Data Protection and Digital Information Bill

Lord Harlech Excerpts

Committee stage
Wednesday 27th March 2024 Grand Committee

[Lord Kamall (Con)]

My Lords, I speak in favour of the clause stand part notice in my name and that of the noble Lord, Lord Clement-Jones.

[Lord Harlech (Con)]

The noble Lord missed the start of the debate.

[Lord Kamall (Con)]

I apologise and thank the noble Lord for his collegiate approach.

--- Later in debate ---

[Baroness Jones of Whitchurch (Lab)]

I am having a senior moment as well. Where are the outcomes written? What are we measuring this against? I like the idea; it sounds great—management terminology—but I presume that it is written somewhere and that we could easily add children’s rights to the outcomes as the noble Baroness suggests. Where are they listed?

[Lord Harlech (Con)]

My Lords, I think we should try to let the Minister make a little progress and see whether some of these questions are answered.

[Lord Clement-Jones (LD)]

I am sorry, but I just do not accept that intervention. This is one of the most important clauses in the whole Bill and we have to spend quite a bit of time teasing it out. The Minister has just electrified us all in what he said about the nature of this clause, what the Government are trying to achieve and how it fits within their strategy, which is even more concerning than previously. I am very sorry, but I really do not believe that this is the right point for the Whip to intervene. I have been in this House for 25 years and have never seen an intervention of that kind.

--- Later in debate ---

[Viscount Camrose (Con)]

Do I have to shut up?

[Lord Harlech (Con)]

My Lords, just for clarification, because a number of questions were raised, if the Committee feels that it would like to hear more from the Minister, it can. It is for the mood of the Committee to decide.

[Baroness Kidron (CB)]

I would like to hear from the Minister.

Data Protection and Digital Information Bill

Lord Harlech Excerpts

Committee stage
Monday 22nd April 2024 Grand Committee

[Baroness Stowell of Beeston (Con)]

My Lords, if the Committee will indulge me, I was a little late arriving for the introduction to this group of amendments by my noble friend Lord Lucas, but I heard most of what he said and I will speak briefly. I am quite sympathetic to the arguments about the exemption being too tightly drawn and the advantage that this is likely to give the likes of Google and Meta in the advertising ecology. As the noble Lord, Lord Clement-Jones, said, a range of different trade bodies have raised concerns about this, certainly with me.

From my perspective, the other point of interest that I want to flag is that the Communications and Digital Committee is currently doing an inquiry into the future of news. As part of the evidence that we have taken in that inquiry, one of our witnesses from the news industry raised their concerns about a lack of joined-up thinking, as they described it, within government when it comes to various different bits of legislation in which there are measures that are inadvertently detrimental to the news or publishing industry because there has been no proper understanding or recognition of how the digital news environment is now so interconnected. Something like this, on cookies, could have quite a profound effect on the news and publishing industry, which we know is reliant on advertising and is increasingly feeling the pinch because the value that it gets from digital advertising is being squeezed all the time. I just wanted to reinforce the point, for the benefit of my noble friend the Minister, that concern about this is widespread and real.

[Lord Harlech (Con)]

My Lords, it is a pleasure to make my first foray at the Dispatch Box on this Bill in what has been an interesting Committee stage thus far. I thank my noble friend Lord Lucas and the noble Baroness, Lady Jones of Whitchurch, for tabling these amendments and other noble Lords who have signed and spoken to them in support.

Many people are irritated by repetitive pop-ups that appear on websites seeking consent for cookies and other similar technologies. The current cookie rules apply to all organisations placing cookies on a person’s device. Rather than engaging with these banners, people will select “accept all” so that they can access the webpage as quickly as possible. We want users to be able to make more meaningful choices over their privacy. One way in which web users may be able to reduce the number of consent pop-up banners that they see is by using automated consent management technology.

New Regulation 6B, which Amendment 202 seeks to remove, is important as it will allow the Secretary of State to require relevant technologies to meet certain standards or specifications, thereby ensuring that individuals using this technology have effective control over their privacy when they are online. Amendment 203 seeks to amend Regulation 6B by making it clear that consents given on individual websites should override any prior choices made using automated technology. However, this could pre-empt the outcome of consultation with relevant sectors, civil society and regulators on the design of any new regulations. I fear that this amendment could have the effect of encouraging the continued use of consent banners, may not reduce the overall number of pop-up banners and could increase the risk of influencing consumers to give up more personal data than they intended.

