Crime (Overseas Production Orders) Bill [HL]

Lord Paddick Excerpts

Report stage (Hansard): House of Lords
Monday 22nd October 2018 Lords Chamber

Moved by

[Lord Paddick]

2: Clause 1, leave out from beginning to “given” in subsection (4B) and insert—
“(4A) The Secretary of State may not make regulations designating an international co-operation agreement providing for the use of—(a) section 52 of the Investigatory Powers Act 2016 (interception in accordance with overseas requests), or(b) any other enactment which provides for the collection of electronic data,unless the condition in subsection 4B is met.(4B) The condition is that the states party to or participating in the international co-operation agreement have”

[Lord Paddick (LD)]

My Lords, unusually, I shall be supporting Amendment 1 but I shall also speak to Amendments 2 and 3 in this group. My noble friend Lady Hamwee and I have added our names to Amendment 1 in the names of the noble Lords, Lord Rosser and Lord Kennedy, but we feel that the amendment to Clause 1 as drafted does not go far enough.

Before I come to that, however, I wish to say that I wholeheartedly support what the noble Lord, Lord Rosser, has said about the provisions of the Bill. Bearing in mind that they are likely to be mutual, in that similar provisions would be in a Bill in a country with which we are going to enter into a treaty, it is very important to have a death penalty assurance in that treaty, which is what the amendment seeks to do. In addition to what the noble Lord has said about UK Ministers saying that we in the UK are opposed to the death penalty, Article 2 of the European Convention on Human Rights, together with Protocol 13 to which the UK is a signatory, provides for the total abolition of the death penalty. In early meetings with the Minister, we were led to believe that that death penalty assurance would be part of any treaty. However, we feel we need that reassurance in the Bill.

As I say, we took the unusual step of both supporting and amending the Labour amendment on the basis that we both agree on the principle of Amendment 1— that the Government should not enter into a treaty that would require UK companies to provide electronic data to law enforcement in a country that had the death penalty unless the treaty contained assurances that the death penalty would not be implemented if data provided by UK companies was used. We believe that the prohibition on entering into a treaty with a country that has the death penalty should be broader than just the data covered by Section 52 of the Investigatory Powers Act 2016, which is what Amendment 1 covers, because that provision covers only the interception of communications in the course of transmission—wiretaps, listening in to telephone conversations and that type of electronic data. A British company could hold personal information about an individual that could be crucial in an investigation for an offence that carries the death penalty in the country making the request. Such electronic data would not necessarily be in the course of transmission but held on servers in the UK.

Our Amendment 2 would therefore include,

“any other enactment which provides for the collection of electronic data”.

Amendment 3 makes it clear that the prohibition on entering into a treaty would not apply if an assurance had been given that the death penalty would not be imposed whether either intercepted communication or any other kind of electronic data had been provided under the Act. That amendment is consequential on Amendment 2.

We want to ensure that no UK company is complicit in providing electronic data of any kind that could lead to someone being executed. I beg to move.

[The Minister of State, Home Office (Baroness Williams of Trafford) (Con)]

I thank both noble Lords for speaking to their amendments today and express my gratitude to all Members of the House for their contributions both in Committee and today on Report—I think it is the same two noble Lords, but perhaps there are one or two more.

I stress to the House the importance of the UK-US data access agreement. The agreement will allow the UK authorities access to valuable evidence and intelligence directly from US communication service providers. The House should be made aware that the vast majority of CSPs and their data reside in the US, not the UK. The Bill gives our law enforcement a strategic advantage in the fight against the threat we face.

Indeed, in almost every serious criminal investigation, we expect those we investigate to be using services provided by CSPs based in the US. The agreement will make a significant contribution to the detection, investigation, prevention and prosecution of serious crime and terrorism. The Government have been working towards the agreement with the help of US CSPs and the US Government for several years following the recommendation from the then Prime Minister’s data envoy Sir Nigel Sheinwald.

All Governments and any future Governments have the duty to put the security of their people first. It will always be in the public interest to ensure that our police and agencies have access to the necessary intelligence and evidence in order to fulfil that duty. Just as it was under the previous Labour Government and as it is today, Ministers must always be mindful of the current threat environment they find themselves in. That is why we believe that better scrutiny of these agreements and accountability for future treaties is the best way to ensure that the Government’s principles are tested, rather than prescribing a rigid format for treaties that have not yet even been mooted, let alone being currently under negotiation.

Of course, the Government’s objective is to obtain a satisfactory death penalty assurance, but negotiations are ongoing and not yet concluded. Playing the discussions out in public may make it much harder to conclude them effectively.

Let me be clear to the House: there will be an assurance in the agreement. We can expect it to rule out the direct use of information obtained under the agreement as evidence in a prosecution where the death penalty might apply. Parliament will scrutinise the final detail of any agreement and the assurance it contains. We have already tabled an amendment today clarifying that the Constitutional Reform and Governance Act 2010 process will always apply to relevant international agreements, ensuring that Members have two opportunities to scrutinise a treaty.

But I am willing to go further. Noting the concerns that noble Lords have expressed, the Government will commit to bringing forward an amendment in the Commons. Such an amendment would not pre-empt negotiations with the US, or any future agreement with another country, but would instead absolutely guarantee that Parliament has the chance to conduct proper, thorough scrutiny of relevant agreements and death penalty assurances.

The amendment I envisage would ensure that Ministers cannot make regulations to designate any agreement with a country which retains the death penalty for incoming requests without first laying before Parliament the agreement and details of any assurances obtained. There would then be a defined period during which Parliament would have a chance to examine those details, and this could include scrutiny by any relevant committees.

