Data Protection and Digital Information Bill

Viscount Younger of Leckie Excerpts

Committee stage
Monday 22nd April 2024 Grand Committee

[Baroness Sherlock (Lab)]

My Lords, I thank the noble Baroness, Lady Kidron, and my noble friend Lord Sikka for introducing their amendments. I also thank all noble Lords who have spoken. I will speak to Amendments 223, 299, 302 and 303 in my name. I should probably say at this point that I am late to this party but, unlike the noble Lord, Lord Vaux, I am not a data protection specialist, I am afraid. However, I am a social security nerd, so I am here for this bit right now.

Since this is the first part of the Bill on DWP powers to tackle fraud, I need to add my little statement on the “fraud is bad” move. Fraud is a problem and has been getting worse across this Government. There have been scandals in procurement, of which the infamous PPE contracts are just one example. There is tax due that goes unpaid at scale and, in social security, the percentage of benefit expenditure lost to fraud has been rising under this Government. However, as my honourable friends made clear in the Commons, a Labour Government would take fraud seriously and pursue all those who seek to take money fraudulently or illegally from the state. They would also focus on helping people to avoid inadvertent overpayments rather than just waiting for them to make mistakes then coming down hard on them at that point. This should not need saying but, in some of the discussions on this Bill elsewhere, there has been a tendency to frame the debates rather along the lines of a classical fallacy: “Fraud is really bad. This will tackle fraud. Therefore, this must be really good”. I know that we are fortunate that in the Minister we have someone who is able to have a much more nuanced debate. I look forward to having exchanges in a way that recognises the important role of this House in scrutinising the powers that the Executive want to take unto themselves, which is exactly what Committees in the House of Lords do so well.

Scrutiny particularly matters here because, as the noble Lord, Lord Vaux, and my noble friend Lord Davies pointed out, all these amendments—more than 200 amendments, 38 new clauses and two new schedules—were introduced on Report in the Commons. My honourable friend Chris Bryant tried to recommit the Bill so that the Commons could discuss it, but the Government refused. The interesting thing is that in their anti-fraud plan back in May 2022, the Government announced that they planned to boost the DWP’s powers to get information from third parties when parliamentary time allowed. The noble Baroness, Lady Buscombe, made a fair point that departments have to wait for the right Bill to come along in order to use it, but the Government have known about this since 2022. They have had two years to draft the amendments, so although they might have had to wait for the Bill to come along, that does not seem a good enough reason for them to have waited until Report in the Commons to deposit them into the process. I hope the Minister will be able to explain the reasons for that.

My noble friend Lady Chakrabarti and others have asked some important questions about the scale on which these powers will be used; I am going to come back to that in our debate on the next group. It is hard to know the scale from the information we have so far, but DWP clearly does know, or has a sense of it, because paragraph 85 of the impact assessment states:

“Using our model to estimate volumes of hits for this measure, over the 10-year appraisal period, internal analysis has estimated that in total there will be an additional 74,000 prosecution cases, 2,500 custodial sentences and 23,000 applications for legal aid”.


It has modelled the volume of matching hits that would require investigation. Can the Minister tell the Committee what that number is? Also, what assurance can he give us that DWP has the resources to investigate that number of hits in a timely manner?

Paragraph 2 of new Schedule 3B says that the account information notices can only cover data going back a year and that they must be done in the week before they are given to DWP. Is there any time limit on how long DWP has to act on the results that have been handed over to it?

I turn now to the amendments in my name. Some of them are quite detailed because these powers are astonishingly wide and it is not at all clear how they could be used. I have deliberately tabled a series of amendments—in three groups in order to make sure that we have a chance to go into detail—to try to get information out of the Government and find out what this is about.

Amendment 223 is a minor probing amendment that would delete paragraph 3(1) of new Schedule 3B, which Schedule 11 to the Bill would insert into the 1992 Act. I will not rehearse it here but can the Minister explain what that provision is for and what its limits are? Neither I nor the people I have spoken to in financial services can understand why it is needed.

The noble Baroness, Lady Kidron, and others mentioned the fact that the Information Commissioner said he could not provide to Parliament his assurance that this measure is proportionate. My other amendments in this group are therefore designed to try to understand the impacts better. Amendment 302 would prevent these new powers coming into force automatically, while Amendment 303 would require the Secretary of State to fulfil several requirements before laying regulations to commence the powers. Amendment 299 is a minor consequential amendment. The effect of this is that the Secretary of State would have to issue a call for evidence, to inform the creation of the first code of practice, and consult relevant bodies. They would also have to lay before Parliament statements on key issues, of which I will highlight two.

The first would say whether and how AI will be used in exercising these powers, as well as how those proposals will take account of protected characteristics; this was touched on by my noble friend Lady Lister and others. That benefits often engage protected characteristics is in the nature of social security. Sickness and disability benefits engage disability, obviously; pensions engage age; benefits relating to children may engage age and also indirectly engage sex; and so on. The National Audit Office has warned that machine learning risks bias towards certain vulnerable groups and people with protected characteristics. So, what external governance or oversight is there to ensure that, once data are collected on the scale envisaged here, we do not end up with a mass breach of equality law?

The second issue I want to highlight concerns the provision that will be made to ensure that individuals subject to investigation do not experience hardship during it or lasting detriment afterwards. Given the comments of my noble friend Lady Lister about the cases from CPAG, can the Minister say whether a claimant’s benefits will be kept in payment while they are investigated following the data that are surfaced as a result of these trawls?

I am concerned that, given the potential scale of hits, a claimant who had, say, inadvertently breached the capital limit but then found themselves at the back of a long queue to be investigated could find themselves ending up paying back really large sums. The Minister will be aware of the recent media coverage, which others have mentioned, of how the DWP is treating people who were overpaid the carer’s allowance, a benefit that gives £81.90 a week to people providing at least 35 hours a week of unpaid care. It is a cliff-edge benefit—if your net earnings are under £150 a week, you get the lot; if they are over it, you get nothing—so a small rise in the minimum wage or a change in tax thresholds or rates can be enough to make someone entirely ineligible overnight, even if nothing changes in their circumstances.

As my noble friend Lady Lister said, apparently, DWP’s IT systems can flag when a carer’s income breaches the threshold but it does not necessarily do that, allowing them then to rack up potentially thousands of pounds’ worth of overpayments. The Guardian has investigated this issue; I shall mention two cases that it offered. First, an unpaid carer with a part-time charity job unknowingly breached the threshold by an average of £4.40 a week—£58 in total—caused by the automatic uprating of the national minimum wage. Because that left her not eligible for anything, she ended up being told to repay £1,715, including a civil penalty.

In the second example, a woman caring for her husband with dementia and Parkinson’s was told to repay nearly £4,000 for inadvertently exceeding the earnings threshold by calculating earnings from her zero-hours job on a monthly basis, as she thought the rules required, rather than a four-weekly basis, which they actually do; the rules around allowable costs and earnings are quite complicated. Crucially, according to the Guardian, she was told that, if she appealed, it could cost her even more. The Guardian quotes from a DWP letter telling her that, if she challenged the repayment order,

“the entire claim from the date it started will be looked at, which could potentially result in the overpayment increasing”.

Is that standard practice? Is DWP currently acting on all the alerts it receives of overpayments? If these powers are switched on, what safeguards will there be when that happens to protect millions of people from ending up paying back years of overpayments that DWP could have prevented?

Before embarking on investigations on this scale, we need to understand more about how this measure will work. We have had some excellent questions in Committee from the noble Lord, Lord Vaux, and others; I look forward to the Minister’s reply.

[The Parliamentary Under-Secretary of State, Department for Work and Pensions (Viscount Younger of Leckie) (Con)]

My Lords, I thank all those who have spoken today. I have been made well aware of the strong views expressed about this measure in Committee. I thank the noble Baroness, Lady Sherlock, for her kind remarks. She is right: I take all these matters extremely seriously. I have listened carefully to all the speeches, although I might not agree with them. Many questions have been asked. I will attempt to cover them all, of course; I doubt that I will be able to but I assure noble Lords that it is likely that a long letter will be required after this. Obviously, I will reflect on all the speeches made in Committee today.

I start by talking about the timing of the introduction of this measure. The noble Baroness, Lady Sherlock, said that the measure was introduced, in her words, “on the late side”. As she alluded to, the DWP published the Fraud Plan in May 2022, where it outlined a number of new powers that it would seek to secure when parliamentary time allowed. In answer to her question and others, in the parliamentary time available, the DWP has prioritised our key third-party data-gathering measure, which will help it tackle one of the largest causes of fraud and error in the welfare system. We will not sit back and ignore an opportunity to bring down these unacceptable losses and better protect taxpayers’ money. I will expand on all of that later in my remarks.

