(8 years, 5 months ago)
Commons ChamberNew clause 5 relates to privacy and states that the public authority must have regard to
“whether what is sought to be achieved by the warrant, authorisation or notice could reasonably be achieved by other less intrusive means”.
If the new clause is accepted, could that affect the point that my right hon. and learned Friend is making? Would not the least intrusive method possible have to be used?
I think my hon. Friend makes a good point. I have an underlying confidence that the amendment we are discussing might commend itself to those on the Government Front Bench. On that basis, I do not intend to labour this point any further. I felt it was important to set it out, however, because it marked a significant shift in the Committee’s approach to this legislation. I wanted the House to understand why that change had come about after we had been given the extra classified briefing and why we came to the conclusion that we should accept this principle, alongside essential safeguards.
Privacy is the right to be left alone. It was once proclaimed to be the most comprehensive of rights, and the right most valued by civilised men, which is why the privacy provisions in the Bill are important. There are many such provisions interweaved in the Bill. To give three important examples, targeted and bulk inception can take place only in the interests of national security, of tackling serious crime and of the economic wellbeing of the UK. It can take place only with judicial authorisation, and communications data—who, where, when—obtained from service providers have to be justified on the basis of a necessary and proportionate test. The relevant clauses all ensure that any interference with privacy is kept to a minimum.
I am pleased to have served on the Bill Committee, where the issue of privacy was raised with some force by the hon. and learned Member for Holborn and St Pancras (Keir Starmer). I am pleased that as a result of the points that he and other Members made the Bill will be amended with an overarching clause on privacy to further protect and ensure the privacy of individuals. As my right hon. Friend the Member for Chelmsford (Sir Simon Burns) said, new clause 5 provides for the public authority to have regard to the question of whether the action can be reasonably achieved by “less intrusive means”. It also provides a new requirement for the consideration of the public interest in the protection of privacy. New clause 6 provides for an overarching civil liability, adding to the extensive criminal penalties in the Bill.
Those safeguards strike the right balance between privacy and scrutiny. As the hon. and learned Member for Holborn and St Pancras said, safety, security and privacy are not an either/or. That balance has been recognised in Europe, where the ECHR provides under article 8 respect for private and family life and also states that interference by a public authority is legitimate in some circumstances—in fact, the very circumstances outlined in the Bill, including the interests of national security, public safety, the economic wellbeing of the country and the prevention of crime and disorder.
The same balance has been recognised by the UN. In 2014, the UN High Commissioner for Human Rights stated:
“Where there is a legitimate aim and appropriate safeguards are in place, a State might be allowed to engage in quite intrusive surveillance”
if
“it is both necessary and proportionate”.
That balance is recognised by the public. A TNS BMRB poll in 2014 stated that 71% of respondents prioritised the reduction of the threat posed by terrorists, even if that eroded people’s right to privacy. The Bill seeks to ensure that the balance is right, and in enacting it we ought to remember that interference with privacy is often too much until it is too little.
It is a pleasure to follow the hon. and learned Member for South East Cambridgeshire (Lucy Frazer). She took the opportunity to highlight the big principles, and showed how they are included in UN documents and the ECHR. It is useful to be reminded of that.
I speak as a member of the Intelligence and Security Committee, and support the amendments and new clauses tabled by the right hon. and learned Member for Beaconsfield (Mr Grieve) and other members of the Committee, including me. I will not read them all out, because he dealt with them comprehensively. However, I wish to make some points about a couple of our proposals. Before doing so, however, I want to refer to the report that the ISC produced in the last Parliament after taking evidence on the provisions in the draft Bill. My right hon. Friend the Member for Slough (Fiona Mactaggart) and I both served on that Committee. I want to highlight two things in that report. First—and the right hon. and learned Member for Beaconsfield covered this—the overriding principle of privacy, which the hon. and learned Member for South East Cambridgeshire discussed, had to be made clearer in the Bill, and set out as unambiguously as possible.
Secondly, the right hon. and learned Member for Beaconsfield raised the issue of penalties. The measure does not exactly conform to what we wanted. We were concerned that the legislation was not consolidated into one measure. I shall deal with that more fully in a moment. Thirdly—if I do not take too much time dealing with the first and second concerns—I shall come on to the debate about judicial involvement in oversight. I hope to say a brief word about that.
I welcome new clause 5, which is helpful and goes much, if not all, of the way in meeting many concerns expressed by our Committee and by other parliamentary Committees, including Select Committees that have looked at the issue. However, in amendment 14—I know the Minister is going to refer to this, so I am not going to make a hard and fast principle out of it—we attempt to put privacy at the forefront of the Bill. If the Minister has found another way of doing that that would satisfy me I would be very pleased, but having read the Bill carefully, I do not think that there are sufficient safeguards to make it clear that that is the case.
The right hon. and learned Member for Beaconsfield referred to new clause 4, and was rightly exercised by the issue of penalties. I want to approach that issue from a slightly different direction. The Bill relies on existing legislation, including the Data Protection Act 1998 for which, if memory serves, I had ministerial responsibility. No apologies there—I think that the measure has served us quite well, although there might be other legislation for which I would apologise, but I am not going to say what it is. The Bill also relies on the Wireless and Telegraphy Act 2006, the Computer Misuse Act 1990, common law, as the right hon. and learned Member for Beaconsfield said, and, finally, misfeasance in public office. It is important that we have more information about penalties because, with such a sprawling collection of existing legislation, if someone breaks the provisions in any of those measures there should be clear and unambiguous penalties. I think that the Minister is going to address that matter shortly.
New clause 2 was tabled by the right hon. and learned Member for Beaconsfield, other members of the ISC and me. The right hon. and learned Gentleman made the point—nobody seems to have noted it, including the hon. and learned Member for Edinburgh South West (Joanna Cherry)—that a commissioner’s functions are not in any sense judicial. I am not going to argue the case fully at the moment, but I could envisage constructing a system where the process is more administrative—indeed, it is an administrative process—so the skills needed to operate it do not necessarily need to be judicial.
(8 years, 6 months ago)
Public Bill CommitteesI welcome you back to the Chair, Mr Owen, for what I anticipate will be our last debate in this Bill Committee as we take this clutch of new clauses together. I say it is our last debate, but in some ways new clause 25 concerns an issue that we have been debating throughout Committee, from the very opening sitting and through every sitting we have had since. The discussion has been to-ing and fro-ing over whether there ought to be more specific provision for weight to be given to privacy in each clause or each time a power is set out, or whether there ought to be some overriding clause.
The new clause is an overriding privacy clause that is consistent with the recommendation of the Intelligence and Security Committee. For the Labour party, it is an important provision, upon which we place considerable weight. In other words, somewhere in the Bill, there needs to be a recognition of the real rights and interests that are affected by the powers in the Bill. A clause is needed to ensure consistency through the Bill, as there are examples of different powers being dealt with in slightly different ways. That clause should also act as a reminder to decision makers about the key principles they are applying in pretty well all the decisions they make. Perhaps most importantly, the clause should reassure the public on the key principles that run through the Bill.
