Skip to main content

Lords Chamber

Volume 785: debated on Monday 6 November 2017

House of Lords

Monday 6 November 2017

Prayers—read by the Lord Bishop of Gloucester.

Oaths and Affirmations

Lord Foster of Bath took the oath, and signed an undertaking to abide by the Code of Conduct.

Retirements of Members


My Lords, I should like to notify the House of the retirements, with effect from 3 November, of the noble Lords, Lord Plumb and Lord Tanlaw, pursuant to Section 1 of the House of Lords Reform Act 2014. On behalf of the House, I should like to thank the noble Lords for their much-valued service to the House.

European Union


Asked by

To ask Her Majesty’s Government whether they have had any discussions with the European Commission about its proposals for the future of the European Union.

My Lords, until exit negotiations are concluded, the UK remains a full member of the European Union, and all the rights and obligations of EU membership remain in force. During this period, the Government will also continue to negotiate, implement and apply EU legislation. We have been engaged in discussions about the future of Europe, including through our input into the Commission work programme 2018, through conversations at COREPER and at the recent General Affairs Council in October.

I thank the Minister for that helpful Answer. Bearing in mind that paragraphs 9 and 10 of the Prime Minister’s Florence speech were a massive paean of praise for the Commission and the European Union sovereign member states’ future plans for modernisation and development, why do we not join in that excitement and work with them on a long-term basis, not least because Brexit is getting more and more problematical?

My Lords, would it not be somewhat impertinent of the Government to seek to influence an organisation from which they have pledged to withdraw their membership?

Yes. It is in our interests for the EU to do well and to succeed, but obviously it would be wrong of us to try to influence where its members might want to take the organisation in the future when we are no longer a member.

My Lords, under Article 50, we will leave the European Union on 29 March 2019. Does my noble friend share my worry that sometimes, the noble Lord, Lord Dykes, tends to have a temporary lapse of memory about that?

My Lords, can the Minister assure us that, as the EU reforms and changes, the Government will ensure that the United Kingdom plays to its strengths in Europe, such as in the single market, of which Mrs Thatcher was the architect, and in justice, security and defence, rather than running away from these major assets that we contribute to the EU?

On the subject of defence and security, we have proposed a bold new strategic partnership with the EU, including a comprehensive agreement on security, law enforcement and criminal justice co-operation.

My Lords, regarding the debate on the future of Europe, has the noble Lord read the speech that President Macron of France made at Sciences Po in September, in which he proposed lots of interesting ideas for future co-operation on climate change, Africa, migration, technology and the development of defence procurement? Does he think that the Government might take on board some of those ideas in drawing up the framework for future co-operation and the future relationship, which they are required to do under Article 50?

I have seen President Macron’s speech. He made some interesting proposals on how the EU should develop. I am sure that we will want to look closely at those and that we will consider them alongside contributions from leaders of other member states.

My Lords, I welcome the noble Lord to his new position and ask him to forgive me if I ask a question that I have asked the Government many times without getting a satisfactory answer. What is now the point of the European Union? If our departure hastened its demise, would that not be good for Europe’s democracies, which could collaborate and trade freely together without its malign, expensive and destructive self-interest?

I think that what happens to the European Union after we leave is a matter for the remaining member states to determine.

My Lords, will the Minister confirm that, if it appears over the coming months that the Government will fail to get anything but the hardest of hard Brexits, and if in the meantime these ideas about the future of Europe develop, the Government still have the option to withdraw their Article 50 application?

My Lords, we had a referendum: both Houses of Parliament voted for the triggering of Article 50. We are leaving the European Union in March 2019.

My Lords, the Minister has given three replies now which imply that from the day we leave the European Union, we shall not have the slightest interest in how it develops or think it proper to express our views on how it develops. I think his successor on those Benches may find that hard to swallow. Could he reconsider what he has been saying? I do not think that we no longer have any interest in the future of Europe—even when we have left.

My Lords, I do not think I said that. Of course we have an interest in co-operation with our European partners, and that will include an interest in how the EU develops. As I have said, we will want to take forward a close and constructive partnership, including on security and defence matters, so of course we will have an interest in how it proceeds.

Has my noble friend noticed that the referendum to which he referred was established by Parliament very clearly as an advisory referendum? Should that not be something we respect before we consider any further action?

The referendum took place. The Government spent, I think, £9 million on sending round pamphlets saying that we would respect the outcome of that vote, and that is what we are doing.

My Lords, The Times reported that Mr Gove was joining the Brexit “war cabinet”. I trust that is not the Government’s phrase—we are not at war. Does the Minister agree that we should be talking to our European friends about a close, perhaps a special relationship with the EU after March 2019, and not about being at war with them?

I agree totally with the noble Baroness. I am sure she is not asking me to comment on everything that the media and the press say—we would be here for a long time if we were to do that. Yes, I agree with the points she has made.

Will the Minister accept, as his predecessor accepted, that the normal standard in treaty negotiations is that nothing is agreed until everything is agreed? Will he confirm that today, and confirm that it is on the basis of everything being agreed that this House, like the rest of Parliament, will have a vote on what the future relationship should be?

Yes, I can confirm that to the noble Lord: nothing is agreed until everything is agreed. That is a standard principle of European negotiations I have taken part in, as many of us in this House have done. We are also committed to a meaningful vote at the conclusion of those negotiations.

Brexit: Non-chemical Farming Methods


Asked by

To ask Her Majesty’s Government what steps they are taking to protect rural communities from pesticides; and whether they intend to adopt non-chemical farming methods post-Brexit.

My Lords, I declare my farming interests as set out in the register. Pesticides are highly regulated so that they do not harm people or the environment. This work is led by the Health and Safety Executive and the UK Expert Committee on Pesticides, which have a deserved reputation for rigour. After EU exit, we will continue to base our decision-making on pesticides on careful scientific assessment of the risks, just as we do now.

I thank the Minister for his Answer. Defra’s Chief Scientific Adviser, Professor Ian Boyd, has said that laboratory results from the testing of chemicals cannot be trusted when those chemicals are used on an industrial scale for farming. Will the Minister tell the House what the Government think a safe level of pesticide use is? How are the Government monitoring those levels in rural areas?

My Lords, the whole role of our committees and regulatory bodies is extremely strong. As I said, there is the Chemicals Regulations Directorate of the Health and Safety Executive, the UK Expert Committee on Pesticides, the Expert Committee on Pesticide Residues in Food and the Food Standards Agency, all of which are tasked with ensuring that our food and environment are safe. That is what we are working on. Of course it is essential that those who work in agriculture are assured in using pesticides and have the right training to do so in a responsible and sustainable way.

My Lords, as one who lives in rural Bedfordshire and used to look after rural Northamptonshire, is it not a fact that there are very strict regulations on the use of spraying materials, when crops are sprayed with pesticides and herbicides? Given that Brexit is on the horizon, is this not entirely the wrong time to have an overall review of the role of pesticides? Can we not have complete faith in what our farmers and horticulturists are doing today and have done in the recent past?

My Lords, there is an important balance to this, which the industry is seized of. This is why the integrated pest management and agritech innovations will be so important for us, with much more precise use of pesticides. There is a fall in the total weight of pesticides being applied because of newer chemicals having lower doses and new and more efficient methods of application. There are advances in this area that we should all champion.

My Lords, the ongoing concerns about pesticides are around not only their impact on the health of those living in rural communities but the impact on bees and other pollinators. Does the Minister agree that we should adhere to the precautionary principle when we authorise the use of these chemicals in the future?

My Lords, I have just come back from Kew; I presented the Bees’ Needs awards to primary schools and many other organisations, including large landed estates. The National Pollinator Strategy and the national plan on pesticides are designed to include the sustainable use of pesticides. The most important message of all is on the sustainable use of pesticides. Pesticides used in the right way are very important for agricultural production and for many of the things we want to do in urban areas, too.

My Lords, I readily acknowledge the improvements that have been made in pesticide applications over recent years. However, does the Minister agree that pesticides are effective not only on the day that they are sprayed but continue to off-gas for quite some time, especially in hot summer weather? People living in the locality of fields that have been sprayed have not been consulted—there has been no bystander consultation. Is he aware that with Roundup, for example, there is no check on the soil or water effects?

Again, my Lords, the regulations are strong, as it is essential that there is no harm to people or the environment. One thing we are working on in our 25-year environment plan, which is all about enhancing the environment, is the importance of soil health and fertility. It is very important that pesticides are used sustainably and that, wherever possible, we can reduce their use.

My Lords, as a farmer, can I ask the Minister whether he agrees that 25% to 75% of crops, depending on the crop, might be lost if no pesticides were used? Presumably, the alternative is to go for 100% GM crops.

My Lords, on the issue of yields, the use of pesticides is precisely to protect crops and grassland. Obviously, we need to use them carefully and have them well regulated. Without pesticides, undoubtedly yields would be reduced. The most important thing is that there is active co-operation on this now: 4.4 million hectares of land are involved in the voluntary initiative and the integrated pest management situation. All of that is strong news.

My Lords, the comprehensive codes of practice issued by the department and Natural England include advice on how to deal with rights of way and other areas for public access in places that are treated with pesticides. Do the Government have any hard evidence on how effective those codes of guidance are in relation to recreational users of the countryside?

My Lords, as the noble Lord has raised that issue I will look into it. To repeat, there is strong regulation on pesticides; that is why it is so important. The truth is that we often need to use herbicides in order to ensure that rights of way are clear for people to enjoy the countryside.

My Lords, over a decade ago, when I was doing the noble Lord’s job, we had a programme of looking at non-chemical ways of doing what pesticides do and improving the method of application. Will the Minister update us? Do the Government still support that work? If so, by how much and when can we expect the results?

My Lords, it is continuing. I am sure that, with his experience, the noble Lord will know about the UK national action plan on pesticides and that it is an ongoing process. We will continue to develop and adapt as further knowledge becomes available. My whole point is that the national action plan and the pollinator strategy are designed to assist in enhancing the environment and to have pesticides used when necessary and with precision.

Brexit: Farm Support


Asked by

To ask Her Majesty’s Government what recent discussions they have had with farming organisations about the future of farm support post-Brexit.

My Lords, I declare my farming interests as set out in the register.

Ministers and officials met farming organisations and individual farmers across the United Kingdom on more than 45 separate occasions between July and October. We continue to work closely with farming organisations on the important issue of future farm support. We want to see farmers producing high-quality food, meeting animal health and welfare standards and enhancing the environment, and we are actively engaging with farmers to achieve these complementary aims.

My Lords, does my noble friend recognise the value to hill farmers in north Yorkshire and other areas of the export of live animals for fattening, processing and breeding, and indeed for racing purposes? Will he take this opportunity to give the House a categorical assurance that this trade in live animals—albeit it is small compared with the trade in carcasses—will continue, and also update the House on the tripartite agreement on racing to ensure that the free movement of horses for racing purposes will continue after Brexit?

My Lords, there are a number of distinctions there that I should draw to the attention of noble Lords. The Government are clear that they would prefer animals to be slaughtered close to the point of production, and we intend to take steps to control the export of live farm animals for slaughter. Obviously, we desire our very good livestock to go abroad in terms of breeding, and I am fully seized of the importance—having spent a day at Newmarket, not just on the course but in Newmarket generally—of the equine sector as well as the tripartite agreement between Ireland, France and this country. We are working on that because I am fully seized of the importance of the equine sector.

My Lords, will the Government consider introducing a means-test system in any future support, bearing in mind that rich people are receiving millions of pounds of taxpayers’ money through avoiding taxation by buying farms?

My Lords, what I can say is that we definitely think that public money should reward environmentally responsible land use. That is the reform that we think is important. We wish to continue to support the agricultural sector, but if public money is to be used it should be to ensure, with 70% of the land in this country farmed, that our farmland is playing its part in enhancing the environment.

My Lords, I welcome the Government’s commitment to animal welfare in future expenditure, but when we have free trade agreements with countries such as the United States, Argentina and New Zealand, which have much lower levels of animal welfare, will not the agricultural clauses that are bound to be in those FTAs fundamentally undermine British farmers and British animal welfare?

My Lords, the Secretary of State has been very clear that we will not in any way allow animals to come in that are produced to a lower standard using compromised welfare standards as compared with our own very high-quality produce, which is our great British brand. Let us be clear: we do not propose to permit any product to come in that has lower animal welfare standards. We are not going to compromise on that.

My Lords, what discussions have the Government had with rural and indeed urban organisations to establish what services land managers can provide to others to best maximise the benefits of the countryside to the whole population, and while doing so to best maximise returns to farmers?

My Lords, the noble Lord is absolutely right. Not only are we engaging with farming organisations and farmers, we are engaging with non-farming organisations in both the urban and the rural situation. I have an extremely long list before me of organisations that we are working with, from the Campaign to Protect Rural England, Compassion in World Farming, the Woodland Trust, the Centre for Ecology & Hydrology, to the RSPB. We engage with so many organisations because what we want in the 25-year environment plan and in our proposals for agriculture is to have a consensus about the way forward on enhancing the environment.

My Lords, have the Government made it plain to the agricultural community that, contrary to what was said by many Brexiteers during the referendum campaign, overall support for agriculture is likely to be much less when we leave the European Union than it would have been if we had stayed in?

My Lords, we are having realistic discussions with the farming industry about how we are to reform the CAP and bring forward a system that is less bureaucratic, will enable farmers to flourish, and encourages environmentally responsible land use. We should use the opportunity of leaving to bring forward proposals which help us make our country even better in terms of the environment. This is one of the key opportunities we should grasp, and I think that farmers want to grasp it too.

My Lords, further to the previous question, is it not worth reminding ourselves that there were substantial levels of support for farming, and quite rightly so, long before we ever joined the Common Market, as it then was? Is not the crucial issue about farm support post Brexit that decisions about that support will be made by Ministers accountable to Parliament and by a Parliament which is democratically accountable to the British people?

I agree with the noble Lord because it is important to note, not only in Westminster but in the devolved Administrations as well, that there are very distinct agricultural systems, whether we are talking about uplands, lowland grassland farms or farms that are really important in terms of landscape. In all of this we can have a more distinct system to encourage ways of sustaining and enhancing our environment and our landscapes.

My Lords, I draw attention to my interests as set out in the register of interests. In any trade agreement, the United States will insist on unfettered rights to export to us pigmeat, beef and sheepmeat. What effect will this have on farmers’ livestock values?

These are all going to be matters for negotiation in the future and I am not in a position to talk about hypothetical situations. As I said, it is clear that we will not be compromising on our animal welfare standards—it is very important that the British brand should be adhered to. It is all very well, but if countries think that they can deliver lower-quality food, that is an enormous mistake. We should be negotiating from a position of strength, and I think that the British brand has a lot of strength to it.

Brexit: EEZ and Territorial Seas


Asked by

To ask Her Majesty’s Government what contingency planning they have undertaken to ensure patrolling and enforcement of the United Kingdom’s exclusive economic zone and territorial seas after Brexit.

My Lords, the Government recently established the Joint Maritime Operations Coordination Centre—JMOCC—to co-ordinate sea-based patrol activity across marine agencies to reinforce the security of our waters after Brexit. In respect of fisheries, Defra has assessed the scale and volume of sea-based patrol capability required for Brexit. Defra and the Marine Management Organisation will work through the JMOCC to utilise available resources in partnership with the Ministry of Defence and other agencies.

My Lords, I thank the Minister for that helpful Answer and for the discussions we have had about the co-ordination of this. We have a dreadful hotchpotch of vessels and departments involved, and we are responsible for a vast sea area and a hugely long coastline. To somehow get the maximum effect out of the very small number of ships we have, and to overcome the fact that we do not have a proper air surveillance capability and are not using drones properly, it is absolutely necessary to have a study into how we can focus this and use the JMOCC properly—bearing in mind there is also an operations centre in the Maritime and Coastguard Agency and the MMO—so we can co-ordinate this and do it properly. At the moment, we will not be able to do it. Is the Minister willing to look at setting up some group to co-ordinate that study so that we have a snowball’s chance in hell of looking after the waters for which we are responsible?

My Lords, yes, with 11,000 miles of coastline and an EEZ of 165 square miles, it is a task. That is precisely why, with the Security Minister having overall responsibility for the JMOCC, the whole purpose is to improve the co-ordination of cross-agency patrol capabilities, increase information-sharing across government and enhance aerial surveillance operations. The whole purpose is to ensure co-ordination; the fact that the JMOCC will be co-located with the National Maritime Information Centre will offer us a strong chance to bring all these things together.

The first responsibility of government is the defence of the realm and, in particular, homeland defence. The co-ordination that my friend the Admiral, the noble Lord, Lord West, has just commented on is essential but, frankly, without the kit and the people it does not make much sense. Some of us have pushed many times before, but in practice, we should have not just offshore vessels but inshore ones, whether they are large RIBs or MTB types, stationed in every single little port in the country. The key point is that that would have the effect of the public, at large, feeling that they are being protected. We could use our reservists and marine reservists to man those vessels—and it would encourage them to realise that, if the service is to do what it should be doing, they must vote more moneys in favour of giving it the resources it needs.

My Lords, as I said, the purpose of the JMOCC is to ensure the best co-ordination. Obviously, we rely on the Royal Navy, as we have traditionally. The offshore patrol vessels currently in operation will be replaced by five more capable Batch 2 OPVs, being built in Govan; then there is our Border Force, with six coastal patrol vessels and five cutters. Marine Scotland runs its own arrangements, and the 10 inshore fisheries conservation authorities have 31 “sea-going assets”, as they are described, ranging from small, inshore vessels to larger fisheries protection vessels. I want to be absolutely clear: we are analysing and working on how we can best enhance the capability.

My Lords, the Minister will be aware of the UK’s obligation under international law to co-ordinate with neighbouring states on access rights and sustainable management of fishing stocks. As not all of the EU 27 states have an interest in this, will the Minister tell us what bilateral discussions the Government are having with all our potential neighbouring fishing allies and competitors? How will the Lords be kept up to date with progress in those discussions?

My Lords, there were a number of points there. We will be introducing a fisheries Bill, as was in the Queen’s Speech. Our objective is to publish a White Paper by Christmas.

Indeed, this year—my brief says “this year”. That is very important so we set out our future marine fisheries management. Of course, we need to co-operate. The whole essence of what we need to do in these waters is to negotiate, for the first time for a long time, up to 200 miles or the median line. We will be responsible for access to those fisheries but, clearly, the whole purpose of what we are entering into is to have responsible coastal states having discussions and negotiations. As the noble Baroness said, the most important thing is that we get maximum sustainable yields and that they achieve the total allowable catches. Of real importance and the real opportunity is to have sustainable stocks.

My Lords, would the anxieties of the noble Lord, Lord West, not be allayed were it the position that the Royal Navy, as he has frequently argued, should have more surface ships? In view of its responsibilities in this area, would it not be appropriate for Defra to lobby the Chancellor of the Exchequer to ensure there are no more cuts to the defence budget?

The whole purpose of JMOCC is to ensure that we and our capabilities are properly co-ordinated. In fact, the noble Lord and I are going to the MMO in Newcastle as soon as we can, early next year, because it is important that we have not only maritime, vessel and aerial capability but the enormous technology there is in digital and awareness of surveillance from the Newcastle office. All those combined will ensure we have secure waters.

Joint Committee on the National Security Strategy

Membership Motion

Moved by

That the Commons message of 30 October be considered and that a Committee of ten members be appointed to join with the Committee appointed by the Commons as the Joint Committee on the National Security Strategy, to consider the National Security Strategy;

That, as proposed by the Committee of Selection, the following members be appointed to the Committee:

Brennan, L, Campbell of Pittenweem, L, Hamilton of Epsom, L, Harris of Haringey, L, Healy of Primrose Hill, B, Henig, B, King of Bridgwater, L, Lane-Fox of Soho, B, Powell of Bayswater, L, Trimble, L.

That the Committee have power to agree with the Committee appointed by the Commons in the appointment of a Chairman;

That the Committee have power to send for persons, papers and records;

That the Committee have power to adjourn from place to place in the United Kingdom;

That the Committee have leave to report from time to time;

That the reports of the Committee be printed, regardless of any adjournment of the House;

That the evidence taken by the Committee in the last session of Parliament be referred to the Committee;

That the Committee have power to appoint specialist advisers;

That the evidence taken by the Committee be published, if the Committee so wishes.