Before attending to the themes raised and addressing the amendments, it is important to set out the context for the power for which we are legislating. Fraud is a serious and damaging UK-wide issue, accounting for more than 40% of all crime. To be fair, many speeches alluded to that. The welfare system is also a target for fraudsters, and we are seeing increasingly sophisticated attacks occur on a scale that we have not seen in the past. We all have our own experiences at home of fraudsters who try completely different methods, not linked to the benefits system at all, to try to gain money through ill-gotten uses and methods.

In 2022-23, the DWP paid out more than £230 billion in benefits and payments to people across Great Britain. I very much took note of the figure that my noble friend Lady Buscombe raised. I say to the Committee that this figure is forecast to rise to nearly £300 billion by 2024-25, in quite short order, so this is a really serious issue to address. However, more than £8 billion has been overpaid in each of the past three years because of deliberate fraud against the state or because genuine errors have been made.

To assist the noble Baroness, Lady Lister, to whose speech I listened carefully, fraud, not error, is the biggest cause of welfare overpayments, totalling £6.4 billion of the £8.3 billion overpaid last year. The noble Lord, Lord Vaux, also asked about the figures. These losses are largely because people are intentionally and knowingly taking money that they are not entitled to. This is not organised fraud either; the vast majority comes from individuals who are not entitled to the money. We cannot underestimate the lengths to which some will go in order to take money they are not entitled to or promote ways to defraud us to a wider audience. This new legislation is not just about protecting the taxpayer; it will help those who make genuine mistakes in their claim, and our swift action will avoid them building up large overpayments.

Some people have said that the department has the powers that it needs to fight fraud and error—I think that was alluded to even today. However, some of the current powers that we have to ensure benefit correctness are over 20 years old—a point that I think my noble friend Lady Buscombe made. In this time, fraud has evolved and become increasingly sophisticated and we must keep pace with the fraudsters. It is for this reason that the Government are bringing these new third-party data powers, as set out, as said earlier, in the fraud plan.

--- Later in debate ---

[Lord Vaux of Harrowden (CB)]

I apologise for interrupting, but can the Minister show us in the Bill where those restrictions on the information that can be requested reside? As I read it, as I mentioned to the noble Baroness, Lady Buscombe, paragraph 2(1) of new Schedule 3B, as inserted by Schedule 11 of the Bill, is pretty wide when it refers to

“names of holders … other specified information relating to the holders … and … such further information in connection with those accounts as may be specified”.

So it appears that the DWP can ask for whatever it wants, rather than what the Minister just described.

[Viscount Younger of Leckie (Con)]

That is a fair challenge and I will certainly be coming on to that. I have in my speech some remarks and a much more limited reassurance for the noble Lord.

It is only when there is a signal of potential fraud or error that the DWP may undertake a further review, using our business-as-usual processes and existing powers—an important point. DWP will not share any personal information with third parties under this power, and only very limited data on accounts that indicate a potential risk of fraud or error will be shared with DWP in order to identify a claimant on our system. As I said earlier, I will say more about the limited aspects of this later in my remarks.

[Lord Clement-Jones (LD)]

I am sorry to interrupt the Minister, but will he be coming on to explain what these signals are? He is almost coming to a mid-point between innocence and suspicion called “signals”—is this a new concept in law? What are we talking about and where in all of Schedule 11 is the word “signal”?

[Viscount Younger of Leckie (Con)]

If the noble Lord will allow me, I would like to make some progress and I hope that this will come out in terms of what we may be seeking on a limited basis.

The first third parties that we will designate will be banks and other financial institutions, as the Committee is aware. We know that they hold existing data that will help to independently verify key eligibility factors for benefits.

This clause does not give DWP access to any bank accounts—a very important point—nor will it allow DWP to monitor how people spend their money or to receive sensitive information, such as medical records or data on opinions or beliefs.

As the noble Baroness, Lady Sherlock, mentioned—I want to try to answer one of her questions—this power cannot be used to suspend someone’s benefit. Cases that are flagged must be reviewed under existing processes and powers—business as usual, which I mentioned earlier—to determine whether incorrect payments are being made.

Our approach is not new. HMRC has long been using powers to request data at scale from banks on all taxpayers under Schedule 23 to the Finance Act 2011. Our approach carries similar safeguards. Tax fraud is no different from welfare fraud and should be treated similarly. This was a key point that the Prime Minister made only on Friday when he committed to bring DWP’s fraud and error powers more in line with those of HMRC. This is one clear area where we are seeking to do this.

This allows me to go on to very important points about safeguards. Not all the cases found through this power will be fraud. Some will be errors which the power will help to correct, preventing overpayment debt building up. Some cases may also have legitimate reasons for seemingly not meeting eligibility requirements, for example where claimants have certain compensation payments that are disregarded for benefit eligibility rules. In those cases, no further action will be taken. Our robust business-as-usual processes will ensure that all cases are dealt with appropriately.

Another question raised by the noble Lord, Lord Vaux, on safeguards was to do with the legislation. A key safeguard is that we cannot approach any third party either; there must be a three-way relationship with the department, the claimant and the third party. This safeguard will narrow the use of this power substantially and ensure that it is used proportionately, as these three-way relationships are limited, meaning that data cannot be gathered at scale from just any source for any purpose. Any third party we will want to get data from will need to be designated in affirmative regulations that noble Lords will have an opportunity to scrutinise. These regulations will be accompanied by a code of practice. We will be bringing that forward, and we will consult on the code before presenting it to Parliament—which answers a question raised by, I think, the noble Baroness, Lady Kidron.

The power also ensures that we can request only very limited data on benefit recipients. I think this addresses a point raised by the noble Lord, Lord Vaux. We must work with key third parties to define what is shared, but our expectation is that this would be a name and date of birth or a unique payment number, along with the eligibility criteria someone has matched against: for example, a benefit claimant who has more savings than the benefit rules would normally allow.

Outside controls will apply here, too. DWP already handles vast amounts of data, including personal data, and must adhere to the UK GDPR and the Data Protection Act 2018.

On the point, which again was raised during this debate, about the remarks made by the Information Commissioner’s Office and its updated report on this measure, published as Committee started and which the Committee may be aware of, I was pleased to see that the commissioner now acknowledges that the third-party data measure is in pursuit of a legitimate aim, stating:

“I understand and recognise the scale of the problem with benefit fraud and error that government is seeking to address and accept that the measure is in pursuit of a legitimate aim. I am not aware of any alternative, less intrusive, means of achieving the government’s stated policy intent based on their analysis”.


I think that is a significant point to make, and it is a point with which I very strongly agree.

[Lord Clement-Jones (LD)]

It is also worth pointing out that the paragraph I quoted follows immediately on that. That is the qualification that I quoted.

[Viscount Younger of Leckie (Con)]

Yes, I am aware of that. I think the noble Lord was alluding to the point about proportionality. I listened carefully and took note of that, but do not entirely agree with it. I hope that I can provide further reassurances, if not now then in the coming days and weeks. The point is that there is no other reasonable way to independently verify claimants’ eligibility for the payment that they are receiving.

I turn to the amendments raised, starting with the stand part notice from the noble Baronesses, Lady Kidron and Lady Chakrabarti, the noble Lord, Lord Anderson of Ipswich, who is not in his place, and the noble Lord, Lord Clement-Jones. They and my noble friend Lord Kamall, who is not in his place, interestingly, all made their case for removing the clause, of which I am well aware. However, for the reasons that I just set out, this clause should stand part of the Bill.

In raising her questions, the noble Baroness, Lady Kidron, made some comparisons with HMRC. There are appropriate safeguards in place for this data-gathering power, which will be included in the code of practice. The safeguards for this measure will be equivalent to those in place for the similar HMRC power which Parliament approved in the Finance Act 2011.

[Lord Vaux of Harrowden (CB)]

When might we see the code of practice? It would be extremely helpful to see it before Report, as that might short-cut some of these discussions.

[Viscount Younger of Leckie (Con)]

I will need to get back to the noble Lord on that, but perhaps can reassure him that it is already being worked on. You can imagine that, because of the sensitivity of these powers, we are working very carefully on this and making sure that it will be fit for purpose.

[Lord Bassam of Brighton (Lab)]

Can we see the draft code of practice before Report?

[Viscount Younger of Leckie (Con)]

That is part of the answer that I gave to the noble Lord, Lord Vaux, which I think is a fair point.

