Data Retention and Investigatory Powers Bill

William Cash Excerpts

Tuesday 15th July 2014 Commons Chamber

[James Brokenshire]

It is certainly not our plan or intention—indeed, it is not part of our process—to make those sorts of requests. As the hon. Gentleman knows, we make requests for communications data to be retained by companies in the UK. He knows of the processes and the safeguards that exist in respect of the specific requests that are made by the different agencies, and of the tests that need to be satisfied.

[Sir William Cash (Stone) (Con)]

Does my hon. Friend accept that the impact of the European Court of Justice judgment is enormous because, in a nutshell, it will continue to be the law of the European Union irrespective of whether we pass the Bill?

[James Brokenshire]

Obviously, we have considered carefully the impact of the European Court of Justice judgment, the European convention on human rights and other parts of the law in examining the position. That is why we have considered the Bill so carefully. The additional safeguards and provisions that have been written into the Bill reflect that consideration. We remain confident that the provisions meet the legislative requirements.

--- Later in debate ---

[James Brokenshire]

We are seeking to ensure that the code is drafted effectively, and we are looking at ways that that scrutiny can take place, given the import we have mentioned. We will certainly look to engage appropriately to ensure that issues such as those highlighted by the hon. Gentleman on confidence, professional positions and matters such as legal professional privilege are contemplated and reflected on. Codes of practice already exist and it is now about putting that on a more statutory footing to give it statutory teeth, but I recognise his point.

[Sir William Cash]

My hon. Friend referred to our courts, and I am sure that by that he meant our domestic courts. Unfortunately, that is not what we have to grapple with here. The issue is what our courts may be able to do, because they are bound by section 3 of the European Communities Act 1972, which states that we must have regard to, and indeed implement as an obligation of European law, judgments of the European Court. The data retention directive is European Union law, so the regulations and replacement regulations are all derived from that assertion of the supremacy of European law. As my hon. Friend will know, I am deeply concerned about that and I hope we will come on to it later. The bottom line is that we are not able to ensure that the Bill will be effective against any European Court judgments.

[James Brokenshire]

Part of the reason we are introducing the Bill is to give that fundamental statutory underpinning in primary legislation. The questions raised have been as a consequence of the linkage between the old data retention regulations, and whether they are reliant on the data retention directive being in force and effect. We have asserted clearly that we do not accept that that is the case, but because of those questions we judge it important to deal with that uncertainty and risk, and ensure that that is stated clearly in primary legislation.

--- Later in debate ---

[James Brokenshire]

My hon. Friend needs to understand that clause 1(2) is framed in the context of clause 1, which makes it clear that it relates to “relevant communications data”. It has to be read in the context of the interrelationship between clause 1(2) and clause 1(1), which I think provides the necessary clarification and context.

The Secretary of State may give a notice only where she considers the retention requirements are necessary and proportionate for one or more of the purposes set out in RIPA. These include national security, preventing or detecting crime, and the interests of public safety. The clause also enables the Secretary of State to make regulations that will replace the existing data retention regulations. Those regulations will, among other things, set out the process for serving a data retention notice and the safeguards that must be put in place to protect the data. To give Parliament the opportunity to scrutinise the details of our proposals, we have published a provisional draft of the regulations. They are available in the Vote Office and have been made more widely available.

[Sir William Cash]

Is my hon. Friend aware that Professor Steve Peers of Essex university—he is an expert in this field, as I am sure my hon. Friend knows—has drawn attention to the objection by the Court of Justice to the requirement to retain all communications data? The fact that the directive required all data to be retained from all subscribers was the first of the considerations taken into account by the Court in reaching its conclusion that the directive was disproportionate.