Finally, the Secretary of State would be obliged to consider any recommendations made by a committee in relation to the assurances before laying regulations to designate the agreement. Of course, the regulations themselves would then be subject to the usual process of parliamentary scrutiny, during which time Members of both Houses could consider any recommendations and respond to them.

Ultimately, it is right that Parliament has a say on the difficult decision between not concluding negotiations on agreements and securing the death penalty assurances we would like. Both the amendments tabled by Labour and Liberal Democrat Peers could lead to our being unable to conclude a data access agreement with the US. If we find ourselves in that situation, law enforcement agencies and the UK intelligence community will continue to be denied timely access to valuable evidence and intelligence.

The noble Lord, Lord Paddick, said that Section 52 of the IPA covers only material intercepted in the course of transmission. That is not entirely correct. It can authorise obtaining stored communications as well as intercept. As I said, there is a balance to be struck here. That is why I ask Members not to tie the Government’s hands in negotiations. Instead I will commit to amending the Bill in the Commons to ensure that Parliament has ample opportunity to scrutinise any future treaty and, if relevant, its death penalty assurance.

[Lord Paddick]

My Lords, I am grateful to the Minister. Unless she wishes to contradict me, I think she just said that these treaties are very important to the extent that the British Government are prepared to allow people to be executed on the basis of data provided by British companies to overseas law enforcement. The essence of these amendments is that that should not be allowed and we want that reassurance on the face of the Bill.

[Baroness Williams of Trafford]

I do contradict the noble Lord. I am asking noble Lords not to tie the Government’s hands in negotiation.

[Lord Paddick]

Forgive me, but I do not see the difference between what I said and what the Minister has just said, unless she wants to clarify further.

We are concerned about this because of the recent case of Kotey and Elsheikh, in which the American authorities asked for information from the British on two people who were part of an ISIS cell. The Home Secretary decided that the information would be provided without a death penalty assurance. We are concerned that what might considered a one-off case which contradicts the British Government’s usual global opposition to the death penalty is now going to be enshrined in treaties. I understand what the Minister said about Section 52 of the Investigatory Powers Act, but that is not our understanding and I therefore wish to test the opinion of the House on Amendment 2.

--- Later in debate ---

Moved by

[Lord Paddick]

12: After Clause 16, insert the following new Clause—
“Priority
In the event of any conflict between this Act and the Data Protection Act 2018 (“the DPA”) or the General Data Protection Regulation 2018 (“the GDPR”), the provisions of the DPA or the GDPR shall prevail.”

[Lord Paddick]

My Lords, were we to leave the European Union, the EU would examine our data protection regime to satisfy itself that it would be safe for the EU 27 to continue to exchange electronic data with the UK. This continued exchange of data is essential not only for law enforcement and counter- terrorism purposes but for commercial transactions.

The Government have recently passed the Data Protection Act 2018, which not only provides the necessary infrastructure to enable the UK to comply with the general data protection regulation, a piece of EU legislation, but ensures that the UK complies with EU standards of data protection in relation to law enforcement and national security that are not covered by the GDPR. In other words, the UK is ensuring that it complies with all EU data protection standards, so as to guarantee that it will be issued with a certificate of adequacy that will enable continued exchange of electronic data if we leave the EU.

If, as a result of this Bill or the treaties associated with it, UK companies were required to provide law enforcement agencies in other countries with personal data covered by the Data Protection Act and/or GDPR, and those foreign law enforcement agencies’ data protection standards were deemed by the EU to be inadequate, there is the potential for the EU to withdraw its adequacy certificate from the UK. Basically, if member states of the EU share data with the UK, and the UK shares that data under this Bill with law enforcement agencies that have inadequate data protection standards, the EU might stop sharing data with the UK. This amendment is designed to ensure that this does not happen. I beg to move.

[Lord Kennedy of Southwark (Lab Co-op)]

My Lords, the noble Lord, Lord Paddick, raised an issue about which Act would take precedence in the event of a conflict between this Bill—when it becomes an Act—and the Data Protection Act 2018. His amendment makes it clear that, in the case of a conflict, the DPA, along with the GDPR, would take precedence. That seems quite sensible: it gives us certainty on the matter, for the reasons outlined by the noble Lord. I support his amendment.

[Baroness Williams of Trafford]

I thank both noble Lords for their points. There has been nothing in our own domestic law that requires a UK provider to comply with an overseas order. There will therefore be no conflict with domestic law if a CSP decides that complying with a foreign order would put it in breach of its obligations under the GDPR.

The existence of any conflict with UK data protection law does not have the effect of making the order from the other country invalid. Equally, the existence of the order does not compel the UK CSP to ignore its data protection obligations under UK law. It will be for the CSP on which an order is served to reconcile and comply with all legal obligations it is under. It could apply for the variation or revocation of the order, or use the dispute resolution mechanism that we expect all specific international agreements to include. That said, we do not think that this is likely to be necessary in practice. The GDPR contains several “gateways” which permit the cross-border transfer of personal data, including in response to a request or order from overseas law enforcement.

I know the noble Lord’s concerns about data protection, and I absolutely sympathise with him. We have discussed this before, and I think that ultimately we all want the same thing: adequate protection for the privacy rights of individuals. I hope that my explanation will satisfy the noble Lord that the Bill does not in any way threaten data protection rights, which are robustly protected by existing legislation. UK CSPs will continue to be bound by the GDPR and the Data Protection Act. Therefore, I hope that the noble Lord will feel happy to withdraw Amendment 12.

[Lord Paddick]

I am grateful to the Minister. I understand that she has just said that a communications service provider could refuse to comply with an order coming from overseas if the CSP believes that that would bring it into conflict with the GDPR and the Data Protection Act, so I beg leave to withdraw the amendment.

Amendment 12 withdrawn.