My Lords, the message from the Commons regarding the Joint Committee on the National Security Strategy was received on 31 October, not 30 October as stated on the Order Paper. For the further information of the House, this will not interfere with the first scheduled meeting agreed between both Houses, which will take place next Monday. Having clarified those points, I beg to move.

Motion agreed, and a message was sent to the Commons.

Communications Committee

Citizenship and Civic Engagement Committee

Deputy Chairmen of Committees

Membership Motions

Moved by

Communications Committee

That Baroness Stowell of Beeston and Lord Goodlad be appointed members of the Select Committee in place of Lord Henley and Lord Finkelstein, resigned and that Lord Gilbert of Panteg be appointed Chairman.

Citizenship and Civic Engagement Committee

That Baroness Eaton be appointed a member of the Select Committee in place of Baroness Stedman-Scott, resigned.

Deputy Chairmen of Committees

That the following members be appointed to the panel of members to act as Deputy Chairmen of Committees for this session:

Finlay of Llandaff, B, Lexden, L, Newlove, B, Palmer of Childs Hill, L, Rogan, L.

Motions agreed.

Data Protection Bill [HL]

Committee (2nd Day)

Relevant documents: 6th Report from the Delegated Powers Committee, 6th Report from the Constitution Committee

Clause 8: Child’s consent in relation to information society services

Amendment 18

Moved by

18: Clause 8, leave out Clause 8 and insert the following new Clause—

“Child's consent in relation to information society services

In Article 8(1) of the GDPR (conditions applicable to child’s consent in relation to information society services)—(a) references to “16 years” are to be read as references to “13 years” provided that the information society service meets the minimum standards of age-appropriate design as determined by the Commissioner, and (b) the reference to “information society services” does not include preventive or counselling services.”

My Lords, I shall also speak to Amendments 19, 155, 156 and 157 and in so doing I thank the many noble Lords who have voiced their support, particularly the noble Baroness, Lady Harding of Winscombe, and the noble Lords, Lord Storey and Lord Stevenson of Balmacara, who have put their names to them. In Clause 8, the Government have chosen with nothing more than a tick of a box to treat a child of 13 as if they were an adult when in the digital environment, with the explanation that they are merely aligning legislation with the age used by popular sites. That cannot be right.

Children have special protections and privileges evident in our culture, embedded in our law and determined by our being signatory to the charter on the rights of the child. Collectively, the amendments affirm that a child is a child even online, a principle that is not sufficiently articulated in the Bill. I shall go to each amendment in turn.

Amendment 18 would make the consent of a child aged 13 to 16 lawful only when a service seeking that child’s consent meets,

“minimum standards of age-appropriate design”.

Amendment 19 would make consent given by a person with parental responsibility on behalf of a child under 13 lawful only when the service seeking the consent meets the,

“minimum standards of age-appropriate design”.

Passing these amendments would make it unlawful to seek a child’s consent or parental consent on a child’s behalf without providing a service that recognises the age of that child.

Amendment 155 would require the Information Commissioner to create guidance on age-appropriate design and take into account such matters as a child’s need for high privacy settings by default, not revealing their GPS location, using their data only to enable them to use a service as they wish and no more, and not automatically excluding them if they will not give up vast swathes of data however nicely you ask. If the commissioner so wished, it could also mean giving a child time off by not sending endless notifications during school hours or sleep hours and deactivating features designed to promote extended use; making commercially driven content, whether a vlogger or a direct marketing campaign, visible to and understood by a minor; and insisting on reporting processes with an end-point and a reasonable expectation of resolution. The amendment would require the commissioner to consult a wide group of stakeholders before coming to that decision and, crucially, sets out that she must also consult children, who are so often the first to adopt emerging technologies—early to spot the issues yet rarely asked to contribute meaningfully to how their needs might be met in the digital environment. Government has been widely criticised for not consulting children, so I wish to put on the record that where their views have been captured, children have consistently called for better privacy and data management, clearer guidance on content, transparent reporting strategies and greater visibility of how their data are shared and commoditised, calls which industry and government steadfastly choose to ignore. Amendments 156 and 157 would ensure that both Houses were able to scrutinise the guidance before it came into force.

The GDPR is the substantive law which the Bill supplements. While the GDPR acknowledges that children enjoy enhanced rights online, it says little about what this means in practice, and the majority of the provisions for children sit in the recitals, which, as we heard last week, are not binding. The limitations of Article 8 of the GDPR are pointed out by Professor Sonia Livingstone OBE, who writes that:

“article 8 of the GDPR is beginning to seem to me increasingly irrelevant. When kids tick the box the companies will then bear no responsibility to them by reason of their age”.

Meanwhile, John Carr OBE says:

“If you entice or allow 13 year-olds on your site, you must … treat them in a manner relevant to their age”.

Professor Livingstone and John Carr are arguably the most renowned experts in the field of childhood online. On this matter, they are joined by the NSPCC, Parent Zone, YoungMinds, the Anti-Bullying Alliance, the CHIS and the Children’s Commissioner—among many others—in supporting the amendments. The amendments provide clarity, allow our legislation to reflect our values, and are necessary to make industry respond to the needs of children.

When I first tabled Amendment 18, a number of people from the Government said to me, “Nice amendment, but it threatens compatibility with existing EU law and potentially our prospects for securing a post-Brexit adequacy agreement”. I see no cause for this anxiety. Article 8 of the GDPR provides that,

“the processing of the personal data of a child shall be lawful where the child is at least 16 years old. Where the child is below the age of 16 years, such processing shall be lawful only if and to the extent that consent is given or authorised by the holder of parental responsibility over the child. Member States may provide by law for a lower age for those purposes provided that such lower age is not below 13 years”.

The legal advice from a leading QC who specialises in this area is that,

“these amendments are consistent with the approach of the GDPR towards children in particular as set out in recital 38”.

He continues by saying that they are:

“consistent with the scheme of the GDPR to balance the lower age of consent with the addition of further protective measures in the form of age appropriate design”.

If the Government have a legal opinion to the contrary, the onus is on them to share it; otherwise, we should be discussing the amendments on their own merits.

The Minister is aware that I offered to discuss the amendments with the Government but that offer has yet to be taken up, so I was very surprised to read in the Sunday Telegraph yesterday a quote from the Minister, Matt Hancock, who said that,

“this amendment risks creating confusion and disproportionate legislation as part of the Data Protection Bill”.

I am uncertain what the Minister for Digital finds confusing. This is a straightforward amendment that simply recognises that a child of 13 is not the same as an adult, and that is as true in the digital world as it is in the analogue. I am somewhat concerned that his position has more to do with the conflict in his role between looking after tech and looking after the nation’s children. As for “disproportionate legislation”, again, I see no case. The Minister argues that he can deliver the same outcome within the Government’s recently announced internet safety strategy, but this strategy relies on industry’s negligible appetite for change, offers self-regulation as the method, takes a narrow definition of “childhood needs”, ignores the voices of children, and is utterly silent on the question of enforcement. ICT companies already subscribe to multiple voluntary standards and these have had next to no impact.

Year after year, we see an increase in the problems that young people face online. For example, even at the lowest level of ambition—the stated goal of preventing underage use—we still find that 78% of 10 to 12 year-olds have a social media account, when the joining age is 13. When the law firm Schillings translated Instagram’s 5,000-word terms and conditions into plain English so that young people could see what they were signing up to, it said—I paraphrase—“We may keep or share your personal information, including name, address, school, your likes and dislikes, your phone number, where you go, who your friends are, and any other information that you may share, including your birthday and who you are chatting to, including in private messaging”.

Self-regulation does not work. I am afraid that government policy is little more than putting the foxes in charge of guarding the henhouse. It is the duty of government to advocate on behalf of its citizens, particularly those who cannot advocate for themselves. In balancing the needs of tech and childhood, we must choose childhood because children cannot yet, and should not be expected to, look after themselves.

Before I sit down, I want briefly to answer three very specific points that noble Lords have raised with me. First, we are not calling for a higher age of consent because raising the age without placing conditions will inevitably mean that millions more children will be trespassers on sites where providers have been absolved of any responsibility towards their underage users. It is wrong to lock young people out. They must be invited to explore and participate in the digital world, but on terms that are designed to support their age and their established rights and freedom.

Secondly, is age-appropriate design achievable? Yes. The technology needed to deliver it already exists and is routinely used to tailor our online experiences. If the technology behind my Facebook account is sophisticated enough to personalise my home page with adverts specific to my purchasing preferences and a newsfeed specific to my interests, then it is sophisticated enough to be personalised to the needs of a 13 year-old. Subsection (6) of the proposed new clause inserted by Amendment 155 provides for transitional arrangements that would allow companies time to make the necessary changes. It is important to note that these standards would not affect the freedoms of adult users. It is entirely possible to vary the user experience. Personalisation is an industry norm.

Finally, is it not a matter for parents? Parental responsibility and guidance can never be replaced, but if devices are portable, services are designed for adults and community rules are not upheld, then parents do not have the tools to guide children in the digital environment. It is the responsibility of companies to provide age-appropriate services and of government to ensure that they do, so that parents and children are able to make positive choices.

It is imperative that children and young people are able to access a digital environment creatively, knowledgably and fearlessly. In helping them do so, we would be fulfilling the Government’s manifesto pledge to make the UK the best place in the world to be on line. I beg to move.

My Lords, I should draw the attention of the House to my interests in various digital organisations as set out in the register. I put my name to the amendments tabled by the noble Baroness, Lady Kidron, with a heavy heart, if I am honest. I have spent the past eight years running an internet service provider and arguing that competition is the route to delivering better services for consumers, and a large part of me would really like to believe that the fierce competition that exists among social media companies and other web applications would drive to the right outcomes for our children and for parents looking to protect their children, but the sad truth is that that is not the case. I have worked for and with many very well-meaning and talented people who lead these businesses, but the truth is that some of the largest companies in the world are simply not putting in place the most basic protections for our children. It is clear that our children are not protected. What is more, children say that themselves. They love social media platforms, but in research conducted by the Children’s Society, 83% of children said that they think that social media companies should do more to protect them, and we know that if we ask parents we get very similar statistics.

It is also clear that we know what could be done. It is no good saying we should set minimum standards if we do not have a sense of what those basic minimum standards would be. As the noble Baroness, Lady Kidron, has just set out, the children’s charities, led mainly on this by the NSPCC and the Anti-Bullying Alliance, are very clear about what some very basic standards would look like: the strongest privacy settings being default on for anyone under 18; geolocation turned off as a default if you are under 18; regular prompts about your privacy settings targeted in language that under-18s will understand; age being a required field when signing up for a service; and clear, transparent reporting processes if a child reports abusive behaviour on that platform in children’s language.

These are not difficult things, and I hope they are not contentious, yet they are not being done. We owe it to our children to step back and ask why these basic things are not being done. People attempted to argue that this is because these are small start-ups scrambling in the rush to build a tech business, but I am afraid the basic things I have just listed are by and large not done by the largest businesses on the planet, providing services to the vast majority of our children.

The second reason people argue these things are not being done is that these are global businesses that will develop only one, global, product and they cannot—they are terribly sorry—adjust for our children’s needs when they are working on their global technology road map. That is just not a good enough argument. In every other form of regulation the world over, good regulation begins in one geographical area and then spreads. We should not allow these large companies to tell us that because they are global they cannot engage with us locally. Actually, they are all learning that that is not true.

I suspect that the real reason we are not getting change is a very practical one, which is that every technology company in the world has a contended development pipeline, by which I mean they have more things they want to do to improve their product for their customers than they have the resource or capability to deliver. I say this having been a chief executive of a tech company: you spend your life trying to prioritise the list of ideas and innovations, and the harsh reality is that protecting children is not coming high enough up that contended technology stack in any of these businesses. That is probably not surprising, because children themselves will be asking for other things as well, and it is exactly why you need to have regulation.

We accept absolutely, almost as an act of faith, that minimum health and safety standards are necessary in the physical world and that factories have to meet basic regulatory standards. The digital world is no different. We know what those basic standards should be now. I am sure they will change over time, but we know enough to set them. Our children’s mental health is every bit as important as people’s physical health as they grow up. This is something that we have to face.

I hope your Lordships will forgive me if I am getting the procedures of the House wrong, but my noble friend Lady Lane-Fox asked me to add her voice to this debate. Although she is currently in her place, she says:

“I cannot be in my place for the length of the debate today but I would like to add my voice to the amendment. There is a clear need for more to be done to protect children and to ensure that they can realise the multiple benefits of engaging with the internet while recognising that they are not yet experienced users.

I welcome the opportunity to design accessible and clear services that help children to navigate around safely. As others may already have raised, designing for children is not technically difficult—the BBC has been doing it well online for many years, but it is right to ensure more services are as careful and do not shirk their responsibilities. As I raised in Second Reading, I would very much hope that the ICO will be given the necessary resources to be able to handle Baroness Kidron’s sensible suggestions alongside the other sizeable new areas of activity that they are being given in this Bill”.

Switching back to my own voice, I join the noble Baroness in being convinced of the good that the digital world can do, but as with all technology, we need to mould it to meet our needs, not vice versa, and it is high time we set out the basic safety requirements our children need. That is what this set of amendments intends to do, which is why I support it.

My Lords, as I have said on a number of occasions, my previous job for 40 years was a teacher, 20 of those as a head teacher. One of my prime responsibilities as a head teacher was the safeguarding of children in my school. That was the most important thing I did: to make sure they were safe, so that those primary-age children, aged from five to 11, and nursery as well, could enjoy their childhood and their parents could know that they were safe and enjoying their innocence.

The Government did a lot with their education policies about safeguarding. Anyone visiting the school had to be checked and double-checked and had to wear identification. Children who went out of school had to be escorted properly and correctly. As part of our personal and social health education, we made sure that young people themselves understood. Yet, when it comes to this area, we seem not to take the role as seriously as we should. I was reading the newspapers on the train from Liverpool this morning. I just could not believe the Times headline:

“Children as young as ten are sexting”.

The article says that,

“according to figures from the National Police Chiefs Council. In 2015-16, there were 4,681 cases”,

where children as young as 10 were either sending inappropriate messages or photographs to other pupils or receiving them. Imagine it was your daughter who at the age of seven or eight—and some of them are that young—was receiving inappropriate pictures from other pupils. How would you feel as a parent? Is that really protecting or safeguarding those children?

I do not want to speak at length in this debate; I think the noble Baronesses, Lady Kidron and Lady Harding, have said it all. It is not beyond our wit to do these simple things. I have seen for myself that self-regulation does not work. I hope that between now and Report the Government will put aside any feeling that, “We can’t do this because of the EU, because of our own lethargy, because of what we have said in the past or because it will create more regulation”. This is about children. Let us all agree that on Report we can agree these eminently sensible amendments.

My Lords, I support the amendments. I remind the House of my interests in relation to my work at TES, the digital education company.

The noble Baroness, Lady Kidron, and the others who have supported the amendment have given the Government a pretty neat way out of the problem that 13 as the age of consent for young people to sign up to “information society services”, as the Bill likes to call them, feels wrong. I have found that for many Members of your Lordships’ House, 16 feels like a safer and more appropriate age, for all the reasons that the noble Lord, Lord Storey, has just given in terms of defining when children are children. There is considerable discomfort about 13 in terms of where the Bill currently sits.

However, I think many noble Lords are realists and understand that to some extent the horse has bolted. Given the huge numbers of young people currently signing up to these services who are under 13, trying to pretend that we can find a way of forcing the age up to 16 from the accepted behavioural norm of 13 looks challenging. Yet we want to protect children. So the question is whether these amendments would provide that solution. That hinges on whether it is reasonable to ask the suppliers of information society services to verify age, and whether it is then reasonable to ask them to design in an age-appropriate fashion. From my experience, the answer to both is yes, it is. Currently, all you do is tick a box to self-verify that you are the age you are. If subsequently you want to have your data deleted, you may have to go through a whole rigmarole to prove that you are who you are and the age you say you are, but for some reason the service providers do not require the same standard of proof and efficacy at the point where you sign up to them. That is out of balance, and it is effectively our role to put it back into balance.

The Government themselves, through the Government Digital Service, have an exceedingly good age-verification service called, strangely, Verify. It does what it says on the tin, and it does it really well. I pay tribute to the GDS for Verify as a service that it allows third parties to use: it is not used solely by Government.

So age verification is undoubtedly available. Next, is it possible—this was explored in previous comments, so I will not go on about it—for age-appropriate design to be delivered? From our work at TES, I am familiar with how you personalise newsfeeds based on data, understanding and profiling of users. It is worth saying, incidentally, that those information society services providers will be able to work out what age their users are from the data that they start to share: they will be able to infer age extremely accurately. So there is no excuse of not knowing how old their users are. Any of us who use any social media services will know that the feeds we get are personalised, because they know who we are and they know enough about us. It is equally possible, alongside the content that is fed, to shift some aspects of design. It would be possible to filter content according to what is appropriate, or to give a slightly different homepage, landing page and subsequent pages, according to age appropriateness.

I put it to the Minister, who I know listens carefully, that this is an elegant solution to his problem, and I hope that he reflects, talks to his colleague the right honourable Matthew Hancock, who is also a reasonable Minister, and comes back with something very similar to the amendments on Report, assuming that they are not pressed at this stage.

My noble friend made a very strong case. The internet was designed for adults, but I think I am right in saying that 25% of time spent online is spent by children. A child is a child, whether online or offline, and we cannot treat a 13 year-old as an adult. It is quite straightforward: the internet needs to be designed for safety. That means it must be age appropriate, and the technology companies need to do something about it. I support the amendments very strongly.

My Lords, I, too, support my noble friend Lady Kidron. Last week, with her and my noble friend Lord Best, I was able to attend a briefing session with the right honourable Karen Bradley, the Secretary of State. I found that very helpful. We were looking at the Green Paper on internet safety published on 11 October. It is curious that we are here in Committee talking about some of the same issues when that significant consultation is being undertaken by the Government. I hope that when the noble Lord, Lord Ashton of Hyde, comes to reply to the debate, he will say something about how the Government intend to synchronise the discussion of and consultation on the Green Paper that is under way with the moving horse of legislation that is proceeding through your Lordships’ House.

During our discussions last week, my noble friend raised again the duty to protect. I agree with what the noble Lord, Lord Knight, just said about this providing an elegant way forward. I guess that many of us would want to turn the clock back if that were possible, but we recognise that it is not, and this may well be, therefore, a better way to proceed. It is certainly one to which the Government should be giving considerable attention.

While I am on my feet, perhaps I may remind the noble Lord, Lord Ashton, of the amendment that I moved with my noble and learned friend Lady Butler-Sloss during the debate in April on the digital legislation. I particularly draw his attention to col. 40 on 20 March and the remarks made by his right honourable friend the Minister of State for Digital in the other place on 26 April, when he described the question of prohibited material and definitions, which we had argued should be consistent across varying media platforms. They both said that this was unfinished business that would be returned to. I have studied the Green Paper but have not been able to find the solution to that unfinished business, and wonder whether it will be addressed as the legislation proceeds.

Perhaps I may also ask the Minister about the protection of minors. It has been stated again and again, by all noble Lords who have participated so far, including the noble Lord, Lord Storey, that the protection of children should be a paramount consideration at all times. The Minister may recall the case, which I raised with the Secretary of State and in your Lordships’ House, of some young people who had visited suicide sites. I was horrified to learn from the headmaster of a school in Lancashire, where I arrived to distribute prizes, that a child who had visited a suicide site had taken their own life only that morning. What further protections are being provided to require service providers, for whom self-regulation is clearly not enough, to do rather more about that question?

It has been said that parents do not have a chance in this situation; that is absolutely right. As my noble friend Lady Hollins said, young people spend a vast amount of time on the internet. Many parents do not understand how it works. It is therefore crucial that we do all we can to place pressure on the service providers. I remind the House of the advice that Aristotle gave parents. He said that only a bad parent would place their children in the hands of a foolish storyteller. I fear that many of us, maybe inadvertently and without knowing the full consequences of placing our children in the hands of the Twittersphere and the digital world, with all the information that pours into their minds on a massive scale, have placed them into bad hands. We need to do more to protect them. This is what my noble friend is trying to do and I commend her amendment to the House.