[James Brokenshire]

If my hon. Friend reads the judgment, he will see that the Court upheld the principle of retention of data as contemplated in the Bill. A number of frameworks on the purpose for which data are retained were referred to, but we are clear that the regime the House is contemplating this evening, in the context of the Bill and how it sits alongside the existing regime of the Regulation of Investigatory Powers Act 2000, does provide a legally robust approach to enable our police, law enforcement and security agencies to combat organised criminality and to provide the national security that is needed. The powers we already use are intrinsic to delivering on that. The Bill makes it clear that regulations cannot specify a retention period longer than 12 months. We reflected on the judgment of the Court. As the Home Secretary said in her opening statement on Second Reading, different time periods could be allowed in relation to specific types of data.

We are maintaining that focus on proportionality and necessity not simply in terms of giving a notice, but in keeping it under review. The European Court considered that the period of retention should be based on objective criteria to ensure that it is limited to what is strictly necessary. On the basis of law enforcement surveys in 2005, 2010 and 2012, we consider that a maximum period of 12 months strikes the right balance between the ability of law enforcement and intelligence agencies to investigate crimes and an individual’s rights to privacy. Unlike the current regime, under which all relevant communications data is retained for 12 months, this approach will mean that data could be retained for a shorter period than 12 months if considered appropriate, and that different types of data could be retained for different periods.

[James Brokenshire]

My hon. Friend has expressed his views on a number of occasions on the need for continued focus on the balance between individual freedoms and collective freedom, because that collective freedom relies on our being able to conduct our affairs and to live our lives free from those who would do us harm. Sometimes people have sought to describe them as if they were in parallel, but I see them as mutually reinforcing; security and liberty must go hand in hand to develop and defend the fundamental principles that we have as a society, so to frame it separately misses the point.

My hon. Friend raises the important issue of how technology is evolving; it is constantly changing. That is why we see the import of the review by David Anderson, the independent reviewer of counter-terrorism legislation, to look at the issues more broadly, and at existing legislation and capabilities. We will come on to that, I am sure, in some of the subsequent debates in this Committee where that might be teased out in further detail, but my hon. Friend makes an important point.

[Sir William Cash]

May I make one last intervention?

[James Brokenshire]

One last go.

[Sir William Cash]

I am extremely grateful. My hon. Friend is pursuing doggedly what I believe to be a fundamentally and ultimately erroneous assumption, as will be discovered in due course, Does he accept, as everybody else appears to, that this Bill will be within the scope of EU law and that the charter of fundamental rights and the general principle of EU law will continue to apply, and that, as he correctly pointed out when he referred to primary legislation, the only way in which we can avoid running into difficulties with European Court judgments that we do not want—which, clearly, is what the Bill is about—is by using primary legislation, such as this Bill, to disapply the provisions of European law that come through sections 2 and 3 of the European Communities Act, and that it has to be notwithstanding those provisions?

[James Brokenshire]

I know the clear position that my hon. Friend has enunciated on many occasions in the House. There will be wider debates and discussions on the position of the European Convention and a British bill of rights, with which my hon. Friend is very familiar and which I personally support to ensure that our domestic law is framed properly in the context of convention rights. However, we have reflected carefully on the judgment—the right hon. Member for Blackburn (Mr Straw) described it as dense and complicated—which the Bill reflects on in the nature of the obligations set out therein. We have judged that primary legislation to avoid any uncertainty is appropriate and necessary, given the huge reliance that is placed on communications data and the right to be able lawfully to intercept for the prescribed purposes. I am sure that the wider debate—and the Select Committee that my hon. Friend chairs—is focused on the jurisdiction of the European Court of Justice over matters that are opted into and the position post-December 2014. We have reflected carefully on the application, scope and enforceability of the Bill and its compliance with relevant legislation of whatever kind, and we are confident that it meets that challenge.

Given that the European Court was considering only the data retention directive and not how member states implemented it, it did not take into account the rigorous controls in place in the UK as part of its judgment. Access to communications data in the UK is stringently regulated and safeguarded by the Regulatory and Investigatory Powers Act 2000. Data are retained on a case-by-case basis and must be authorised by a senior officer, at a rank stipulated by Parliament, from the organisation requesting the data. The authorising officer may approve a request for communications data only if the tests of necessity and proportionality are met in the particular case.