I will concentrate on new clause 25. Considerable thought has been given to how an overriding privacy clause could be put together in a way that has meaning—and therefore gives confidence to the public—but is not so detailed as to be impractical to operate as an overriding clause. The way that the new clause has been put together is that four important public interests are recognised in paragraphs (a) to (d).
First is the public interest in protecting national security. That runs through the Bill and is the starting point. The second is the national interest in preventing and detecting serious crime, which also runs through all the powers we have debated. Thirdly, there is the public interest in the protection of privacy and the integrity of personal data. Now and again that crops up in the Bill, although not consistently, but it is an overriding interest. Fourthly, there is the public interest in the security and integrity of communications systems and networks. Those are the four powerful public interests.
Paragraphs (e) to (h) deal with the principles to be applied, including the principle of necessity and the principle of proportionality. As we have heard, there are examples where, although the Minister and the Solicitor General understandably say, “Well, of course that would be the reference point for decision making,” they are not on the face of the Bill. The new clause would provide the reassurance that that was the framework against which decisions were made.
As far as the principle of proportionality is concerned, the second limb of paragraph (f) is taken directly from the code of practice. It has been thought through and put into the code of practice but, for reasons I have argued previously, ought to be on the face of the Bill. Paragraph (g) deals with
“the principle of due process, accountability and respect for the human rights of those affected by the exercise of powers under this Act”,
and paragraph (h) deals with
“the principle of notification and redress.”
Now, they are principles and therefore are not fixed. The principle of accountability does not mean that everything must, necessarily, be transparent in the way it might be for other powers and duties in other Acts. The principle of notification does not mean there must always be notification. These are broad principles to be applied through the Act.
Whenever one tries to devise an overarching clause such as this, it is a careful exercise, or a judgment call, to try to decide what ought to be in and what ought not to be in. That is why the new clauses that follow are in the nature of a menu or suite of options. I am grateful to the Public Bill Office for giving me guidance on how to devise a number of clauses that would allow the Committee as a whole to look at each of these eight provisions and take a view on which ones ought to be included in an overarching privacy clause. My strong preference is not to get to new clause 26 and onwards, because I do not think that would be a particularly satisfactory way of dealing with an overarching privacy clause.
May I indicate, absolutely clearly and transparently, that I will listen carefully to what the Government say? In other words, I do not pretend for a moment that these new clauses could not be improved upon by different drafting. The issue we are probing is whether in principle there ought to be an overarching privacy clause, or an overarching set of public interests and principles, and if so, what broadly speaking would be included in them.
In that sense, new clause 25 can be properly described as a strongly probing clause. In other words, what we want to draw out are the views of the Committee on what an overarching clause ought to have in it; and if it is then necessary to have another joint exercise at drafting such a clause, then so be it.
I rise to speak as someone who, as a lawyer, will have interpreted clauses such as this to advance a particular case, giving weight to a particular clause or using it to enhance a case or stress a particular fact. To take paragraphs (g) or (h), for example, when we have already discussed notification perhaps not being necessary, they might be construed as saying that notification was necessary in a particular clause where it has no meaning at all. Will the hon. and learned Gentleman acknowledge that, in inserting in an overarching clause, we might be hostages to fortune, by including intentions that we did not intend in specific provisions?
I am grateful for that intervention; there are really two answers. The first is that it has been the constant refrain from the Minister that most of these principles run through the Bill and that therefore they are unnecessary, although I would say it is necessary to flush them out in this form.
To give another example, when the Human Rights Act was being passed, there was a real concern about how freedom of expression would operate in practice, and the Government of the day were persuaded that there ought to be a clause that really indicated to the courts that special consideration or weight ought to be given to freedom of expression.
All that has meant in practice is that the courts, when dealing with freedom of expression, have looked carefully at that clause and given it due weight. It works pretty well in practice; it does not tie the hands of a court. However, it is a reminder to a court of what the most important public interests were in the view of those passing the legislation and what the principles running through the Bill were. More importantly, it was a reminder to decision makers. For every case that goes to court, there are however many hundred thousand decisions that are made by decision makers on the ground.
I have some experience in Northern Ireland of working with the police over there in implementing the Human Rights Act. Counter-intuitively in many ways, having statements of necessity and proportionality built into the decision-making process really helped them, because they were able to assess, probably better than most others, why they thought what they were doing was necessary, and able to articulate why they thought it was proportionate, and they actually came to very good decisions as a result of what might be seen as broad principles being built into their decision-making process.
Such a provision would assure the public as to how the Bill is intended to operate and what the strong currents going through it are. I genuinely think it would help decision makers in the fine decisions, when they are not quite sure where the balance lies, and it would be a reminder to the courts of the particular public interests and principles that Parliament intended to lay down as running through the Bill. The danger of such a clause is always that it will be overused by lawyers, but I do not think that is what has happened in practice with similar provisions.
(8 years, 6 months ago)
Public Bill CommitteesI understand the point. The hon. and learned Gentleman will know that the Lord Chief Justice cannot appoint, because of creating what I described as patronage, but the Solicitor General’s point is that it is important that he can be involved, looking at deployment, for the reasons that we have both given.
In truth—I think it is fair to say this—the exact details of the appointment process, which the hon. and learned Gentleman seeks to explore further, are still under consideration. It is very important that all stakeholders are involved in designing an appropriate process. I am not sure that we would want to detail that in a Bill, as the hon. and learned Gentleman will understand, because this is a matter of judicial operational decisions as much as anything else.
I think we are getting to the place—perhaps in a slightly meandering way, but it is fairly late in our consideration of the Bill and a little opportunity to meander is always welcome, or perhaps not, as I can tell from your stern glance, Mr Owen—where we all agree that a balance needs to be struck between Executive involvement and judicial involvement. I think we are now getting to a place, notwithstanding that the amendments do not actually say this in the way they are grouped, where we agree that the Prime Minister needs to be involved to cement or secure that relationship between the Executive and the judiciary, and we are coming to a synthesis about the respective roles of some of the players.
At this juncture, having meandered, I can tell that you want me to draw my remarks to a swift conclusion, Mr Owen.
Will my right hon. Friend the Minister give way?
I have a residual concern, having been through a process, albeit not a judicial one, that was extremely lengthy and costly—appointment as a silk. I am aware of colleagues who are sometimes put off the judicial process for those two reasons, and I am slightly concerned, not necessarily about the appointer but about the process. Will members of the judiciary be willing to put themselves through a lengthy and costly process when they are already in that position?
My hon. and learned Friend makes a very good point and, at an earlier stage of consideration of the Bill, that issue was raised. Will there be enough of these people? Will they want to do the job? This is an important new responsibility. It can hardly be argued, as some outside this place and perhaps even some in this place have tried to do, that the Home Secretary cannot cope with the numbers of warrants, and then simultaneously say that these people will rush forward to consider these matters in the heat of the moment and the dead of night. My hon. and learned Friend is right to say that there is an issue about people being willing to play this part in the double lock, and I would not want in any way to be complacent about that. It is important that the system is sufficiently streamlined, but rigorous, to ensure that people can practically do what we ask of them—she is right to make that point.