My Lords, I support the aim of these amendments, as do other noble Lords who have spoken. They were extraordinarily well introduced, given the scope of what they are intended to achieve. As I said at Second Reading, I do not have the same authority and technical background in the industry as many noble Lords who have taken part, particularly the noble Baroness, Lady Harding. However, I have a legitimate question for the noble Baroness. The Minister, who will have heard the general support around the House, will also be aware of this. However good the intentions of the amendments—and I support their aims—it is difficult to regulate in a world in which technical capacity is international. As the noble Baroness, Lady Harding, said, these matters are rather low on the agendas of the major, global corporations which are responsible for producing the technology, delivering the content and organising the platforms that children may be accessing, appropriately or not. It is legitimate to ask, as she did, whether what we say and how we regulate in this country can be a beacon. I think she said that this could be the beginning of a geographical spread of better regulation. It would be pointless to ignore the fact that we are dealing not with an internal issue of domestic regulation as we would be with terrestrial broadcasting, but with global corporations, most of them based on the west coast of the United States, which do not necessarily even agree with the aims of these amendments—which I very certainly do.

My Lords, the intention for a minimum level of design to help children and their parents, set out in Amendments 18, 19, and 155, is indeed laudable and provides an excellent opportunity for us to debate the role of the Information Commissioner. However, I am concerned that these amendments continue legal uncertainty in a number of ways. The revised Clause 8, introduced by Amendment 18, would uphold the age of 13 as the age of digital consent—but only when a website,

“meets the minimum standards of age-appropriate design as determined by the Commissioner”.

Similarly, Amendment 19 seeks to ensure that sites which children under 13 are likely to visit have a certain minimum design to help children and parents. Details for establishing those standards are in Amendments 155, 156 and 157.

My first concern is how a consumer—a child or parent—will know whether a website meets the minimum standards and therefore which age of consent applies. Secondly, what would happen were a site not to meet the minimum standards set by the Information Commissioner but still used 13 as the age for when a parent is no longer required to consent to the use of the child’s data?

Thirdly, in relation to sites requiring parental consent under Amendment 19, it is not clear how parents should deal with websites that do not meet the minimum standards. If a website does not meet the minimum standards, will a parent’s consent to the processing of their child’s data be invalid?

None of the Amendments 155, 156 and 157 about establishing the guidelines on minimum standards seems to address these questions, or how the minimum standards will be enforced. Without any way to enforce the standards or clarity about situations where sites do not meet the standards, especially for parents, guidelines on minimum standards cannot offer any clear protection.

Amendment 20A proposes a review of Clause 8, including,

“an assessment of the efficacy of age verification processes for the purposes of gaining consent of children aged 13 years and over”,

and of the impact of this clause on the wider issues relating to the safety of children online. I welcome the intention of this amendment to allow reconsideration of the age at which children can consent to sharing their data online. However, I am not sure that it quite addresses the problem. While I am not saying that the digital age of consent absolutely has to be 16, I still do not see an evidence base for suggesting that it should be 13.

I struggle to see how any amendment can take us to where we need to be at the moment without requiring the generation, prior to the coming into force of this clause, of an evidence base to facilitate an informed determination of what the digital age of consent should be.

My Lords, we have to face the reality that children are going online at a younger and younger age, so anything that facilitates that and makes it work more sensibly is essential. We need to think about the interface with the right of erasure in Clause 44 and the clauses just after it. I am not sure whether parental consent is still required for this when someone is under 16. There have been problems where children or younger people have put images and other material online which they want removed but are far too embarrassed to tell their parents about them. The problem is that data processors are not allowed to remove them without parental consent, so the children do not tell their parents, the images stay there and a lot of trouble is caused. That area should be looked at in relation to these clauses and Clause 44. I would love to leave it to someone else to sort this out who is better qualified to deal with the legal position.

My Lords, I support this amendment and apologise to the Minister and the House for not being present at Second Reading as I was overseas. However, my noble friend Lady Jay more than adequately set out some of my concerns around Part 5 of the Bill. However, this is also a very important amendment. In the debate initiated by the noble Baroness, Lady Lane-Fox, on 7 September, the noble Baroness, Lady Kidron, said:

“There is an awkward tension in having a technology that is able to help us to confront our societal needs … and a corporate culture that aggressively balks at … long-term societal responsibilities”.—[Official Report, 7/9/17; col. 2118.]

In the end, that is precisely what this comes down to. The noble Baroness, Lady Harding, made a very important point a little earlier. She referred to barriers to entry being used by corporations to not do the things that they should do, and at the time they should do them.

Today is the 20th anniversary of my entering your Lordships’ House and, if I had to count the number of times I have been told that barriers to entry are the reason for not doing something, we would all be here all day. I well remember the noble Lord, Lord Oxburgh, who is in his place, and I having a meeting with the then Ministers for Energy and being told that “barriers to entry” were one reason that the large energy companies could not do the things that we suggested they might do at the time. Therefore the idea that the Silicon Valley companies have not reached a sufficient size or sophistication to be able to carry out the de minimis changes to their platforms—the effect of the amendment which the noble Baroness, Lady Kidron, set out so beautifully—is a nonsense. Please can the noble Lord, Lord Ashton, beg Matt Hancock, the Minister, to put to one side any more arguments about unacceptable barriers to entry being raised by this and indeed other amendments on the same subject?

My Lords, this has been a terrific debate on an important subject. We probably all agree that of all the issues that will come up on the Bill, we care about this one the most and would like to see it settled in a way that balances, as has been said, the wish for people to enjoy the use of the internet—which brings so much in so many different ways—with an appropriate regulatory structure that means that harm is prevented where it is appropriate to do so.

I was struck by what the noble Baroness, Lady Harding, said. Obviously, she is in a difficult position, speaking against her Government on a matter about which she has so much expertise and knowledge. However, she made the case so well that it is worth paying tribute to her for that. If we find a situation in any aspect of our public life where those responsible for an issue are unwilling or unable to deal with it appropriately, the public authorities have to take that step. We are in that situation—she made that clear so well.

Other arguments have been used today that were knocked back by the noble Baroness, Lady Kidron, when she spoke, but it is important to bear this in mind. There is no question here about us affecting our adequacy issues. This is definitely left to the government agencies in the countries involved to act on, and there is no issue here with regard to what we would say to the European Union should that be required in terms of adequacy, so we should not be dissuaded by that. As the recitals attached to the GDPR say, it is still a question of needing to balance the lower age of consent with the appropriate safeguards required. Age is one of those—it is important, but not the only one; capacity has also been raised before. However, we have the issue here about age, and there is a need for guidance around that.

The Government will not address the issue in any future sense. The internet strategy, which was referred to, is a bit of a red herring here, and, as we have heard, self-regulation, on which it is largely based, does not work. Therefore, action is probably required. As I said, if the industry will not do it, the public authorities should. We want this country to be the best place in the world to be online, and we want it to be safe to do so. If it is possible to design an age-appropriate environment, we should look very hard at that. The case that has been made today is incredibly important. The Government have a good sense of that from all around the Committee, as was said, and I hope they will be able to respond positively to it.

I will speak briefly to Amendment 20A, which picks up points made by the noble Baroness, Lady Howe. One issue that affects all those who wish to work in this area is the lack of information about what is happening on the ground: who is using what and how, with regard to time, effort and use of the internet? Amendment 20A, in my name, suggests to the Government that there is need at some point for a proper review which will require the companies to divest the information they currently have but which they do not share on information society services. Only then will the evidence of which the noble Baroness, Lady Howe, spoke, which will inform us as we go forward, be available. However, it should not stand in the way of the need to act in this way in this amendment, which I fully support.

My Lords, the noble Lord, Lord Stevenson, said that he hoped I had a sense of where the Committee is coming from. I very much have a sense of that. I know that child online safety is an issue that is taken seriously by all noble Lords in the House, and it has been the subject of much debate apart from today. I am therefore grateful to the noble Baroness and to all who contributed for introducing this important subject. I assure all noble Lords that we have an open mind. However, I will pour a bit of cold water because some issues, to which we may well come back, need to be thought about. I apologise to the noble Baroness, Lady Kidron, for the fact that we have not met. I thought that we were arranging a meeting. I have certainly talked to my noble friend Lady Harding about these amendments. However, I repeat not only to her but to every noble Lord that I am very happy to talk to anyone about these matters before Report, and I have no doubt that I will be talking to the noble Baroness before too long.

At Second Reading we heard a good deal about the need to improve online safety and concerns about the role that social media companies play in young people’s lives. The Government are fully committed to this cause. Our approach has been laid out in the Internet Safety Strategy Green Paper, published earlier this month. In that strategy, the Government detailed a number of commitments to improve online safety for all users and issued a consultation on further work, including the social media code of practice, the social media levy and transparency reporting. Although the Government are currently promoting a voluntary approach to work with industry, we have clearly stated in the strategy—and I repeat it now—that legislation will be introduced if necessary, and this will be taken forward in the digital charter.

The Government’s clear intention is to educate all users on the safe use of online sites such as social media sites. Again, this is set out in the strategy. This includes efforts targeted at children, comprising working with civil society groups to support peer-to-peer programmes and revised national curriculums. We believe that education is fundamental to safe use of the internet because it enables users to build the skills and resilience needed to navigate the online world and to be capable of adapting to the continuous changes and innovations that we see in this space.

The aim of these amendments is to allow information society services to make use of the derogation in the GDPR to set the age threshold at 13 only if sites comply with guidance on the minimum standards of age-appropriate design as set out by the Information Commissioner. Although the Government are sympathetic to their goal to raise the level of safety online, we have some questions about how it would work in practice and some fundamental concerns about its possible unintended consequences.

The noble Lord, Lord Storey, said that we should not rest our case on EU law. That is an enticing argument, especially from a Liberal Democrat, but I think that there is a sense of frustration there and I would not hold him to that. However, the fact is that, as we discussed last week, we are determined to ensure that we preserve the free flow of data once the UK leaves the EU.

I have to raise the issue of compliance with the GDPR, because we have a very real concern that these amendments are not compatible with it. The GDPR was designed as a regulation to ensure harmonisation of data protection laws across the EU. The nature of the internet and the transnational flow of data that it entails mean that effective regulations need international agreement. However, these amendments would create additional burdens for data controllers. Article 8 of the GDPR says that member states may provide by law for a lower age but it does not indicate that exercising this derogation should be conditional on other requirements. These amendments go further than permitted, creating a risk for our future trading relationships.

The noble Baroness mentioned that she had advice from a prominent QC. If she would care to share that with us, I would be happy to discuss it with her, and we will put that in front of our lawyers as well. I have an open mind on this but we think that there is an issue as far as the GDPR’s compatibility is concerned.

Amendment 155 would require the Information Commissioner to produce guidance on standards and design. The Information Commissioner will already be providing guidance on minimum standards to comply with the requirement not to offer services to under-13s without parental consent. Indeed, it will be the role of the commissioner to enforce the new law on consent. Although the guidance will not include details on age-appropriate design, this is not something that should be overlooked by government. However, tackling the problem of age-appropriate design is not just a data protection issue, and we should be very cautious about using this age threshold as a tool to keep children off certain sites. This is about their data and not the more fundamental question of the age at which children should be able to use these sites.

We need to educate children and work with internet companies to keep them safe and allow them to benefit from being online. Where there is clearly harmful material, such as online pornography, we have acted to protect children through a requirement for age verification in the Digital Economy Act 2017. The Government’s Internet Safety Strategy addresses a wide range of ways to protect the public online. While online safety, particularly for children, is very important, we should not be confusing this with the age at which parental consent is no longer required for the processing of personal data by online services. The Government have a clear plan of action.

I apologise to the Minister for interrupting. I am just interested in that confusion that he talks about. Perhaps I am incorrect, but I understand that images, for example, are data. There is a lot of concern about sexting and about platforms such as Snapchat and the sharing of data. Where is the confusion? Is it in the Government, or in the Chamber?

I do not think I mentioned confusion. What we are talking about in the Bill is purely data protection. We are talking about the age at which children can consent to information society services handling their data. What I think the noble Baroness, and a lot of Peers in the House, are talking about is keeping children safe online, which is more than just protection of their personal data.

I also apologise for interrupting but I have to support the noble Lord, Lord Knight. When I read out the list, I said that Instagram takes information such as your phone number, your birthday and who you are chatting with. That is data, so I come at this from a very clear position on children’s rights. I am very keen for children to be online. I agree with the noble Lord, Lord Knight, that we are beyond an age of consent, as he said on Second Reading. Consent is meaningless if you do not change the service on the other side of that consent. It is not simply about the bad things that happen. It is about abusing the entire data of a child when they are online. I hope that is helpful to put it back into scope of the Bill.

There may be some confusion now. I am not saying that children’s data is not important or that data protection for children is not important: clearly they are. However, the internet safety strategy addresses an overall, comprehensive range of measures that is about more than just data protection. We want to have a comprehensive strategy, which I am going to come to, to talk about safety. Nobody in their right mind is saying that we should not protect children, not only on the domestic front but internationally, as the noble Baroness, Lady Jay, said. Let me continue and I am sure all will become clear. If it does not, I am sure that the noble Baroness and others will cross-question me. If I have misunderstood what the noble Lord, Lord Knight, is getting at, I will look at Hansard and get back to him. I am sure we will come to this again.

We have a clear plan of action to raise the level of safety online for all users, as set out in the internet safety strategy. We are consulting on a new code of practice for the providers of online social media platforms, as required by the Digital Economy Act. That will set best practice for platform providers in offering adequate online protection policies, including minimum standards. Approaching the problem in this way as a safety matter, rather than a data protection matter, ensures we can tackle the problem while avoiding a debate over whether we are compliant with the GDPR. The internet safety strategy also outlines the Government’s promotion of “Think safety first” for online services. This will aim to educate and encourage new start-ups and developers to ensure that safety and privacy are built into their products from the design phase. Examples of this type of approach include having robust reporting mechanisms for users. We are looking at whether extra considerations should be in place on devices that are registered as being used by a child.

It is essential that we take a careful and considered approach to affecting the design standard of online services. Making overly complex or demanding requirements may result in negative consequences. Let me explain why. Amendments 18 and 19 essentially offer website operators a stark choice. Websites will need to either invest in upgrading standards and design or withdraw their services for use by under-16s. This is dangerous for the following reasons.

First, it could cause a displacement effect where children move to less popular platforms that would potentially not comply with such requirements—the noble Baroness, Lady Jay, talked about foreign sites. It is often more difficult to monitor these services and to ensure they have the basic protections that we expect from more legitimate sites. Platforms comply either because they are responsible or because they believe that the regulator will take enforcement action against them. Platforms hosted overseas may not always comply, because to do so would reduce the volume of users and potential monetisation, and the risk of enforcement action may be low.

Secondly, it is likely that young people, particularly those who already use these sites, may lie about their age to circumvent restrictions. This could have negative consequences for the prosecution of online grooming and underage sex: teenagers would be vulnerable to the assumption that they are over 16; adults could use this as a defence for their conduct; and sites may not be as accountable for the content that children are exposed to. This is not an imaginary problem. There have been cases of acquittal at trial, where men have had sexual relations with underage girls after meeting them on sites for over-18s only, using their presence on the site as a defence for believing them to be adults.

Thirdly, circumvention may be sought through the use of mechanisms to anonymise—I am having a problem with my pronunciation too—the use of the internet. Young people may adopt anonymising tools such as VPNs to access non-UK versions of the sites. This would make it more difficult for law enforcement to investigate, should they be exploited or subject to crime.

Fourthly, there is already in place a variety of legislation to safeguard children. Any change brought in through this Bill would have potential ramifications for other statutes. Altering how children make use of online service providers would need to be carefully worked through with law enforcement agencies to ensure that it did not damage the effectiveness of safeguarding vulnerable people.

Fifthly, these amendments do not just apply to social media services. A broad range of online services would be affected by this proposal, from media players to commerce sites. The kinds of services that would be caught by this amendment include many that develop content specifically for young people, including educational materials, not to mention the wider impact on digital skills if children are forced offline.

I move on now to more practical considerations. I am concerned that the amendments as drafted, while an elegant proposal, could serve to create confusion about what sites have to do. We know that the GDPR will apply from 25 May, and I am not convinced that this will allow enough time for the commissioner to consult on the guidance, prepare it, agree it and lay it before Parliament, and for companies to be compliant with it. Online service providers will need to adhere to the new requirements from May 2018, and may have existing customers that the new provisions will apply to. They will need some time to make any necessary changes in advance. Even with the transition period available in the amendment, this would lead to considerable uncertainty and confusion from online services about the rules they will have to follow come May. This could result in the problems that I have already laid out.

Finally, the Information Commissioner has raised a technical point. These amendments would apply only where consent is the lawful basis for processing data. Children also have access to online services where the data controller relies on a contractual basis or vital interests to offer services, rather than reliance on consent. Therefore, the amendments may have less reach than seems to be envisaged and are likely to lead to confusion as to which services the requirements apply to.

In summary, in spite of our appreciation of the aims of these amendments, we have concerns. They may prove dangerous to the online safety of children and young people. Creating unnecessary and isolated requirements runs the risk of being counterproductive to other work in this space. There needs to be some serious and detailed discussion on this before any changes are made. Furthermore, the technical and legal drafting of the amendments remains in question.

There is no doubt that further work needs to be done in the online safety space to ensure the robust and sustainable protection of our children and young people online. We have demonstrated commitment to this through the work on the internet safety strategy and the Digital Economy Act. We are working on these issues as a matter of priority, but strongly believe that it is better to address them as a whole rather than pursue them through the narrow lens of data protection. We need to work collaboratively with a wide range of stakeholders to ensure that we get the right approach. The noble Baroness, Lady Kidron, for example, was among those who attended the parliamentarians’ round table on the internet safety strategy, which she mentioned, hosted by the Secretary of State last week. We are engaged on this issue and are not pursuing the work behind locked doors. These specific amendments, however, are not the right course of action to take at this time.

My Lords, the Minister has just referred to the round table. He will recall that I mentioned in my remarks the issue of definitions and suicide sites that were raised during that round table last week. Can he tell the House any more about that?

I was not at the round table, and I am afraid that I would require some notice to answer that question. I am certainly happy to write to the Committee about that. I had not forgotten; I just do not have an answer.

Given the arguments that I have laid out, I would like to reassure the House that this issue remains high priority. The noble Lord, Lord Knight, asked whether GOV.UK’s Verify site could be used for age verification. Verify confirms identity against records held by mobile phone companies, HM Passport Office, the DVLA and credit agencies, so it is not designed for use by children. We will continue to work with interested parties to improve internet safety, but in a coherent and systematic way. For the moment, and in anticipation of further discussions, I ask the noble Baroness to withdraw her amendment.

I now move to Amendment 20A from the noble Lords, Lord Stevenson and Lord Kennedy, on the requirement for a review of Clause 8. Again, the Government agree with the spirit of this amendment in ensuring that the legislation we are creating offers the protections that we desire. However, there are a few issues that we would like to address.

First, it is government practice to review and report in cases of new legislation like this. Bringing about a mandatory report in this case is therefore unnecessary. Furthermore, prescribing the specific content of such a report at this stage is counterproductive. This is especially true given the complex and wide-ranging nature of child online safety and the work being conducted by the Government in this space.

Secondly, on timings, as noble Lords are aware, we must comply with the GDPR from 25 May next year, by which time the Bill must be passed. I am concerned, therefore, that to require a review to be published within 12 months of the Bill passing would not leave sufficient time to produce a meaningful report. Companies need the time to bring in new mechanisms to be compliant with the regulation. For data to be created and collected, time must be given for the sites to be tested and used following the new regulations. This will allow for the comparison of robust data and that which will reflect other work around online safety, which is still being developed. For those reasons, I ask the noble Lords not to press their amendments.

I do not think that the Minister answered the point made by my noble friend Lady Jay on extraterritoriality—a word that I know he will want to use. Also, before the noble Baroness, Lady Kidron, replies, the main thrust of the Minister’s points was that government action on a code and on the digital charter would take most of the issues away. He relied on that in terms of his main argument. But am I right in saying that the code that has been consulted on is voluntary and that there will be no statutory basis for the digital charter? I would be grateful if he could help us on those two points.

I am happy to confirm those two points. On extraterritoriality, I agree with the noble Baroness that it is difficult to control. Commercial sites are easier—an example of which is gambling. We can control the payments, so if they are commercial and cannot pay people, they may well lose their attractiveness. Of course, the only way to solve this is through international agreement, and the Government are working on that. Part of my point is that, if you drive children away to sites located abroad, there is a risk in that. The big, well-known sites are by and large responsible. They may not do what we want, but they will work with the Government. That is the thrust of our argument. We are working with the well-known companies and, by and large, they act responsibly, even if they do not do exactly what we want. As I say, however, we are working on that. The noble Baroness is right to say that, if we drive children on to less responsible sites based in jurisdictions with less sensible and acceptable regimes, that is a problem.

