PARLIAMENTARY DEBATE
Investigatory Powers (Amendment)Bill [Lords] - 25 March 2024 (Commons/Commons Chamber)
Debate Detail
[Relevant Documents: Correspondence between the Joint Committee on Human Rights and the Home Secretary, on the Investigatory Powers (Amendment) Bill, reported to the House on 6 March and 22 March.]
Brought up, and read the First time.
New clause 2—Requirement for the Secretary of State to publish an annual report on technology-enabled serious and organised crime and technology-enabled threats to national security—
“After section 234 of the Investigatory Powers Act 2016, insert—
“234A Requirement for the Secretary of State to publish an annual report on technology-enabled serious and organised crime and technology-enabled threats to national security
(1) The Secretary of State must publish a report on technology-assisted crime insofar as it relates to measures set out in this Act and the Investigatory Powers Act 2016.
(2) The report must be published within one year of the passing of the Investigatory Powers (Amendment) Act 2024, and annually thereafter.””
This new clause would ensure the Secretary of State publishes an annual report on technology-enabled serious and organised crime and technology-enabled threats to national security insofar as it relates to measures set out in this Act and the Investigatory Powers Act 2016.
New clause 3—Prevention of torture or cruel, inhuman or degrading treatment or punishment—
“(1) The Investigatory Powers Act 2016 is amended as follows.
(2) Before section 260 (and the cross-heading before that section), insert—
“Prevention of torture or cruel, inhuman or degrading treatment or punishment 259A Prevention of torture or cruel, inhuman or degrading treatment or punishment
No public authority may take any action, whether retention, examination, disclosure, handing over to any overseas authority or any other action authorised by this or any other enactment, in relation to material obtained in accordance with the provisions of this Act if the public authority knows or believes that action—
(a) would result in torture or cruel, inhuman or degrading treatment or punishment, or
(b) presents a real risk of resulting in torture or cruel, inhuman, or degrading treatment or punishment.””
New clause 4—Members of Parliament: interception and examination of communications and equipment interference—
“(1) The Investigatory Powers Act 2016 is amended as follows.
(2) In section 26 (targeted interception warrants and targeted examination warrants: Members of Parliament etc.), after subsection (2), insert—
“(2A) The Secretary of State may not issue the warrant if it relates to communications sent by, or intended for, a member of the House of Commons.”
(3) In section 111 (targeted equipment interference warrants: Members of Parliament etc.), after subsection (7), insert—
“(7A) A warrant may not be issued under this section if it relates to—
(a) communications sent by, or intended for, a member of the House of Commons, or
(b) a member of the House of Commons’s private information.””
This new clause would remove the ability of the Secretary of State to authorise the interception of the communications of, or the obtaining of communications intended for, or private information belonging to, Members of Parliament.
New clause 5—Interception notification for Members of Parliament etc.—
“After section 26 of the Investigatory Powers Act 2016 (Members of Parliament etc.) insert—
“26A Interception notification for Members of Parliament etc.
(1) Upon completion of conduct authorised by a warrant under section 26, or the cancellation of a warrant issued under that section, a Judicial Commissioner must notify the subject of the warrant, in writing, of—
(a) the conduct that has taken place, and
(b) the provisions under which the conduct has taken place.
(2) The notification under subsection (1) must be sent within thirty days of the completion of the conduct or cancellation of the warrant.
(3) A Judicial Commissioner may postpone the notification under subsection (1) beyond the time limit under subsection (2) if the Judicial Commissioner assesses that notification may defeat the purposes of an ongoing serious crime or national security investigation relating to the subject of the warrant.
(4) A Judicial Commissioner must consult the person who applied for the warrant in order to fulfil an assessment under subsection (3).””
This new clause would require members of a relevant legislature who are targets of interception to be notified after the fact, as long as it does not compromise any ongoing investigation.
Amendment 7, page 3, line 9, leave out clause 2.
Amendment 8, in clause 2, page 3, line 17, leave out “, or only a low,”.
Amendment 24, page 3, line 18, at end insert—
“(1A) This section does not apply to a bulk personal dataset unless it has been published in accordance with the Data Protection Act 2018.”.
This probing amendment would mean that individual and category authorisations for bulk personal datasets would not apply to bulk personal datasets unless they had been published in accordance with General Data Protection Regulation (GDPR) set out in the Data Protection Act 2018.