The difference between us now seems to be probably a slightly more refined version of what the amendments suggest. The difference now boils down to when and how the Prime Minister is involved, and on what basis he is involved in respect to the advice that he is given. We have already amended the Bill to make it clear that the Lord Chief Justice of England and Wales, the Lord President of the Court of Session and the Lord Chief Justice of Northern Ireland will be consulted, as the hon. and learned Member for Edinburgh South West said. Therefore, there has been some movement in the direction of those who felt that the measure needed to be more balanced; but, the hon. and learned Lady and, I think, the hon. and learned Member for Holborn and St Pancras are now saying that we need to recalibrate it one more time. We will not accept the amendments at this juncture, but I hope that both the content and the tone of what I have said will have suggested to all concerned that we are not unresponsive to these matters of detail and no doubt there will be further opportunity to discuss them.
(8 years, 7 months ago)
Public Bill CommitteesThe hon. Lady may recall that, when I spoke about this on Second Reading, I said that I was not going to use the phrase “snoopers charter” because it is counterproductive, and nor was I going to use the phrase “mass surveillance,” but that I was going to use the phrase “suspicionless surveillance.” What is happening under section 94 of the Telecommunications Act will continue to happen if we pass these powers without questioning them properly: bulk acquisition warrants will authorise the acquisition of huge amounts of communications data on everybody living in the United Kingdom, which will then be analysed by computers at GCHQ without any further need for authorisation. My argument is that that is a form of suspicionless surveillance. While it may have some utility, as David Anderson has said, I am not convinced that it is either necessary or proportionate. I made some fairly detailed arguments last Thursday about the inadequacy of the operational case and will not repeat them.
I do not want to misquote the gentleman from BT as I do not have his exact words in front of me, but when we heard evidence from him on our first day in Committee, he said clearly that much of that information was already being collected. I would also like to point out, as I did in a speech on the Floor of the House, that it is clear that Google is already accessing this material and people seem to accept that—Google is analysing the content of our emails.
I will deal with the hon. and learned Lady’s second point first. I accept her legitimate concerns about the extent to which private entities such as Google and others collect private data. Parliament should be looking at that, although it is not really the subject matter of this Bill. However, the crucial difference between Google’s collection of comms data and the UK Government’s, or its agencies’, is that Google does not have the coercive power of the state. It may have great corporate power—in fact, there is no “may” about it—but it does not have the state’s coercive power.
The hon. and learned Lady’s first point was that these powers already exist. We found out only very recently, when the Home Secretary announced it on 4 November last year, the day the draft Bill was published, that the data were already being collected in bulk under section 94 of the 1984 Act. That had never previously been admitted by the Executive—apparently it was known only by a handful of Cabinet Ministers. Parliamentarians had previously been led to believe that communications data retention and acquisition took place under the Regulation of Investigatory Powers Act 2000 and the Data Retention and Investigatory Powers Act 2014, because that legislation specifically permits the agencies to require comms data on national security and serious crime grounds.
As I said earlier, when section 94 of the 1984 Act was passed, no one envisaged that those powers would be used in that way. The mere fact that the powers are already being used does not necessarily mean that they are proportionate or that we should not carefully scrutinise their necessity and proportionality now that they are being put on a proper statutory footing. In an intervention on the hon. and learned Member for Holborn and St Pancras last week, I made the point that, if we follow the course of action the Scottish National party advocate, which is to remove parts 6 and 7 from the Bill until a proper operational case has been made, and if the agencies who are already using these powers say that they are legal under existing legislation, we will not be jeopardising national security, because the powers will continue to be used—although I stress that their underlying legality is open to question.
I do not want to take up much more time, but I want to make the point that, in the digital age we live in, communications data provide a detailed and revealing picture of somebody’s life. If we look at how comms data are defined under DRIPA and RIPA, we can see that they include the date, time, duration and type of communication, the type of communication equipment used, its location and the calling and receiving telephone numbers. That sort of information can reveal personal and sensitive information about an individual’s relationships, habits, preferences, political views, medical concerns and the very streets they walk on. That point was made in the Digital Rights case by the Court of Justice of the European Union:
“Those data, taken as a whole, may allow very precise conclusions to be drawn concerning the private lives of the persons whose data has been retained, such as the habits of everyday life, permanent or temporary places of residence, daily or other movements, the activities carried out, the social relationships of those persons and the social environments frequented by them.”
(8 years, 7 months ago)
Public Bill CommitteesI am conscious of people’s sensitivity about their personal data, particularly sensitive data, but does the hon. and learned Gentleman think that we ought to consider this issue in the context of the legislation? These data are there to be used for a specific investigatory purpose, and only that purpose. They are not meant to be used for any other purpose. Indeed, if they are used and disclosed, there are very many provisions about unlawful disclosure and the serious criminal penalties for that, which we examined at the beginning. Is that not the safeguard for people that we need to distinguish the use and abuse of material that is collected?
I am grateful for that intervention. There is a particular sensitivity about health and mental health records. The very fact of their being retained, examined and filtered—because that is what will happen—is of huge concern to many people. That is why the amendments suggest that they be either excluded or subject to a higher test to prove that it is really necessary. Although it was not formal evidence, the Committee had a briefing session with the security and intelligence services where the question arose whether they do in fact access health records. In those exchanges, the answer was, “No we don’t, at the moment.” When I asked why, in those circumstances, it was necessary to have this power, the answer was: “Because we can’t rule out that at some future date it might be necessary to get these records, in circumstances that we cannot foresee at the moment—so we would not want to restrict the ability to get them.”
That was an honest answer about the way that these records are dealt with. In formal evidence, the answer was that the internal guidance does subject accessing mental health records to a higher threshold. In a sense, the agencies have thought this through for themselves. They have recognised the extra sensitivity of such records and have their own internal processes to make sure that they are applying a higher test. That is a good approach.
Does my right hon. Friend think that sometimes putting tests in very specific terms in primary legislation gives a certain rigidity, whereas greater flexibility would be possible if they were in a code of practice? As we heard—as the hon. and learned Member for Holborn and St Pancras said—the test is already being carried out in practice. Does my right hon. Friend agree that to create additional rigidity by putting the test in primary legislation might hamper the security services in due course?
With a certain power of prophecy, I made it known at the beginning of our considerations that it was likely that there would be a continuing debate that would have at its heart, considerations about what should be on the face of the Bill and what should be in supporting documentation. I did so perhaps not so much as a prophet as an experienced Member of this House, because I have never served, either as a shadow Minister or as a Minister, on any Bill Committee where that has not been a matter of debate. How far one goes in putting specific matters on the face of legislation is always a matter of fine judgment. Hon. Members know the argument very well.
(8 years, 7 months ago)
Public Bill CommitteesTo deal with clause 119, I must outline why the Scottish National party wishes the entirety of part 6 to be removed from the Bill until such time as a convincing case has been made for the use of bulk powers and the legality of bulk powers has been determined. In our view, it is important not to pre-empt the terms of court judgments in cases currently considering bulk powers, as they will have a significant impact on the lawfulness of the approach set out in the Bill, which at present must, at the very least, be open to question.
