Data Protection Bill [HL]

Lord Faulkner of Worcester Excerpts

Monday 6th November 2017 Lords Chamber

[Lord Stevenson of Balmacara]

My Lords, I rise to speak to another rather wide-ranging group, in terms of numbers, although I think we will find the amendments are a theme and variation on an issue that will run through not just this Bill but a number of Bills to come. I refer to secondary legislation and powers in the future when it is necessary for the Government of the day to try to change that which has been set down in primary legislation in the past.

Amendment 22, which kicks this off, is taken very largely from the report of the Delegated Powers and Regulatory Reform Committee. I make no apology for that. I think it is a very good report, as always, from that committee which does a fantastic job on what we are doing. I think I am probably interposing in a dialogue that may be carrying on out of our direct ken since normally in this matter one would get a memorandum, which I think we have seen, and I thank the Minister and the Bill team for that. The first response from the Delegated Powers and Regulatory Reform Committee will make some comments and I think it likely that the Minister and his colleagues will respond to that. We are only in the early stages, so I suspect we are a bit previous on this point.

However, this is an issue of some substance that may well be in all the Brexit-related Bills soon to arrive in your Lordships’ House, which suggests that we might just have a quick canter around it at the moment.

In preparing for this particular area, I had thought that we would just stick with Clause 9, but I was drawn into also putting in Clause 15, because there is an interesting point here that I wanted to raise with Ministers. The noble Lord, Lord Whitty, the noble Baroness, Lady Jones, and the noble Lords, Lord Clement-Jones and Lord Paddick, have had less restraint, and therefore we are covering quite a large number of the issues raised by the DPRRC. I look forward to hearing the response and to the wider contributions from those who have tabled amendments in this group.

The main theme that seems to run through this is what the committee says in paragraph 20 of its recent report, that,

“we take the view that the memorandum does not adequately justify the breadth of the power in clause 9(6) of the Bill, and that it is inappropriate for Ministers to be given carte blanche to rewrite any or all of the conditions and safeguards in Schedule 1 by regulations in order ‘to deal with changing circumstances’ instead of bringing forward a Bill”.

The committee then slightly changes its position by recognising that currently this is under the affirmative procedure, quite a strong measure to have in play in legislation, and suggesting an alternative approach:

“It may be appropriate … for Ministers to have a more focused power enabling them to update specific paragraphs”.


Maybe that is a line the Government will take. The essence of this is Henry VIII powers—how egregious they are and how bad it would be in future to come across them. At the same time we have to balance that against the obvious need, particularly in this Bill—as we have already discussed we are talking about fast-moving technology, although it applies in other areas—for some flexibility on the part of the Government of the day to bring forward amendments and changes as and when required. It is a balance and has to be struck properly, but the first shots in this have tended to be that Ministers are too aggressive. We await further discussions, but that is the ground which we will be traipsing around.

Amendment 106A relates to Clause 15(1)(b), at line 44 on page 8, which talks about,

“the power in Article 23(1) to make a legislative measure restricting the scope of the obligations and rights mentioned in that Article where necessary and proportionate to safeguard certain objectives of general public interest.”

I take this to be a quote from the GDPR. It is therefore couched in language which I think would be unexceptional if we were transposing the GDPR into the Bill, but of course we are not, and we are not allowed to amend it. The question really is what a legislative measure is. This is not a rhetorical question, because I would like an answer. In our system, as I understand it, Secretaries of State bring forward legislation in the form of a Bill. If they are not doing that, they bring it forward in secondary regulations. But a legislative measure has no apparent meaning in terms of the work we do—maybe the Minister will confirm that this is perfectly right. But for the moment, this probing amendment not only underlines the point made by the DPRRC in relation to the power in Clause 15 but is also about the particularity of the language used. I beg to move.

[The Deputy Chairman of Committees (Lord Faulkner of Worcester) (Lab)]

I remind the Committee that if this amendment were to be agreed, I would be unable to call Amendment 22A for reason of pre-emption.

[Baroness Jones of Moulsecoomb (GP)]

My Lords, I regret I was not able to speak to the Bill at Second Reading, but I take great delight in speaking to it this evening, on Amendments 22, 23, 107, 138 and Clauses 15 and 111. I am well aware that the Bill is extremely important. The digital age brings all sorts of opportunities for us but also lots of challenges, and it is absolutely right to keep up to date and make sure that we have legislation in place for the big questions of privacy in such rapidly changing times. When the current data protection legislation came in, most people were still getting to grips with email, and sending a text message on your mobile phone was a really fancy way of communicating. It is time that the legislation was updated.

The sheer volume and depth of personal data that are now floating around online would have been unimaginable then. We share the deepest and most personal details of ourselves quite freely these days, or at least some of us do. The Bill seeks to set important new standards for the protection of people’s data and give them more rights over how their data are used. So far, so good—for example it would allow some of us to ask the social media companies to delete any stupid comments we made a decade or so ago, which might help some MPs currently.