The noble Baroness, Lady Kidron, asked about the code of practice and what steps my department will take to ensure transparency and accountability in the exercise of these powers if they are implemented. In the primary legislation, we will make provision to publish the code of practice, which will set out general guidance on how the third-party data power will work, as I have mentioned. We will develop the code of practice with relevant third parties and it will be consulted on publicly before being laid in Parliament. We will explain what the expectation is for data holders and ensure full compliance for the DWP. This will provide assurance that we will operate transparently and mirror the approach that we have taken with other DWP powers. Any changes to the code of practice, other than minor changes, will also be done in consultation with stakeholders.

The noble Baroness, Lady Kidron, stated that the power was too broad and the gist of one of her questions was that there is no need for all these benefits to be in scope. As the noble Baroness has demonstrated, there is a wide range of benefits and therefore potential avenues for fraudsters to seek to exploit or for error to creep in. That is why it is important that the power enables the department to respond proactively, as new fraud risks emerge.

That said, as the noble Baroness knows, the power will not be exercisable in all the benefits that she listed, such as child benefit, because the legislation is drafted in such a way that it could reasonably be exercised only in relation to benefits for which the Secretary of State is responsible. I reassure the Committee that using Section 121DA of the Social Security Administration Act 1992 is a consistent approach that we take to defining benefits in this way to safeguard all existing legislation and account for a benefit being, for example, renamed or amended. It should be stressed that the listing of a benefit does not mean that this power can or will be exercised upon it. The conditions in the third-party data legislation must still apply, and therefore not all benefits will be subject to this measure. That is a very important point.

--- Later in debate ---

[Lord Sikka (Lab)]

I would be convinced about the Government’s intentions, and would not press this amendment at the next stage, if the Minister can name just one big accounting firm which since 2010, as a result of a court judgment that said it was selling unlawful tax avoidance schemes, has been investigated, fined or prosecuted. If he can give me such an example then I will be convinced that the Government are seriously tackling tax fraud and its enablers.

[Viscount Younger of Leckie (Con)]

The noble Lord has set me quite a challenge at the Dispatch Box. It is out of scope of today’s session but, having said that, I will reflect on his question afterwards.

I am aware that time is marching on. My noble friend Lord Kamall asked about burdens on banks. We believe that the burdens on banks will be relatively low.

The noble Baroness, Lady Sherlock, made a number of points; I may have to write to her to expand on what I am about to say. Removing the requirement for third parties to provide legible copies of information means that DWP could receive the information but there is a risk that the information is not usable; that is my answer to her points. This could limit the data that DWP receives and prevent us utilising the power in full, which could in turn impact the savings due to be realised from this important measure.

I turn to the final amendments in this group, which were raised by the noble Baroness. They would place requirements on the Secretary of State to issue statements in the House and consult on the code of practice. We will talk more about the code of practice later on in this debate, and I have already made clear my firm opinions on it: we will take it forward and are already working on it. There will be a consultation that will, of course, allow anybody with an interest in this to give their views.

I turn to the number of statements that must be made in the House regarding the practical use of the measures before powers can commence, such as the role that artificial intelligence will play or assurances on any outsourcing of subsequent investigations. This is an important point to make and was raised by other Peers. I want to make it clear that this measure will be rolled out carefully and slowly through a “test and learn” approach from 2025, in conjunction with key third parties. To make these statements in the House would pre-empt the crucial “test and learn” period. I say again that discussions with the third parties are deep and detailed and we are already making progress; this point was made by the noble Lord, Lord Clement-Jones, on the link with banks and third parties.

Importantly, I assure the noble Baroness, Lady Sherlock, that we will not make any automated decisions off the back of this power; this was also raised by the noble Baroness, Lady Kidron. The final decision must and will always involve a human being—a human agent in these cases—and any signals of potential fraud or error will be looked at comprehensively. I am grateful for the remarks of my noble friend Lady Buscombe on this matter.

I know that I have not answered a number of questions. Perhaps I can do so in our debate on another group; otherwise, I certainly wish to answer them fully in a letter. I hope that I have explained clearly, from our perspective, why this power is so important; why it is the right power to take; and how we have carefully designed it, and continue to design it, with the key safeguards in mind. I strongly value the input from all those who have contributed today but I remain unconvinced that the proposed amendments are necessary and strengthen the power beyond the clear safeguards I have set out. With that, I hope that the noble Baroness will not press her opposition to Clause 128.

[Lord Clement-Jones (LD)]

I may have missed something, but can I just check that the Minister will deal with the matter of signals, which he mentioned at the beginning of his response? Will he deal with where that phrase comes from, what they are, whether they will be in the code, et cetera? There are a lot of questions around that. Does it amount to actual suspicion?

[Viscount Younger of Leckie (Con)]

Absolutely; I am keen to make sure that I answer on that. It may be possible to do so in the next group but, if not, I will certainly do so in the form of a precise letter—added to the larger letter that I suspect is coming the noble Lord’s way.

[Lord Sikka (Lab)]

A number of pensioner groups are watching these proceedings. I have received some messages. They are asking, “When is the Minister going to answer the questions asked about the operation of the surveillance of recipients of the state pension, especially those who have foreign accounts?” I assume that the Minister will clarify that in any subsequent letter to me.

[Viscount Younger of Leckie (Con)]

Absolutely; the noble Lord will know that I have not managed to answer all the questions. I have tried to bring in everybody on this important and serious debate. The answers will be forthcoming.

[Baroness Buscombe (Con)]

I thank my noble friend very much for all the explanation that he has given thus far. I just want to add a word that has not been mentioned: deterrent. One of the reasons why the Government have sought to introduce this in the Bill, I believe, is that it is hugely important that we are much more thoughtful about what will stop people doing the wrong thing. It has become an old-fashioned word but, from a legal, practical and moral standpoint, does my noble friend agree that this is a practical deterrent to make sure that people do the right thing?

[Baroness Lister of Burtersett (Lab)]

Is it not one of the dangers that this is a deterrent to people claiming these benefits?

[Viscount Younger of Leckie (Con)]

I have a response to the question from the noble Lord, Lord Clement-Jones, about signals. The signal is where the criteria or rules for benefit eligibility appear not to be met, and Parliament will have agreed those rules.

[Baroness Kidron (CB)]

My Lords, the Committee will be grateful to hear, I hope, that I will not try to capture such a rich conversation. I thank the Minister for his careful listening and consideration. I will read carefully what was said at the Dispatch Box and what is about to be said during our discussion on the next two groupings because, without seeing all that in the round, I cannot truthfully say whether the questions asked by noble Lords have been answered.

I share a little of the concern that I can see agitating the noble Lord, Lord Clement-Jones, about the words “signals”, “criteria” and “codes”, which are not promised in the Bill but are suddenly appearing. Indeed, the Minister will remember that, in a private meeting, we talked about how those criteria might be gamed and, therefore, how detailed they could possibly be. There may still be some differences of opinion, and possibly differences of practice, that need to be worked out.

Of course, for now, I will not press my opposition to Clause 128 standing part. I welcome further conversation between now and Report but, I have to say, I lost count of the number of times noble Lords have said “proportionate” in this debate and how many times the issues of scope, sweeping powers and so on were stated by some very expert people—both in and outside of this Room, not simply noble Lords.

The noble Baroness, Lady Buscombe, mentioned a pilot but I seem to remember that some of the outcomes on equality in that pilot got lost in translation. Perhaps it would be good to find out exactly what the pilot did and did not reveal—that is, not just the things that the department would like to reveal but some of the things that were not tested.

I do not doubt the personal integrity of the Minister in the slightest but I am unsure about the idea that the “test and learn” approach has no boundaries around it in the Bill. It is like saying, “Trust us. We test and learn, and all those powers exist”. With that, I will withdraw my stand part notice on Clause 128, but we have quite a lot of questions still to answer in our discussions on the next group of amendments and beyond.

--- Later in debate ---

[Lord Clement-Jones (LD)]

My Lords, I would of course much prefer Clause 128 not to stand part, but we were just privileged by a master class from the noble Baroness, Lady Sherlock. She talked about these being probing amendments, but I do not think that I have seen a schedule so expertly sliced and diced before. If those are probing, they are pretty lethal. I agree with so many of those elements. If we are to have provisions, those are the kinds of additions that we would want and the questions that we would want to ask about them. I very much hope that the Minister has lots of answers, especially for the noble Baroness, Lady Sherlock, but also for the other noble lords who have spoken.