Amendment 9, page 3, line 34, at end insert—
“(4) By way of example, bulk datasets of images obtained by CCTV and bulk datasets of Facebook posts are not to be considered datasets where the individuals to whom the data relates could have no, or only a low, reasonable expectation of privacy.”.
This is a probing amendment regarding the scope of “low or no reasonable expectation of privacy”.
Amendment 10, page 5, line 7, leave out “any dataset that falls” and insert “all datasets that fall”.
This amendment would clarify that all the datasets covered by a category authorisation must be “low or no privacy” and not just some of them.
Amendment 11, page 11, line 2, at end insert—
“226DZA Notification and review of bulk personal datasets retained under category authorisations
(1) This section applies where a category authorisation has been approved by a Judicial Commissioner under section 226BB.
(2) The head of an intelligence service, or a person acting on their behalf, must notify the Judicial Commissioner within 28 days of a bulk personal dataset being retained or retained and examined under the category authorisation.
(3) The notification under subsection (2) must include a description of the dataset and the data it includes, the purpose for which it is being used and the number of individuals whose data is contained in the dataset.
(4) The Judicial Commissioner, on reviewing any notifications received under subsection (2), must cancel the category authorisation if the Commissioner considers that section 226A no longer applies to any dataset that falls within the category of datasets described in the authorisation.
(5) The Judicial Commissioner, on reviewing any notifications received under subsection (2), must cancel the relevant individual authorisation if the Commissioner considers that the condition in section 226B(4) is not met in relation to that bulk personal dataset.”
This amendment would provide for ex-post facto judicial oversight of the use of category authorisations, including the conditions for individual authorisations made under them.
Amendment 13, in clause 12, page 34, leave out lines 5 and 6 and insert—
“(e) where the communications data has been made publicly or commercially available by the telecommunications operator or postal operator”.
This amendment would align the new provisions with existing Communication Data Codes of Practice.
Amendment 12, page 34, leave out lines 5 and 6.
This amendment would remove one of the example cases where a relevant person has lawful authority to obtain communications data from a telecommunications operator or postal operator, being where the data has been “published”.
Government amendments 3 to 6.
Amendment 14, page 36, line 2, leave out clause 15.
Amendment 15, to clause 15, page 36, line 35, at end insert—
“(c) the Investigatory Powers Commissioner agrees with the judgment of the officer made in accordance with paragraph (b)”.
This amendment would ensure that all use of new powers in relation to Internet Connection Records was subject to oversight by the Investigatory Powers Commissioner.
Amendment 16, page 38, line 11, leave out clause 18.
Amendment 17, page 44, line 39, leave out clause 21.
Amendment 18, in clause 21, page 45, line 3, at the beginning insert “Subject to subsection (1A),”.
This amendment is consequential on amendment 19.
Amendment 19, page 45, line 6, at end insert—
“(1A) The Secretary of State may not give a relevant operator a notice under this section unless the notice has been approved by a Judicial Commissioner.
(1B) In deciding whether to approve a notice under this section, a Judicial Commissioner must review the conclusions of the Secretary of State as to the matters referred to in subsections (5) and (6)”.
This amendment would introduce judicial oversight of new powers to issue communications providers with notices requiring them to notify the Secretary of State of relevant changes to the service.
Amendment 25, page 47, line 28, leave out clause 22.
This amendment is consequential on NC4.
Amendment 20, in clause 22, page 48, line 13, leave out
“has the necessary operational awareness to decide whether”
and insert
“is either required in their routine duties to issue warrants under section 19 or section 102 or has the necessary operational experience”.
This amendment would permit the Prime Minister to nominate a Secretary of State to act for the Prime Minister under this section if they are required in their routine duties to issue warrants under section 19 or section 102 of the Investigatory Powers Act 2016 or if they have the necessary operational experience.
Amendment 21, page 48, line 14, at end insert—
“(2DA) The Prime Minister must be notified of the individual’s decision as soon as it is reasonably practicable to do so.”.
This amendment would require the Prime Minister to be notified of the decision of the designated Secretary of State as soon as is reasonably practicable.