The Government have produced an operational case in response to remarks made by a number of witnesses before the Joint Committee on the Draft Investigatory Powers Bill, who were concerned about the lack of such a case, and to the Joint Committee’s recommendation 23. The Home Office published a 47-page operational case for bulk powers alongside the Bill. That document was produced within three weeks, and the first half of it is introductory, covering topics such as how the internet works and what the dark net is. Only the second half of the document, characterised as an operational case, addresses the capabilities with which we are concerned.
Going goes through the operational case, we can see that each power—bulk interception, bulk equipment interference, bulk communications data acquisition and bulk personal datasets—has an average of about five pages devoted to it. Bulk interception has only about four. Most of the material dealt with is already public in other explanatory documents. It seems that, despite the opportunity to provide concrete, solid examples of how bulk powers bring unique value, most of the material in each section is kept at a high and general level.
For example, the first three pages of the four-page case justifying bulk interception cover an introduction to the power, the current legal position and new safeguards in the Bill. The fourth and final page provides three one-paragraph case studies, which members of the Committee will all have had the opportunity to read. One in particular deals with counter-terrorism, giving an example of where the security and intelligence agencies’ analysis of bulk data uncovered a previously unknown individual in 2014 who was in contact with a Daesh-affiliated extremist in Syria suspected of involvement in attack planning against the west.
The case study says:
“As this individual was based overseas, it is very unlikely that any other intelligence capabilities would have discovered him. Despite his attempts to conceal his activities, the agencies were able to use bulk data to identify that he had recently travelled to a European country. Meanwhile, separate intelligence”—
that is, separated from the bulk-generated intelligence—
“suggested he was progressing with attack planning. The information was then passed by the agencies to the relevant national authorities. They disrupted the terrorists’ plans and several improvised explosive devices were seized.”
Undoubtedly, every hon. Member on the Committee and in the House would wish such activities to be intercepted and prevented by the security services. I applaud the security services for the work that they do, but what concerns me is that analysing this case study in any meaningful way is challenging, because there is inadequate information to begin to test the accuracy of the case study or to challenge its conclusions. Nevertheless, I have had some initial analysis of it carried out, which suggests that perhaps the ends could just as easily have been achieved by the use of targeted interception. I will give a couple of examples to show why.
The case study refers to a previously unknown individual who was in contact with a Daesh-affiliated individual, who presumably was known. It is possible, therefore, that targeted interception may have uncovered this previously unknown individual. Although the Daesh-affiliated individual was already being monitored, there is no clear explanation in the case study of why bulk interception was necessary. It seems likely that intercepting the Daesh-affiliated individual’s contacts in a targeted manner might have identified the previously unknown individual.
That is just one of a number of issues raised about this case study by the analysis that I have had carried out. I will not take up the Committee’s time with them all, but that is one example.
The value that this case study has is that in this case a previously unknown individual was identified. Questions as to why targeted interception would not have worked are not addressed, nor are questions as to why other targeted capabilities were not used. The case study suggests that the initial identification is the only aspect in which bulk interception played a role, with the rest of the case study a result of other capabilities and separate intelligence. No information is provided about the scale of collateral intrusion undertaken when intercepting in bulk and there is no assessment of the proportionality of bulk interception. Also, given that the attack was not in the UK, there is no explanation of the necessity of UK agencies playing a role, although that is perhaps a slightly lesser consideration.
There is no information outside this case study as to the frequency of events of this kind or whether in similar cases different methods produced different results. As such, it is impossible to analyse it and make any kind of independent assessment of the necessity or proportionality of bulk power.
This is not nit-picking. These are very wide-ranging powers. The hon. and learned Member for Holborn and St Pancras, who speaks for the Opposition, described them as breathtakingly wide powers. They have never before been debated or voted on in this Parliament, and it is crucial that we get them right. We are debating and voting on them, at a time and in a climate whereby there is quite a lot of independent evidence available from the United States of America that suggests that bulk powers are not as efficacious as is suggested in the operational case produced by the Government.
I will say a little about what happened in the States, because it is important to loop to that to understand what the Scottish National party says would be the appropriate way to approach the production of an operational case to justify bulk powers.
In the USA, the Snowden revelations revealed that the National Security Agency was running a bulk domestic telephone records programme. The US intelligence community put forward strong arguments for keeping that programme going, and to bolster its position it compiled a list of 54 counter-terrorism events in which it said that section 215 of the USA Patriot Act, which underlined that bulk collection, contributed to a success story.
In America, two independent bodies undertook reviews related to those powers to determine whether the case studies put forward by the intelligence agencies were credible and accurate. They determined that only 12 of the 54 counter-terrorism events cited by the security services had any relevance to the exercise of bulk powers under section 215 of the USA Patriot Act. With access to classified material, one of the independent groups— the President’s Review Group on Intelligence and Communications Technologies, which is a very high-powered body set up under the auspices of President Obama—concluded:
“Our review suggests that the information contributed to terrorist investigations by the use of section 215 telephony metadata was not essential to preventing attacks and could readily have been obtained in a timely manner using conventional section 215 orders”.
The other body, the Privacy and Civil Liberties Oversight Board, concluded very similarly that the programme of bulk collection under section 215 had
“shown minimal value in safeguarding the nation from terrorism. Based on the information provided to the Board, including classified briefings and documentation, we have not identified a single instance involving a threat to the United States in which the program made a concrete difference in the outcome of a counterterrorism investigation. Moreover, we are aware of no instance in which the program directly contributed to the discovery of a previously unknown terrorist plot or the disruption of a terrorist attack.”
I quote those two bodies because they are independent.
I am aware that Mr William Binney, who previously worked for the National Security Agency, gave evidence to the Joint Committee. His evidence could be summarised as “bulk powers cost lives”. He is concerned about the “needle in a haystack” argument. I am aware from previous discussions that certain members of the Committee have concerns about the evidence of Mr Binney. Even if we set his evidence to one side, we cannot set to one side the evidence of those two very high-level, independent American committees that looked at bulk collection in the USA. Their conclusions seriously question the information they were given by the security services that the bulk powers were necessary to prevent terrorist outrages. They also made suggestions on existing targeted capabilities.
We have the analysis by David Anderson of the efficiency and efficacy of bulk powers, and he talks from paragraph 7.22 onwards about the importance of bulk powers. For example, he states:
“GCHQ explained that its bulk access capabilities are the critical enabler for the cyber defence of the UK, providing the vast majority of all reporting on cyber threats and the basis for counter-activity.”
I cannot gainsay that. I am well aware that David Anderson would not go as far as I am going in these submissions. He has reached the conclusion that some bulk powers are necessary, but the passage in his report that the hon. and learned Lady quotes basically starts with a phrase along the lines of “GCHQ has assured me”. My point in drawing Members’ attention to what happened in the USA is that, although the US security services compiled a list of 54 counter-terrorism events in which they said bulk powers had contributed to a success story, one of the two committees I have quoted reached the view that it could not identify a single instance where bulk powers had contributed to a counter-terrorism success story. There is a debate to be had here.