Could the Minister help me with any information he might have about when the GDPR was drawn up? It must have been envisaged when Article 8 was put together that some member states would go with something different—be it 13, 16, or whatever. The issue of foreign powers must have been thought about, as well as verifying age, parental consent, or the verification of parental identity to verify age. Article 8 just talks about having to have parental sign-off. These issues of verification and going off to foreign powers must have been thought about when the article was being put together in Europe. Does he have any advice on what they thought would be done about this problem?

I cannot give the noble Lord chapter and verse on what the European bureaucrats were thinking when they produced the article, but age verification is not really the issue on this one, because it is extremely difficult to verify ages below 18 anyway. Although one can get a driving licence at 17, it is at the age of 18 when you can have a credit card. As I say, the issue here is not age verification—rather, it is about how, when we make things too onerous, that has the potential to drive people away on to other sites which take their responsibilities less seriously. That was the point I was trying to make.

My Lords, the Minister was kind enough to respond to the point I sought to make about the extraterritorial nature of all this, which of course goes way beyond individual sites to corporate ownership, the issue that I am most concerned about. I am glad that the Government are having conversations with, or at least dealing with, what he describes as the most responsible players in this market. None the less, we are dealing with a global environment in which most countries, not just a few rogue countries, have a very different environment and understanding of the culture and nature of the regulation of broadcasting than we do in this country. We have had a very particular and sophisticated way of dealing with terrestrial broadcasting for several generations. The real problem lies in addressing how we can translate some of those values and regulatory formats into the global internet age.

I take that point completely. So that I get it right, it would be best if I write to the noble Baroness about what we are doing. I am afraid that I cannot recall whether it is the G8, the G20 or whatever. Ownership is obviously a key point as well, so I will write to the noble Baroness on those points.

I thank everyone who has contributed to this fantastically supportive debate with their very interesting comments. I am grateful to the Minister for saying that he is sure that we will return to this issue.

I am going to try to tackle a couple of points, but I do not have the organising skills with all my pieces of paper to pick up on what all noble Lords have said. I think there is a bit of a muddle in the Room about this approach, which is aimed deliberately at all data controllers. Those people who have for many years been designing with children in mind will have less far to go to meet the regulations than the people who have not been thinking about children at all. I am deliberately saying that it is a data question; I believe it to be one. This is not supposed to be in the gift of a few big companies; these amendments are supposed to deliver what children deserve and need in the digital environment. It is excellent that it is in a data environment, because it becomes a price of doing business. To the people who have misunderstood the point, we are saying that it will be unlawful to process data unless you provide these services—and, when that is the case, just watch the gold rush toward smart age verification. If children’s data is being processed unlawfully, we would expect there to be some sort of enforcement. I admit to the Minister that our amendment could perhaps do with a bit more work on enforcement and what that might look like.

Secondly, I want to make a point about resilience and education. I believe we are about to discuss education, which is an enormous component of online safety and resilience for children. But we must not make the mistake of thinking that children have to adapt to the needs of data controllers; it is data controllers who must meet the needs of children. That is what these amendments are about. I am absolutely committed to working with the Government, because all their public pronouncements on this subject are in that direction. We have to make it work, so that at least some of the work is done on the other side of the equation. I am unhappy about it being put in the context of getting a few big companies paying for some digital champions. In fact, I was very concerned that the Secretary of State chose to announce the internet safety strategy alongside Facebook, which has a programme it charges schools for that also teaches young people to be very good Facebook users. Before we get to that point, arm in arm with some of these people, we must first work out what our standards are. That is the role of this House. It may not be outsourced to Silicon Valley; that is not appropriate.

On data controllers raising the age, it is worth noting that nearly 3 billion people are online and one-third of them are under the age of 18. That is not a marginal group; that is a huge group. I find it hard to believe that data controllers will abandon that consumer group, just because we have asked them to behave a little better and be a little more moderate in the data they are taking. Again, regulatory compliance is a cost of doing business. Every business has it; this is just another example. I want to discuss this issue with the noble Baroness, Lady Howe, and write to her. She made some excellent points; some of them were perhaps on the misunderstanding of whether such compliance was for everybody or just some sites. I absolutely support her on the question of evidence and evidence-based legislation in this area; I do an immense amount of research work with children and academics. I agree with her, and will write to her in detail because her points were so specific.

Finally, I hope that the Minister, Matt Hancock, will forgive me for quoting him one more time. He said that the Bill’s purpose was to give,

“consumers confidence that Britain's data rules are fit for the digital age in which we live”.

I do not think that having millions of young kids in the United Kingdom treated as adults is a fit outcome for the digital age. I welcome the noble Lord’s clear sign that he is willing to talk to us. I will definitely be doing that. I hope he will also show me his legal opinion, as well as wanting to see mine. With that, I beg leave to withdraw the amendment.

Amendment 18 withdrawn.

Clause 8 agreed.

Amendment 19 not moved.

Amendment 20

Moved by

20: After Clause 8, insert the following new Clause—

“Education for children of school age relating to the rights of data subjects

(1) Upon the passing of this Act, the Secretary of State must make arrangements for all children of school age to receive education relating to the rights of data subjects, appropriate to their age.(2) For the purposes of subsection (1) “the rights of data subjects” must include—(a) rights under this Act and other Acts and Regulations relating to data protection and privacy,(b) security of personal data, and(c) other matters related to the understanding and exercise of rights under this Act and other Acts and Regulations relating to data protection.”

My Lords, the second pillar of protection of children and young people is education. In my view, that would be achieved through personal, social and health education. The noble Baroness, Lady Massey, has championed this issue for as long as I have been in the House of Lords.

One of the sad casualties of the last general election was the then Schools Minister, Edward Timpson, who was very keen that not only relationship and sex education would become a compulsory part of the curriculum, but PSHE would be part of the curriculum of all schools. Indeed, last year I asked an Oral Question on the subject. The then education Whip, now the Leader of the House, the noble Baroness, Lady Evans, said she thought it important that PSHE is taught in schools. Sadly, she missed two little words: in “all” schools and for “all” children. That has been the nagging issue. It is a question of not just having the subject, but ensuring it is taught in all schools, whether academies, free schools, independent schools or whatever, for the well-being of all our children.

On 24 October 2017 the Education Select Committee published the Government’s response to the joint report by the Education and Health Committees, Children and Young People’s Mental Health—the Role of Education. In response to the recommendation that,

“schools should include education on social media as part of PSHE, including educating children on how to assess and manage the risks of social media and providing them with the skills and ability to make wiser and more informed choices about their use of social media”,

the Government responded:

“All young people should have access to a curriculum that ensures they are prepared for adult life in modern Britain. Personal, Social, Health and Economic education … Relationships Education, and Relationships and Sex Education … help to provide pupils with the key knowledge and skills to ensure that they can keep themselves safe, develop healthy and positive relationships, maintain good mental health, build resilience and successfully navigate the changing world in which they are growing up”.

The Children and Social Work Act 2017 gives the Secretary of State the power to make PSHE or elements therein mandatory, subject to careful consideration. It has also given a duty to the Secretary of State to make relationships education in primary and relationships and sex education in secondary mandatory in all schools. The department will be conducting a thorough and wide-ranging engagement process on the scope and content of these subjects, considering school practice and quality of delivery to determine the content of the regulations and statutory guidance. Sadly, that consultation has slipped further behind the promised date originally given.

The Government response continues:

“The engagement process will seek evidence from schools and teachers, parents and pupils; experts in safeguarding and child wellbeing; subject experts; voluntary organisations and other interested parties; and other government departments and public sector bodies. This will consider what should be taught at a high-level whilst maintaining flexibility for schools in how best to deliver these subjects as part of a broad and balanced curriculum. We will set out more details in due course about the engagement process and the work to consider age appropriate subject content”.

This looks very much like kicking a very important can a long way down the road. As I have said, we have waited so long for government to act on these matters, yet we are caught up in the sorts of processes which Governments seem to want. As yet, we have no commitment from the Government that the Secretary of State will use the power to make PSHE a statutory subject.

It is not just the Education Select Committee which says these things. The House of Lords Communications Committee called in its Growing Up with the Internet inquiry report for the rollout of an ambitious programme of digital literacy training which would feature in a statutory PSHE curriculum. Encouragingly, the Government’s own internet safety strategy Green Paper states that they will “carefully consider” whether to introduce statutory PSHE.

We are therefore at an important time. By agreeing this amendment, we can ensure that PSHE will be the vehicle by which these issues can be taught to all children in all schools. I hope that when we come to Report the Minister will be able to report that that will be the case. I beg to move.

My Lords, does the Minister agree with the noble Lord, Lord Storey, that PSHE would be the most appropriate way to educate young people about data rights? If so, I note that the Secretary of State, Justine Greening, has today announced that Ian Bauckham will lead the review on how relationship and sex education for the 21st century will be delivered. Can the Minister, who is clearly prepared to think about this appointment today, ask whether it is within his scope to think about how data rights education may be delivered as part of that review, and whether the review will draw on the work of the previous person who reviewed the delivery of PSHE, Sir Alasdair Macdonald, the last time Parliament thought that compulsory SRE was a good idea?

I support the amendment. I was on the House of Lords Communications Committee, to which the noble Lord just referred. We recommended that digital literacy be given the same status as reading, writing and arithmetic. We set out an argument for a single cross-curricular framework of digital competencies—evidence-based, taught by trained teachers—in all schools whatever their legal status.

At Second Reading, several noble Lords referred to data as the new oil. I have been thinking about it since: I am not so certain. Oil may one day run out; data is infinite. What I think we can agree is that understanding how data is gathered, used and stored, and, most particularly, how it can be harnessed to manipulate both your behaviour and your digital identity, is a core competency for a 21st-century child. While I agree with the noble Lord that the best outcome would be a single, overarching literacy strategy, this amendment would go some small way towards that.

My Lords, I add my voice to that of the noble Baroness, Lady Kidron. President Clinton memorably said that the first step in solving a problem is recognising there is one. If anyone does not believe there is one, we rehearsed some of it in the previous debate; I would also advise them to watch two very recent TED Talks by Zeynep Tufekci and Sam Harris. If, having seen these, they can convince themselves there is not a serious and urgent problem, then their judgment is very different from mine.

I will speak for a couple of moments on this because I regard it as a very significant issue. Karl Marx—who knew a thing or two—said that if you change the dominant mode of production that underpins a society, the social and political structure will change, too. I believe we have changed the fundamental mode of production that underpins society. It is now called digital. We have to address that and we are not addressing it anything like seriously enough. There are two issues I would like to raise, and if there is a note of frustration in my voice, I apologise.

In 2003, through very torturous processes in this House, we managed to persuade the then Labour Government to impose a duty on Ofcom—and I spend most of my life defending Ofcom—which was very clear; it was laid out by the noble Baroness, Lady Jay, at Second Reading. Ofcom was given the specific duty of promoting media literacy. The wording was that Ofcom was required,

“to bring about, or to encourage others to bring about, a better public understanding of the nature and characteristics of material published by means of the electronic media”,


“to bring about, or to encourage others to bring about, a better public awareness and understanding of the processes by which such material is selected, or made available, for publication by such means”.

Fifteen years later, in respect of these duties, Ofcom has wholly failed. By taking a very narrow, technical view of its responsibility, it has done almost nothing to promote notions of digital literacy in the electronic media. If we are not careful, the same will happen in the digital world. The noble Baroness, Lady Lane-Fox, used a much better phrase than “digital literacy”. She used the phrase “digital understanding” in a recent debate in your Lordships’ House. That is really what this is about.

To emphasise something that the noble Baroness, Lady Kidron, said, this is all about data. Ten days ago in Los Angeles, Lachlan Murdoch—who I think also knows a thing or two about this business—said the following:

“We’re in the beginning of an incredible transformation … we’re in the first months of something that will have a multi-decade life and future. Businesses that have large data sets and robust data sets will be the companies that win in the future”.

Every company in Silicon Valley and every communications company in the world knows that. This is why this is such a fundamental issue.

To my delight and surprise, the Italians appear to have picked up on this. In the New York Times of 18 October there is a long piece about a new law that was passed on 31 October by the Italian parliament that entirely acknowledges that young people have to have a far greater understanding of the modes of information, the nature of information and the ramifications of information than is presently the case. Some 8,000 schools in Italy are now receiving instructions on how to get across to children the seriousness and importance of, first, the manner in which they give and use their data and, secondly, the means by which they are informed.

Finally, in a very recent book Move Fast and Break Things by Jonathan Taplin, a man I happen to know, he says:

“Part of our role as citizens is to look more closely at the media surrounding us, think critically about its effects, and whose agenda is being promoted”.

I put it to your Lordships that every single front page of every newspaper over the past four months has made this extraordinarily evident. In the words of the noble Baroness, Lady Lane-Fox, we are “sleepwalking” into a situation over which we have little control and of which the companies that do have control are not taking sufficient notice. As proved by the Communications Act 2003, you can crunch out the best possible wording and it is still possible for that wording to have absolutely no lasting effect on society as a whole.

My Lords, my name is also on this amendment. It is a great pleasure to follow the noble Lord, Lord Puttnam, who has championed these issues for 20 years or more. It is worth while having a reality check for ourselves. One of the good things about the House of Lords is a certain continuity. I was in this House for the Data Protection Act 1998, which we are now reviewing, and for the Communications Act to which the noble Lord, Lord Puttnam, referred, and I served on his committee. We had no idea what revolution was coming our way. Indeed, in the Communications Committee, we were asked not to look at the internet; it was for the future. If we think about what has happened in those 20 years, what on earth is going to happen in the next 20, when we are reliably told we are on the verge of a fourth industrial revolution driven by data?

We were quietly asked by the noble Baroness, Lady Kidron, not to include this amendment in the previous group in case the whole thing became hijacked by a debate about education, and she was shrewd in that, but it was useful that she pointed out—I love this point—that data literacy should be as important as the three Rs as a core competency for the 21st-century child. If we are going to achieve that, we have to get out of the silo mentality: “It’s not our job, it’s the Information Commissioner’s job”; “It’s the Department for Education’s job”; “It’s DCMS’s job”. Somebody has to take responsibility for what we are saying because it is one of the great challenges.

There is a danger, particularly in a House of this age group, that we overestimate the capacity of the young. We all have our anecdotes about our grandchildren or our children being able to work the gadgets that we cannot work, but that does not mean that they have the competence or the maturity to make proper rational, responsible decisions about some of the factors that come within their ambit with this new technology. My noble friend Lord Storey referred earlier to a story in today’s paper about the increase in sexting among young children. We also know the extent of cyberbullying that goes on between children and about the naivety of children in being willing to reveal personal information online. Navigating the digital world is very complex.

The noble Lord, Lord Lexden, is in his place, and I am always worried about quoting history, but when the reform Act was passed in 1867, somebody said, “We now must educate our masters”, and that brought about the Elementary Education Act 1870. Nobody can now be in any doubt about the enormity of the task of preparing the whole population, but especially our children, to handle the new powers that are coming down the track at us. Educating for digital is one of the most important tasks facing us. I enjoyed and appreciated the way the noble Baroness, Lady Kidron, delivered her amendments. She made the point that that education is not to make this generation of children able to fit into the needs of Silicon Valley; it is to give them the power to make sure that Silicon Valley responds to their needs as citizens. That is the task that this amendment is trying to promote.

My Lords, I will speak briefly to support this amendment and particularly what the noble Lord, Lord McNally, has just said. We are asking our children to take on a whole set of responsibilities for which we, let alone they, are not prepared. The social consequences of social media and how to handle them produce enormous stresses on friendship. As for where this amendment is directed, there are also the consequences for children in the way their data are gathered and used, which we do not understand. The House of Lords can now track where each of us was geographically over the last month. It is all on our phones. A complete record is kept unless you happen to have turned it off. When did we give permission for that? If we cannot handle it, how can we expect our children to be able to handle it?

It is also quite clear that the sort of middle-range teenagers—14 and 15 year-olds, boys in particular—are living in a world of extreme pornography, in quality and content, that is quite unprecedented. What effects we can expect that to have on relationships between the genders when they get through to university and life afterwards I do not know. We cannot abrogate our responsibility to make sure that children are looked after properly and that we are not exposing them to amoral companies—I am not aware that any of these companies have a deep moral sense, whatever they may claim. We entrust their upbringing and education to that, but we care very much about their mental health, their sense of society, their sense of relationship to each other and the qualities that they will bring to the world as young people. We ought to be doing something about it in schools. We probably need a bit of thought as to what that should be, but we absolutely should not be doing nothing.

My Lords, I am very sorry for interrupting the noble Lord, Lord McNally, as what he had to say was very apposite and appropriate. I thought at one stage that he was going to say that he had been around for the passing of the first reform Act as well as everything else he was talking about, but I must have misheard him.

This has been a good debate, which has tended to range rather widely, mainly because it is so important we get this right. I confidently expect the Minister to respond by saying that this is a very good idea but he lacks the power to be able to give any response one way or another because it lies in the hands of one of his noble friends. That of course is the problem here, that we have another linked issue. Whitehall is useless at trying to take a broader issue that arises in one area and apply it in another. Education seems to be one of the worst departments in that respect. I mean that, as it has come up time and again: good ideas about how we need to radicalise our curriculum never get implemented because there seems to be an innate inability in the department to go along with it. It may well be that the changes to the structure of education in recent years have something to do with that. It is good to see in the second line of this amendment that this would apply to “all children” irrespective of the type of school or type of organisational structure that school is in, so that it applies to everyone. We support that.

However, two worries remain that still need to be looked at very hard, and the noble Lord who just spoke was on the point here. Do we have the skills in the schools to teach to the level of understanding that we are talking about? I suspect that we do not. If so, what are we going to do about that? Thirdly, I suspect that our kids are way ahead of us on this. They have already moved across into a knowledge and understanding of this technology that we cannot possibly match. Teaching them to go back to basics, as has been the case in previous restructuring of the curriculum, is not the right way. We need a radical rethink of the overall curriculum, something which is urgent and pressing. It is raised, interestingly enough, in a number of publications that are now appearing around the industrial strategy. If we do not get this right, we will never have a strategy for our industries that will resolve all the issues we have with improving productivity. I hope the Minister will take this away.

My Lords, I am grateful to the noble Lord, Lord Storey, whose long experience in education I acknowledge, and to all noble Lords who have contributed. I could not agree more about the importance of children and young people fully understanding how their data is collected, stored and used. That is why the Government have already taken steps to ensure that key aspects of data protection are taught in maintained schools. In 2014 we established a new and more rigorous national computing curriculum covering ages five to 16. It is compulsory in maintained schools in England and sets an ambitious benchmark that autonomous academies and free schools can use and improve on.

The new computing curriculum was developed by industry experts and includes safety, which helps to give children the tools that they need to make sensible choices online. I say to the noble Lord, Lord Puttnam, and my noble friend Lord Lucas that they were a bit pessimistic about what we are doing; we are certainly not doing nothing, as my noble friend implied. Children are taught how to use technology safely, respectfully and responsibly; how to recognise unacceptable behaviour; and how to report concerns about content and contact. Importantly, the curriculum also includes keeping personal information private and protecting their online identity and privacy, both of which are important parts of data protection. All schools can choose to teach children about data collection, storage and usage as part of these topics.

I also say to the noble Lord, Lord Puttnam, that the digital economy is actually not doing too badly; it is growing at twice the rate of the rest of the economy. The Government are spending to improve skills at all levels, including at PhD level, to prevent social exclusion. So we get the issues that he is talking about, and in my answer to the debate of the noble Baroness, Lady Lane-Fox, I outlined some of the things that we are doing.

I accept entirely that the economic drivers for the digital economy are being handled quite well. I am suggesting that the societal end of that debate is not keeping pace with the commercial and that, if we allow too great a disconnect to occur between societal impacts and commercial success, we will reap a very unfortunate harvest. The Minister was good enough to see me last week, together with an official from the Department for Education. I am not pretending for a moment that nothing is being done, but I am suggesting that there is nothing like enough urgency in trying to correct the societal aspects of this issue.

I take that point. I also understand the difference that the noble Baroness, Lady Lane-Fox, highlighted between digital skills and digital understanding, and we need to address that. One of the issues that the data ethics body is going to look at is how society deals with these technical problems, albeit that they are changing incredibly fast.

