Investigatory Powers (Codes of Practice) Regulations 2018

Lord Kennedy of Southwark Excerpts

Thursday 1st February 2018 Lords Chamber

[Lord Butler of Brockwell (CB)]

My Lords, having had the privilege of serving on the investigatory powers pre-legislation committee under the chairmanship of the noble Lord, Lord Murphy, and on the Intelligence and Security Committee, and having long experience of the operation of GCHQ and the other intelligence agencies, I start from a different position from that of the noble Baroness, Lady Jones. I start from a position of believing that these agencies operate to very high standards and that the detail of these codes of practice, which have taken some time to produce, are an indication of that.

I have two questions for the Minister which may have been covered by the noble Lord, Lord Paddick, but in which I am interested. The cost of requiring providers to keep records of IP addresses which they would not normally want to keep in the course of their business was an open issue when the committee served. I would be interested if the Minister could tell us—as the noble Lord, Lord Paddick, asked—how much the Government estimate that that cost will be.

I would also like to know whether the codes of practice on the retention of records are consistent with the judgment of the European Court of Justice in the case brought by Mr David Davis and Mr Tom Watson, and whether that problem has been solved.

[Lord Kennedy of Southwark (Lab Co-op)]

My Lords, I thank the noble Baroness, Lady Williams of Trafford, for her explanation of the regulations before the House today. Like my noble friends Lord Murphy and Lord West of Spithead, I support these regulations.

These are important and serious issues, and the Government and Parliament have to balance the rights of individuals to privacy and protection from unwarranted intrusion on the one hand with the rights of us all to be protected and for the authorities to have proportionate powers to help them in the fight against serious crime.

As we have heard, the Investigatory Powers Act makes it a criminal offence to intercept the communications of a person in the UK without lawful authority and sets out what constitutes that lawful authority. I am clear that the warrants can be issued only where it is proportional and necessary on one or more of three statutory grounds: in the interests of national security; for the prevention and detection of serious crime; and in the interests of the economic well-being of the United Kingdom. Furthermore, the decision to issue an interception warrant will be subject to approval by a judicial commissioner.

In respect of the targeted interception warrants which would be used as an investigatory tool against individuals or small groups—and in particular points 5.81 and 5.82 of the Interception of Communications Draft Code of Practice, which covers urgent modifications of targeted warrants—can the noble Baroness, when she responds to this debate, tell the House what particular oversight and protections there are? When the senior official makes urgent modifications from the intercepting authority, it must be approved by a senior official in the warrant-granting department within three days, and then both the Secretary of State and the judicial commissioner must be notified as soon as reasonably practical. When you consider that this particular provision could relate to a terrorist incident, or a large quantity of drugs that is going to enter the country imminently, the oversight seems to be quite slow and not in step with the seriousness and urgency that were the reason why the original modification was sought.

Points 4.13 to 4.18 of the Intelligence Services’ Retention and Use of Bulk Personal Datasets Draft Code of Practice deal with confidential information relating to members of sensitive professions. Can the noble Baroness, when she responds, say something on how the code will protect journalists, and in particular their sources, from being identified? Investigative journalists play an important role in exposing corruption and wrongdoing, which can lead to serious criminal charges against individuals, and they provide an important public service. Can the noble Baroness also say for the record what she sees as “due regard” in respect of point 7.13 in the same code?

Section 9 of the Bulk Acquisition of Communications Data Draft Code of Practice covers “General safeguards”. Can the noble Baroness say something on how the safeguards on the copying of data, and on the destruction of the data when it is no longer required, will be managed? When data is acquired and copies taken, I can see the risk of losing track of all the copies and then having to ensure that all copies are properly destroyed in a timely manner when they are no longer needed. Can the noble Baroness, in her response, also make specific reference to the processes in place for complaints and for dealing with errors, including serious errors, and can she confirm that she is satisfied with the robustness of the procedures and what procedures are in place to review that robustness?

In respect of the Investigatory Powers (Technical Capability) Regulations 2018, can the noble Baroness explain why the figure of 10,000 customers was chosen as the one below which these types of warrants cannot be issued?

The noble Lord, Lord Paddick, made reference to the Appeal Court ruling. It would be useful to hear a response from the noble Baroness to the points he raised. With those questions, I am very happy to support the regulations before the House today.