David Anderson goes on, in the same section of his report, to acknowledge that it is difficult for the public to take examples on trust. He recognises the limitations of what was shown to him, but states:
“The six outline examples at Annex 9 to this Report go a little way towards remedying that defect. They illustrate the utility of bulk data capabilities more generally”.
He recognises the limitations, but still acknowledges the efficacy of the powers.
The hon. and learned Lady makes a good point. David Anderson acknowledges the efficacy of the powers and has been privy to certain information as he has a high security clearance. Not all of us can be privy to that information. I am suggesting that there should be an independent evidence base for the bulk powers. That would involve independent assessors with high security clearance undertaking forensic examination of the necessity and effectiveness of the bulk programmes.
We know, because the Home Secretary has told us—there was an interesting article about this in The Guardian today—that the bulk powers have been running for a long time. The headline of the article is, “UK spy agencies have collected bulk personal data since 1990s, files show”.
I will come back to that article in a moment, but we know that the bulk powers are operational. Given that they have been running for a while, a full list of cases where they have been required should be easy to provide. That should not be to this Committee, but to an independent review staffed by high-level individuals with the highest security clearance—the sort that David Anderson has. I have in mind such people as retired judges and retired professionals with an interest in the area.
These powers are not being used only in emergencies. That is the point. We are told that the powers are being used daily and that those data are being sucked up and collected daily, and the Bill seeks to put that on a legal footing. I am saying that there is not sufficient independently assessed evidence to justify the continuation of such powers and that we need a proper independent review.
I am suggesting that there should be independent, security cleared assessors to consider whether such powers pass the legal tests of necessity and proportionality. They would need to conclude that the powers were strictly necessary and that the same results could not be achieved using more proportionate and less intrusive means. The two American committees I mentioned concluded that the same information could be achieved using more proportionate and less intrusive means, so we in the United Kingdom should not legislate gung-ho for the continuation of such breathtakingly intrusive surveillance powers without being certain that they are necessary and proportionate. We do not have sufficient evidence to reach that conclusion.
What does the hon. and learned Lady think the independent reviewer of terrorism legislation is for, other than to review these powers? He reviewed the powers in his report.
I do not accept that the independent reviewer has carried out the exercise that I am suggesting. He fulfils a particular function, and we are talking about setting up a panel of individuals to consider the necessity and proportionality of these powers. They could consider in detail certain information that we, as hon. Members, would not be able to see. David Anderson is one individual who fulfils an important function and whose work has greatly assisted everyone on the Committee, and all hon. Members, in trying to understand what underlies the Bill.
David Anderson said the following in paragraph 1.12 of his report, “A Question of Trust”:
“Though I seek to place the debate in a legal context, it is not part of my role to offer a legal opinion (for example, as to whether the bulk collection of data as practised by GCHQ is proportionate). A number of such questions are currently before the courts, which have the benefit of structured and opposing legal submissions and (in the case of the IPT) the facility to examine highly secret evidence, and which are the only bodies that can authoritatively determine them.”
There we have the words of the man himself. Although David Anderson seeks to place the debate in a legal context, he does not see it as part of his role to offer a legal opinion on the proportionality of GCHQ’s bulk collection of data. At least two cases now before the courts will result in judgments on whether the powers are proportionate.
If the hon. and learned Lady reads the next paragraph, she will see that David Anderson is simply making a broad statement about the fact that he is not giving legal advice generally. He is putting forward recommendations for Parliament to consider.
Indeed; he is putting forward recommendations. I am advocating an independent review looking at the operational case for bulk powers. It would look at whether the powers are necessary and proportionate, and it would provide an opinion that could then be laid before both Houses, for us to see if the Government’s case has been made. I am concerned that the case is not sufficient at the moment. I say that against the background not of Mr Binney’s evidence, but of the findings of high-level USA investigatory bodies.
(8 years, 7 months ago)
Public Bill CommitteesI am looking at the hon. and learned Gentleman’s amendment 150, and of course it is necessary to serve someone so that they get notice. The provisions of service are always about the substance of whether the person gets the notice. It is clear to me from the current drafting that if there were service in accordance with any of clause 76(3), the company would get notice. I have a few concerns about the amendment. I am very wary, because people often take points of service to disrupt a substantive issue. It would be unfortunate if people could take the point that they were not properly served and therefore not comply. Does “principal office” have a meaning in other jurisdictions? If there are different services, will “provision of services” cause confusion? What is the meaning of “unfeasible or inappropriate” and how will it be applied? I believe that the clause will maintain what is desired, which is that it will come to the company’s attention, so I am slightly concerned about the amendment.
I am grateful to the hon. and learned Lady for her intervention. I am not pressing amendments 150 and 151. They have been put forward to draw attention to concerns. The hon. and learned Lady made submissions last week about service in relation to civil proceedings under the White Book, which I noted and could see the sense of. I do not want to push amendment 150 and accept that “unfeasible” and “inappropriate” may not be the best way to articulate the point.
What underlies both amendments is a genuine concern on the part of those who, when the Bill receives Royal Assent, will be called on to assist in relation to warrants and who want clarity on how the procedure is to operate, what they are to do and what the safeguards are, in particular when they find themselves, as we mentioned last week, required under penalty of criminal proceedings in this country to do something that constitutes an offence in the country in which they are operating. That is a very real concern for them.
(8 years, 7 months ago)
Public Bill CommitteesThe hon. Lady is absolutely right. I stand corrected. Fortunately I have the assistance of David Anderson on this point. He has made the point that whereas he sees envisaged their utility in identifying a defined group or network—for example, a specific organised crime group—he remains of the view that the wording of clause 15 is “extremely broad”. It should concern all members of this Committee that the independent reviewer of terrorism legislation considers the wording of this clause to be extremely broad. If the Government will not take the Scottish National party’s word for it, then they can take the word of the independent reviewer of terrorism legislation. I seek the Government’s assurance that they will go away and look again at clause 15 and clause 27 very carefully, in the light not only of what I have said but, more importantly, what has been said by Sir Stanley Burnton, Lord Judge and David Anderson.
I thank the hon. and learned Lady for her very detailed points. Does she accept that even though David Anderson thinks that the wording is too broad, the amendments that she proposes would make the provision too narrow? If the words “or organisation” are taken out then only a person or a premises will be identified, which would not catch the circumstances that David Anderson is thinking about. In her submission, the hon. and learned Lady identified that while the current wording was too broad, some of the organisations that she mentioned did recognise that in some circumstances the thematic powers were useful.
The hon. and learned Lady makes a point that I have to take on board to a certain extent. I suspect that my amendments to clause 15 go further than David Anderson would if he were drafting an amendment to this clause. We are at a very early stage in this procedure. I am really seeking an assurance from the Government that they will take on board, if not my concerns, then at the very least the concerns of Sir Stanley Burnton, Lord Judge and David Anderson, and that they will take away clause 15 and clause 27 and look at them again.
I understand the spirit underpinning the hon. Gentleman’s intervention, which is that in certain circumstances a broad power can be helpful because future situations are not known. In this case, the breadth of the provision matters above all else, however, because it concerns the subject matter of the warrant. Lest anyone think otherwise, when one looks at the code of practice, one does not find that it restricts what is in the Bill. Paragraph 5.12 of the draft code says, in stark terms:
“There is not a limit to the number of locations, persons or organisations that can be provided for by a thematic warrant.”