I have talked about younger pupils. Older pupils are also taught citizenship as part of the national curriculum. That equips pupils to take their place in society as active and responsible citizens, including providing them with the knowledge and skills that they need to think critically and to research and interrogate evidence. These vital skills help our children understand how their data can be used and why data protection is important.

Amendment 20 would require the Secretary of State for Education to make changes to the current maintained schools national curriculum, and would create new requirements for independent schools and academies. In our view, now is not the time to make further changes to these subjects. We need to allow schools to fully embed the new curriculum in order to provide a period of stability for schools so that they can focus on ensuring that pupils are taught this new curriculum well, including the new aspects on data protection.

Having said that, we are not complacent. We realise that companies’ use of data in the online world is increasingly complex and that we need to support children to understand that. The changes introduced in the Children and Social Work Act 2017 represent a step change in education on online safety. For the first time it will be compulsory for all primary-aged children at school in England to be taught relationships education, and all secondary-school children will be taught relationships and sex education. In addition, we will carefully consider whether also to make personal, social, health and economic education compulsory in all schools.

The noble Lord, Lord Knight, took my lines to a certain extent. I was going to confirm that the Department for Education confirmed today that it has begun its engagement with stakeholders. This is a point that has come up before: that will help it reach evidence-based decisions on the content. I can tell the noble Lord that the head teacher who is running it will advise the Department for Education on what will be included in relationships and sex education and PSHE, whether it should be compulsory and, if so, what content may be included. It will be live to online issues and include what children need to know to be safe online, beyond what is already in the computing curriculum.

The Government will ensure that these new compulsory subjects in England address the challenges experienced by young people online and are seeking views to work out exactly what this should cover and how best to do so. The Department for Education will support schools to ensure that content is pitched at the right level for each school year and builds knowledge as children grow up. Engagement and consultation will help us to get the detail right.

My department, DCMS, and the Department for Education are working together on the online safety aspects of these subjects. We will work with partners, including social media and technology companies, subject experts, law enforcement—

I thank the Minister for giving way. Is he suggesting that the aim should be to adapt children to the realities of the online world and the internet service providers, rather than to adapt the providers to the needs of children?

I am not an expert on education, but I do not think that “adapting” children is a recognised educational aspiration. We are trying to make children aware of the issues involved in the online world. We all accept that they are technically skilful, but they may not have the maturity to make the right decisions at certain times in their lives. As I said, we are trying to pitch it so that, as children develop, they are introduced to different things along the way. I hope that that answers the noble Baroness.

We are working with social media and technology companies, subject experts, law enforcement, English schools and teaching bodies to ensure these subjects are up to date with how children and young people access content online and the risks they face. We will also consider how best to support schools in the delivery of these new subjects. It is important to note that education on data processing does not exist in a vacuum but is viewed as a part of a wider programme of digital learning being promoted to improve user awareness of online safety and build digital capability. As such, we think that legislation focusing solely on data processing would risk detracting from the broader issues being tackled.

I am grateful to noble Lords for their amendment: it has prompted an interesting debate and raised issues which have gone beyond data protection, on which of course we are concentrating in the Bill. I hope that I have reassured the noble Lord that the Government take the issue of educating young people seriously, particularly in data protection matters. Not only do they already feature in the curriculum but we are considering how we might strengthen this teaching as a key part of our wider online safety work. With that reassurance, I hope that the noble Lord will feel able to withdraw the amendment.

I am very grateful for the Minister’s helpful reply and to noble Lords who have contributed to this debate. I do not particularly like the phrase “digital literacy”: I much prefer “digital understanding”. I always understood that the fourth “r” was religion, so perhaps, with a small “r”, this is a religion for some of these large tech companies.

I can accept everything the Minister said, with the exception of two points. He said that these things are happening in the maintained sector. However, over 70% of our secondary schools are no longer in the maintained sector and they can choose whether or not to follow the programmes that he has suggested. Free schools are also increasing in number and, again, they do not have to take any part in this activity if they do not want to.

I agree with the Minister that this is not a discrete package where you tick the box when you have done it. It has to be part of a wider programme which goes through all aspects of learning. I also agree with the noble Lord, Lord Stevenson, who raised the question of whether we have the skills in our schools. It is not just digital issues: we do not have teachers for A-level maths or physics but we do not stop doing maths or physics. This might ensure that we actually started training teachers to work in this area.

I am grateful for the Minister’s helpful reply and look forward to considering this again on Report. I beg leave to withdraw the amendment.

Amendment 20 withdrawn.

Amendment 20A not moved.

Clause 9: Special categories of personal data and criminal convictions etc data

Amendment 21 not moved.

House resumed.

Paradise Papers


My Lords, with the leave of the House, I shall now repeat in the form of a Statement the answer to an Urgent Question asked in another place. The Statement is as follows:

“Mr Speaker, this Government believe in a fair tax system where everyone plays by the rules. The Government have taken decisive action to tackle tax avoidance and evasion and improve the standards of international tax transparency. The UK has secured an additional £160 billion in compliance revenue since 2010, far more than was achieved under the previous Labour Government. Under this Government, the UK now has one of the lowest tax gaps in the world. We have provided HMRC with tough new powers and in 2015 it received £800 million additional funding to go on tackling tax avoidance and evasion.

Turning to recent events, yesterday evening several international news organisations, led by the International Consortium of Investigative Journalists, reported on an information leak regarding the financial affairs of a large number of individuals. I should remind the House at this stage that Ministers do not intervene in the tax affairs of individuals or businesses, as to do so would be a breach of taxpayer confidentiality. However, I can inform the House that on 25 October HMRC requested that the ICIJ, the Guardian and the BBC share the leaked data so that the information can be compared with the vast amount of data HMRC already holds due to the initiatives that this Government have undertaken. They have yet to respond to this request.

Nevertheless, since this data was retrieved in 2016, the Government have implemented international agreements that have changed the game for those who seek to avoid and evade taxes. HMRC has already started benefiting from the automatic exchange of financial account information through the common reporting standard—an initiative in which the UK has led the world, with over 100 jurisdictions signing up. The Crown dependencies and overseas territories are among those who signed up to this initiative and have begun to exchange information with HMRC for over a year. The Crown dependencies and overseas territories have also committed to holding central registers of beneficial ownership information which the UK authorities are able to access.

It is important to note—and I quote from the ICIJ’s disclaimer in the programme—that:

‘There are legitimate uses for offshore trusts and companies. [The ICIJ] do not intend to suggest or imply that any people, companies or other entities included in the ICIJ Offshore Leaks Database have broken the law or otherwise acted improperly’.

So notwithstanding the generalised aspersions made by the Opposition, the use of offshore accounts or trusts does not automatically mean dishonesty. However, this House should be assured that, under this Government, HMRC will continue to bear down with vigour on any tax avoidance or evasion activity wherever it is found”.

My Lords, that is a totally inadequate response given the sense of outrage in the country over what has been revealed in the paradise papers. The Government are trying to say that, after seven years of Conservative Chancellors of the Exchequer and Conservative government, condign action is now being taken against aspects of tax avoidance, which has clearly not happened over the preceding period. Therefore, I do not think that we should take these suggestions seriously. After all, only in the last few weeks the Government have rejected any mention of non-dom status in the Finance Bill and have rejected Labour’s demand that this issue be identified and dealt with in legislation.

The Conservative Party has a great deal to conceal. What is the tax status of the former non-domicile Lord Ashcroft? We noticed that for a short while he figured prominently in the newspapers during the election period but, of course, by then he had already paid half a million pounds into the Conservative election fund. Therefore, we cannot take this Statement at face value. The Government purport to say that they are interested in fair taxation. We have seen their record on that over the last seven years and know that many people in this country are being impoverished by them while they still treat the very rich advantageously.

There is nothing in the Statement about the great global companies and their taxation advantages; we do not get a single mention of any of them. What we do get, because the Paradise papers reveal this, is that there has been maladministration by the Government of the Duchy of Lancaster estates. The Chancellor of the Duchy of Lancaster is the elected Member responsible for those estates yet, following the revelations of the Paradise papers, the Queen herself has had her name dragged down by these assertions. The Government do not even think that they owe Her Majesty an apology, because there is no suggestion in the Statement that they recognise that the fault lies with poor government administration.

We seek a full public inquiry into tax avoidance. Nothing less will restore our nation’s confidence that the Government’s approach to this whole wretched issue is adequate.

The noble Lord asked what we had done about tax over the past seven years. The Statement mentioned that we have collected £160 billion in compliance revenue since 2010, that the tax paid by the richest 1% is now 28% of the total, which is more than it was under the previous Labour Government, and that we have introduced initiatives such as a diverted profits tax to tackle just the sorts of corporate manoeuvring of tax, revenues and incomes that he talked about. We have introduced the Criminal Finances Act to make it a criminal offence for employees of organisations, be they professional services firms or others, to give advice on avoiding tax. We are at the forefront of the OECD tax initiatives. This Government included in the Finance Bill, which will come before this House on 15 November, a measure to make it no longer possible to have non-dom status in perpetuity—we are ending that position. Therefore, we have done a great deal but we are not complacent. We recognise that there is an issue to be addressed and fairness will be at the heart of all our actions.

My Lords, do the Government not recognise that the ordinary taxpayer hearing again this news today is utterly outraged that if you are rich or a business, you can avoid tax? There are schemes on an industrial scale, which are protected by a lack of transparency. During the passage of the then Criminal Finances Bill, when there was pressure from all over this House for the registers of beneficial ownership in the overseas territories to be made public, why did the Government resist when that would have stripped away secrecy? Why, also, have they brought a Sanctions and Anti-Money Laundering Bill to this House that gives Ministers the power, with virtually no intervention by Parliament at all, to eliminate every anti-money laundering regulation and replace them by highly watered-down versions? Is this the new Britain we are to expect post Brexit?

Of course it is right that the overseas territories and Crown dependencies take the correct approach on this. That is why the common reporting standard I mentioned—which has just come into effect and on which we led the way through the G7 and various initiatives through that—is coming into effect. That means that the Crown dependencies and overseas territories must inform HMRC about any person from the UK who is registered for tax in the UK but has an account in a different jurisdiction—one of a hundred, including all the overseas territories and Crown dependencies. That is just the type of action we need to ensure that people pay the taxes they are due to pay.

My Lords, of course it is right that companies and entities that operate here in the UK should pay their full weight of tax. However, if the proposition is that all offshore investment is somehow to be disapproved of or stopped altogether, would that not require a return of full capital controls of the kind we had in the distant past, and would it not be a strong disincentive to the inward investment on which this economy strongly relies and a disaster for the UK economy?

My noble friend is right. Indeed the ICIJ, which I mentioned and which released this leak, was keen to point out that it is not suggesting any wrongdoing and that there is legitimate use for these facilities, such as purchasing assets in currencies other than sterling, avoiding double taxation and pooling of investments from different tax jurisdictions. It is important to draw the line between that avoidance and the evasion which we talked about earlier.

My Lords, 20 years ago I had the responsibility of being the Chancellor of the Duchy of Lancaster, and as such was responsible for the organisation. I well recall chairing meetings of all the senior officials and answering questions in the House of Commons. Does the current Chancellor of the Duchy of Lancaster, Sir Patrick McLoughlin, have the same responsibilities? If not, as Her Majesty had no knowledge of these investments, who is responsible?

I will have to check on the practices. However, my recollection is that Sir Patrick McLoughlin responds in his capacity as part of Cabinet Office Questions during regular Oral Questions. Members of all sides of the House and in both Houses are at liberty to table Questions for Oral Answer or debate at any point, and people will have to respond according to their responsibilities.

My Lords, I declare my interests as an investor in a wide range of assets, including offshore investments. Will my noble friend agree that millions of UK savers and pensions, let alone Her Majesty, benefit directly or indirectly from investments held offshore, and to suggest that they are avoiding tax is simply fake and false news? Those who take the time to properly understand offshore investment vehicles will realise that their underlying purpose is to provide an efficient and predictable umbrella structure to attract the widest possible range of investors from around the world. They are in fact set up to minimise the amount of tax paid within the offshore entity and consequently to maximise the returns flowing back to investors, allowing them to pay tax directly in their own countries.

The use of these investment vehicles therefore maximises the eligible tax take for the UK Exchequer, and to suggest otherwise is either financial illiteracy, political populism or lazy journalism. Will my noble friend agree that we need to collect the tax and that, if it is not paid, that is tax evasion not avoidance?

The key point that must be remembered here is that, if funds are for legitimate reasons allowed to be placed offshore in order to purchase assets, and if the people concerned are domiciled in the UK, the funds need to be repatriated to the UK and full tax needs to be paid on the profits, income and revenue gained.

My Lords, there is a vast difference between an offshore vehicle intended to facilitate overseas investment and a trust that is set up to ensure that the individual concerned can place money outside this country, then have it loaned back to them, thereby not only avoiding income tax and national insurance on payments but, in the event of their death, ensuring that their estate has to pay the money back into the overseas trust, thus avoiding inheritance tax. That is surely a scandal.

Each of these things will be checked by HMRC, but the point is that evasion of tax and attempting to evade tax is against the law and will be pursued with all vigour by HMRC. Avoidance continues to be part of the international financial system and we recognise and value it.

We did have extra time—we allowed an extra speaker from the Opposition. I think that it is now time to move on to the next Statement.

Grenfell Recovery Taskforce


My Lords, with the permission of the House, I would like to repeat a Statement made by my right honourable friend the Secretary of State for Communities and Local Government in the other place:

“With permission, Mr Speaker, I should like to make a Statement on the independent Recovery Taskforce, which is working with the Royal Borough of Kensington and Chelsea in the wake of June’s tragic fire at Grenfell Tower.

The people of North Kensington have been failed by those who were supposed to serve them. They were failed by a system that allowed the fire to happen, and they were failed once again by a sluggish and chaotic response in the immediate aftermath.

It was clear that, if RBKC was to get a grip on the situation and begin to regain the trust of residents, it would have to change and change quickly. That started with a change in leadership of the council, new senior officers, and new support brought in from other councils and central government. To ensure that that translated into a better service for the victims and people of North Kensington, and to assure me that the council would be capable of delivery, I announced on 5 July that I was sending in a specialist task force.

The task force is made up of experts in housing, local government, public services and community engagement. I deliberately appointed independent-minded individuals who would not hesitate to speak their minds. I have now received the first report from the task force, reflecting on its first nine weeks on the ground. The report has been shared with the right honourable Gentleman opposite. I will also be placing copies in the Library of the House, and it will be published in full on GOV.UK.

It is clear from the report that progress is being made, that much-needed change has happened and continues to happen, and that the council today is a very different organisation from the one that failed its people so badly back in June. The task force is satisfied that RBKC, under its new leadership, recognises the challenges it faces and is committed to delivering a comprehensive recovery programme. For that reason, it does not see any practical advantage from a further intervention at this time, which would risk further disruption.

But while the green shoots are there, the report pulls no punches about the fact that there is still significant room for improvement. The task force has identified four key areas in which the council needs to step up. The first is pace. The speed of delivery needs to be increased—more work needs to be done more quickly.

The second area is innovation. The scale and impact of the fire was unprecedented in recent history, but RBKC is relying too much on tried and tested solutions that are not up to the task. The council should be much bolder in its response.

The third area is skills. Too many of the officers and councillors working on the response lack specialist training in how to work with a traumatised community. This needs to change.

The final area, arguably the most important going forward, is a need for greater empathy and emotional intelligence. The people of Grenfell Tower, Grenfell Walk and the wider community have already suffered so much. Yet the task force has heard too many accounts of that suffering being compounded by bureaucratic processes that are not appropriate, when so many deeply traumatised men, women and children have complex individual needs. So a greater degree of humanity must be put at the heart of all RBKC’s recovery work.

I have discussed these recommendations with the council’s leadership and they have accepted them all without question. Culture change is never quick or easy to achieve in any organisation, but I am in no doubt that the leadership and staff of the Royal Borough of Kensington and Chelsea genuinely want to do better. It is their community too, and they desperately want to help it to heal.

I am particularly encouraged that the council is now drawing on NHS expertise to secure specific training for those front-line staff responsible for providing direct support to the survivors. I have assured the council that I will continue to support it in building capacity. However, I have also made it clear that my support will not be uncritical or unqualified. I expect to see swift, effective action to deal with all the issues highlighted in the report. I am not taking any options off the table if progress is not made, and I shall continue to monitor the situation closely.

Until now, one aspect of that monitoring has involved weekly meetings, chaired by myself, that bring together Ministers from across Government and senior colleagues from RBKC. Although these have proved effective, the task force has expressed concern that meeting so often is beginning to become counterproductive. The time required to prepare properly is cutting into the time available for front-line work. As a result, the report recommends that we meet less often. I have accepted this recommendation. However, let me reassure the House that this does not mean our priorities are shifting elsewhere, or that the level of scrutiny is being reduced. It is simply a matter of ensuring time and resources are focused to the maximum on those affected by the fire.

One area to which the House knows I have been paying particularly close attention is the rehousing of those who lost their homes in the fire. While I have always been clear that rehousing must proceed at a pace which respects the needs, wants and situations of survivors, I have been equally adamant that bureaucratic inertia must not add delay. Clearly, some progress is being made. The latest figures I have from RBKC are that 122 households out of a current total of 204 have accepted an offer of either temporary or permanent accommodation. Seventy-three of these have now moved in, of which 47 households have moved into temporary accommodation, and 26 households into permanent accommodation.

However, the report is also clear that that the process is simply not moving as quickly as it should. RBKC’s latest figures show that 131 Grenfell households are still living in emergency accommodation. Behind every one of these numbers, there are human faces. There can be no doubt that there are families who desperately want a new home but for whom progress has been painfully slow. Almost five months after the fire, this must improve. Responsibility for rehousing ultimately lies with RBKC. However, in central government we cannot shy away from our share of responsibility. I expect the council, in line with the task force’s report, to do whatever is necessary to ensure households can move into settled homes as quickly as possible. I will continue to watch closely to ensure this is done.

When I announced the creation of the task force, I said it would stay in place for as long as it was needed. Based on this first report, there is still much to be done, so the task force will remain in Kensington and Chelsea for the foreseeable future. I have asked the task force to ensure that proper action is taken on all the fronts they identify, and to come back to me in the new year with a further update, which I will of course share with the House.

I must of course thank the four expert members of the task force, Aftab Chughtai, Javed Khan, Jane Scott, and Chris Wood, for their tireless efforts. Last week I read the right reverend James Jones’s excellent report on the appalling experiences of those who lost loved ones in the Hillsborough disaster. It is a sobering piece of work, reminding us that,

‘the way in which families bereaved through public tragedy are treated by those in authority is in itself a burning injustice’.

We saw that all too clearly in the hours and days after the Grenfell fire.

The clock cannot be turned back and the woeful inadequacies of the early response cannot be undone. But I can say, once again, that for as long as I am in public life I will do all I can to ensure that the failures of the past are not repeated and the people of Grenfell Tower get the help and support they deserve. The Hillsborough families had to fight for a quarter of a century to get their voices heard, to be taken seriously and to be treated properly by those in authority. We cannot allow that to happen again. I will not allow that to happen again. The public inquiry established by the Prime Minister will play the major role, but for its part, I am confident that the continued work of the task force will also help ensure that the survivors receive the support and respect they deserve”.

My Lords, I refer the House to my interests in the register as an elected councillor for the London Borough of Lewisham and a vice-president of the Local Government Association. I am grateful to the noble Lord, Lord Bourne of Aberystwyth, for repeating the Statement made by his right honourable friend the Secretary of State for Communities and Local Government in the other place. I also pay tribute again to the public sector officials—from the police, the fire service and the ambulance service to the NHS and local and national government—along with the faith groups, the charity and voluntary sectors, and the community in North Kensington, for the way that they have all supported families as they recover from this appalling tragedy.

As I have mentioned before, within the public sector there is not one group of heroes and then another group of workers that deserves to be attacked. That is unfair. I remind the House of the treatment of firefighters by the Foreign Secretary when he was the Mayor of London, which is a case in point. Some of the comments he made when he was mayor are shameful. He should apologise for what he said about these heroes, but all we get from him in this area is silence. He is not a politician usually noted for being quiet; he is usually very happy to give his views on a range of subjects, but strangely not on this one. I say again: come on, Boris Johnson MP, your apology to the firefighters of the London Fire Brigade for your ill-informed and hurtful comments is long overdue.