[Viscount Younger of Leckie (Con)]

My Lords, the debate on this group has focused largely on the amendments from the noble Baroness, Lady Sherlock, regarding using powers only where there is a suspicion of fraud, making provisions so that information collected can be used only for the narrow purpose of determining overpayment, removing pension-age benefits from the scope of the powers and requiring approval from Parliament before the power can be used on specific working-age benefits.

I was going to go over the reason behind these measures once again, but I will not delay the Committee on why we are bringing them forward. I believe I did that at some length in the previous group, so I am going to turn to the amendments raised.

Narrowing these powers as suggested by the noble Baroness, with Amendments 220, 221, 222 and 222A, will leave us exposed to those who are deliberately aiming to defraud the welfare system and undermine the policy intent of this measure. In fact, taken together, these amendments would render the power unworkable and ineffective.

To restrict the power to cases where DWP already has a suspicion of fraud, as suggested by the noble Baroness, would defeat the purpose of this measure. The intent is to enable us to use data from third parties to independently check that benefit eligibility rules are being complied with. We use data from other sources to do this already. For example, we use data from HMRC to verify earnings in UC and check that the benefit eligibility rules are being complied with. Parliament has determined that, to be eligible for a benefit, certain rules and requirements must be met, and the Government have a responsibility to ensure that taxpayers’ money is spent responsibly. Therefore, the DWP should be able to utilise information from third parties to discharge that duty. This is an appropriate and proportionate response to a significant fraud and error challenge.

The noble Baroness, Lady Sherlock, also proposed that the power should be restricted such that it would not apply to persons who hold an account into which a benefit is paid on behalf of someone who cannot manage their own financial affairs—such persons are referred to as “appointees”. An appointee is a person who may be appointed by the Secretary of State to act on behalf of the benefit customer. Usually, the appointee becomes legally responsible for acting on the customer’s behalf in all matters related to the claim. It is also made clear to the appointee, in the documents that they sign, that we may get information about them or the person they are acting for from other parties, or for any other purposes that the law allows, to check the information they provide.

Under our proposed legislation, it is right to say that there may be some people who are not themselves benefit claimants but who have given a person permission to pay benefits into their bank account, who may be picked up in the data returned by third parties. Under the noble Baroness’s amendment, we would not be able to gather data on appointees, which would make the power unworkable, because third parties would not be able to distinguish between an individual managing their own benefit and an appointee. It also assumes that no fraud or error can occur in these cases, which is definitely wrong. I assure the noble Baroness that we handle such cases regularly and have robust existing processes for identifying appointees on our own database and for carefully handling cases of this nature.

The noble Baroness would also like to see the power—

[Baroness Sherlock (Lab)]

Rather than asking all my questions at the end—I only have four—I will try to get answers as we go. On the appointees, I think that the Minister has just said that the reason the Government need these powers is that some appointees will have their benefit money paid into their own account, not into a separate second account, so that therefore needs to be the case. I am very happy to reword this amendment to make that clear. I was talking specifically about the linking arrangements; the amendment does not talk about excluding appointee accounts. It specifically says that accounts that are linked to an account into which the benefit is paid are not there. I am happy to reframe that in a way that defines it—I am sure we can find a way around this—but does the Minister accept the principle behind this: that, if there is a separate account that, say, I hold for a child who is there, this should not give a reason to look into my own accounts? Or is he saying that the Government want to look into my own accounts, or business accounts, or family accounts as well? Which is it?

[Viscount Younger of Leckie (Con)]

The Government do wish to have that power. I should make it clear that an appointee could be a claimant as well, so there is a dual issue. It is important that we retain that power, to be sure that we cover the whole ground. But I will reflect on the noble Baroness’s point.

[Baroness Kidron (CB)]

There were a number of questions on the other group that related specifically to people’s willingness to take these roles on and what the unintended consequence of putting appointees and carers in this position might be for the DWP, with people saying, “Actually, not me, then”.

[Viscount Younger of Leckie (Con)]

The noble Baroness makes a very good point. I may be able to give her further reassurances in a letter because, on the one hand, we do want the power to be able to cover the ground. On the other hand, there are necessary protections that we must put in place. So further reassurances probably need to be given. There is that balance to be struck, but I hope I can continue to do that.

[Baroness Jones of Whitchurch (Lab)]

If I may pursue this, I am not sure I heard the Minister’s answer to the question of the noble Baroness, Lady Kidron—or maybe I did. If it was a charitable bank account, a business account or anything else, I think the Minister said that it would be subject to that scrutiny as well. Once someone acts for a carer, all of their bank accounts could be scrutinised—surely that is ridiculously unfair.

--- Later in debate ---

[Viscount Younger of Leckie (Con)]

I am not sure I agree with that. I hope I can reassure the noble Baroness, as I tried to on the previous group. Using our test and learn process, which is already under way working closely with the banks, bringing them along with us and them bringing us along with them—there is a good relationship there—we are working through these important matters.

The point made by the noble Baroness, Lady Kidron, is important, as is that of the noble Baroness, Lady Jones. Again, it is important to give those reassurances. They will be forthcoming, and that is all part of our test and learn process, which I hope provides some reassurance.

[Lord Vaux of Harrowden (CB)]

I want to be absolutely clear on this point, because I am still not totally sure I am—I raised this the first time around on the last group. If I, as a landlord, have been paid rent as housing benefit directly, my accounts are caught. If I am a trustee of a charity and a cosignatory on a bank account, is the Minister saying that that charity’s account will be caught or not? I want to be absolutely crystal clear on that.

[Viscount Younger of Leckie (Con)]

This is part of the filtering discussions that are already taking place at the moment.

[Lord Vaux of Harrowden (CB)]

Under the terms of the Bill, would this allow that to be caught?

[Viscount Younger of Leckie (Con)]

Yes it would. Landlords are in scope. We will filter this through in terms of the business as usual. If we receive any information—

[Baroness Lister of Burtersett (Lab)]

Given that, has the department done an assessment of the likely impact on landlords being willing to take people on housing benefit? It is already an issue that landlords are reluctant to take housing benefit recipients, but, with this, I could see the market completely freezing for people on benefit.

[Viscount Younger of Leckie (Con)]

I clearly cannot go far enough today, but, because this is important and we are in Committee, I need to give some further reassurances on where we are in the process in terms of filtering. If I may conclude my remarks, I will finish this particular point. This is all part of the test and learn, and I give some reassurance that we are working through these important issues in relation to appointees and landlords.

[Lord Clement-Jones (LD)]

It is precisely as the noble Baroness, Lady Kidron, said on the last group—this is a massive net. It feels as though this is so experimental that there is no certainty about how it will operate, and the powers are so broad that anything could be subject to it. It sounds extremely dangerous, and it is no wonder that everybody is so concerned.

[Viscount Younger of Leckie (Con)]

I do not agree with that. We have done quite a lot of business together across the Chamber. That is a slightly sweeping issue, because I have given some reassurance that we are already working with the third parties to make sure that we have robust processes in place. For instance, when we are talking about landlords, while it is possible that a landlord’s account may be matched under the measure, only minimum information will be provided by the third parties to enable my department to identify an individual within our own database. With all the data received, we will make further inquiries only where appropriate and where the information is relevant to the benefit claim. This is already part of our business-as-usual processes.

[Lord Clement-Jones (LD)]

My Lords, I am sorry to interrupt the Minister but, throughout these two groups, he has, in a sense, introduced wholly new concepts. We have “test and learn”, “filtering”—which sounds extraordinary—and “signals” but none seem to be in the black letter of the schedule, nor in the rest of the Bill. We have a set of intentions and we are meant to trust what the DWP is doing with these powers. Does the Minister not recognise that the Committee is clearly concerned about this? It needs tying down, whether we need to start from scratch and get rid of the clause or take on board the amendments put forward by the noble Baroness, Lady Sherlock. The uncertainty around this is massive.

--- Later in debate ---

[Viscount Younger of Leckie (Con)]

Right. A number of questions have been asked. I am not sure that I can give too much more clarity—only that I will go back to what I said on the first group in terms of the limited nature of what we are trying to do. I was very clear about its limited nature, I think.

This leads on to the numbers that noble Lords are asking me about. Of course, I cannot give that figure, as we do not honestly know it. Until we move forward on bringing the measure in, we will not know it. What is certain is that we need this power to be able to gain the limited data that we need. When we receive the data, it may be the case that we need to follow up. I am sure that we will not need to follow up in the vast majority of cases but we must have this power.

To the noble Lord, Lord Vaux, I say this: this measure is for UK accounts only. I hope that that is also helpful to the noble Baroness, Lady Bennett.