In certain circumstances, the Minister and the Government might be able to point to things that are broad in the Bill but restricted by the code, but that would not be appropriate for the subject matter of a warrant and is not the situation in this case. I am grateful to the hon. Gentleman for the intervention, however, because I need to put my concern on the table, and I invite the Government to take the matter away and have another look at it.
I am concerned that in reality, the broadly drawn warrants will be modified. We will get to the modification procedures later. The broad warrant will be signed off by the Secretary of State and the judicial commissioner, but the modification, which may well add names as they become available, will not. There is therefore the further hidden danger that the provision is so broad that it will require modification procedures to be used more often than they should, in circumstances in which they are not adequate, for reasons that I will come on to.
At the end of the day, if someone with the authority and experience of Lord Judge, Sir Stanley Burnton and David Anderson—who have more authority and experience than anyone in this room—says that they have concerns about the breadth of the warrants, for the Government simply to say, “We’re not going to have another look at it”, runs counter to the spirit in which they have so far approached the scrutiny of the Bill.
I wonder whether clause 15(1) is as wide as we think, given that subsection (2) seems to relate to a category of people that is not caught by subsection (1). We would not need subsection (2) unless it referred to a wider group than subsection (1). If that is right, someone must have particular characteristics to be caught under subsection (2), which suggests that subsection (1) is in fact narrow.
Again—and I will be corrected if I am wrong on this—the statutory prohibition on the Secretary of State ever saying whether or not she signed a warrant applies across the board, whether in a Select Committee or in any other parliamentary proceedings. In other words, first, she could not be asked a question about an individual warrant because there would be no basis on which it could be put and, secondly, even if it were asked she could not answer it. I take the point that is being made but, wherever the accountability is placed, to hold the idea that there is individual accountability for the hugely important decisions that are made on individual warrants is to misunderstand how the regime works.
One witness—I forget now who it was, but I think they were on the legal panel—said that there is accountability both ways. If the Secretary of State gets it right and there is no terrorist attack, there is nothing to be accountable for. If she gets it wrong, she is extremely accountable for the consequences of something that happened when she made the wrong judgment call about whether to issue a warrant.
I just say to the shadow Minister that he may not appreciate the tone, but I could be much tougher. The reason I could be much tougher is because these amendments—which I take great exception to, by the way—stand in direct contrast to the tone of the shadow Home Secretary’s remarks when the draft Bill was published, when he welcomed the idea of a double lock. Speaking of the Home Secretary, he said:
“She has brought forward much stronger safeguards, particularly in the crucial area of judicial authorisation. It would help the future conduct of this important public debate if the House sent out the unified message today that this is neither a snooper’s charter, nor a plan for mass surveillance.”—[Official Report, 4 November 2015; Vol. 601, c. 973.]
That warm welcome of the double lock was affirmed several times since. It then metamorphosed into an equal lock, as the hon. and learned Member for Holborn and St Pancras and others said that the information provided to the judicial commissioner should be equivalent to that provided to the Home Secretary, and I can even understand the argument that the process might be simultaneous. I do not necessarily agree with it, but I at least understood it, though our case was that the matter should go first to the Home Secretary and then to the judicial commissioner. I thought it might be the Opposition’s settled position that they wanted simultaneous consideration, but these amendments take the Home Secretary out of the process altogether. I can only assume that this change of heart—this about-turn—is not to the hon. and learned Gentleman’s taste, because I know that he is a very sensible chap and I cannot believe that he really believes that the Executive should be removed from the process altogether. Either there has been a command from on high—thus, my point about Bolsheviks—or, I hope, these are merely probing amendments that seek to reach one of the earlier positions I thought he might take.
The hon. and learned Member for Edinburgh South West mentioned in her opening speech and on this point the importance of international comparison. Did the Minister notice that she did not refer to paragraphs 8.46 to 8.48 of David Anderson’s report, in which he extensively analyses the comparative jurisdictions?
I know and respect Lord Pannick hugely, but there is no guarantee in the Bill that his preferred way of approaching this under judicial review principles is the one that will be carried out in practice; he has no control over the test that will be applied. Lord Judge’s concern is that some judges may consider that this is an area where they virtually take the decision, which is what they do in certain cases involving particular human rights issues, where they get very close to the decision, while other judges will be much more deferential.
With the best will in the world, Lord Pannick puts forward the view that judicial review will work, but there is no guarantee of that. Unless it is set out in the Bill, the test will be simply left to be applied on a case-by-case basis. Nobody, in this formulation, could argue that a judge who applied long-arm reasonableness was acting in any way other than in accordance with the test.
Obviously, I respect what Lord Pannick says, but Lord Judge was making a different point that goes back to accountability, to some extent. He was alive to the fact that once judges are involved in the decision-making process, a torch will be shone on them in relation to these warrants. There will be inhibitions on what they can say and the circumstances in which anybody could hold them to account. We have rehearsed that. I read into his answer that he wanted absolute clarity and a tightness of test so that the judges knew what they were to do and could operate within those confines, thus protecting themselves from the suggestion that they had applied too close or too loose a test. It is partly about clarity, with one eye on judicial accountability in the longer term for the decisions that have to be made.
The hon. and learned Gentleman earlier cited Sir Stanley Burnton and said, pretty much verbatim, that he would encourage Government Members to look carefully at any submissions that Sir Stanley Burnton made, as he was extremely knowledgeable. On this issue, Sir Stanley said that he was happy with the test and that it might be difficult to draft it more tightly. Another experienced member of the panel who gave evidence, Lord Reid, specifically stated that he thought the judges’ role was
“about oversight…and not about decision making.”––[Official Report, Investigatory Powers Public Bill Committee, 24 March 2016; c. 84, Q259.]
Sir Stanley is a friend and colleague, and I have had the privilege of appearing in front of him on a number of occasions in cases involving national security, in particular control order cases. I think that what he was indicating was that, in his experience and on his own approach, as any of the cases will demonstrate, he is in favour of intense review by the judge. He anticipates that the measure allows that intense review. I have no doubt that that is the approach he personally would take, because that would be consistent with the approach that he has always taken in such cases.
The reference to proportionality and necessity does not help in this context, because the question for the judge on this formula is not, “Is the measure necessary? Is it proportionate?” Judges often make, and are well used to making, that decision. The decision for them on this formula is whether, when the Secretary of State decided that it was necessary and proportionate, she was exercising her powers in a way that cannot be questioned, applying the principles of judicial review. That is the real difference.
Whether I think the long-arm Wednesbury test is appropriate is neither here nor there. So long as we have clause 22(2), it is open to a judge to apply the old-fashioned Wednesbury test, because that is within the principles of judicial review. The case law obviously varies. The closest possible scrutiny is usual in control order or TPIMs cases, but there are many other examples involving national security where the judges have persistently said that long-arm review applies. There are two strong lines of case law, and I am arguing that one is better than the other. The point is whether the Bill is clear enough about the test to be applied.