The people of North Kensington were failed by those elected to serve them. Therefore, the change of leadership in the authority is welcome, and I wish the leadership well in the important work that they are doing. The former chief executive of my own borough, Barry Quirk, has been installed as the new permanent chief executive of Kensington and Chelsea Council. He will provide much-needed stability and leadership for the council staff. He is a very able man and the council has chosen wisely in this respect.

The report of the recovery task force highlights some serious problems that need to be overcome. At some point, consideration will have to be given as to whether this authority can continue in its present form. That is not a decision for today or next week, but Ministers must keep it under review and not take it off the table. What we cannot have happen is that as the authority fades from our attention, the old ways, habits and failures return. If the structure is beyond saving then other options will need to be considered to ensure that all residents of the borough are properly served. The governance arrangements are of concern to us all. It would be helpful if the Minister could tell me whether the new leadership has offered a seat or two in the cabinet to the opposition. I have mentioned that a number of times before and it would be a welcome step.

I take the point about the frequency of meetings of the ministerial recovery group and the pressure that it brings, and agree that it should be reduced. However, it is welcome that the council will remain very much in the sight of the department. Will the Minister tell us what the department has done specifically to help the new chief executive bolster the capacity and capability of the senior staff team? There are some very able people working in his department and elsewhere in local government, in London and across the country. What support has his department given to the authority to aid this work?

I fully understand that we want to give people time to be rehoused in a permanent place rather than having to move again. However, as the Minister said and as the report highlights, the pace is slow. What analysis has the department undertaken to see why this is the case? If it has not done any work on this, why not? What are the barriers to rehousing people permanently and what has the department done to remove them? Can he give the House an example in this respect? I do not believe that people want to carry on living in hotel rooms for any longer than is necessary.

I agree that there is a greater need for more empathy, emotional intelligence and humanity as we move forward. It is just a tragedy and a terrible indictment that when it is the richest borough of one of the richest cities in the world, and in the fifth-richest country in the world, a Minister in 2017 has to come to the Dispatch Box and say so.

Just because you are less fortunate, because you are poor or because you live in a council property does not mean that you should have fewer rights, be less respected or have your views taken into account any less. But that is what the local community has clearly felt and experienced in Kensington and Chelsea, which is shameful. I am pleased that the task force will remain in place for the foreseeable future and that nothing is to be taken off the table. I join with the Minister in thanking the task force and specifically the four expert members for their work and comprehensive report. There is serious work to be done to support the victims and the local community on the long road to recovery. I wish everyone well in that task. They have my full support and gratitude for the work they are doing.

My Lords, I draw noble Lords’ attention to my entry in the register of interests as an elected councillor in the borough of Kirklees and as a vice-president of the Local Government Association. I welcome today’s Statement on the interim report of the task force. However, I draw attention to one of the four priorities that were set by the Secretary of State for the work of the task force—that it would,

“ensure that all the immediate housing needs resulting from the fires are fully and promptly addressed by RBKC”.

But we have heard today in the Statement and the interim report that the number who have been permanently rehoused is pitifully low. Four months after the dreadful fire at Grenfell, only 26 of 204 families have been rehoused permanently and 130 are still in emergency bed and breakfast accommodation. I find that disgraceful and a tragedy; I hope that the Minister will be able to tell us why those figures are so low. The full report also asks for an immediate strategy and agreed targets for rehousing. It would be good to hear from him whether that has been done, whether targets have been set and what they are. That is the most important feature of the aftermath of this dreadful fire.

The second point that I would draw attention to is that the report, I am pleased to say, makes no immediate recommendation about the future of the tenant management organisation. Fears have been expressed in the media by residents that disbanding the TMO would lead to avoidance of effective scrutiny of its actions or inactions, and the avoidance of potential prosecutions. Can the Minister confirm whether that is the case? Will the TMO remain in place until the report of the Prime Minister’s inquiry and for any consequences of that inquiry?

The third issue that I raise is not referenced in the report, which is strange. It is the consequences of the fire and the impact on those families in the adjacent tower blocks. For example, what action is being taken to have the fire hazard panels replaced? What government contribution will be made towards their replacement?

Lastly, the final recommendation in the interim report talks about the awful consequences of having the burnt tower remaining in place. It recommends:

“Covering the Tower: Management of the site is not currently the responsibility of RBKC. Nevertheless we would strongly recommend that those responsible for it accelerate covering the Tower. It is reprehensible that it has remained uncovered for so long”.

It then gives a timetable for it to be done by December 2017—in six weeks’ time, perhaps. That is unfortunately not mentioned in the Secretary of State’s Statement, but it is an important step towards a healing process and I urge the Minister, if he is not able to reply this afternoon, to give us a written response.

My Lords, I thank the noble Lord, Lord Kennedy, and the noble Baroness, Lady Pinnock, for their responses and I will try to deal with the points that they raised. First, I join with the noble Lord, Lord Kennedy, in his tribute to the public sector. I wholeheartedly agree, as he knows. We have been here before, but it is certainly worth restating the continuing role played by the public sector and the role that it obviously played in the immediate aftermath of the fire—the fire service, the ambulance service, the police, the whole of the public sector and local government—along with the voluntary sector, the local community of North Kensington and many individuals who went along to help. It showed our country and our society at our best. I thank the noble Baroness for also making that tribute. I certainly also echo what the noble Lord, Lord Kennedy, said about Barry Quirk, who is doing excellent work in helping in relation to Grenfell.

I will try to deal with the points raised. First, the Secretary of State has made it absolutely clear on behalf of the department and the Government that all options are on the table for the future. The task force has recommended that at this stage commissioners are not appropriate, but that does not mean we have taken that option off the table. Of course, it is a possibility for the future if we feel it necessary. But the report makes the point that significant progress has been made, although more progress is needed. The Government have accepted the report in full, which covers the comments about the clothing of Grenfell Tower, which I wholeheartedly agree needs dealing with in very short order. I will come back to the timescale, if I may. But to restate, the Government have accepted all the recommendations of the task force as, to be fair, has the Royal Borough of Kensington and Chelsea, in relation to those comments addressed to the borough. As the noble Baroness made clear, the clothing of the tower is not the responsibility, as things stand, of the local borough.

The noble Lord, Lord Kennedy, asked about working with the opposition party, or parties, in the Royal Borough of Kensington and Chelsea. That is something for them, but we would very much encourage the council to look at how to work together. It is obviously far better if parties work together, as we have been doing in this House, so I would certainly encourage that.

As to how we as a department have bolstered—an appropriate word used by the noble Lord—in this context, we have certainly been helping with housing issues and encouraging the appropriate use of the NHS, and with community engagement. Staff are still there; I spoke to some this morning and that work goes on. He talked about the barriers to rehousing. Once again, as he knows, this is a complex position in the Royal Borough of Kensington and Chelsea. We can push for and ensure that there is a speedier response, and the task force recommends that. The Royal Borough of Kensington and Chelsea will make an announcement about the appropriate strategy as we move this forward. But some things, in all fairness, are more difficult. Some families have moved into temporary accommodation, and I think in some cases to permanent accommodation, then changed their minds. We are keen to listen to what local people want so we have sought to honour that because feelings are still very raw. Sometimes people feel that they want to move close to the tower and then change their minds, understandably. So there are barriers other than the process arrangements set by local government and central government.

It remains the case that we want 300 potential houses. That is the target of the Royal Borough of Kensington and Chelsea, and I am sure that the council will say more on this when it makes an announcement shortly, specifically about how we get there by the end of the year. That is broadly the number of permanent homes needed. In fact it is more than is required but one feels the need for a bit of a cushion. If I am not wrong, I think that there are around 160 available at the moment, which leaves another 140 to be brought on. There has to be, and to a degree there has been, a cultural change on the part of the borough. In fairness, I do not think that any local authority would have been able to take on this sort of challenge without making some incredible changes. Some of those have happened in Kensington and Chelsea, although clearly more still needs to be done.

The noble Baroness, Lady Pinnock, asked about households that were living not in Grenfell Tower or Grenfell Walk, but in the walkways. There is still a need for them to be permanently housed as well. Again, I think the feeling among many of those families is that they do not want to move back until the tower is properly clothed, which goes back to the point that she rightly picked up on. She also raised the issue of the tenant management organisation. We do not want it to disband because of the possibility—I should state that it is important that we get this legally right—of prosecution. There needs to be the possibility of prosecuting authorities and individuals, and therefore from that point of view its status will remain. I say that without prejudice to anything that is found in the inquiry or by the CPS. In terms of running the housing, of course the organisation was removed immediately and we have not yet made a decision about what fresh arrangements will happen. Again, we will want to look very carefully at all the options for future housing arrangements for Kensington and Chelsea. We are not saying that it will be a, b or c because it is something that needs to be looked at. The point was picked up in the task force report, and it remains the case that all options are open.

I have written something down in my own handwriting which I cannot remotely read. I hope that noble Lords will forgive me if I pick up the point in the write-around later. I turn to the timescale for the tower, which was raised by the noble Baroness, and where the work needs to be done by December 2017. As I say, the department and the Government have accepted all the recommendations, so we are looking for that to be completed within the timescale. I reiterate that the Secretary of State has made that absolutely clear on behalf of the Government.

My Lords, I remind the House that I am a vice-president of the Local Government Association. I should like to address the issue of emergency planning. It has become clear from this report that the Royal Borough of Kensington and Chelsea did not have an operational emergency plan in place when the Grenfell fire broke out in June. The Statement does not actually tell us whether there is one in place now, or whether officers are being employed in the council to deliver one. However, on page three the report states:

“This intervention has not had the benefit of an inspection that would identify specific failings in a local authority and would precede a statutory intervention”.

Will action be taken to assess the robustness of Kensington and Chelsea’s emergency planning, which is a statutory requirement? Also, can the Minister say what advice his department will now give to other local authorities about emergency planning arising from the lessons being learned in Kensington and Chelsea?

I thank the noble Lord for his question in relation to emergency planning. He will be aware that one of the terms of reference of the inquiry is the actions of the local authority and other bodies before the tragedy, so it certainly will be picked up by the inquiry. Further to that, what we obviously want to ensure, and no doubt the House will totally support this, is that all the lessons from this are learned by all local authorities and public authorities. We would wish the message to go out and we will ensure that that happens. The messages from this are to be learned by local authorities for the future, including in relation to emergency planning along with many other issues.

My Lords, I declare my local government interests as a councillor in Newcastle and as an honorary vice-president of the Local Government Association. I thank the Secretary of State and the Minister for the tone and the content of the Statement that has been made today. It is clear that there is a great deal going on, and a great deal more to be done. However, I should like to ask about the general situation in the country. What is going to happen about the installation of sprinklers up and down the country? That is a key issue. I am not expecting an immediate decision, but is there a timescale within which it is likely that a decision can be made?

In addition to that, to what extent are the Government engaging with the owners of other multi-story buildings; that is, housing associations and privately owned blocks that are not in the social housing sector? Presumably all of these blocks will need the same checks that were lamentably lacking in the case of Grenfell if we are not to see, unfortunately, some kind of repetition. It is not a matter that can be resolved quickly, but the sooner we start on it, the better. I hope that the Minister can give us some assurances in those respects.

I thank the noble Lord very much indeed for his typically generous comments about the tenor of the Government’s response to this dreadful tragedy. He asked specifically about the position on sprinklers. Perhaps I may restate something that has been said before, but it certainly bears restating: the Dame Judith Hackitt review is looking at building regulation and fire safety and it will certainly be considering this issue. I have also just looked at the terms of the inquiry and it is in there as well, so I have reassured myself that it is in place. Obviously we will await the results of these two independent inquiries. It is for them to make their recommendations and we would expect to carry them forward and regard them with appropriate seriousness.

The noble Lord also asked about the position of blocks other than those which are within local authority control; he specifically asked about housing association and privately owned blocks, and perhaps by inference other government blocks—there are some in the health sector and in education that are subject to the same principles that are being carried forward on testing and so on. That is true of housing associations as well. On private blocks, we have asked local authorities to follow up in relation to the blocks in their areas and have asked for a response from them. We will follow up on those responses in due course.

My Lords, perhaps I may follow up on a question put by my noble friend Lord Beecham on private blocks, and which I have raised before in the House with the Minister. Are local authorities required to hold information on the specification of the cladding that has been applied to private blocks where that cladding has been the subject of approval by building control officers in the local authorities where those blocks were built?

My Lords, if I may I will write to the noble Lord on the specifics of his question. However, on the general point, local authorities are being required by us to report on all private blocks that may offend in relation to these safety standards. As I say, I will get back to the noble Lord on his particular point.

My Lords, building on the comment by the noble Lord, Lord Shipley, in relation to the terms of reference of the inquiry, it does not seem that the systemic issue that this raises is actually strictly within those terms of reference. It refers to the arrangements that the local authority and other organisations had in place to respond to complaints made by residents in relation to the fire safety of buildings. The question really raised the point about the systemic issue. Although Grenfell was unprecedented, the strength of the local authority not only in emergency planning but in other areas to deal with this kind of incident was lacking, yet there were other authorities which came to the aid of the Royal Borough of Kensington and Chelsea which seemed to have maybe better senior management and leadership. Do we need some form of stress testing of local authorities to see whether they are up to responding to this type of incident? As I read them, that does not seem to be strictly within the terms of reference of the inquiry.

I thank my noble friend. I have the inquiry’s terms of reference in front of me. First of all, I am not sure whether she was referring to the issue of fire sprinklers; perhaps not. The inquiry covers the scope and adequacy of the relevant regulations, legislation and guidance. It also refers to the actions of the local authority and other bodies before the tragedy, which puts it in scope. I am sure that any inquiry chairman, if they wanted to report, would regard that as in scope. I had better not go further than that.

My Lords, the Minister referred to culture. He used words such as “empathy” and quite rightly said that changing a culture is a very long-term project. Does he share my concern—this is no reflection on Barry Quirk at all—that local authorities must be tempted to put their efforts into senior leadership and front-line services, leaving a bit of a hollow in the middle? The culture has to go all the way down, and the people in the middle contribute to the culture. I am of course referring to the financial position that many local authorities find themselves in.

I thank the noble Baroness very much. Of course, she is very well acquainted with London local government, in particular. In relation to the culture, without prejudicing anything specific that is being looked at by any of the inquiries, I agree with her that the culture has to run throughout an organisation. She referred to finance. Once again, without wanting to prejudice anything in relation to the Royal Borough of Kensington and Chelsea, I do not think finance is a major issue here, certainly not in terms of the costs of finding additional housing. We know the borough has the money for that, so I think that would be covered. She made another point, which I have now forgotten.

I was talking about local authorities focusing on senior leadership and front-line services, leaving something of a hollow in the middle. It is a much wider question than one can deal with in an afternoon.

I am sorry, that was the point I picked up on. I agree with her that culture has to be pervasive through the whole organisation. I am sure that that would be picked up, but again, that will be looked at by the inquiries. I do not want to prejudge what they will find.

My Lords, my noble friend has not said anything—I wonder if anything is known about it—about the prevalence of the habit that was exposed by the tower fire of tenants of such social housing moving out and letting their accommodation at an extraordinarily large profit to themselves, which enables them to live in much better accommodation somewhere else, and all sorts of people who may have no entitlement whatever to social housing moving in. Are we thinking a bit more about what should be done about that?

My Lords, clearly those issues must be looked at at some stage. I am sure my noble friend will appreciate that the tenor of the department’s concern at the moment is dealing with the grief, anguish and injury, and getting people properly rehoused. I will make sure that he gets a response about what is being done by the Royal Borough of Kensington and Chelsea, but I think the Government are right to ensure that the focus is on rehousing and putting these people’s lives back together. That is not to say that those issues are not important, but I do not think they are as important as these issues.

My Lords, I apologise to the Minister for not being in my place to hear the earlier part of the Statement. Nevertheless, I think we all know that local housing authorities have certain powers of compulsory purchase of properties. Can the Minister tell the House whether, in his view, using those powers would speed up the permanent rehousing of the displaced people and families?

My Lords, I thank the noble Lord for his question—and his apology, which is accepted. On compulsory purchase powers, the first point I would make is that compulsory purchase can take quite some time. There is a degree of urgency here, as has been indicated by the task force response. I should also restate, although I think the noble Lord was in his place by this stage, that the Royal Borough of Kensington and Chelsea will come forward with an announcement in short order about how it will give more impetus to the issue. For the moment, from the department’s point of view, compulsory purchase would not be an appropriate response, partly because it would be too slow.

Data Protection Bill [HL]

Committee (2nd Day) (Continued)

Amendment 21A

Moved by

21A: Clause 9, page 5, line 41, at end insert—

“( ) The processing is compliant with Article 9(4) of the GDPR on additional conditions for processing biometric data if it meets the conditions in Part 3A of Schedule 1.”

My Lords, I beg to move Amendment 21A and also speak to Amendment 66A. I also support Amendments 41 and 44, but my noble friend Lord McNally will speak in support of those.

The issue in question is the need for a lawful basis for biometric data used in the context of identity verification and authentication to increase security. Biometric data changes its status under the GDPR and becomes a new category of sensitive data. That narrows the lawful basis on which companies can collect and use biometric data, and it makes this processing of data difficult or impossible because the only lawful basis available is consent, which is not appropriate or feasible in the circumstances.

Biometrics are increasingly being used in different sectors for identity verification and authentication, both as a security measure and to provide greater identity assurance. I am sure that anybody who has used the fingerprint security aspect of an iPad will be aware of that. Employers are also increasingly using biometric access controls for premises or parts of premises that require high security levels and access audit trails. Organisations using biometrics for additional security and assurance also need to keep their mechanisms up to date, and continually test and develop ways in which to prevent bad actors from hacking or gaming their systems. That research and development activity also requires biometric data processing and can involve AI or machine learning to train and test systems.

The Bill has a fraud prevention lawful basis for processing sensitive data, under a heading of “substantial public interest”. However, even assuming that the Bill is clarified and the fraud prevention lawful basis is available to use without having to satisfy an additional “substantial public interest” test, it is not suitable for the biometric uses described. The problem is the risk that necessary and desirable processing of biometric data will not be possible. Increased security benefits everyone, and it would not be desirable for the law protecting the use of personal data to be the barrier to organisations implementing better security for individuals.

The solution is that we acknowledge that the GDPR allows additional lawful bases for processing sensitive data. Specifically, Article 9(4) allows member states to add lawful bases for processing biometric, genetic or health data. The essence is that we use the option available under that article to add a lawful basis, as set out in the amendments. The amendments may not be technically perfect, but I hope that the Minister will agree that they are heading in the right direction. The proposed additional lawful basis covers three biometric data processing activities, described above. There are already safeguards for individuals in the GDPR regarding biometric data processing, as any large-scale processing of sensitive data is subject to a data protection impact assessment, which would be the case for identity verification or authentication as an integral and ongoing security or assurance feature of the service that the individual has chosen to use. The proposed amendment would also introduce this safeguard as a requirement for employee biometric access control processing. I beg to move.

My Lords, it falls to me to speak to a sequence of amendments from Amendment 35 to Amendment 68. Whereas we have had complicated issues before us in previous discussions on the Bill, most of these are probing and of a much simpler substance. I will proceed with them as best I may.

Amendment 35 is to paragraph 5(1), which states that a condition for substantial public interest is met only when the processing is carried out by the controller, who has,

“an appropriate policy document in place”.

The amendment we propose seems sensible and simple, which is that the policy document should be,

“made available to the data subject without charge”.

We repeat that in Amendment 68 to Part 4 of Schedule 1, where there is discussion of an “appropriate” document.

Amendment 37 probes the protected characteristics of the Equality Act. Whereas in the Bill just a few are mentioned, our amendment asks why all those included in the Equality Act are not in that list. In the amendment we can see the proposed extra categories that would be placed there to complete that list. Once again it seems sensible, having started on that track, to complete that process.

We come next to preventing or detecting unlawful acts. Amendment 38 asks about “a serious” test. We have had conversations with Reuters and a number of amendments are consequent on some of the observations we made in that conversation. Thus with Amendment 39 we would ask the information commissioning officer to clarify that processing must be carried out without the consent of a data subject where,

“a data subject is unlikely to give consent”,

for example to frustrate prevention or detection, where it would involve disproportionate effort to achieve consent or where the nature of the processing means that withdrawal of consent would prejudice prevention or detection of unlawful acts. That probes the extent to which these matters might apply.