Amendment 27, page 48, line 21, at end insert—
“(2G) The Prime Minister may not give approval under this section unless it has been authorised by a judge of the Supreme Court.”.
This amendment would require the authorisation of a judge of the Supreme Court before the Prime Minister could approve the interception of the communications of a Member of Parliament.
Amendment 26, page 48, line 22, leave out clause 23.
This amendment is consequential on NC4.
Amendment 22, in clause 23, page 49, line 13, leave out
“has the necessary operational awareness to decide whether”
and insert
“is required in their routine duties to issue warrants under section 19 or section 102 or has the necessary operational experience”.
This amendment would permit the Prime Minister to nominate a Secretary of State to act for the Prime Minister under this section if they are required in their routine duties to issue warrants under section 19 or section 102 of the Investigatory Powers Act 2016 or if they have the necessary operational experience.
Amendment 23, page 49, line 14, at end insert—
“(7DA) The Prime Minister must be notified of the individual’s decision as soon as it is reasonably practicable to do so.”.
This amendment would require the Prime Minister to be notified of the decision of the designated Secretary of State as soon as is reasonably practicable.
Amendment 28, page 49, line 18, at end insert—
“(7F) The Prime Minister may not give approval under this section unless it has been authorised by a judge of the Supreme Court.”.
This amendment would require the authorisation of a judge of the Supreme Court before the Prime Minister could approve the obtaining of communications intended for, or private information belonging to, a Member of Parliament.
I hope the Minister, and all Members who were present in Committee, agree with me that we had a constructive debate, testing the Bill’s proportionality and robustness. Some matters relating to third-party bulk personal datasets and the oversight process for the addition of new BPDs to existing category authorisations have been largely resolved to the satisfaction of Labour Members, but other important matters still need to be addressed. I will speak first about the new clauses and amendments that stand in my name, before dealing with some of those tabled by other Members.
New clause 1 seeks to ensure that the Secretary of State publishes an annual report on the engagement between the Prime Minister and the Intelligence and Security Committee regarding the investigatory powers regime. A very similar amendment was tabled in Committee, but was withdrawn after a lengthy debate on the ISC oversight arrangements did not make any meaningful progress despite helpful contributions from my right hon. Friend the Member for North Durham (Mr Jones) and the right hon. Member for South Holland and The Deepings (Sir John Hayes). We tabled this new clause because the Government must recognise that the ISC has a vital role to play in the democratic oversight of some of the most powerful measures that the state has at its disposal to keep us safe, to intercept communications and to interfere with equipment.
The ISC is and should be the only Committee of Parliament that can appropriately hold a Prime Minister to account on investigatory powers. There must be accountability at the highest level, and the Prime Minister is no exception. However, many Members, not least members of the ISC, know that this important mechanism is not just broken but has stopped working altogether. Not since 2014 has a Prime Minister appeared before the Committee, but, when asked about successive Prime Ministers’ lack of appearance, the Minister said that such decisions were above his pay grade. That might well be true, at least for now, so if the Minister cannot commit himself to reinstating the convention of Prime Ministers’ appearing before the Committee, the new clause would, at the very minimum, ensure that this new convention of non-attendance is reviewed annually, and scrutinised by this House and the other place. I therefore give notice of our intention to push the new clause to a vote.
New clause 2 would ensure that an annual report was published on measures in the Bill, and in the Investigatory Powers Act 2016, to defeat and disrupt technology-enabled serious organised crime and technology-enabled threats to our national security. We tabled the new clause because we must ensure that the law is always one step ahead of those who seek to harm us. The police and the security services are not best able to protect us today with the laws to counter the threats of yesterday, which is why we support this Bill to update the 2016 Act, which is now eight years old, but there is an opportunity to go further. The annual report proposed in the new clause would help to ensure that any changes required to primary legislation relating to investigatory powers were identified and implemented as quickly as possible. That would strengthen our legislative framework on national security, and weaken the capability and resolve of criminals and our adversaries.
I think that this is a genuine opportunity for the Government to work better with, and to constructively challenge, telecommunications operators and the wider communications technology industry on the requirements to use investigatory powers—a process that would be separate from the new notices regime included in part 4. A statutory requirement to produce an annual report on investigatory powers to counter threats to our security and safety would strengthen national security, as well as strengthening the oversight and safeguarding of measures to keep us safe. Those are two principles that guide this Bill and the 2016 Act, and that is why we will seek to push the new clause to a vote later this evening.
