Police, Crime, Sentencing and Courts Bill

Lord Rosser Excerpts

Lords Hansard - part two & Committee stage
Monday 22nd November 2021 Lords Chamber

[Lord Paddick (LD)]

My Lords, with the leave of the Committee, I will speak briefly. In my comments on the previous group on which I spoke—the one beginning with Amendment 278—I did not mean to suggest that the noble Lord, Lord Carlile of Berriew, was filibustering. I tried to inject a little humour into proceedings, bearing in mind the wide range of issues that we discussed in the debate on that group and the length of that debate. I joked that it was beginning to look like a filibuster. I have apologised to the noble Lord but I wanted to include that apology in the official record.

We support this important amendment. As my noble friend Lady Hamwee said, Section 14 of the Data Protection Act 2018 provides some safeguards against important decisions being taken by automated processing. It allows a human review on appeal with the subject having been told, but only if the decision was “solely” taken automatically, rather than “significantly”, as my noble friend’s amendment suggests. Experience in the American criminal justice system of using algorithms shows that bias in historical decisions is replicated, even enhanced, by algorithms. We therefore support this amendment.

[Lord Rosser (Lab)]

As has been said, Article 22 of the general data protection regulation provides that a person has

“the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.”

It also provides that there is an exemption to this if the automated decision-making is explicitly provided in law. Section 14 of the Data Protection Act 2018 provides, as has been said, some safeguards based on Article 22 for cases where the law allows automated decision-making on things that may have a significant effect on a person. It provides that where a significant decision is made by automated means, the subject may request that the decision is retaken with human oversight. The section currently provides protections for a decision taken, as has once again been said, “solely” by automated means. The amendment would extend this provision to decisions taken solely “or significantly” by automated means.

The issue of automated decision-making will become, and indeed is becoming, increasingly prevalent in our lives—a point made by all sides during the passage of the 2018 Act, when we tried to add far stronger safeguards to the then Bill to prevent decisions that engaged an individual’s human rights being decided by automated means. On that basis, I am certainly interested in the points raised to extend the right of appeal to decisions that are based “significantly” on automated processing.

Finally, it is potentially concerning that the Government are currently consulting on removing Article 22 of the GDPR and the associated protections from UK law altogether. I believe that consultation closed last week. Can the Government give an indication of when we can expect their response?

[Lord Sharpe of Epsom (Con)]

My Lords, I am grateful to the noble Baroness, Lady Hamwee, for explaining this amendment, which relates to automated decision-making. Let me first say that the Government are committed to maintaining high standards of data protection and agree that the clarity of safeguards relating to automated decision-making is important. The Government are also aware of some of the difficulties faced by organisations in navigating the terminology of these automated processing provisions.

As all noble Lords have noted, to address this issue the Government are currently seeking evidence via a public consultation, which is being run by the Department for Digital, Culture, Media and Sport. As the noble Lord, Lord Rosser, noted, that consultation closed only last Friday. He also mentioned Article 22. The consultation is looking at the need for legislative reform of the UK data protection framework overall, including GDPR and the Data Protection Act 2018. It covers Article 22 of the UK GDPR, including organisations experienced with navigating the solely automated processing and similarly significant terminology. As I say, that consultation closed on 19 November.

In examining the responses to the consultation, the Government will consider the safeguards in respect of automated decision-making that involve personal data in the round. We will address this matter in the government response to the consultation, which we expect to publish in the spring. We also look forward to the report of the inquiry by the Justice and Home Affairs Committee, chaired by the noble Baroness, Lady Hamwee, and will take its conclusions and recommendations into account when bringing forward our proposals for legislation. In the meantime, with apologies for being brief, I invite the noble Baroness to withdraw her amendment.