Our system was examined in detail by the Joint Committee on the draft Communications Data Bill, and it was satisfied that the current internal authorisation procedure is the right model. However, to ensure that communications data cannot be accessed using information-gathering powers that are not subject to the rigorous safeguards in RIPA, the Bill ensures that data retained under this legislation may be accessed only in accordance with RIPA, a court order or other judicial authorisation or warrant.

Hon. and right hon. Members who followed the discussions surrounding the draft Communications Data Bill will be aware that communications service providers are also able to retain communications data on a voluntary basis under a code of practice made under the Anti-terrorism, Crime and Security Act 2001. This clause ensures that the regulations made under this Bill can apply the same security safeguards and access restrictions to data retained under that code. I therefore believe that the clause should stand part of the Bill.

--- Later in debate ---

I think that, for those who have been concerned about these issues, the clause clarifies the powers that the Government will have, the time for which data must be retained, and the circumstances in which a court order will be needed.

[Sir William Cash]

Let us assume for the sake of argument that all the provisions in subsections (1) and (2) are desirable, although some people will disagree. Surely what is most important from the Opposition’s point of view is to judge whether the provisions will be effective. The right hon. Gentleman says that he wants all this because it is a good idea, but if—as is more than likely—the provisions are challenged in the European Court, where will the Opposition stand if the European Court judgment that follows the implementation of the Act eventually overturns the Act itself?

[Mr Hanson]

I think that the hon. Gentleman would expect me to say that if we were the Government and the legislation were in force, we would defend it in the European Court, and would put up a case for our arguments. Ultimately, however, we are part of the European Union, and the European Court is considering the impact of legislation of this kind throughout the EU. We must defend our parliamentary procedures, defend the decisions that we make and defend the legislation that we have, and we must argue for our the position in court. Ultimately, however, we must also take on board our European obligations.

[Mr Hanson]

My hon. Friend has made an important point. As the hon. Member for Stone (Sir William Cash) will observe, further amendments have been tabled, and I hope that the Government will consider them. We cannot discuss them now, but they would ensure that the provisions in clause 1 would be reviewed regularly, and that we would have an opportunity to make representations to the European Court if it chose to mount a challenge. However, let me respectfully say that I think we are being sidetracked into issues that do not concern the Bill as such. I consider that it fulfils an obligation to ensure that we give powers to the police and other authorities to check data and examine the conduct of that data. It establishes a definitive time scale for the holding of the data, and enables us to frame in legislation, in this United Kingdom Parliament, the mechanisms that are required to achieve that through court orders. That is why I support the clause and why the Opposition have tabled no amendments to it.

[Sir William Cash]

The European law on which this legislation is ultimately based is a retention directive. We anticipate there will be replacement regulations, but it does not matter whether the original regulations or replacement regulations are involved. Ultimately, the authority on which this Bill is based, and on which the whole of this general issue is based, is European law and the charter of fundamental rights and principles of European law which apply. As the shadow Minister just said, it so happens we have voluntarily accepted the obligations imposed under section 2 of the European Communities Act 1972 in respect of compliance with a directive and any further directives that may or may not be made, and we have also voluntarily accepted that the United Kingdom will accept all judgments of the European Court under section 3 of that Act.

It so happens that we are providing in our own domestic legislation for certain safeguards, modifications and changes—based, it would appear, on the fact that we are now discussing a Bill of this Parliament—which interfere with, cross over, interweave with and—

[The Temporary Chair (Sir Roger Gale)]

Order. The hon. Gentleman knows me well enough to know that I know that we are discussing clause 1, not the Bill as a whole.