[Lord Vaux of Harrowden (CB)]

This is the problem. We have been talking about limited information, a limited nature and the limited things that we will look at, but that is not what the Bill says. We need to think seriously about how we should limit the rights in the Bill to match the requirements of the DWP. At the moment, there seems to be a huge gap.

[Viscount Younger of Leckie (Con)]

That point is very much noted. I will certainly take it back. Clearly, we need to provide greater reassurance on the limits and scope, as well as on what we are trying to do. I regret that I am not able to give those answers in full to the Committee now but I hope that, today, I have already taken us further forward than we were before we started. That is quite an important point to make.

I shall touch on the benefits that are in scope of this measure, a point that was raised by the noble Baroness, Lady Sherlock. I think the noble Baroness wishes to restrict the power to working-age benefits, but pension-age benefits are not immune to fraud and error—I wanted to address that—and it is our duty to ensure that these benefits are paid correctly and in line with the benefit eligibility rules that Parliament has previously agreed. Every payment that the DWP makes has eligibility criteria to it. Parliament has considered these criteria in the passage of the relevant social security legislation, and the Government have a responsibility to check that payments are being made in line with those rules so that taxpayers’ money is spent responsibly.

[Lord Davies of Brixton (Lab)]

Pension benefits other than pension credit have eligibility criteria attached, but I do not know any eligibility criteria applying to pensions that you could discover from someone’s bank account.

[Viscount Younger of Leckie (Con)]

The example that the noble Lord will be aware of links to what the noble Lord, Lord Sikka, was saying about some pensioners who have moved abroad but, for whatever reason, have not told us that they have done so and continue to receive the uprating. The figure for the fraud aspect—or it could be error—linked to state pensions is £100 million.

[Lord Davies of Brixton (Lab)]

Presumably the DWP already knows the address of the bank account to which an overseas pension is being paid. Why does it need to know any more?

[Viscount Younger of Leckie (Con)]

My understanding is that it needs to have these powers to be able to cover the ground properly. I say again that these powers are limited, and whatever comes from the data that is requested from the third parties will end up being, we hope, limited. Even then, it may not be used by us because there is no need to do so.

The power covers all relevant benefits, grants and other payments set out in paragraph 16 of new Schedule 3B to the Social Security Administration Act 1992, as inserted by Schedule 11 to the Bill. To remove pension-age payments from the scope of the power would significantly undermine our power to tackle fraud and error where it occurs. Pension-age payments are not immune to fraud and error, as I have mentioned. I will give an example of that. The noble Baroness, Lady Sherlock, asked whether people would be notified of their bank accounts being accessed.

[Baroness Lister of Burtersett (Lab)]

Before the Minister moves on, I asked specifically about child benefit. Could he please answer that?

[Viscount Younger of Leckie (Con)]

I know that I said earlier that child benefit was not included. I will clarify that child benefit is not a benefit for which the DWP is responsible or has any functionality for. This measure will be exercised by the DWP Secretary of State, and we cannot use this power for that benefit.

I was in the middle of answering a question from the noble Baroness, Lady Sherlock.

[Lord Sikka (Lab)]

My Lords—

[Viscount Younger of Leckie (Con)]

I will finish this answer, if I may. The DWP personal information charter lists banks and financial institutions, and other parties, among the parties with which DWP may share data and from which we may receive data. It also lists checking accuracy and preventing and detecting fraud among the purposes for which we may share or receive information.

A claimant will not be notified if their account details have been returned to DWP by a third party as that could alert fraudsters to the criteria, enabling them to evade detection—I think that is a valid point—but they will be notified if a DWP agent determines that a review is required as a result of the information provided by the third party. That notification will be done through the business-as-usual processes.

Moving on to defining working-age payments in legislation, which relates to the final amendment in this group, Amendment 235, which was tabled by the noble Baroness, Lady Sherlock, it would require the Government to specify in regulations the working-age benefits with which this power could be used. As she demonstrated, there is a wide range of benefits and therefore potential avenues for fraudsters to seek or exploit or for error to creep in. That is why it is important that the power enables the department to respond proactively as new fraud risks emerge.

That said, as the noble Baroness knows, the power will not be exercisable in all the benefits she listed—I took note of her long list—such as child benefit, which we have just mentioned, because the legislation is drafted in such a way that it could reasonably be exercised in relation to benefits for which the Secretary of State is responsible. I reassure the noble Baroness, Lady Sherlock, and the Committee that in the first instance, we plan to use this with universal credit, employment and support allowance—ESA, pension credit and housing benefit. That is the way forward.

There may be a number of questions that I have not addressed, but I hope that I have continued to make the case for why this measure is so important and our aim to tackle fraud and error. I continue to make the case that it is proportionate and that proportionate safeguards are in place. With that, I hope the noble Baroness will agree to withdraw her amendment.

[Baroness Kidron (CB)]

Will people with power of attorney over the account of someone who receives a benefit also be caught up in all this? That is another vulnerable group, so this could be extensive and quite worrying. Secondly, I am concerned by the Minister’s answers on this group. They have made me feel somewhat more strongly than I did when giving my response on the previous group, so I feel I should put that on the record.

[Viscount Younger of Leckie (Con)]

That is understood. I know that I need to provide further reassurances. Attorneys are included for the reasons that I set out for appointees.

[Baroness Sherlock (Lab)]

My Lords, I thank the Minister for taking the time to try to answer the questions. I know that we have given him a hard time, but I thank him for responding so graciously.

He did not take the opportunity to explain the process simply to the Committee. It may be that it is too difficult to explain simply or that, in fact, he can explain what they intend to do, but the powers allow them to do something much wider than that. It would be helpful if he could reflect before he writes as to how best to frame this. I think I heard him trying to say to the Committee that people think that more information is being handed over than will in fact be handed over. If that is the case, it would be helpful if he could spell that out because that would at least begin to help people understand better what is going on.

Secondly, in responding to me, the Minister focused, understandably, on the content of the amendments. I was trying to explain that the reason they are probing is that it is quite hard to get a handle on this. It is a big, sprawly thing, and I am trying to find a way of nailing some jelly to the table; I am trying to find ways of containing it. I still do not know which benefits the Government can use the powers over and which ones they intend to. It is a great step forward to know where they are going to start; that is really helpful. I am also grateful for the clarity, whether people are happy or not, that the Government intend to use the powers on the state pension and make that clear because that was not the impression given in the House of Commons when the matter was debated there. That is a helpful piece of clarity for the Committee and the wider community.

I know this is hard; fraud is difficult. A case was mentioned where an organised fraud gang stole more than £50 million in social security benefits. I know it is hard, and I know it is hard for the DWP to understand precisely where these things will lead when you begin to go there. I understand that if it is too boxed in, it makes it difficult to be able to follow where the fraudsters go, who are often one step ahead of the Government. I get all of that, but there is a risk that when it has spread so widely, the level of concern gets to the point that it will not be as publicly acceptable as the Minister thinks it is. I ask him to take the opportunity, when he goes back to the department, to talk to colleagues and think about what kind of assurances the Government could try to find a way of giving to people, either staging processes or government oversight. I ask him to think about that because the kinds of concerns he has heard here will only increase as the powers start to unfold.

In the next group of amendments, which I think will now be discussed on Wednesday, I want to dig further into the question of who the data and account notice can be given to and what criteria will be used. That will be another chance to flush out some things, so I give notice now that I would like the Minister to look into those areas next. I am grateful for his efforts and to all Members of the Committee who have explored this matter. I beg leave to withdraw my amendment.

Data Protection and Digital Information Bill

Viscount Younger of Leckie Excerpts

Committee stage
Wednesday 24th April 2024 Grand Committee

[Lord Clement-Jones (LD)]

My Lords, it has been a privilege to be at the ringside during these three groups. I think the noble Baroness, Lady Sherlock, is well ahead on points and that, when we last left the Minister, he was on the ropes, so I hope that to avoid the knock- out he comes up with some pretty good responses today, especially as we have been lucky enough to have the pleasure of reading Hansard between the second and third groups. I think the best phrase that noble Baroness had was the “astonishing breadth” of Clause 128 and Schedule 11 that we explored with horror last time. I very much support what she says.

The current provisions seem to make the code non-mandatory, yet we discovered they are without “reasonable suspicion”, the words that are in the national security legislation—fancy having the Home Office as our model in these circumstances. Does that not put the DWP to shame? If we have to base best practice on the Home Office, we are in deep trouble.

That aside, we talked about “filtering” and “signals” last time. The Minister used that phrase twice, I think, and we discovered about “test and learn”. Will all that be included in the code?