We feel that Amendments 204 and 205 are unnecessary and duplicate existing requirements and standard practice. There is already a requirement in new Regulation 6B to consult. We have engaged extensively with stakeholders on this Bill and will continue to do so in the context of using any of the new regulation-making powers linked to these clauses. Our engagement so far has highlighted the complexity of the ecosystem and the range of impacts on different interest groups. We will continue to consider these impacts carefully when considering whether to use the new regulation-making powers. Impact assessments are generally required for all interventions of a regulatory nature that affect the private sector, civil society organisations and public services.

The Government have taken powers in the Bill to remove consent requirements for other purposes if the evidence supports it while recognising that this is a complex and technical market. The Government will therefore continue to engage fully with all players before introducing any new exemptions or deciding to set standards for the market.

The new power in Regulation 6B recognises that there is a range of different stakeholder interests that would need to be considered before making regulations. The Secretary of State must consult the Information Commissioner, the Competition and Markets Authority and any other person the Secretary of State considers appropriate. While browser-based or centralised consent options have been discussed as a possible solution, nothing in the Bill mandates them. The regulation-making power, which follows the affirmative resolution procedure, would allow the Secretary of State to set standards of design that will be key to ensuring that the regulations can move with technology.

Amendments 199 and 200 would permit the storage of information or accessing information stored on a person’s connected device, including the internet of things, to enable the organisation to generate audience measurement information. This proposed new exemption does not explain what data would need to be gathered to meet the objective of the amendment and is potentially broad in its application. For example, if it permitted activities such as tracking and profiling, it may not be appropriate to permit it without the consent of web users.

--- Later in debate ---

[Lord Clement-Jones (LD)]

The Minister used the expression “when the evidence emerges”, as did the noble Viscount, Lord Camrose, in another context last week. I would have thought that these organisations know what they are about, and they have provided some pretty comprehensive evidence about the impact on their businesses. Is that not a pretty good reason for the Government to think that they might not have this set of provisions entirely right, quite apart from the other aspects of this group of amendments? If that evidence is not enough—I read out the list of organisations—the Government are more or less saying that they will not accept any evidence.

[Lord Harlech (Con)]

I thank both noble Lords for their interventions. On the point from the noble Lord, Lord Bassam, there is a trifecta of decision-making between the Secretary of State, the ICO and the organisations all working together. That is why there is a consultation requirement before using the power. On the point from the noble Lord, Lord Clement-Jones, it is a question of your point of view; we feel that we have done stakeholder engagement and believe that we have got the balance right between the needs of organisations—

[Lord Clement-Jones (LD)]

Will the Minister write and unpack exactly what the balance of opinion was? We are talking about pretty crucial stuff here. It is not always a question just of numbers; it is quite often a question of weighting the arguments. The Minister should write to us and tell us how they came to that conclusion, because the case was clearly being made during the consultation, but the Government have effectively ignored it.

--- Later in debate ---

[Lord Harlech (Con)]

I thank noble Lords for those further points requesting clarification. On how we have come to this decision, I am happy to write to all noble Lords in the Committee. The noble Lord went in an interesting direction because, in the context of the rest of the Bill, so many of the amendments have been about protecting private users, but the noble Lord seems to be swaying more in favour of the advertisers here.

[Lord Clement-Jones (LD)]

My Lords, it is all about the relative importance and the weighting. Maybe that is a good illustration of where the Government are not getting their weighting correct for the beginning and this part of the Bill.

[Lord Harlech (Con)]

I take the noble Lord’s point. We are working with industry and will continue to do so. For the benefit of the Committee, we are, as I said, happy to write and explain the points of view, including those from Data: A New Direction. In response to the noble Lord, Lord Bassam, power ultimately lies with Parliament via the affirmative resolution procedure for the Secretary of State power.

I will go back to the amendments we were discussing. This regulation applies to complex and technical markets. The very reason we have taken a delegated power is so that the new exemptions can be carefully created in consultation with all affected stakeholders. As I explained, the Bill includes a requirement to consult the Information Commissioner, the Competition and Markets Authority and any other relevant stakeholders, which would include trade associations and consumers or web users.

Amendment 201 would widen the application of the “strictly necessary” exemption. Currently, it applies only to those purposes essential to provide the service requested by the user. Amendment 201 would extend this exemption so that it applies to the purposes considered essential to the website owner. We do not think this would be desirable, as it would reduce a user’s control over their privacy in a way that they might not expect.

For the reasons I have set out—and once again reaffirming the commitment to write to noble Lords on how the weighting was worked out—I hope my noble friend and the noble Baroness will not press their amendments.

[Lord Lucas (Con)]

Might I also hope for the meeting that I referred to?

[Lord Harlech (Con)]

My Lords, my noble friend makes a good point. I can promise all Members that there will be thematic meetings between Committee and Report.