[Sir William Cash]

In respect of clause 1, we are also stating that a retention notice may relate to particular operators, and there is a whole set of subsections and paragraphs dealing with the basis on which a retention notice can be provided. It also goes on to say, in subsection (3), that the Secretary of State can

“by regulations make further provision about the retention of relevant communications data.”

Subsection (4) deals with certain provisions relating to

“requirements before giving a retention notice”,

and a code of practice and a range of other matters regarding

“the integrity, security or protection of, access to, or the disclosure or destruction of, data retained by virtue of this section”.

I entirely accept your point, of course, Sir Roger, that this is a debate on this clause, but this clause contains the essential powers that are being proposed under this piece of domestic legislation, and I am certain—this is not an assertion—that this has to be compliant with European law and it has to be compliant with the charter.

All I am saying is simply that there is an opportunity to make sure this law is effective—that clause 1 is effective. If Parliament wants clause 1 to be effective, it will want to be sure that it is bomb-proof against any challenges that may be made in respect of powers being conferred by clause 1, and in order to do that we have to get around the problem of the European Court, which has already issued an objection to the original proposals—the original regulations and the original retention directive on which the regulations are based, and, indeed, on which any subsequent regulations will be based, because I have not heard anyone yet say that the retention directive, which is the subject of clause 1, is going to be repealed by the European Union. There was some talk from the Home Secretary that she was looking at it, and there was talk about consultation, but I have not heard anybody suggest that the retention directive is going to be repealed in whole or in part. It may be that that will happen, but we are considering this Bill as it is now, and as we speak clause 1 is derived from European law and the charter of fundamental rights.

In a nutshell, this is what I am saying: section 2 of the 1972 Act requires the implementation of the requirements prescribed by the European directives and European law, and the Bill falls within the scope of European law, and the charter and the general principle of EU law will continue to apply. I will respond to the shadow Minister and the Minister in one simple statement, and it is this. If they want the legislation in clause 1 to be effective, it is imperative to make certain that arrangements are made in the primary legislation that the House is now discussing to ensure that sections 2 and 3 of the European Communities Act 1972 do not apply in this context, because that is the only way—by primary legislation—to ensure that the powers in clause 1 will not be vitiated by a further Court challenge in future. This is a fundamental question that pertains to the supremacy of Parliament. We want the legislation to pass—or many Members of the House do, judging by the majority that we have just witnessed—but if that is the case, why not insert the formula

“notwithstanding sections 2 and 3 of the European Communities Act 1972”

to ensure that clause 1 will survive? Otherwise, I fear that it is at risk.

The Home Secretary talked about wanting to remove the risk of uncertainty. All I would say is that what we are doing on the Floor of this House is compounding and creating the very uncertainty that she said she wanted to avoid. The uncertainty will come simply and solely because of the ideological obsession with not making provision in an Act—which otherwise would make it a good enactment—to include the words

“notwithstanding the European Communities Act 1972”,

and then legislating on our own terms. If we do not do that, this clause and all that follows from it will be at risk, and there will indeed be uncertainty arising from it.

If I may make this final point, Sir Roger. When the charter of fundamental rights was going through, I tabled an amendment to include the words “notwithstanding the European Communities Act 1972”. The charter applies to this clause, and as I said to the Prime Minister the other day—and it is understood—the only thing we can do is either to accept that the charter is applicable in the United Kingdom or to displace it. By including in the Bill the words “notwithstanding the European Communities Act 1972”, the charter will not apply. I tabled such an amendment to the Lisbon treaty legislation. That amendment was declined and the result is that we now have a series of European Court judgments saying that the charter does apply to the United Kingdom. If my amendment had been accepted—back in 2008, I think it was—we would not be having to face the fact that the charter is now applicable.

The charter arises in relation to this provision, and all I am asking is for the Minister and those on the Opposition Benches to listen and to act to ensure that we are not trumped by a challenge by the European Court, guided through the legislation and case law, to override legislation that is passed in this House of Parliament. It is very simple.