All this points to the fragility and breadth of this schedule. It has been dreamt up in an extraordinarily expansive way without considering all the points that the noble Lord, Lord Anderson, has mentioned, including the KC’s opinion, all of which point to the fact that this schedule is going to infringe Article 8 of the European Convention on Human Rights. I hope the Minister comes up with some pretty good arguments.

My final question relates to the impact assessment–or non-impact assessment. The Minister talked about the estimate of DWP fraud, which is £6.4 billion. What does the DWP estimate it will be after these powers are implemented, if they are ever implemented? Should we not have an idea of the DWP’s ambitions in this respect?

[The Parliamentary Under-Secretary of State, Department for Work and Pensions (Viscount Younger of Leckie) (Con)]

My Lords, this has been a somewhat shorter debate than we have been used to, bearing in mind Monday’s experience. As with the first two groups debated then, many contributions have been made today and I will of course aim to answer as many questions as I can. I should say that, on this group, the Committee is primarily focusing on the amendments brought forward by the noble Baroness, Lady Sherlock, and I will certainly do my very best to answer her questions.

From the debate that we have had on this measure, I believe that there is agreement in the Committee that we must do more to clamp down on benefit fraud. That is surely something on which we can agree. In 2022-23, £8.3 billion was overpaid due to fraud and error in the benefit system. We must tackle fraud and error and ensure that benefits are paid to those genuinely entitled to the help. These powers are key to ensuring that we can do this.

I will start by answering a question raised by the noble Lord, Lord Anderson—I welcome him to the Committee for the first time today. He described himself as a “surveillance nerd”, but perhaps I can entreat him to rename himself a “data-gathering nerd”. As I said on Monday, this is not a surveillance power and suggesting that it is simply causes unnecessary worry. This is a power that enables better data gathering; it is not a surveillance or investigation power.

The third-party data measure does not allow the DWP to see how claimants spend their money, nor does it give the DWP access to millions of people’s bank accounts, as has been inaccurately presented. When the DWP examines the data that it receives from third parties, this data may suggest that there is fraud or error and require a further review. This will be done through our normal, regular, business-as-usual processes to determine whether incorrect payments are indeed being made. This approach is not new. As alluded to in this debate, through the Finance Act 2011, Parliament has already determined that this type of power is proportionate and appropriate, as HMRC already owns similar powers regarding banking institutions and third parties in relation to all taxpayers.

I listened very carefully to the noble Lord and will, however, take back his points and refer again to our own legal team. I think the point was made about the legality of all this. It is a very important point that he has made with all his experience, and I will take it back and reflect on it.

[Lord Anderson of Ipswich (CB)]

I take the Minister’s point and I will settle for the appellation “investigatory powers nerd”; I am quite happy with that. Does the Minister agree with me, however, that the legal difficulty —we see this with the other bulk powers already in our law—is that Article 8 of the European convention locks in not when a human eye gets stuck into the detail, but as soon as a machine harvests the data in bulk? Most of that data relates to people in respect of whom there could be no possible suspicion. Satisfying the requirements of necessity and proportionality must be done even at that stage. I understand that that is awkward and I am sure a lot of people would prefer that it was otherwise, but that is, as I understand it, the law. That renders the distinction that the Minister seeks to draw between data gathering and surveillance perhaps slightly difficult to maintain.

[Lord Bassam of Brighton (Lab)]

My Lords—

[Viscount Younger of Leckie (Con)]

If I may just answer that question from the noble Lord, Lord Anderson; I think it is important to take one question at a time.

I have every sympathy with what the noble Lord has said. As I mentioned on Monday, points could easily raised about that—I think it may have been the noble Baroness, Lady Kidron, who raised points about computers and their robustness. This is the very point that we agree with. It is incredibly important and we have started already to draw up a proper code of practice to work with the banks on how this will actually work. We need continued time to work these issues through. I also made the point on Monday that, at the end of the day, a human being will be there—must be there—to determine where we go from there.

[Lord Anderson of Ipswich (CB)]

In relation to the code of practice, which I am glad the Minister mentioned, we have just seen the Investigatory Powers (Amendment) Bill through this place. It makes some relatively minor changes to the powers of the intelligence agencies to harvest data in bulk and, to ensure the orderly passage of that Bill through both Houses of Parliament, the key excerpts of the draft code of practice were made available before Committee in either House to enable it to be properly scrutinised. We seem to have left it terribly late in the day still to be talking about a draft code of practice on this Bill, which we have not even seen. Can the Minister assure us that before we come to Report, that code of practice will be available in draft?

[Viscount Younger of Leckie (Con)]

Indeed, I was going to come on to that later in my remarks, particularly to address the points raised by the noble Baroness, Lady Sherlock. We need the necessary time to continue to develop this code of practice, and that is particularly important in respect of this measure. The answer is no, I cannot guarantee to have the code of practice ready by Report. Indeed, I am saying that it will be ready sometime in the summer. It is important to make that point but also a further one, which is that there are many instances, as the noble Lord will know, when a code of practice is finalised and brought forward after the primary legislation is brought through, and this is one of those cases. That is not abnormal but normal. The noble Lord may not like it but there is considerable precedent for that to happen.

[Lord Bassam of Brighton (Lab)]

I have a question. I am slightly puzzled about the difference between data collection and surveillance. Surely the collection and gathering of data would be to enable officials to survey someone’s bank account. If that is not the case, what is the purpose of collecting the data if not to interrogate the behaviour of an individual to understand how their money is being brought in and spent, so that the department can exercise some judgment over whether the individual is revealing the truth about their income and outgoings?

[Viscount Younger of Leckie (Con)]

Indeed, I think we are going back to the debates that we had on Monday. However, this chimes with a question from the noble Lord, Lord Clement-Jones, so it might be helpful briefly to rehearse what we are doing here and to be clear about the limitations and the checks and balances on the power that we are bringing forward.

As per paragraph 1(2) of Schedule 11 to the draft legislation, the DWP can use this power only for the purposes of checking whether someone is eligible for the benefit that they are receiving. In practice, this means that the DWP will request information only on specific criteria, which I laid out on Monday, linked to benefit eligibility rules, which, if met may—I emphasise “may”—indicate fraud or error. If accounts do not match these criteria, no data will be shared with the DWP. The effect of paragraphs 1 and 2 of the draft legislation is that the DWP can ask for data only where there is this three-way relationship between the DWP, the third party and the recipient of the payment. In addition, the DWP can ask for data only from third parties designated in secondary legislation, subject to the affirmative procedure. There are debates to come as further reassurance to your Lordships.

As per paragraph 4(2) of Schedule 11 to the draft legislation, the power does not allow the DWP to share personal information with third parties, which means that the power can be used only with third parties who are able to identify benefit recipients independently. Just to add further to this, we are obliged, under Article 5(1)(c) of the UK GDPR, to ask only for the minimum of information to serve our purposes. In accordance with the DWP’s existing commitments on the use of automation, no automatic benefit decisions will be taken based on any information supplied by third parties to the DWP. As I said earlier and on Monday, a human will always be involved in decision-making. I hope that helps.

[Lord Stevenson of Balmacara (Lab)]

I am sorry to interrupt the noble Viscount, but I just want to be clear about what he is saying in relation to the code of practice, which obviously is at the heart of this section of the debate, although there will be other things to come. Am I right that he said—obviously he has to cover himself—that there is a chance that the Report stage of this Bill might be entered into before we have sight of the draft code of practice? He makes the point that that is not an unusual occasion. I understand that—we have both served in Parliament long enough to know that that is the case—but this is clearly an issue on which the Committee has made very strong representations to the Government. Will he do what is in his power to make sure that we do not enter Report without seeing at least an early draft, if that is possible, of the code of practice?

[Viscount Younger of Leckie (Con)]

I will certainly take that back. I do not want to make any commitments today. I have already set out our stall as to where we are. I make the further point—I am perhaps repeating myself—that given the sensitivities that there clearly are, which I have been listening to carefully, it is important that this code of practice is developed at a pace that is right for what is needed, in bringing those involved along and making sure that it is right, secure, safe and with all the safeguards involved. It is quite a serious piece of work, as noble Lords would expect me to say. I will take that back. I will certainly not be able to guarantee to produce anything before Report, which may disappoint the noble Lord, but at least I have gone as far as I can. I hope that that is helpful.

[Lord Stevenson of Balmacara (Lab)]

I am grateful to the noble Viscount. This is just a thought, but we are happy to help, as we often have done in the past on other Bills. If there is any opportunity for us to be shown early drafts, to give some help and assurance to the noble Viscount that he is on the right track, I am sure that that would be accepted.