[Lord Lucas (Con)]

My Lords, I am grateful for that assurance from my noble friend.

On the first amendments, clearly, we are dealing with something that is quite tricky and technical. My noble friend sees these amendments in a different light to me. It is possible that my drafting may be imperfect; that has never happened before, of course, but there is always a first time. Therefore, I seek an opportunity to look at this issue in detail. It is absolutely not my objective to engage the objections; this is something where my noble friend’s objections are valid. My amendment is not intended in any way to allow tracking or profiling. If I am wording things imperfectly or imagining something that just cannot be achieved in practice, the best way to deal with these matters would be to hammer them out in a technical discussion, not in Committee. I would happily look to an opportunity to do that between Committee and Report.

When it comes to new Regulation 6B and its ramifications, as the debate has gone on, I have found myself favouring more and more the amendment in the name of the noble Baroness, Lady Jones of Whitchurch. This is an uncontrolled bit of power that we are looking to give the Government, with some serious implications. It should not be done. We should wait until the technology is available and then do something when we can really take our time to look at the options. Again, this is something that we will have a chance to talk through.

It is really important that, in doing what seems to be convenient—as my noble friend put it, it is about getting rid of an irritation and making the whole process of giving permission much more effective; I am absolutely with him on that—we make sure that we are not letting ourselves in for some greater dangers. I personally want to make sure of that. The oldies among us—most of us, I suspect—will remember when Google said, “Don’t be evil”. I wish that it had kept to that.

For now, I beg leave to withdraw my amendment.

--- Later in debate ---

[Lord Clement-Jones (LD)]

I am not going to carry on much longer. I know that that will be a grave disappointment but it makes the case, I think, that it is high time that the Government did something in this area. It is clearly hugely unpopular. We need to make sure that Amendment 208A is passed. If not now, when?

[Lord Harlech (Con)]

My Lords, I thank the noble Baroness, Lady Jones of Whitchurch, for tabling Amendment 208A and the noble Lord, Lord Leong, for moving it. This amendment would insert new Regulation 22A into the privacy and electronic communications regulations and would prohibit via email or text unsolicited approaches encouraging people to commence personal injury claims sent by, or on behalf of, claims management companies.

The Government agree that people should not receive unsolicited emails and texts from claims management companies encouraging them to make personal injury claims. I assure noble Lords that this is already unlawful under the existing regulations. Regulation 22(2) prohibits the sending of all unsolicited electronic communications direct marketing approaches—including, but not limited to, texts and emails—unless the recipient has previously consented to receiving the communication. Regulation 21A already bans live calling by claims management companies.

In the past year, the Information Commissioner has issued fines of more than £1.1 million to companies that have not adhered to the direct marketing rules. Clause 117 considerably increases the financial penalties that can be imposed for breaches of the rules, providing a further deterrent to rogue claims management and direct marketing organisations.

Amendments 211 and 215 relate to Clause 116 so I will address them together. Amendment 211 seeks to confirm that a provider of a public electronic communications service or network is not required to intercept or examine the content of any communication in order to comply with the new duty introduced by Clause 116. I assure the noble Baroness and the noble Lord that the duty is a duty to share information only. It merely requires providers to share any information that they already hold or gather through routine business activities and which may indicate suspicious unlawful direct marketing on their networks; it does not empower, authorise or compel a communications provider to intercept messages or listen to phone calls.

Should a communications provider become aware of information through its routine business activities that indicates that unlawful direct marketing activity may be taking place on its service or network, this duty simply requires it to share that information with the Information Commissioner. For example, a communications provider may receive complaints from its subscribers who have received numerous unsolicited direct marketing communications from a specific organisation. We know from the public consultation that people want action taken against nuisance calls and spam, and this duty will support that.

Data Protection and Digital Information Bill

Lord Harlech Excerpts

Committee stage
Wednesday 24th April 2024 Grand Committee

[Lord Clement-Jones (LD)]

My Lords, I will be brief because we very much support these amendments. Interestingly, Amendment 239 from the noble Baroness, Lady Jones, follows closely on from a Private Member’s Bill presented in November 2021 by the Minister’s colleague, Minister Saqib Bhatti, and before that by the right honourable Andrew Mitchell, who is also currently a Minister. The provenance of this is impeccable, so I hope that the Minister will accept Amendment 239 with alacrity.