[Sir Alan Beith (Berwick-upon-Tweed) (LD)]

This clause is about retention; it is not about access. That distinction is an important one, not least to anybody reading these debates or drawing conclusions from them. It is also something that might profitably have been considered at greater length by the European Court when it reached its judgment.

There is a big difference in the impact on somebody’s human rights between the retention of data and having access to those data, which we will deal with in subsequent clauses. Of course, companies retain data for their own commercial purposes, such as billing and a variety of other reasons. They are constrained by the Data Protection Act—they have to have a legitimate purpose for doing so—but they have many purposes that can enable them to keep data. It is important to recognise that the problem from a human rights and privacy point of view arises when access is made—when a Government body can go into that mine of data and discover a lot of things about somebody’s life. It might have a number of good reasons to do that—to identify whether that person is involved in a serious crime—but those reasons have to be justified by some kind of procedure. We can consider that aspect later, but we must recognise that this part of the Bill is confined to the power of retention.

The Government’s answer to the argument advanced by my hon. Friend the Member for Stone (Sir William Cash) is that, in framing the retention provisions, they will not be obliged to make the same provision for every kind and every aspect of data. That should satisfy the European Court provision. If ever this comes to a legal challenge, I hope that there will be some attempt to make the Court think a little more carefully about the fact that retention and access are not the same thing.

[Sir William Cash]

My right hon. Friend has been in this House for many years. Does he recall that a situation similar to the kind that I have been describing arose in relation to the Factortame case? The European Court, through our own courts, ended up by striking down the Merchant Shipping Act 1988 because the Government did not get the legislation right, which they could do this time round.

[Sir Alan Beith]

I have only remembered the case because my hon. Friend made the same point on a previous occasion. He has not been slow to point that case out. It is worth remembering—this may not be an approved thing to say—that the European Court is not always entirely consistent from one judgment to the next in the way that it applies its principles. It is important that we make it absolutely clear that we have a set of rules to ensure that the Government only require the retention of data when they have good purpose for doing so, and they only retain those kinds of data for which there is good purpose. Access to that data should be the subject of stringent conditions. In essence, that was what the European Court judgment was about, and the Government are meeting those conditions in the way that they have framed this legislation. That is not to say that they could not be open to challenge; perhaps they will be at some point. If that challenge is made, we should make it quite clear how important the distinction is between retention and access to data.

--- Later in debate ---

[Sir William Cash]

I simply ask the Minister whether he accepts—he has more or less done so—that there is a risk that the sort of principles that were applied in the case of the Merchant Shipping Act could apply to the Bill as drafted, and that the only way of dealing with that would be to employ the “notwithstanding” formula to ensure that the Bill actually survives for the reasons of terrorism, national security, child pornography and child abuse that were properly mentioned earlier. Does he accept that what I am proposing is effectively to sustain the provisions of this domestic enactment and that I am not just making a general speech about the sovereignty of the UK Parliament?

[James Brokenshire]

I understand my hon. Friend’s points. I am always sympathetic to the aim of having clarity in legislation, which is why we are taking the Bill forward this evening. I do not want to discuss an amendment that we have not yet reached, so I hesitate to engage further in that context, because it would be inappropriate. However, amendments need to be considered carefully for their unintended consequences. Legislation is always subject to legal challenge of whatever kind. I am talking about not only this Bill, but all forms of legislation. The separation of powers between this place, the Executive and the judiciary is part of our constitution and part of how legislation, of whatever nature, can be challenged in our courts. While I understand his desire to try to avoid that through express language, I do not think he is able to rule out challenges before our courts for a whole host of different reasons.

Question put and agreed to.

Clause 1 accordingly ordered to stand part of the Bill.

--- Later in debate ---

[Dr Huppert]

I thank the Minister for his comments. The move towards greater transparency will benefit us all, including the Home Office. I do not quite agree with some of the points that he made towards the end of his speech. Many companies are doing well publishing transparency reports, which is helping to move the agenda forwards, but in the interests of time, I beg to ask leave to withdraw the clause.