This is a real opportunity, as much as a challenge, for the Government. The provision is a new one, and it is a double lock if properly applied. It ought to be substantive. The judge ought to decide whether a warrant is necessary or proportionate. As long as he or she does, the warrant comes into existence and can be relied upon. In the 21st century, that is the right approach when such a provision is going into statute for the first time.
I think the hon. and learned Gentleman is saying that he favours the same test being applied by both the judge and the Home Secretary. If so, that is in conflict with Sir Stanley’s evidence. He said that he would give significant weight to the view of the Home Secretary. If he gave significant weight to the Home Secretary, necessarily he would be reviewing what the Home Secretary has done. If that is appropriate, the word should be “review”, whether it is judicial review or not. It is a review, not an assessment afresh of the same decision.
I am grateful for that intervention. There are several different positions here, and we are finding our way. The amendments would take out the review element and make it clear that it is a double lock. There would then be a separate decision by the Secretary of State and a decision by a judge on the same material. Of course, a judge would always give weight to the Secretary of State’s view, but they would still come to a decision of their own. That is position No. 1, and let me be clear that that is what the amendment is aimed at—a true and equal lock.
We come to this late, but the provision is an important one. I will try to be brief and to the point. The clause deals with legal privilege. I acknowledge that the Government have responded to the various recommendations so far, setting the provision out in a different form in the Bill.
There are, I am afraid, still problems. I have been discussing those with the Bar Council, which is concerned about the form in which the provision appears in the Bill. I invite the Committee to look at the clause. Subsections (1), (2) and (3) deal with a situation in which the purpose of an intercept warrant is to target material subject to legal privilege and, correspondingly, in relation to targeted examination. Those subsections are relevant to the targeting of material subject to legal privileges. Subsections (4), (5), (6) and (7) serve a slightly different purpose, which is the position if a warrant, although not targeted, may be likely to include items subject to legal privilege.
The difficulty with the first three subsections—this is the strong view of the Bar Council, borne out in the code of practice itself—is that
“Legal privilege does not apply to communications made with the intention of furthering a criminal purpose (whether the lawyer is acting unwittingly or culpably).”
If the communication furthers a criminal purpose, legal privilege simply does not apply. If left unamended, subsections (1), (2) and (3) would allow the targeting of legally privileged material which does not further a criminal purpose, and therefore falls outside the limits of legal privilege itself.
The Bar Council’s point, which is a good one, is that once legal privilege is properly understood it becomes clear that legally privileged material should not be targeted. If the argument is that we may have to target communications between a lawyer and client in which they further a crime—I accept that there have been examples of that—in those circumstances the material has already lost its legal privilege and therefore does not need to be targeted. In fact, something that is not legally privileged is being targeted. It is a very serious point, and new clause 2 was intended to help set out what the Bar Council suggests is a better formulation of clause 25. Subsection (3) of new clause 2 makes it clear that:
“Communications made with the intention of furthering a criminal purpose are not subject to legal privilege.”
It approaches it on that basis in order to meet the argument that you cannot ring-fence something which, under the cloak of legal privilege, is in fact furthering a criminal intent. If that is right, it logically follows that clause 25(1), (2) and (3) should not stand as they are currently drafted. New clause 2 is essentially an alternative provision.
In other words, the test in 25(3) of “exceptional and compelling circumstances” is on the one hand welcome, though it is not welcome in a clause that targets legally privileged material that should not be targeted for the reasons I have outlined.
I hope the hon. Gentleman will forgive me for thinking of this as I speak. Is there a risk that we could be unclear as to whether a communication is subject to legal privilege, and think that it is in furtherance of a criminal offence, and then it turns out not to have been? Is there a loophole or lacuna in the legislation that does not cover that eventuality?
There is. That is a very good point, and it is one that I have discussed with the Bar Council. In those circumstances, what is being targeted is material that is not legally privileged, though there might be something that is legally privileged within it. There should be safeguards put around that, and I readily accept that examples will arise, probably also in the bulk powers, in which, although the intention is not to target legally privileged material, it is very difficult to have a warrant which does not run the risk.
An example would be when there is a suspicion that a lawyer and client may be involved in some activity that would take the communication outside of legal privilege, but it is impossible to say at what point of the conversation or exchange it loses its legal privilege. That is an obvious example. The answer that the Bar Council gives to that, and that I agree with, is that in those circumstances, rather than having a warrant to target the legally privileged material, there is a regime that recognises that it may be that, when targeting what can legitimately be targeted—namely, the part of the communication that has lost its privilege—there is a risk that privileged communications are incidentally picked up. There should be a provision for dealing with that material and its disclosure.
The powerful point about subsections (1), (2) and (3) is that it is wrong, in principle, to target legally privileged material. It is possible to have a warrant that runs the risk, with a separate set of safeguards to ensure that, if the risk materialises—as it will in some cases—there are provisions for ring-fencing, safeguarding, and not disclosing that material. That is the intention behind the Bar Council amendment.
It may be that further tweaks or improvements can be made, but that is an important point of principle that I invite the Solicitor General to take away and consider. A clause that satisfied the Bar Council in terms of the legal protection of this important privilege would be a prize worth having. Although the Bar Council recognises, as I do, the movement that the Government have made here, they simply have not got this right, for the reasons that I have outlined.
Subsections (4), (5), (6) and (7) are focused, in a sense, on communications that are likely to include items of legal privilege, such as a warrant that touches on a solicitor or lawyer communicating with clients, where it is thought that privilege has been lost but also elements where it has not been lost. In those circumstances, the Bar Council’s view and my view is that what is set out is again simply not strong enough, because there is no test or special provision.
New clause 2 is a comprehensive clause that would deal with that issue. In a sense, it goes with amendment 80, which amends a much later provision. It is intended to tidy up and clarify what the Bar Council says properly represents legal privilege and a regime for protecting it.
I am grateful to the hon. and learned Gentleman for standing to give way. I was trying to think of circumstances in which legal professional privilege—the relationship between the lawyer and their client—might not be as sacrosanct as the client might expect. For example, if the lawyer considers that there is a risk that their client is involved in money laundering, even if they are not, there are circumstances in which that right is circumscribed. That might not be a perfect example, but we are in the territory of there being the risk of great harm or wrongdoing and evidence that persists of that.
I am grateful for the intervention, and I recognise that point. The concern is that, if passed in this form, the Bill will allow interception where there is no question of the inequity exception. Perfectly lawful, proper, appropriate communications between lawyer and client, which are fully protected and recognised in all other circumstances, would come within the scope of an intercept warrant.
At this stage—particularly at this hour—I will not press the point. I urge the Solicitor General to keep at least a residual open mind, so that if a better version of the new clause can be tabled at a later stage, which meets some of the concerns he has outlined, he might look at the proposal again. As I say, this is an issue of real concern to the profession. I beg to ask leave to withdraw the amendment.
Amendment, by leave, withdrawn.
Clause 25 agreed to.
Clauses 26 to 29 agreed to.
Ordered, That further consideration be now adjourned. —(Simon Kirby.)
(8 years, 8 months ago)
Public Bill CommitteesDitto. I know many of the witnesses as well.
David Anderson was my pupil master when I was a barrister.