We very much support Amendment 250. The UK Commission on Bereavement’s Bereavement is Everyone’s Business is a terrific report. We welcome Clause 133 but we think that improvements can be made. The amendment from the noble Baroness, which I have signed, will address two of the three recommendations that the report made on the Tell Us Once service. It said that there should be a review, which this amendment reflects. It also said that

“regulators must make sure bereaved customers are treated fairly and sensitively”

by developing minimum standards. We very much support that. It is fundamentally a useful service but, as the report shows, it can clearly be improved. I congratulate the noble Baroness, Lady Jones, on picking up the recommendations of the commission and putting them forward as amendments to this Bill.

[Lord Harlech (Con)]

My Lords, I declare an interest as someone who has been through the paper death registration process and grant of probate, which has something to do with why I am in your Lordships’ House, so I absolutely understand where the noble Baroness, Lady Jones of Whitchurch, is coming from. I thank her for tabling these amendments to Clauses 133 and 142. They would require the Secretary of State to commission a review with a view to creating a single digital register for the registration of births and deaths and to conduct a review of the Government’s Tell Us Once scheme.

Clause 133 reforms how births and deaths are registered in England and Wales by enabling a move from a paper-based system of birth and death registration to registration in a single electronic register. An electronic register is already in use alongside the paper registers and has been since 2009. Well-established safety and security measures and processes are already in place with regard to the electronic infrastructure, which have proven extremely secure in practice. I assure noble Lords that an impact assessment has been completed to consider all the impacts relating to the move to an electronic register, although it should be noted that marriages and civil partnerships are already registered electronically.

The strategic direction is to progressively reduce the reliance on paper and the amount of paper in use, as it is insecure and capable of being tampered with or forged. The creation of a single electronic register will remove the risk of registrars having to transmit loose-leaf register pages back to the register office when they are registering births and deaths at service points across the district. It will also minimise the risk of open paper registers being stolen from register offices.

The Covid-19 pandemic had unprecedented impacts on the delivery of registration services across England and Wales, and it highlighted the need to offer more choice in how births and deaths are registered in the future. The provisions in the Bill will allow for more flexibility in how births and deaths are registered—for example, registering deaths by telephone, as was the case during the pandemic. Over 1 million deaths were successfully registered under provisions in the Coronavirus Act 2020. This service was well received by the public, registrars and funeral services.

Measures will be put in place to ensure that the identity of an informant is established in line with Cabinet Office good practice guidance. This will ensure that information provided by informants can be verified or validated for the purposes of registering by telephone. For example, a medical certificate of cause of death issued by a registered medical practitioner would need to have been received by the registrar before an informant could register a death by telephone. Having to conduct a review, as was proposed by the noble Baroness, Lady Jones, would delay moving to digital ways of working and the benefits this would introduce.

[Baroness Jones of Whitchurch (Lab)]

Can I just be clear? The noble Lord was quite rightly saying that there is going to be a move to digital, rather than paper, and we all support that. However, our amendment went one stage further and said that there should be one national digital scheme. In the impact assessment and the strategic direction, to which the noble Lord referred, is one national scheme intended so that registrars do not have the flexibility to do their own thing, with their own computer? Is that now being proposed?

[Lord Harlech (Con)]

The noble Baroness asks a fair question. A major thing is being proposed, so it is best that we work with our DWP colleagues, and I commit to writing to the noble Baroness and the Committee on that point.

On the amendment to Clause 142, while we agree with the aim of improving the Tell Us Once service, our view is that the only way to achieve this is by upgrading its technology. This work is under way and expected to take up to two years to complete. It will ensure that Tell Us Once continues to operate into the future, providing us with the ability to build on opportunities to improve its speed and efficiency.

Going back to what I said earlier, it would not be right to commit to undertake a review of the service while this upgrading work is ongoing, especially as any extension of the service would require a fundamental change in how it operates, placing additional burdens on registrars and citizens, and undermining that simplicity-of-service principle. For those who still wish to use a paper process, that option will remain. For the reasons that I have set out, I am not able to accept these amendments and I hope that the noble Baroness is happy not to press them.

[Baroness Jones of Whitchurch (Lab)]

My Lords, I am grateful to hear that there is some work ongoing on the registrar process and that the noble Lord will write with further details. Obviously, if this work is already happening and we have the same intent, we would accept that our amendment is superfluous, but I need to be a little more assured that that is the case.

I was a bit more disappointed with what the Minister was saying on Tell Us Once. I suspect that the technology upgrade to which he referred is only for the current scheme, which refers only to the public sector. However, our proposal and the Marie Curie proposal, which was very well argued, is that there is now a need to extend that to the private sector—to banks, telephone companies and so on.

I did not really hear the Minister saying that that was going to be the case but, if he is going to write, maybe he could embrace that as well. As I said, Tell Us Once is a hugely popular scheme and if we can extend it further to a wider group of organisations, that would be a very popular thing for the Government to do.