[Viscount Younger of Leckie (Con)]

I appreciate the tone of the noble Lord and, if there is anything that comes from behind me before I conclude my remarks, to be helpful, I will certainly do that.

Our debates on this measure have covered many issues. This group, as mentioned earlier, focuses primarily on the operational delivery of the power, so it would be quite good to move on. Just before I do, for the benefit of the noble Lord, Lord Anderson, in terms of the late introduction—his words—of this measure, as mentioned on Monday the DWP published a fraud plan in May 2022, where it outlined a number of new powers that it would seek to secure when parliamentary time allowed. In the parliamentary time available, DWP has prioritised our key third-party data-gathering measure, which will help it to tackle one of the largest causes of fraud and error in the welfare system. That is a short version of what I said on Monday, but I hope that it might be helpful.

Before I turn to the amendments, it might be helpful to set out how the legislation will frame the delivery of this measure. When we issue a request for data to a third party or, as it is set out, an account information notice or AIN, which is in the Bill, we can only ask it to provide data where it may help the DWP to establish whether benefits have been properly paid in accordance with the rules relating to those benefits. As mentioned earlier, this is defined clearly at paragraph 1(2) of the new schedule. This is where the data that DWP receives may signal—to use the word raised by the noble Lord, Lord Clement-Jones—potential fraud and error. The noble Lord asked for further clarification on that point. To be clear, a signal of fraud and error is where the rules of benefit eligibility appear not to be met. For example, this might be where a claimant has more capital than the benefit rules allow. As I made clear on Monday, all benefits and payments have rules that determine eligibility, which Parliament has agreed are the right rules in its consideration of other social security legislation. To issue an AIN, we must also have designated a third party in affirmative regulations, which need to be passed by both Houses.

As has been covered, we can also only request data from third parties where there is this relationship, which I will not repeat again and which I think the Committee will be familiar with. Our intention is to designate banks and financial institutions as the first third parties that we can approach, enabling us to request information on accounts only held in the UK. Just to clarify that point, we will not be able to request information on overseas accounts.

On the question raised by the noble Baroness, Lady Sherlock, on examples of non-financial organisations that the power could appropriately be used on, we will bring forward regulations to specify the data holders in scope. I hope that this is helpful. In the first instance, this will be, as mentioned, banks and financial institutions. The power also has potential use cases with other third parties, such as housing or childcare providers, but, just to reassure the Committee, this would be subject to further parliamentary approval.

[Lord Anderson of Ipswich (CB)]

I am grateful to the Minister—I am just trying to catch up. On the point that he made about regulations, I imagine that the power to prescribe the descriptions of persons to whom an account information notice may be sent comes under paragraph 1(1) of the schedule. I think that that is what he was saying. In paragraph 2, on the content of the account information notices, there is a reference to

“other specified information relating to the holders of those accounts, and … such further information in connection with those accounts as may be specified”.

Does that simply mean anything specified in the account information notice or is there a power to make regulations that will limit the types of information that can be specified in an AIN?

[Viscount Younger of Leckie (Con)]

Again, I hope that I might have covered this earlier. If I read the noble Lord’s question correctly, the definitions will need to be debated by both Houses. I have made clear what we are bringing in at the moment for banks and financial institutions, but this will need to be looked at by both Houses in future. I hope that that is clear.

[Lord Anderson of Ipswich (CB)]

I apologise; I did not make myself clear. I think that we are on entirely the same wavelength on the persons to whom an information notice can be given; the Minister has reassured us that they will be specified in regulations and considered by both Houses. My question relates to the content of an account information notice under paragraph 2 and the very broad references to “other specified information”, “such further information” and so on. I did not read that as a regulation-making power. I rather assume that the discretion over the choice of information that is specified remains entirely at large. If the Minister is saying that there will be regulations that will specify the information that an AIN can include, hence mitigating the breadth of paragraph 2, I would be glad if he could make that clear.

[Viscount Younger of Leckie (Con)]

My understanding —with his experience, I am sure that the noble Lord will be ahead of me on this—is that this is defined. We define it pretty clearly in paragraph 1(2). In the interests of time, I will reflect on what he has asked and will be absolutely sure to add this to the letter that I pledged to write on Monday—it is getting bigger by the moment, as I fully expected.

[Baroness Sherlock (Lab)]

My Lords, as I asked only four questions, I want to try to nail each one as we go. I am grateful to the Minister. Before we leave the matter of the kind of organisations to which this applies, I think that he is saying that the Bill would allow the DWP to request information from any kind of organisation, including phone companies, which I asked about specifically. The kinds of organisations are to be specified in regulations, which the Government will bring forward, initially naming financial institutions. By virtue of further regulations, could they extend that to anything—to Garmin, the people who monitor your runs, to gyms and to anyone else? Is that correct?

[Viscount Younger of Leckie (Con)]

That is correct. I hope indeed that it provides some reassurance that extending it to the banks and financial institutions initially is deliberately designed to be narrow. It would be subject to both Houses to debate other areas beyond those. I am coming on to address that. The noble Baroness asked about phone companies. Simply put, we will be able to designate the third parties that fit within the provisions of this legislation where they hold information that would help us to verify whether someone meets the eligibility criteria for the benefit that they are receiving. However, ultimately, it would be for Parliament to decide whether a third party can be designated under this power, as we must bring affirmative regulations forward to do this. We have that power.

[Lord Davies of Brixton (Lab)]

To be clear, they already have some information about claimants or recipients. Does this Bill make any difference to that information? Can they already use the information that they have for these purposes, for example the name and address of a claimant’s bank account, or does this Bill extend the use of information to other information that they already have?

[Viscount Younger of Leckie (Con)]

Indeed, that is correct. I hope that is helpful and gives the noble Lord reassurance. To clarify, we have our normal business-as-usual processes so, where we are able to—with the restriction of not at present being able to use the banks and financial institutions as a conduit—we have those powers. However, obviously, as has been made clear by the ICO, there is no alternative to needing the help of banks and financial institutions to go further in tackling the ever-greater sophistication of fraud.

The noble Baroness, Lady Sherlock, asked whether we could issue an AIN to a bank other than that into which the benefit is paid. The answer is no. The power is exercisable only in respect of a matching account that meets the criteria in an AIN and receives a benefit payment. If this is not the case, the Secretary of State cannot require them to supply that information.

When it comes to issuing an AIN, DWP will be able to exercise these powers only for payments for which it is responsible. This means that DWP cannot exercise this power with some benefits that fall under the legislation, such as child benefit, as was mentioned on Monday. I know that the noble Baroness, Lady Sherlock, raised this issue. As I committed to do on Monday, I will provide in writing more detail on the scope of the measure and on these limitations, which will require more time.

I will also ensure that my letter is clear on how the measure will impact appointees, joint claims and other such accounts. I am well aware that a number of questions were asked about this matter on Monday but, in the interests of time, I will move on.

I turn to proofs of concept. I also want to speak about our approach to delivery, in particular how we plan to test delivery before we gradually scale up operational delivery; I am aware of the time, but I hope that the Committee will indulge me. Our planned period of “test and learn” will build on our learning from our two previous proofs of concept, which we conducted in 2017 and 2022. These demonstrated the effectiveness of this approach and contributed to the OBR’s certification that the measure will save up to £600 million over the next five years.

The two proofs of concept that I mention are important. I hope that the Committee will be interested to read the results, which demonstrate why we need to do this. Without further ado, let me say that I will set out the details of these two examples in the letter as well, which will, I hope, be helpful.

The noble Lord, Lord Vaux, who is in his place, the noble Lord, Lord Clement-Jones, and the noble Baroness, Lady Sherlock, spoke about the regulatory impact assessment on Monday. I just want to use this time to reassure them on that. More information on these proofs are contained within the RIA, which was, as noble Lords will know, green-rated by the RPC.

On “test and learn”, we have a clear view on how this power may work. We are already working with third parties in readiness to commence the formal “test and learn” period in early 2025 and preparing the code of practice in advance of that. I will come on to that in just a second—in fact, I will come on to it right now, given the time. I shall refer to Amendments 225 to 232 in the name of the noble Baroness, Lady Sherlock.

To support the delivery of this measure, we will produce the code of practice to help define how the measure will work, with explanations. I assure the noble Baroness and the Committee that the code of practice is already in development; we are working positively with around eight leading financial institutions through an established working group that meets regularly to shape the code. We are fully committed to continuing that work; I think I covered the timing of that earlier in my remarks. Accepting Amendments 225 and 226 in the name of the noble Baroness would therefore, we believe, have minimal effect. I am clear that DWP will produce a code of practice, which will be consulted on; I have also set out the sort of detail that it will contain. Accepting them may also potentially restrict our ability to develop the code of practice further as we understand more from “test and learn”.