I do not know this witness, Chair, but Mr McClure, a witnesses this afternoon, is my constituent and is known to me personally.
Q Building on that, the Joint Committee did ask for an operational case for bulk powers to be published, and that has been seen and assessed by the ISC who do have the security clearance that you do not have, who do have visibility on all of the things that you are not able to see. The ISC says that they are happy with that operational case. It seems to me that the more people know about this, the more comfortable they are with that operational case. I wonder whether you are questioning their judgment or simply saying that you disagree.
Eric King: No. It is certainly true that the more you see about some aspects of agency practice, you do get more reassured. Certainly, in the process of Investigatory Powers Tribunal cases that have taken place, I was pleased that there were areas that had safeguards when I did not originally think there were.
I have also been fantastically disappointed in other areas, where I thought there should have been very obvious safeguards, such as areas of legal professional privilege that were found wanting and unlawful by the IPT. I am afraid I have become a terrible judge on which bits I think the agencies have got right and which bits they have got wrong. I seem to be very poorly predicting it. On the operational case, I think the issue here is that we need a whole range of experts outside the ISC to be looking at this. I am not sure that it is the perfectly placed organisation or body to be looking at this. It has known about these powers and approved of them right the way through. I think that at this time, now that they are being put before Parliament plainly for the very first time, we should be looking to do what they have done in the US, which is to have an independent scrutiny of many of those cases, so that you can test them.
It is not enough simply to provide a list of cases where this worked. They need to be really looked at, because, as we found in the US, some powers that many thought would work, like the bulk acquisition of communications data, turned out not to be terribly effective. The 64 cases that the agencies in the US put forward, to say that these were powers that were needed, turned out to be false. Only one was of relevance, and it was not a terrorism case. So it is vitally important that we scrutinise them and have the time to do so.
Q I would like to pick up on something that you said in your evidence was about internet connection records. I would just like to ask you first of all, do you respect the work of David Anderson?
Sara Ogilvie: Absolutely.
Q Are you familiar with paragraph 7.51 where he talks about Operation Notarise?
Sara Ogilvie: You will have to tell me what it says.
Q Are you familiar with Operation Notarise?
Sara Ogilvie: I am not sure that—
Q In that operation 600 suspected paedophiles were arrested, and 92% of the communications data requested proved helpful in tracking down suspects. That what he says in the report. Do you accept therefore that he has found evidence that the ICRs are helpful?
Sara Ogilvie: Those were not evidence for ICRs, as far as I am aware. I think that is to do with different communications data.
Q I am just reading from the report, and that is what it says. It gives the figure of 92% of communications data and says the questions provided were helpful.
Sara Ogilvie: Communications data are quite different from internet connection records. A significant amount of the powers that we have in the current Bill are ones that are replicating powers in RIPA, and I think the comms data ones you talk about are those. Internet connection records are actually something quite new, and something that David Anderson—
Q Do you accept that, if some communications data in an old form of technology is helpful, then in a modern form of technology exactly the same powers will also be useful?
Sara Ogilvie: I agree that there are powers that are absolutely necessary and helpful. I do not think that there is a direct comparator between old and new powers in this case. I completely agree that the security services and law enforcement need targeted powers to gather communications data, so maybe they can use those to target particular websites where we know that paedophile information is provided. They can be used to target suspected criminals. That is all completely adequate use of powers; but what we have is this broad power in the Bill that targets absolutely everyone and is not focused on those individuals, and that is what I have the problem with.
Q Mr King, you have mentioned a couple of times now, in the first part of your evidence, you talked about formidable intrusive powers. You quite agree that the agencies should have these powers. So in view of what has happened recently in Paris and in Brussels, I am really somewhat confused as to what you are trying to tell us in your evidence as to what the agencies should have. Do you know? Are you clear in your own mind what these powers should be?
Eric King: Yes. The Bill’s structure—some of the core powers there—you do not disagree with. The question is often about the scale of the powers—how they are used and the safeguards that are put in place around them. To my mind, the mass collection of material in a generalised form for analysis is not a proportionate activity, and I think this is something that particularly the European Court are confirming. I heard David Anderson say that there was a split view on that. It will be important to hear the judgments later this year, but they have to have very strong powers; but it is how they are used, and the scale of them, and the targets of them, which are so vital to get right. I am afraid that for me this is the bit in the Bill that is not in the right place at the moment, I suppose.
(8 years, 8 months ago)
Public Bill CommitteesQ So in those circumstances, as you have said, the police need every tool that they can get to help those very vulnerable young children.
Alan Wardle: Absolutely. Again, as I have said, the issue of grooming is often about a period of time and establishing patterns of behaviour. Being able to gather evidence from a range of sources is really important.
Q Following on from that, in your work in the NSPCC, do you always see a willingness for children to open up and to tell people in a position of authority personal facts about themselves and their friends, or can it be quite difficult to coax out information about children who are friendly with the vulnerable?
Alan Wardle: It will depend. Generally, it takes quite a lot for a child to come forward and disclose. In recent years, we have seen a huge increase in the number of children who are reporting sexual abuse generally. It is going up across the UK, and was up by about a third last year. A large part of that is because of a greater willingness of children to come forward and talk about the abuse that has happened to them, but we know that it can take decades for people to come forward and talk about abuse.
What we are talking about, particularly sexual abuse, is a very personal thing, so the idea that a 15-year-old who is being groomed will just walk straight into a police station and start disclosing all these very personal things is generally not quite how it works.
Q I was also thinking about the case of missing children. If we rely only on their friends and those friends are not willing to disclose personal details, names and the social media sites that their friend is on, do you think there might be a delay in an investigation?
Alan Wardle: There could be, and it depends on the facts of the case. I will return to the main point. As I said before, the police need a range of tools. They will need some very traditional knocking-on-door tools, and they may need a range of technical tools to help identify a child in that situation.
Q So it is a combination of tools that will keep children most safe?
Alan Wardle: Yes.
Q That is a technical issue, but legally do you think it is within the definition you are working to?
Mark Hughes: Absolutely. I think it is within the definition as it is written in the draft Bill at the moment.
Q Following on from Keir’s questions, there is a concern about the hackability of the volume of data that we have already got. Have we just heard that you already collect this data, albeit not necessarily in the same form or for the same length of time? Is it all still there for someone who wants to access it immediately?
Mark Hughes: No. Not all of the data is collected. We retain lots of data for business purposes, which we therefore retain and secure proportionately and appropriately for that type of information. As I said, there are things in the Bill that are about us having to generate additional records, based on some of the existing information that we have and other types of information that may be necessary in the future.
Q But based on the existing information that you have, it is already there.
Mark Hughes: Some of it is already there. Some of it might not be there in the way in which the Bill describes. Some of it is subject to what the actual code of practice determines we have to collect and for how long we have to collect it. Some of those things are unknown at the moment. Suffice it to say, we have lots of information, some of which could constitute or make up an internet connection record as it stands at the moment. We secure that data, and it is accessible if required for business purposes at the moment.
Thank you very much, Mr Hughes. I am sorry we do not have more time.
Mark Hughes: I am happy to submit written evidence post the sitting.