Amendment 40 is again a probing amendment on the question of dishonesty, under the heading:

“Protecting the public against dishonesty”.

Perhaps we need to work out how better to define dishonesty. We all know what telling a lie is, but in the days of fake news we can perhaps have different or varying views on this. Perhaps it needs to be tied down a bit more closely.

Amendment 41 refers to protecting members of the public. It is unclear in the schedule whether this extends to protecting businesses from doing business with other businesses that would cause them severe reputational harm because, for example, they engage in modern slavery, bribery or whatever. It might be good to frame the law so it is clear that it involves businesses and members of the public. To skip an amendment for the moment, that ties in with Amendment 44. Paragraph 12 does not expressly allow screening by private companies for the purpose of checking against non-UK terrorist financing or money-laundering laws. Nor does it allow screening to be undertaken to comply with widely recognised guidelines such as those promulgated by the Financial Action Task Force, in which the United Kingdom Government participate. It seems sensible to include that screening in the Bill. The amendment seeks to achieve that.

Amendment 43 is to paragraph 12, which says that the condition of expressing a public interest is met,

“if the processing is necessary for the purposes of making a disclosure in good faith”,

under sections of the Terrorism Act and the Proceeds of Crime Act. Again, it would be nice to tie some of that down with further clarification. That might help us all. Amendment 45 asks about counselling.

That is the rather interesting daisy chain of amendments it falls to me to present. Since this is, for me, a maiden speech on a piece of legislation, nobody would expect it to be contentious, disputational or controversial. In that sense, I offer it for the consideration of the Committee.

My Lords, I will speak to Amendment 45A in my name. I am advised my Amendment 64 is not in the right place, so I direct the Committee’s attention to Amendment 45A.

Last Monday there was considerable focus in our discussions on the vital need to ensure that legitimate research—especially medical research in the public interest based on the personal data of patients—was not impeded by the terms of this legislation by requiring re-consents that might well be unobtainable. The noble Lord, Lord Patel, spelled out the arguments with great cogency and I do not need to repeat them.

My amendment seeks to ensure that another category of medical activity is not prevented from continuing to give help. I refer to patient support groups. At Second Reading I spoke about Unique, a not-for-profit charity that enables research into, and offers support to, sufferers of rare chromosome disorders and their families. These disorders can and often do result in severe and even profound lifelong disability for which there is no cure.

Since I spoke, many other patient support organisations have been in touch with the same concerns. They support my amendment. They include Genetic Alliance, which comprises 190 organisations giving support to individuals with rare or incurable conditions, such as the Down’s Syndrome Association; the MPS Society, which supports individuals suffering from mucopolysaccharide disease; Alström Syndrome UK; Prader-Willi Syndrome Association; the MND Association for motor neurone disease; Action Duchenne, which supports those suffering from muscular dystrophy; Save Babies Through Screening Foundation, which focuses on infants with Krabbe disease; the Lily Foundation, which supports those with mitochondrial disease; the PCD Family Support Group, for primary ciliary dyskinesia; UKPIPS, Primary Immune-deficiency Patient Support; SMA Support for spinal muscular atrophy; Vasculitis UK; and Annabelle’s Challenge.

All these groups support the amendment I tabled. I could go on; there are others. I have listed them because I do not want it thought that there is in my amendment any suggestion of special pleading for a very small number of organisations. On the contrary, patient support groups are numerous and do unsung but irreplaceable work among individuals and families for whom life can be very hard.

What is the problem with the Bill? Schedule 1 lists a number of circumstances in which the special category of sensitive personal data can be processed without explicit consent for reasons of public interest. But patient support groups do not fall into the categories of organisations that can avail them themselves of this exemption, nor do the purposes for which they collect personal data qualify. This means that the Bill will oblige patient support groups which collect health information from their members either to re-contact everyone from their database to get renewed explicit consent, or to destroy or anonymise any data not re-consented.

On the face of it, this may seem perfectly reasonable, but it takes no account of the real-life situation of the individuals and their families which the patient support groups help. I explained at Second Reading how in reality carers, who may be the other side of the world, may not respond to communications but then, possibly years later, communicate to ask for help or get in touch to help each other. It is certainly wasteful and gratuitously harmful to require such data to be destroyed when it is the very basis on which these groups can offer relevant support. In the case of Unique, experience suggests that up to 50% of existing data would need to be destroyed, having been accumulated over 30 years, and thus lost for current and future research and sufferers. I am sure this cannot be the intended outcome of the Bill.

Anonymisation, which in some circumstances might be an acceptable answer, does not provide a solution in the case of support groups. Matching disease types enables support groups to give informed prognoses to the families of sufferers and to their clinicians, who individually may not have met such a rare condition before. They help with practical advice and put sufferers and their families in touch with each other, thus improving their prospects and relieving distress and loneliness. But to do this, they need access to names and addresses and special-category data of their members, because anonymous data are of absolutely no use in this context.

Medical research would also be the loser as the Bill stands. To take one example, the MND Association, the motor neurone support group, has more than 3,000 blood samples in its collection, cell lines and accompanying clinical information. This database has been and is used in a variety of research projects to look at potential causative genes. Samples will also be used to screen potential drugs. To all this, the personal data of the individuals concerned is essential and it is not guaranteed that they will always be capable of being re-contacted.

In this context, perhaps I may quote from a statement by Public Health England in support of the work of patient support groups:

“We are clear that patient registries, particularly for individuals with less common conditions, are one of the most valuable sources for the care, research and support of patients and their families. In many cases they are the only source of information on some disorders. Some collections stretch back many years. This historical record is essential for longitudinal studies and long term follow up … These searches can only be performed on well curated, identifiable data as people change their names and locations”.

Public Health England goes on to say that the question is about the adequacy of the consent obtained in the first place and whether it meets the enhanced rights of data subjects under the GDPR. Absolutely—there is no argument that the consent at the outset needs to be of a good standard so that subsequent use of personal data can be validly based on it.

My amendment would confine the special provision that I am proposing to members of organisations for specific purposes which I would hope we could all agree lie in the public interest. It would not open the floodgates to a collection of streams of unconsented personal data for undefined purposes. I therefore hope that the Government can agree to my amendment.

My Lords, as my noble friend Lord Clement-Jones indicated, I shall speak to Amendments 41 and 44, which were eloquently introduced by the noble Lord, Lord Griffiths. I had no idea that it was a maiden speech from the Front Bench, and it is to the discredit of the Labour Party that it has taken him so long to climb to the top of the greasy pole. Having got there, I hope that he enjoys the view.

As the noble Lord indicated, these amendments are inspired mainly by Thomson Reuters and others in the City. I attended a seminar in the City some weeks ago in which the corporation, the City of London Police and some leading companies talked about the challenges that data was bringing them. At the core of this is a concern that the Bill is loosely and poorly worded in preventing private companies doing work with data which will help them to keep best practice in line with the objectives for corporate governance and efforts to fight crime, terrorism, slavery, bribery and corruption.

I hope the Minister can give some comfort that the Bill will give cover to companies, financial institutions and others to carry out this kind of data activity and allow screening by private companies for the purposes of checking against non-UK laws on terrorist financing or money laundering. It should be amended to allow compliance with widely recognised guidelines such as those promulgated by the Financial Action Task Force. In the light of the Minister’s response and in consultation with those who have asked us to raise this matter, we would see whether we wanted to take it further. At the source of these amendments is a concern on the part of companies which I think genuinely want to help.

My Lords, I want to raise an issue which I would be grateful if it were thought about, although I would not dream of asking the Minister to give an informed reply today. I am puzzled especially by Amendment 37, spoken to by the noble Lord, Lord Griffiths, because I spent a good deal of my time developing the Equality Act 2010 and we were very concerned when doing so about issues of personal privacy and enforceability.

Obviously, one size does not fit all when it comes to equal opportunity and treatment. It is fairly easy to operate a policy measuring ethnicity, for example, without any problem about privacy; it is pretty easy to do so in respect of gender, although gender does not at the moment figure in the list for some reason, but it becomes terribly difficult when one is dealing with sexuality, religion or philosophical belief, which are for some reason in the list at the moment. I would be grateful if the Minister could reflect with people from the Government Equalities Office on whether this is an example of overlegislation, which it would be much better to prune down.

I am all in favour of affirmative action to promote equality between the sexes or people of different ethnicity, but when it comes to religion, philosophical belief and the other matters that are either there at the moment or would be there under Amendment 37, I get very worried. For example, I once represented the Church of Scientology—successfully—in establishing that scientology is a religion. I would not like these provisions to be the source of conflict and division between one kind of religion and another, or one kind of no religion and humanists, and so on. I think it is an example of overlegislation and underlegislation, and needs to be sorted.

My Lords, I am grateful to all noble Lords who have participated. I am especially grateful for the clear way in which the noble Lord, Lord Griffiths, outlined the case for all his amendments. He could have chosen an easier Bill to start on, I must say, but he did it very well. I am grateful for the opportunity to set out the purpose of various conditions included in Schedule 1, this time specifically with reference to Part 2.

As we have already discussed, for “special categories of data” to be processed lawfully, controllers must demonstrate that their processing meets one of the processing conditions set out in article 9 of the GDPR. We have already touched on several of these. Here we turn to processing which is,

“necessary for reasons of substantial public interest”.

Clause 9 requires that controllers wishing to rely on this processing condition must meet one of the conditions set out in Part 2 of Schedule 1.

Paragraph 7 of Schedule 1 allows processing of certain specified special categories of personal data for the purpose of promoting equality of opportunity. Amendment 37 seeks to expand this condition to permit the processing of additional categories of personal data. This is unnecessary because the categories of data referred to in the amendment are either not considered by the GDPR framework to be special categories of data in the first place or covered by the categories already listed in paragraph 7 of Schedule 1; for example, “Personal data revealing age” need not be listed because it is not subject to additional protection to begin with.

The Government accept that the existing special categories of data are broad and in some circumstances will overlap with the categories of data suggested in the amendment; for example,

“Personal data revealing a disability”,

will fall within the special category of “Data concerning health”. But in these cases, paragraph 7 already permits the processing of such data for equality-monitoring purposes. I will read carefully the remarks of the noble Lord, Lord Lester. I suspect his point is to do with what is and what is not a special category of data, but I will read Hansard and write to him, and copy other noble Lords. I thank him for not requiring a considered answer tonight.

Amendments 38 and 39 address the condition in paragraph 8 which permits the processing of data where this is,

“necessary for the purposes of the prevention or detection of an unlawful act”.

Amendment 38 would make it clear that the condition was available only if the unlawful act in question was “serious”. I can understand the rationale behind the amendment but the Government consider that it might nevertheless be in the substantial public interest for an organisation to process data for the prevention or detection of an unlawful act that was not obviously “serious”. An offence such as driving without a licence or insurance may not be the most serious in terms of the maximum penalty available, but it could still be in the substantial public interest for it to be reported by the data controller. Paragraph 8 ensures that data controllers are empowered to make that call and be accountable for their decision.

Amendment 39 would make the condition available only,

“under circumstances in which it is reasonably clear that a data subject is unlikely to give consent”.

While similar provision is made in other conditions where required, the Government consider that it would not be appropriate in this case, given that the purpose is to process data in circumstances where seeking consent risks prejudicing the prevention or detection of an unlawful act.

Amendment 40 would remove the word “dishonesty” from paragraph 9(2)(a) so that an organisation could rely on this provision only if it were processing sensitive categories of personal data to protect the public from malpractice, other seriously improper conduct or the other listed behaviours. The Government consider that there might be situations where an organisation would also need to process data to protect the public from dishonesty that does not necessarily amount to malpractice or improper conduct. It is therefore right that the paragraph covers the full gamut. This processing condition is not new; a similarly worded provision already exists under the current Data Protection Act.

The noble Lord, Lord Griffiths, suggested that there was a need for a further definition of “dishonesty”. I am afraid we do not agree. The word has a plain English meaning, defined in the dictionary. Furthermore, to define it here would cause confusion as it is used throughout UK legislation.

Amendment 41 would extend the scope of the same processing condition so that it could also be used to protect bodies and associations, rather than just the general public, from dishonesty, malpractice and improper conduct. It is one thing to allow the processing of an individual’s personal data for the purposes of protecting the general public—that is, other individuals; there is a neat symmetry there—but quite another to suggest that it could be processed to protect organisations from reputational harm. On that basis, I cannot agree to include it.

Amendments 43 and 44 address the processing condition in paragraph 12 which allows organisations such as banks to make disclosures “in good faith” under the Terrorism Act 2000 and the Proceeds of Crime Act 2002 about third parties who are suspected of terrorist-financing offences or money laundering. This processing condition is intended to protect organisations that disclose data on the basis of a genuine suspicion, even if it turns out later not to have been well founded. Noble Lords will recall that this condition was debated and agreed to as part of the Criminal Finances Bill earlier this year. The condition is tied to the improvement of a specific statutory regime—known as the suspicious activity reports regime—and is designed to give legal clarity to encourage the sharing of information to prevent serious crime and terrorism. I know there are some in the financial sector who have suggested that these provisions should go further to permit screening by private companies for the purposes of checking against non-UK laws on terrorist financing and money laundering. As noble Lords may be aware, the relevant provisions in the Criminal Finances Act were commenced only at the end of last month. We are not convinced that there is a need to amend them at such an early stage.

Amendment 45 would amend the processing condition relating to,

“confidential counselling, advice or support”,

in paragraph 13. It would add “guidance” to the list of processing activities which are permitted under this provision. This paragraph is not new; the relevant wording is drawn directly from existing legislation. But I am happy to put on the record the Government’s view that guidance is already covered by this provision and thus there is no need to amend it.

Amendments 45A and 64 in the name of my noble friend Lady Neville-Jones seek to clarify the legal status of processing by patient support groups. The Government strongly support the varied and important work of patient support groups and I am grateful for my noble friend’s time in meeting me recently. It is important to reiterate that groups such as Unique will have access to a number of provisions already in the Bill, even in cases where consent cannot be obtained, or reobtained, from the data subject.

We discussed the provisions for scientific research last week. In addition, paragraph 13 of Schedule 1 makes provision for confidential counselling, advice and support. Taken together, the provisions I have mentioned—for consent, scientific research, and confidential counselling, advice and support—seem to cover a great deal of the vital work undertaken by patient support groups. But the Government retain an open mind on this and I will read my noble friend’s contribution in Hansard carefully.

Amendment 52 would amend the processing condition relating to occupational pensions contained in paragraph 16. At the moment, processing in relation to occupational pensions forms part of a processing condition in relation to insurance. In drafting the Bill, the Government have simply decided, in the interests of clarity, to give it a processing condition in its own right.

I turn now to Amendments 35, 67 and 68, which concern the requirement for data controllers to have an appropriate policy document in place when processing special categories of personal data and criminal convictions data in certain circumstances. The requirement for an appropriate policy document is new; there is no such requirement in the current Data Protection Act. It further enhances the Bill’s commitment on transparency and the protection of individuals’ data. Paragraph 31 requires that the data controller make the policy document available to the Information Commissioner on request and without charge. We consider that the Information Commissioner is best placed to consider whether the policy document meets the technical requirements and can take any further appropriate action, if required.

In considering whether there is value in extending a similar right to data subjects, as Amendment 35 does, it is worth noting that controllers will be obliged to provide data subjects with clear and comprehensive information on how their personal data will be processed as well as on their associated rights as data subjects. This obligation attaches to all data controllers, not just those required by the Bill to maintain an appropriate policy document. If, on the basis of the information provided, a data subject believed that there had been a breach of the law, they would be able to raise their concerns with the Information Commissioner who has powers under the Bill to investigate and take action in respect of breaches of data protection law.

Finally, I turn to recent Amendments 21A and 66A tabled by the noble Lords, Lord Clement-Jones and Lord Paddick. As we have heard, article 9(1) of the GDPR prohibits the processing of sensitive categories of data, including biometric data which can be used to identify someone, unless the conditions in article 9(2) can be satisfied. As the noble Lord, Lord Clement-Jones, explained, article 9(4) allows the UK to introduce further conditions with regard to the processing of biometric data. These amendments propose to do that by creating a new part in Schedule 1 dealing with the processing of biometric data to make it clear that biometric data can be processed where it is used as a security feature to access a service that the data subject has chosen to use. As the noble Lord explained, many of us are familiar with the verification devices on mobile phones and computers which allow the user to access the service using fingerprint recognition.

I have fingerprint identification on my mini iPad, but I also have a password. Sometimes the fingerprint will not work, and you have to use the password.

I agree. I have the same. You have to put in your numerical password every so often just to check that you have still got the same finger. Technically, you might not have.

The amendments also seek to permit the processing of such data when biometric identification devices are installed by employers to allow employees to gain access to work premises or when the controller is using the data for internal purposes to improve ID verification mechanisms. I am grateful to the noble Lord for raising this important issue because the use of biometric verification devices is likely only to increase in the coming years. At the moment, our initial view is that, given the current range of processing conditions provided in Schedule 1 to the Bill, no further provision is needed to facilitate the activities to which the noble Lord referred. However, this is a technical issue and so I am happy to write to the noble Lord to set out our reasoning on that point. Of course, this may not be the case in relation to the application of future technology, and we have already discussed the need for delegated powers in the Bill to ensure that the law can keep pace. I think we will discuss that again in a later group.

On this basis, I hope I have tackled the noble Lord’s concerns, and I would be grateful if he will withdraw the amendment.

My Lords, as usual the noble Lord, Lord Maxton, has put his finger on the problem. If we have iris recognition, he will keep his eye on the matter.

I thank the Minister for his explanation of the multifarious amendments and welcome the maiden speech from the Front Bench by the noble Lord, Lord Griffiths. I do not think I can better my noble friend Lord McNally’s description of his ascent to greatness in this matter. I suspect that in essence it means that the noble Lord, Lord Griffiths, like me, picks up all the worst technical amendments which are the most difficult to explain in a short speech.

I thought the Minister rather short-changed some of the amendments, but I will rely on Hansard at a later date, and I am sure the Opposition Front Bench will do the same when we come to it. The particular area where he was disappointing was on what you might call the Thomson Reuters perspective, and I am sure that we will want to examine very carefully what the Minister had to say because it could be of considerable significance if there is no suitable exemption to allow that kind of fraud prevention to take place. Although he said he had an open mind, I was rather surprised by his approach to Amendments 45A and 64 which were tabled by the noble Baroness, Lady Neville-Jones. One will have to unpick carefully what he said.

The bulk of what I want to respond to is what the Minister said about biometrics. I took quite a lot of comfort from what he said because he did not start quoting chapter and verse at me, which I think means that nobody has quite yet worked out where this biometric data fits and where there might be suitable exemptions. There is a general feeling that somewhere in the Bill or the schedules we will find something that will cover it. I think that may be an overoptimistic view, but I look forward to receiving the Minister’s letter. In the meantime, I beg leave to withdraw the amendment.

Amendment 21A withdrawn.

Amendment 22

Moved by

22: Clause 9, page 5, line 42, leave out subsection (6)

My Lords, I rise to speak to another rather wide-ranging group, in terms of numbers, although I think we will find the amendments are a theme and variation on an issue that will run through not just this Bill but a number of Bills to come. I refer to secondary legislation and powers in the future when it is necessary for the Government of the day to try to change that which has been set down in primary legislation in the past.

Amendment 22, which kicks this off, is taken very largely from the report of the Delegated Powers and Regulatory Reform Committee. I make no apology for that. I think it is a very good report, as always, from that committee which does a fantastic job on what we are doing. I think I am probably interposing in a dialogue that may be carrying on out of our direct ken since normally in this matter one would get a memorandum, which I think we have seen, and I thank the Minister and the Bill team for that. The first response from the Delegated Powers and Regulatory Reform Committee will make some comments and I think it likely that the Minister and his colleagues will respond to that. We are only in the early stages, so I suspect we are a bit previous on this point.

However, this is an issue of some substance that may well be in all the Brexit-related Bills soon to arrive in your Lordships’ House, which suggests that we might just have a quick canter around it at the moment.

In preparing for this particular area, I had thought that we would just stick with Clause 9, but I was drawn into also putting in Clause 15, because there is an interesting point here that I wanted to raise with Ministers. The noble Lord, Lord Whitty, the noble Baroness, Lady Jones, and the noble Lords, Lord Clement-Jones and Lord Paddick, have had less restraint, and therefore we are covering quite a large number of the issues raised by the DPRRC. I look forward to hearing the response and to the wider contributions from those who have tabled amendments in this group.

