists and incentivise partnerships between research organisations, CROs and industry. These priority areas will be developed collaboratively between Government, academia, industry, and other partners. Monoclonal antibody testing will be considered as a potential area.

Enforcement of the target to replace animal-derived polyclonal antibodies is provided for by existing law which states animals cannot be used where a validated alternative exists. Therefore licences would not be granted once alternative methods have been validated and agreed.

The Data and Analytics Research Environments UK (DARE UK) programme is funded by UK Research and Innovation (UKRI) and co-delivered by Health Data Research UK (HDR UK) and Administrative Data Research UK (ADR UK) who jointly oversee programme delivery.

The Medical Research Council (MRC), which is part of UKRI, has provided £24.4m since 2021 to the DARE UK research programme. This was allocated from the UKRI Digital Research Infrastructure (DRIC) fund. Funding has been awarded to a range of projects led by over 28 research organisations.

Details of recipient organisations are available at GtR.ukri.org.

A list of the DARE UK Early Adopters (projects supporting the testing and integration of capabilities in UK Trusted Research Environments) awarded by the DARE UK team are available at dareuk.org.uk.

Final spend figures for on-going projects will be confirmed in due course via DARE UK (Data and Analytics Research Environments UK) – HDR UK.

DSIT is supporting industry in building more data centres in the UK (including via AI Growth Zones), which helps enable cloud providers in the UK to expand. We are working with other government departments to speed up planning permission and grid connection timings to support this.

The Government believes complex issues such as the security of data and digital governance are best addressed through transparent, inclusive multistakeholder engagement. We remain committed to working with international partners within recognised global mechanisms to promote shared understanding and responsible international behaviours, while ensuring support for UK-based data-driven businesses to innovate and grow.

Cyber security is a key part of the Industrial Strategy. DSIT supports the development of sovereign capability in the £13.2 billion UK cyber security sector through its accelerator programmes, including CyberASAP, which commercialises cyber security research, and Cyber Runway, which supports entrepreneurs and companies. Our £187 million TechFirst programme will improve digital skills across the country, including cyber security skills. We are investing significantly in the National Cyber Security Centre, the Government’s technical authority on cyber security, which continues to work to strengthen UK cyber resilience. The Cyber Security and Resilience Bill will further strengthen UK cyber defences and boost protections for our essential and digital services, including cloud computing.

The Government recognises the importance of ensuring the resilience of digital infrastructure. The Department reviews the most significant risks to the security and resilience of UK digital infrastructure and assesses their likelihood and impact through the National Security Risk Assessment. A summary of these risks is published in the National Risk Register.

Operators of UK digital infrastructure are legally required to take appropriate and proportionate measures to ensure their networks are secure and resilient. Ofcom monitors compliance and enforces standards under the Telecommunications (Security) Act 2021 and the Network and Information Systems Regulations 2018.