In the meantime, I beg leave to withdraw the amendment.

--- Later in debate ---

[Baroness Jones of Whitchurch (Lab)]

My Lords, I thank the noble Lord, Lord Clement-Jones, for introducing his amendments so ably. When I read them, I had a strong sense of déjà vu as attempts by the Government to control the appointments and functioning of new regulators have been a common theme in other pieces of legislation that we have debated in the House and which we have always resisted. In my experience, this occurred most recently in the Government’s proposals for the Office for Environmental Protection, which was dealing with EU legislation being taken into by the UK and is effectively the environment regulator. We were able to get those proposals modified to limit the Secretary of State’s involvement; we should do so again here.

I very much welcome the noble Lord’s amendments, which give us a chance to assess what level of independence would be appropriate in this case. Schedule 15 covers the transition from the Information Commissioner’s Office to the appointment of the chair and non-executive members of the new information commission. We support this development in principle but it is crucial that the new arrangements strengthen rather than weaken the independence of the new commission.

The noble Lord’s amendments would rightly remove the rights of the Secretary of State to decide the number of non-executive members and to appoint them. Instead, his amendments propose that the chair of the relevant parliamentary committee should oversee appointments. Similarly, the amendments would remove the right of the Secretary of State to recommend the appointment and removal of the chair; again, this should be passed to the relevant parliamentary committee. We agree with these proposals, which would build in an additional tier of parliamentary oversight and help remove any suspicion that the Secretary of State is exercising unwarranted political pressure on the new commission.

The noble Lord’s amendments beg the question of what the relevant parliamentary committee might be. Although we are supportive of the wording as it stands, it is regrettable that we have not been able to make more progress on establishing a strong bicameral parliamentary committee to oversee the work of the information commission. However, in the absence of such a committee, we welcome the suggestion made in the noble Lord’s Amendment 256 that the Commons Science, Innovation and Technology Committee could fulfil that role.

Finally, we have tabled Amendment 259, which addresses what is commonly known as the “revolving door” whereby public sector staff switch to jobs in the private sector and end up working for industries that they were supposedly investigating and regulating previously. This leads to accusations of cronyism and corruption; whether or not there is any evidence of this, it brings the reputation of the whole sector into disrepute. Perhaps I should have declared an interest at the outset: I am a member of the Advisory Committee on Business Appointments and therefore have a ringside view of the scale of the revolving door taking place, particularly at the moment. We believe that it is time to put standards in public life back at the heart of public service; setting new standards on switching sides should be part of that. Our amendment would put a two-year ban on members of the information commission accepting employment from a business that was subject to enforcement action or acting for persons who are being investigated by the agency.

I hope that noble Lords will see the sense and importance of these amendments. I look forward to the Minister’s response.

[Lord Harlech (Con)]

My Lords, I thank the noble Lord, Lord Clement-Jones, and the noble Baroness, Lady Jones of Whitchurch, for their amendments to Schedule 15 to the Bill, which sets out the governance structure of the new information commission.

The ICO governance reforms ensure its accountability to Parliament. Before I go any further, let me stress that the Government are committed to the ICO’s ongoing independence. We have worked closely with the Information Commissioner, who is supportive of the reforms, which they state allow the ICO

“to continue to operate as a trusted, fair and independent regulator”.

The Government’s view, therefore, is that this Bill is compatible with maintaining the free flow of personal data from Europe. These reforms have been designed carefully with appropriate safeguards in place to protect the information commission’s independence and ensure accountability before Parliament on important issues such as public appointments, money and accounts.

The Bill requires the Secretary of State to give the member a written statement of reasons for the removal and make public the decision to do so, ensuring accountability and transparency. This process is in line with standard practice for other UK regulators, such as Ofcom, which do not require parliamentary oversight for the removal of non-executives.

The chair can be removed only by His Majesty on an Address by both Houses, provided that the Secretary of State presents a report in Parliament stating that they are satisfied that there are serious grounds for removal, as set out in the Bill. This follows the process for the removal of the current Information Commissioner.

Greater performance measurement will help the ICO achieve its objectives and enable it to adjust its resources to prioritise key areas of work. This will also increase accountability to Parliament—a point raised by both noble Lords—organisations and the public, who have an interest in its effectiveness.

The Government are satisfied that these processes safeguard the integrity of the regulator, are in line with best practices for other regulators and, crucially, balance the importance of the information commission’s independence with appropriate oversight by the Government and Parliament as necessary. The regulator is, and remains, accountable to Parliament, not the Government, in its delivery of data protection regulation.