Clause, by leave, withdrawn.

New Clause 5

Effect and justiciability of this Act

‘For the avoidance of doubt and notwithstanding sections 2 and 3 of the European Communities Act 1972, this Act shall have effect and shall be construed as having effect and shall be justiciable by the courts of the United Kingdom.’—(Sir William Cash.)

Brought up, and read the First time.

[Sir William Cash]

I beg to move, That the clause be read a Second time.

I am grateful to be called at this late hour. This new clause is important. I look to the Home Secretary; she knows exactly where I am coming from and where I am going. She may believe that we will be defeated on this new clause, but nothing will prevent me from making the point, which is that the Bill could become pointless. The difficulty, which she understands—I am sure that her advisers have already explained it—is simply that clauses 1 and 2 will enable the Home Secretary to serve a data retention notice on public telecommunications operators and to make secondary legislation governing such notices. However, there is a real possibility that the precise meaning of the European Court of Justice’s Digital Rights Ireland judgment has the effect of potentially eviscerating the Bill.

Professor Peers of Essex university draws attention to the objection by the Court to the requirement to retain all communications data. The fact that the directive required all data to be retained from all subscribers was indeed the first of the considerations taken into account by the Court in arriving at the conclusion that the directive was disproportionate. The problem is that it is within the framework of European law. This Bill is within the scope of EU law and so is the charter of fundamental rights, and the general principle of EU law will continue to apply. What that means in practice is very simple: sections 2 and 3 of the European Communities Act 1972 have the effect of ensuring that the retention directive, its replacements and all that follows from it are and have to be implemented in UK law. The United Kingdom also has an obligation under the voluntarily enacted 1972 Act to accept the jurisdiction of the European Court.

The European Court has already adjudicated on this matter, but the problem is that within the framework of this Bill there are grave uncertainties that have already been expressed by myself and others during these proceedings. The bottom line is therefore whether we are to make uncertainty more uncertain by providing for a situation in which we enact a Bill that might be challenged by the European Court through arrangements that some people who do not like its provisions might decide to entertain. If they do so, it will go back through the Court of First Instance and then the Court of Appeal before going to our own Supreme Court and being referred to the European Court of Justice. As with the Merchant Shipping Act 1988, which was struck down by our own High Court in pursuance of the European Communities Act 1972, which is a voluntary Act, the net result if the European Court of Justice makes such a determination will be that the United Kingdom will be faced with this Bill being struck down as enacted.

I do not need to say any more, because I have made the point throughout our proceedings. I implore the Government to take note of the new clause, which has been carefully considered by some very senior lawyers, both academics and practising lawyers. They are convinced that the Bill is at risk and so, as I did with the enactment of the Lisbon treaty, I tabled a provision that said that notwithstanding the European Communities Act the charter of fundamental rights would not apply. The Home Secretary might smile now, but I have to say to her that that is now a serious choice for the Government. Either they except the charter of fundamental rights or, through amendment of the 1972 Act, they should ensure that the charter of fundamental rights does not apply. That also applies to these provisions and I need say no more for the moment. I sincerely trust that the Minister will give a positive response.

[James Brokenshire]

My hon. Friend has raised these points during the course of the debate and I note the points that he makes, but I restate my previous points. The Bill is intended to give greater legal certainty through the statutory underpinning it provides rather than by relying on secondary legislation with the challenges and risks that might face in the future. We have framed the legislation in the context of the ECJ judgment. We have reflected on it carefully and believe that it is robust in its construction. I note that my hon. Friend will continue rightly to challenge on these European issues, but I hope that in the context of today’s debate, he will be minded to withdraw his new clause.

[Sir William Cash]

I wish to press my new clause to a Division.

Question put, That the clause be read a Second time.