The main theme that seems to run through this is what the committee says in paragraph 20 of its recent report, that,

“we take the view that the memorandum does not adequately justify the breadth of the power in clause 9(6) of the Bill, and that it is inappropriate for Ministers to be given carte blanche to rewrite any or all of the conditions and safeguards in Schedule 1 by regulations in order ‘to deal with changing circumstances’ instead of bringing forward a Bill”.

The committee then slightly changes its position by recognising that currently this is under the affirmative procedure, quite a strong measure to have in play in legislation, and suggesting an alternative approach:

“It may be appropriate … for Ministers to have a more focused power enabling them to update specific paragraphs”.

Maybe that is a line the Government will take. The essence of this is Henry VIII powers—how egregious they are and how bad it would be in future to come across them. At the same time we have to balance that against the obvious need, particularly in this Bill—as we have already discussed we are talking about fast-moving technology, although it applies in other areas—for some flexibility on the part of the Government of the day to bring forward amendments and changes as and when required. It is a balance and has to be struck properly, but the first shots in this have tended to be that Ministers are too aggressive. We await further discussions, but that is the ground which we will be traipsing around.

Amendment 106A relates to Clause 15(1)(b), at line 44 on page 8, which talks about,

“the power in Article 23(1) to make a legislative measure restricting the scope of the obligations and rights mentioned in that Article where necessary and proportionate to safeguard certain objectives of general public interest.”

I take this to be a quote from the GDPR. It is therefore couched in language which I think would be unexceptional if we were transposing the GDPR into the Bill, but of course we are not, and we are not allowed to amend it. The question really is what a legislative measure is. This is not a rhetorical question, because I would like an answer. In our system, as I understand it, Secretaries of State bring forward legislation in the form of a Bill. If they are not doing that, they bring it forward in secondary regulations. But a legislative measure has no apparent meaning in terms of the work we do—maybe the Minister will confirm that this is perfectly right. But for the moment, this probing amendment not only underlines the point made by the DPRRC in relation to the power in Clause 15 but is also about the particularity of the language used. I beg to move.

My Lords, I regret I was not able to speak to the Bill at Second Reading, but I take great delight in speaking to it this evening, on Amendments 22, 23, 107, 138 and Clauses 15 and 111. I am well aware that the Bill is extremely important. The digital age brings all sorts of opportunities for us but also lots of challenges, and it is absolutely right to keep up to date and make sure that we have legislation in place for the big questions of privacy in such rapidly changing times. When the current data protection legislation came in, most people were still getting to grips with email, and sending a text message on your mobile phone was a really fancy way of communicating. It is time that the legislation was updated.

The sheer volume and depth of personal data that are now floating around online would have been unimaginable then. We share the deepest and most personal details of ourselves quite freely these days, or at least some of us do. The Bill seeks to set important new standards for the protection of people’s data and give them more rights over how their data are used. So far, so good—for example it would allow some of us to ask the social media companies to delete any stupid comments we made a decade or so ago, which might help some MPs currently.

My problem with the Bill is twofold. Large parts of it are not about protecting people’s data or granting new rights. Significant parts of the Bill are focused on removing or reducing people’s data rights which are otherwise granted by the general data protection regulation. The noble Lord, Lord Stevenson, used the word “aggressive”, which is a very good word to use for some of these clauses. The Government are also trying to exercise too many derogations and opt-outs in the Bill. We should be aiming to protect people’s data as much as possible and restricting data rights only where absolutely necessary. This is the purpose of the amendments that I have tabled or signed.

The second problem is that this is such a power grab by the Government. We will hear a lot about this over the next few weeks and months, but the bypassing of Parliament like this by giving excessive delegated powers to Ministers is unacceptable. I can see, possibly, the need for the very occasional use of Henry VIII powers, but overall far too much power is being put into them. The Select Committee put it much better than I can:

“We draw attention to the number and breadth of the delegated powers in this Bill. This is an increasingly common feature of legislation which, as we have repeatedly stated, causes considerable concern. The Government’s desire to future-proof legislation, both in light of Brexit and the rapidly changing nature of digital technologies, must be balanced against the need for Parliament to scrutinise and, where necessary, constrain executive power”.

The privacy rights at stake in the Bill are so important that they absolutely must be properly approved by Parliament and parliamentarians. Changing these rights with delegated legislation is a nonsense. It is particularly important that Parliament remains responsible for deciding these rights, since so much of it applies to the Government’s use of personal data. We cannot allow the Government to decide what the Government are allowed. That is not a democracy; it is a dictatorship.

Amendment 22 relates to Clause 9(6). Article 9 of the GDPR has strict rules about processing particularly sensitive personal data, such as data,

“revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation”.

Processing that sensitive data is prohibited, except in a very limited set of circumstances set out in the GDPR or in legislation passed by Parliament. Schedule 1 to the Bill sets out 28 circumstances where the sensitive data is allowed to be processed, supposedly with relevant safeguards. Clause 9(6) is the Henry VIII power which allows the Secretary of State just too much power, to,

“amend … by adding, varying or omitting conditions or safeguards, and … make consequential amendment of this section”.

The Delegated Powers and Regulatory Reform Committee also concludes that Clause 9(6) is “inappropriately wide” and should be removed from the Bill. We all understand that there will be negotiations on the Bill. It is important to get it passed, but it is also important that it is passed right, and I very much hope this is one area where the Government will see sense and take out these sweeping powers. Personally, I think we must resist, with everything we have, any attempt by the Government to wrestle power over which of these rights are protected and which are not.

Clause 9(7) is a tidying-up provision; if Clause 9(6) is removed then subsection (7) has nothing to apply to, so it should also be removed.

In Clause 15, I put my name to Amendment 107 but I should have signed Amendment 108 as well. The super-affirmative resolution procedure would be much better than the affirmative resolution procedure as it would force the Government to have regard to the opinion of Parliament, but it would still be far from perfect. We would be much better off not having these broad delegated powers in the first place.

Amendment 130 in Clause 33 is about removing the power to amend Schedule 8 using delegated legislation. That is the same as in Clause 9, and the same applies to my amendment in Clause 84. In opposing Clause 111, I would like to remove the power to make further exemptions in relation to national security.

I look forward to seeing the Bill becoming something that we can all perhaps sign up to, but at the moment the Government are being far too aggressive and greedy for power.

My Lords, like the noble Baroness, Lady Jones, I understand the issues of fast-changing technology and the fact that it is very hard for primary legislation to keep up. My noble friend Lady Neville-Rolfe has asked me to express her sadness that she is unable to be here today due to a family funeral. I shall speak to the amendments in our name which, like Amendment 24, propose the super-affirmative resolution procedure.

The report by the Delegated Powers Committee speaks eloquently for itself. The arguments have been made already by the noble Lord, Lord Stevenson, and the noble Baroness, Lady Jones, and I shall not repeat them. Our amendments would do two extra things: they would put the super-affirmative resolution process in the Bill, which would make it a bit clearer—that seems more helpful—and would add a requirement for an updated impact assessment for industry, charities and public authorities. The reason for that is that the Executive could make changes under these powers, including adding a whole new technology to the data protection regime—so an impact assessment, according to my suggestion, would be essential. My noble friend Lady Neville-Rolfe and I would support any call for discussions with the Minister so that we can identify where the super-affirmative procedure should apply.

My Lords, I have two sets of amendments in this group. The first ones are actually amendments to that of the noble Lord, Lord Arbuthnot, because, like him, I think it would be useful, given the range of delegated powers within the Bill, if we wrote the super-affirmative resolution into the Bill. If we do not succeed in greatly reducing the amount of delegated legislation that is permitted under the Bill—although I hope my noble friend Lord Stevenson and others do—we need to treat that delegated legislation when it is brought forward in a way that is more intensive, consultative and engaging than our normal simple affirmative resolutions.

So I support the principle of the amendment of the noble Lord, Lord Arbuthnot, and the noble Baroness, Lady Neville-Rolfe. My Amendments 182A to 182C would simply add an additional dimension. As I read the amendment at the moment, it is emphatic on getting the Government to identify the impact on industry, charities and public bodies. The main point that we are all concerned about is actually the impact on individuals, the data subjects, yet they are not explicitly referred to in the draft of the amendment before us. My three amendments would therefore effectively do two things: first, they would require the Minister to consult data subjects or organisations representing them, such as consumer organisations, as well as those stipulated in the amendment as it stands; and, secondly, they would ensure that the impact assessments related to the impact on individuals as well as on organisations. I hope that the noble Lord would agree to my amendments at whatever point he and the noble Baroness propose to put this to the vote, in which case I could fully support their amendment.

My Amendment 22A is a specific example of the themes that my noble friend Lord Stevenson and the noble Baroness, Lady Jones, have already spelled out. I will not repeat everything they said but it is a particularly egregious form in that it allows the Minister—the noble Baroness, Lady Jones, has already referred to this—to add, vary or omit any safeguard that is in Schedule 1. I particularly object to “omit”. That does not simply mean modifying or tinkering in order to keep up with the technology; rather, it means omitting a serious safeguard that has been put in the Bill during its passage through Parliament.

Since Schedule 1 is pretty wide ranging, this could include issues that related to legal proceedings, crime, taxation, insurance, banking, immigration, public health or indeed any aspect of the public interest. That is a huge range of potential removal of safeguards that would not be subject to the approval of this House through primary legislation. If the safeguards persist and are maintained through the Bill when it eventually emerges, the ability of Ministers to vary them so drastically should be curtailed. I understand that my amendment would be pre-empted if my noble friend Lord Stevenson’s amendments were carried—but if they are not we definitely need to alter that clause.

This is a complex Bill because of the technology and because of the juxtaposition between European legislation and the position we are currently in with regard to it. The Bill is also an exemplar of what we are going to go through in Brexit-related legislation in a much wider sense. We must get right how we deal with delegated legislation post Brexit, and we need to ensure that the Bill is an example and does not concede powers to Henry VIII or indeed to the Minister that we might regret when his successors make use of them later.

My Lords, I can be very brief. I have not yet quite got through the concept of the Minister as Henry VIII. There is a clear common theme coming through every speech in the House today. The issue is whether the Government’s arguments for the use of the powers contained in the various clauses that have been mentioned—my amendments from these Benches, Amendments 24 and 107, relate to Clauses 9 and 15, but there is a broader issue—are credible and whether their desire for flexibility is convincing. As many noble Lords have mentioned, the Delegated Powers Committee did not find them particularly credible and stated:

“We regard this as an insufficient and unconvincing explanation for such an important power”.

That applies to Clause 15, but we on these Benches believe that the power in Clause 9 should not be there in its present form, either.

We have tried to be constructive. We have put forward a suggestion, as has the noble Lord, Lord Arbuthnot, for the use of the super-affirmative power. That is extremely well known and is enshrined in legislation—so, unlike the noble Lord, we did not feel the need to spell out exactly what the procedure was because it is already contained in a piece of legislation that I will no doubt come across in my notes at some suitable moment. It is now an extremely common and useful way of giving the Government flexibility, while allowing sufficient consultation before any regulations come to the House by affirmative resolution. We recognise that this could be fast moving, so it may be appropriate that the Government have those powers, provided that they are governed by super-affirmative resolution.

I expect that the BMA has made its views known to the Government. It is particularly concerned, in the context of Clause 15, that the Bill could give the Government an inappropriate fast-track power, for instance, to change the law on how confidential health data are shared, with little scrutiny or oversight. That is but one example of why we believe that amendments should be made.

I suppose that it depends on how the parties come together after Committee to agree on the best form of action in response to these Henry VIII powers—but I suspect that, on Report, there will be a deal of contention on the matter.

I can imagine how it was when the legislative programme was discussed in the Cabinet Office, or even at No. 10: how on earth do we get all this through? I am sure that the Civil Service advice was—or at least one adviser said—“Well, you could try by Henry VIII powers and lots of secondary legislation. Looking at the present rules, that is the only way that we think you could get it through in that timetable”. And so the process started.

I know that the big problem for Ministers in this House is that there will be great impatience in No. 10 and down the Corridor at any delays or defeats—but, as has been said a number of times, they are going about it the wrong way. We are heading for a constitutional car crash unless there is intervention at the very highest level to look at this problem. It is a twin problem: how do you give flexibility to make legislation fool-proof in a rapidly changing technological situation, which is one of the central problems for the Bill; and how do you deal with Brexit legislation in such a tight timetable?

I know what cannot happen. It would be the irony of ironies if an exercise that was supposed to return sovereignty to this Parliament ended up with this Parliament accepting a whole range of precedents that diminished its sovereignty. Therefore, although it is unfair on each Minister, this debate will continue to take place, and I hope that when we get to Divisions we will put a halt to this solution, so that some really hard thinking will be done about how to achieve the end of the Government getting their business through without sacrificing parliamentary sovereignty.

My Lords, I welcome this opportunity to set out the Government’s position on various delegated powers contained in the Bill, which have been the subject of recommendations by the Delegated Powers and Regulatory Reform Committee. The Government are very grateful to the committee for its usual thoroughness in examining the delegated powers in the Bill, but I should begin my remarks by saying that the committee’s report, which ran to some 20 pages, was published only on 24 October, so we are still considering its conclusions and recommendations. The range of views expressed in tonight’s debate will be further input into that process.

The current Data Protection Act has stood firm for almost 20 years. This one will be in danger of lasting barely two if we start striking out the delegated powers contained within it. As the noble Lord, Lord Stevenson, and the noble Baroness, Lady Jones, said, such is the pace of change in this area that we need to keep up with what is going on. Furthermore, new forms of data processing not yet dreamed of will have been designed, developed and deployed even before the Bill reaches Royal Assent. It is essential that the law can keep up.

It is also worth reminding ourselves that the Government have taken the opportunity to include directly in the relevant schedules numerous provisions which had previously been included only in secondary legislation. The noble Lord, Lord Stevenson, has been extremely busy, and has taken the opportunity to table more than a dozen amendments to Schedule 1 alone. We will of course turn to those shortly.

That said, the Government recognise that there is tension between the need to provide for appropriate future-proofing of legislation, such as provided for in Clauses 9, 15, 33, 84 and 111, and the need to ensure proper parliamentary scrutiny of the resultant delegated powers. It follows that we are open to constructive suggestions as to how provisions in the Bill can be improved and, obviously, that includes its regulation-making powers.

I have listened with care and interest to the case put forward by my noble friend Lord Arbuthnot, the noble Lord, Lord Clement-Jones, and the noble Baroness, Lady Jones, for the application of the super-affirmative procedure. I am also grateful to the noble Lord, Lord Whitty, for reminding us that data subjects, not just data controllers, have an interest in the proper application of these powers.

I am sure that noble Lords will agree that the amendments before us should be considered in the context of the broader recommendations of the Delegated Powers and Regulatory Reform Committee report. As I said earlier, the process of considering these issues is still ongoing, but I am more than confident that it will conclude in time for the Bill’s next stage.

Before I conclude, I think that the noble Lord, Lord Stevenson, asked what was meant by “legislative measure”. Clause 15(1)(b) uses the term “legislative measure” to reflect the wording used in Article 23 of the GDPR. Recital 41 makes clear that a legislative measure would include an Act or statutory instrument. I hope that that answers the question.

I therefore humbly invite the noble Lord to withdraw his amendment on the understanding that we will return to this important issue on Report.

I thank all noble Lords for their contributions; we have had a very good go at this, which has raised all the big issues. The Minister made a positive response, with a sideswipe at me for being too active on the amendment front; but that is what we do, and we expect Ministers to be able to deal with them without too much worry. We are enjoying this debate and will have lots of things to come back to on Report because of the interesting points being made.

However, on this issue, we are slightly narrower. The Government have got themselves into a bit of a hole here. I appreciate the wider context, and the point has been very well made. It seems to me that there are three options. They can tough it out and just say to the DPRRC that it has stepped too far from where they want to be and this is the only way forward. They can follow the DPRRC and find amendments that they can bring back on Report—I think the Minister was talking about Report; later than that would be too late. We are talking here about narrower powers to define down the areas within which discretion is operated. To follow the point made by the noble Baroness, Lady Neville-Jones, and the noble Lord, Lord Arbuthnot—I think this is my noble friend Lord Whitty’s concern and is shared widely around the House—the most egregious issue here is when the Government seek to omit legislation which has been passed as primary legislation by secondary legislation, or legislative measures, as we now call them.

The helpful suggestion, backed up by the noble Lord, Lord Clement-Jones—that we should have a super-affirmative measure when matters are almost of the status of requiring there to be primary legislation, but for which flexibility requires a lesser measure—seems to be the way forward. A very little research shows that “super-affirmative” has many meanings. That chosen by the noble Lord and the noble Baroness, Lady Neville-Jones, is one of about seven or eight. The Public Bill Office has published a table which noble Lords can pore over at leisure and find themselves completely confused at the end about the best route forward. I am sure the clerks will guide us as we go forward down that route. However, the best seems to be the one that provides for amendments to be made to the measure that is being considered before the vote. That is the sensibility which is being assembled around the Committee, and I hope that the Government will take it away and do it.

The noble Lord, Lord McNally, is right: there is a possibility here of a constitutional car crash. It is not restricted to this Bill, and no noble Lords who have spoken in this debate would want it to be taken, sui generis, to this Bill. It has to be taken more widely, because it is a much bigger issue. On the other hand, this provides an opportunity to go forward. In the meantime, I beg leave to withdraw the amendment.

Amendment 22 withdrawn.

Amendments 22A to 24 not moved.

Clause 9 agreed.

Schedule 1: Special categories of personal data and criminal convictions etc data

Amendment 25

Moved by

25: Schedule 1, page 112, line 8, leave out paragraph (a)

My Lords, the amendments in this group are largely in my name and that of my noble friend Lord Stevenson of Balmacara and are probing in nature. We look forward to the Minister’s response, as we seek to test the provisions before the Committee.

The GDPR generally prohibits the processing of special category data, with article 9(2) of the GDPR providing for circumstances in which, on the processing of special category data, article 9(1) may not apply. Paragraph 1 of Schedule 1 states that it may not apply if,

“the processing is necessary for the purposes of performing or exercising obligations or rights of the controller or the data subject under employment law, social security law or the law relating to social protection”.

Amendment 25 would delete paragraph 1(1)(a) on page 112 of the Bill, and I hope the Minister will be able to explain to the Committee why the provision, in the form it is written in the schedule, is necessary.

Amendment 25A in the name of the noble Earl, Lord Kinnoull, and the noble Lord, Lord Clement-Jones, changes the emphasis by deleting the word “under” and replacing it with the words “in connection with”. That probably widens the scope, but it will be useful to hear the noble Lords speak to that amendment and the Minister’s response.

Amendments 27 and 28 in my name and that of my noble friend Lord Stevenson move on to the question of health and social care purposes. Specifically, these amendments delete two conditions concerning,

“the working capacity of an employee”,


“the management of health care systems or services or social care systems or services”.

When the Minister responds, will he specifically address why paragraph 2(2)(b) of Schedule 1 is deemed necessary? Will he give the Committee some examples of the data on the working capacity of an employee that would be collected under this provision of the assessment? It would also be helpful to understand why paragraph 2(2)(f) of Schedule 1 is necessary and why it would not be covered under paragraphs 2(2)(d) and 2(2)(e).

Amendment 29 would delete paragraph 3(a). We have tabled the amendment simply to enable the Minister to state clearly and to put on the record why this sub-paragraph is necessary. Amendment 31 would strengthen the sub-paragraph by putting the words,

“who owes a duty of confidentiality”,

after “health professional”. Those words are used in paragraph 3(b)(ii) and we can see no reason why they are not used in 3(b)(i). If the Minister thinks that they are not necessary then will he say so clearly for the record and explain his reasoning carefully? Amendment 70 puts the words in the same context on the face of the Bill.

Amendments 31 and 32 concern paragraph 4 of Schedule 1. They would sharpen up and widen the definition in the Bill and make it clearer that “archiving” includes collections of physical and digital materials. The wording in the Bill at the moment is a big weakness and these amendments, and Amendments 33 and 34, help improve it.

The final amendment in this group would add to Clause 15 a subsection which puts into the Bill a clear restriction that if there is a common law duty of confidentiality it cannot be overridden by regulations under the Act. That is an important safeguard that belongs on the face of the Bill. There is a lot here for the Committee to debate. I beg to move.