What concerns me is that we could write into law a system of oversight and regulation that does not properly address the way in which tech companies are involved in this area. Therefore, the best answer is to have a more iterative process, which I have no doubt the fantastic civil servants with whom I have the privilege to work will adapt. Whoever takes over from me in 20 or 30 years’ time will no doubt want to iterate that as well.
Before turning to amendment 24 on BPDs, which stands in my name, I would be very grateful if the Minister could say whether any progress has been made on arrangements to notify the Investigatory Powers Commissioner when adding new BPDs to existing category authorisations. It might not be in the Bill, but we think that even a reference to it in the IPC’s annual inspection would be helpful progress on this matter. The Minister, my right hon. Friend the Member for North Durham and I have discussed that, and I would be grateful if the Minister could said something about it.
I acknowledge the amendments on BPDs that were tabled by the hon. Member for Cumbernauld, Kilsyth and Kirkintilloch East (Stuart C. McDonald). Both of our parties have concerns about the definition of “low or no expectation of privacy” for BPDs, which we debated in a pretty constructive fashion on Second Reading and in Committee. However, Labour does not oppose the concept of “low or no expectation of privacy” for BPDs, which is why we will not support amendment 7, which was tabled by the SNP spokesman. Instead, amendment 24, which stands in my name, seeks further clarification on how “low or no expectation of privacy” will be applied to BPDs, with the aim that the parameters must be as clear as possible for the House to understand.
In Committee, the Minister used the Panama papers as an example of leaked and widely republished material being defined as a BPD with a low or no expectation of privacy. I understand why the Minister chose to use that example, but most other leaked documents containing personal information do not attract anywhere near the same level of media attention. Again, I would be grateful if the Minister took this opportunity to provide another example of information from a leak without widescale press coverage that would be suitable for the designation of a bulk personal data set with a low or no expectation of privacy.
Before I draw my remarks to a close, I will briefly speak to other amendments on the Order Paper, including those tabled by my right hon. Friend the Member for North Durham, other members of the ISC, and the right hon. Member for Haltemprice and Howden (Sir David Davis). We support amendment 23, which stands in the name of my right hon. Friend the Member for North Durham. It is very similar to the amendments we proposed in Committee regarding the Prime Minister’s delegation to a Secretary of State to issue a warrant to interfere with equipment relating to a Member. The amendment sets out that the Prime Minister must be informed of a decision taken by a designated Secretary of State on their behalf as soon as the circumstances that prevented the Prime Minister from approving a warrant in the first place have passed.
We believe that the Prime Minister’s overall involvement in those warrants must be retained, even if it is retrospective in designated cases, so it was a positive step that the Minister said he would look into including such a provision in the statutory guidance, in response to the very sensible points made by the right hon. Member for South Holland and The Deepings. However, we believe this does not go far enough, when this important notification arrangement should be on the face of the Bill.
This House should consider as many scenarios as possible when it comes to arrangements for prime ministerial power delegation on investigatory powers, even if scenarios of Cabinet members desperately trying to undermine the Prime Minister by any means possible perhaps belong more appropriately in “House of Cards” or “The Thick of It”. [Interruption.] I am sure that Conservative Members would have no idea about those kinds of activities; I am happy to take their word for that. But these are important matters, and we must seek to legislate carefully. The amendments tabled by the ISC are thoughtful and constructive, and I hope that, even at this late stage, the Government will consider accepting them.
New clause 3 also raises important questions about the sufficiency of the Fulford principles to ensure that there is not merely a presumption that these decisions are taken in accordance with the Human Rights Act 1998 and the European convention on human rights. The Government will always need to carefully consider the nuances and the risk of inaction when there is a clear and credible threat to life. We hope that they will reflect carefully on the important principles put forward in new clause 3, and I hope that the Minister will consider coming back to the House with their conclusions.
To conclude, this important Bill has demanded strong and careful scrutiny through its journey in the other place and in this House. Our personal liberties and our national security depend on it. It is in the national interest to get it right and to ensure that legislation like this is both appropriate and proportionate in its scope. It must also be effective in maintaining the powers that our police and security services already have to disrupt and defeat criminals and malign actors who seek to harm us and undermine our way of life. I hope that the Minister will listen carefully to the points made by Opposition Members and to the other right hon. and hon. Members speaking after me, all of whom will be working in the national interest and wanting to ensure that the Bill protects both our safety and our liberty.