Because we are developing this collaboratively with banks, I am not yet in a position to share the draft code, as I mentioned; I have given certain reassurances on that. However, I can say that it will provide guidance on issues such as the nature of the power and to whom it will apply. It will also provide information on safeguards, cover data security responsibilities and provide information on the appeals processes should a third party wish to dispute a request. We will engage with SSAC, to help the noble Baroness, Lady Sherlock, as we bring forward the affirmative regulations. On balance, I believe that the best course is to consult on the code of practice rather than rushing to define it now.

--- Later in debate ---

[Baroness Sherlock (Lab)]

I am most grateful to the Minister. There is one question, so I apologise if he answered it and I did not quite pick it up. I specifically asked if these powers would allow the DWP to devise criteria designed to identify if a claimant was in fact living with another adult. With the appropriate regulation, would the powers allow it to do that?

[Viscount Younger of Leckie (Con)]

That is one of the questions that I can now answer. The power will allow this, in so far as it pertains to helping the Secretary of State establish whether the benefits are being paid properly, as with paragraph 1(2) of new Schedule 3B. Rules around living together are relevant only to some benefits. That is a very short answer, but I could expand on it.

[Baroness Kidron (CB)]

May I add to the very long letter? I have been sitting here worrying about this idea that one of the “signals” will be excess capital and then there are matching accounts. If the matching account has more capital—for example, the person who has a connected account is breaking the £16,000 or £6,000—does that signal trigger some sort of investigation?

[Viscount Younger of Leckie (Con)]

That is a very fair question, and I hope that I understand it correctly. I can say that the limit for the DWP is that it can gain only from what the third party produces. Whatever goes on behind the doors of the third party is for them and not us. Whether there is a related account and how best to operate is a matter for the bank to decide. We may therefore end up getting very limited information, in terms of the limits of our powers. I hope that helps, but I will add some more detail in the letter.

[Lord Clement-Jones (LD)]

My Lords, the Minister extolled the green-rated nature of this impact assessment. In the midst of all that, did he answer my question?

[Viscount Younger of Leckie (Con)]

I need to be reminded of the question.

[Lord Clement-Jones (LD)]

I asked about the amount of fraud that the Government plan to detect, on top of the £6.4 billion in welfare overpayments that was detected last year.

[Viscount Younger of Leckie (Con)]

The figure that we have is £600 million but, again, I will reflect on the actual question that we are looking to address—the actual amount of fraud in the system.

[Lord Clement-Jones (LD)]

The Minister is saying that that figure is not to be found in this green-rated impact assessment, which most of us find to be completely opaque.

[Viscount Younger of Leckie (Con)]

I will certainly take that back, but it is green rated.

--- Later in debate ---

[Lord Vaux of Harrowden (CB)]

My Lords, the Minister was kind enough to mention me a little earlier. Can I just follow up on that? In the impact assessment, which I have here, nowhere can I find the £600 million figure, nor can I find anywhere the costs related to this. There will be a burden on the banks and clearly quite a burden on the DWP, actually, if it has got to trawl through this information, as the noble Viscount says, using people rather than machines. The costs are going to be enormous to save, it would appear, up to £120 million per year out of £6.4 billion per year of fraud. It does seem odd. It would be really helpful to have those cost numbers and to understand in what document they are, because I cannot find in the impact assessment where these numbers are.

[Viscount Younger of Leckie (Con)]

I hope I can help both noble Lords. Although I must admit that I have not read every single page, I understand that the figure of £500 million is in the IA.

[Lord Clement-Jones (LD)]

Did the Minister say £500 million?

[Viscount Younger of Leckie (Con)]

Yes, £500 million. I mentioned £600 million altogether; that was mentioned by the OBR, which had certified this, and by the way, that figure was in the Autumn Statement.

[Lord Clement-Jones (LD)]

My Lords, has not that demonstrated the disproportionality of these measures?

[Baroness Jones of Whitchurch (Lab)]

The noble Viscount explained in response to the noble Lord, Lord Anderson, that at every stage where the powers are going to be expanded, it would come back as an affirmative regulation. I might have been a bit slow about this, but I have been having a look and I cannot see where it says that. Perhaps he could point that out to me, because that would provide some reassurance that each stage of this is coming back to us.

[Viscount Younger of Leckie (Con)]

I understand, very quickly, that it is in paragraph 1(1), but again, in the interests of time, maybe we could talk about that outside the Room.

[Lord Clement-Jones (LD)]

Could the Minister clarify: was that paragraph 1(1)?

[Viscount Younger of Leckie (Con)]

I can reassure the noble Lord that that is the case, yes.

[Lord Anderson of Ipswich (CB)]

I do not know whether I can help. I agree with the noble Baroness: I do not think it is very clear from paragraph 1(1) that there is a regulation-making power. However, if you look at paragraph 5 of the new schedule, there is a reference there to regulations under paragraph 1(1) as well as two other paragraphs of the schedule. That is the rather tortuous route by which I came to the conclusion that the Minister is quite right.

[Viscount Younger of Leckie (Con)]

I reassure noble Lords that is correct—it is paragraph 1(1). It may be rather complex, but it is in there, just to reassure all noble Lords.

[Lord Clement-Jones (LD)]

I am sorry to keep coming back, but did the Minister give us the paragraph in the impact assessment that referred to £500 million?

[Viscount Younger of Leckie (Con)]

No, I did not, but that is something which surely we can deal with outside the Room. However, I can assure noble Lords that it is in there.

[Baroness Sherlock (Lab)]

My Lords, I thank the Minister for his attempts to answer my questions and those of many noble Lords. I will not detain the Committee for very long at all.

I am grateful to know that there will be a code and that it will be consulted on. Given that, it would have saved an awful lot of trouble if the Government had simply not put “may” in the Bill in the first place—that would have cut out a whole loop of this. I am very grateful to know that that is there. I agree with the Minister that we all want to know about and to clamp down on fraud and error; the question is one of proportionality.

When the Minister comes to write—I realise that this letter is turning into “War and Peace”, but it will make us all come to Report in a much better place if we can get a clearer answer to many of these questions— I still wonder whether he properly answered the question from the noble Lord, Lord Anderson, about the legality of these powers, because the point about when they engage is crucial. The Minister is still coming back to a distinction between the gathering of the data and what the DWP will do using its existing “business as usual” powers, to investigate. I think the point the noble Lord was making is that the question of legality engages at the point of that data gathering, not at the point at which it is used, if I am correct. I am not sure that the Minister answered that—I am not inviting him to do it now—but I specifically suggest that he takes advice on that point before we come back on Report.

The other issue is that, if the Government have come in so late in the day introducing these powers into the Bill, it would have been better to have draft regulations before Report at the first stage. The Minister thinks the code can be available in the summer, but the summer is fast approaching so I see no reason why the usual channels could not accommodate the date for Report to allow us to go past the date for producing a draft code if the Government wish to. I realise that they may not wish to, but it must be perfectly possible—unless the Minister knows something I do not about a likely date of a general election, presumably we should still have time to do that. So I commend that thought to him.

However, we also know that a lot of the constraints he has described will happen solely in regulations. Everybody in this Committee is aware of the limitations of the capacity of both Houses to do anything about regulations. We cannot amend them here. The Government will bring them forward, but the capacity of us to do anything about that is small, so that is not as much of an assurance as it would be in other circumstances.

Finally, what I am left with is that these powers could do anything from something that might sound very proportionate to something that might sound entirely disproportionate, and we simply have not heard anything that enables us to make a judgment early enough to know where that is contained. I therefore ask the Government to think again before Report about ways in which they might provide assurance about a more contained and proportionate approach to these measures.

Since we are in Committee, in the meantime, I thank all noble Lords for their work on this and the Minister for his response. Before I beg leave to withdraw, I see that the Minister is intervening on me now, which is a joyful change.

[Viscount Younger of Leckie (Con)]

Before the noble Baroness sits down, I want to say one very important thing. As ever with Bills, there is an opportunity to engage, and I pledge right now to engage with all noble Lords who wish to, and we would like to as well, on these particular measures, to provide, I hope, further reassurances to those that I have given. I hope there is some acceptance that I have given some reassurances.

[Baroness Sherlock (Lab)]

My Lords, I am sure that on behalf of the Committee I can thank the Minister for that generous offer, and we look forward to taking it up. In the meantime, I beg leave to withdraw the amendment.