Some of the elements of this Bill are not very wise. The Opposition have agreed that the pre-notification of tech companies will act to drive business away from our shores. That is, as I said earlier, the opposite of what the German Government are doing, and we are going to have to modify our approach to deal with some of our allies along the way.
I also have serious concerns about the bulk collection of data, which the Scottish National party has tabled an amendment on. I think it was Stalin who once said that, at a certain point, quantity has a quality all of its own. That is certainly true of information technology and bulk data. It was interesting to listen to the earlier brief debate on so-called “no expectation” and “low expectation of privacy”, by the way. Those are completely different things. They sound similar but they are completely different, as will become clear, I suspect, when the SNP spokesperson speaks to that amendment. Even today, “low expectation of privacy” data can tell a Government with quite primitive software vast amounts about our lives and about what we are doing every minute of every day, but with artificial intelligence that is going to be multiplied many times and become much more powerful than before.
To give colleagues a feel for how this might work, let us look back to the covid period, which in some senses was almost Orwellian. The Government had three different disinformation units of various sorts that looked at everybody’s comments. If someone commented on flaws in the modelling of the virus, questioned where the virus came from or quite properly stated that the vaccine did not stop transmission—it stopped deaths, but it did not stop transmission—this would lead to all their low or zero expectation of privacy documentation and all their online stuff being monitored by the Government. A number of Members of this House were monitored on that basis—in my view, entirely wrongly. That was all within the law as it stood then, so it was not massively important, but it nevertheless demonstrates the mindset of Whitehall when dealing with these things.
Today, however, nine out of 10 of us—if not more—carry a smartphone. That makes it easy to access our shopping habits, our purchase history, our bank records, our automatic number plate recognition records, and on and on and on. Do we really want the agencies of Government to be able to peer into all that data? It belongs to people who are, remember, entirely innocent of any crime. Our entire approach to law and order in this country has been to focus on people against whom there is a reasonable expectation or a reasonable suspicion, not to monitor everybody. It seems to me that this intrusive surveillance is a dangerous route to take and, as I say, I think we might regret it within 10 years, because the power of artificial intelligence will make this bulk data much more informative than we are conscious of today. I worry about it. I did not put an amendment down on it because others have done so, but it is something that we must concern ourselves with in the longer run.
One of my two principal concerns today is how the Bill relates to the expansion of powers around the surveillance of Members of this House. Until 2015, it was widely understood that the Wilson doctrine protected MPs’ communications from interception. This protection was repeated in unequivocal terms by successive Prime Ministers—even Tony Blair, who is not someone with a great reputation for worrying about Members’ civil liberties. Despite clear and unambiguous statements that MPs and peers would not be placed under surveillance, the Investigatory Powers Tribunal held in 2015 that the doctrine had been unilaterally rescinded by the Government.
In an attempt to ease concerns, the Investigatory Powers Act 2016 created a regime—the one we have now—whereby a Secretary of State must first secure the approval of the Prime Minister and a judicial commissioner before authorising the interception of an MP’s communications. Frankly, I have served under nine Prime Ministers as a Member of Parliament, and I cannot say I am happy that all of them would have taken a very responsible approach to exercising this power. This is an almost judicial power that is given to a person whom it is our job to challenge and hold to account every day.
The Bill seeks to expand the list of people who can sign off on the surveillance of MPs way beyond that, from the Prime Minister to effectively five Secretaries of State. There was a long argument in the Lords and in Committee about introducing words such as “unable” or “unavailable.” I think they had in mind that Boris Johnson was sick and laid up for a month or so and perhaps could not act in that capacity. Even by that logic, we do not need five Secretaries of State to be able to deputise, unless we are imagining a mass-casualty event in the Cabinet. Frankly, this seems far more like a precursor to a general loosening of the policy than a serious and sensible protection of the ability to sign this off. I worry about that, and I do not like it at all.
I do not like the idea of the surveillance of MPs except under incredibly strict circumstances. I am not casually asking for MPs to be somehow above the law, not at all. This protection is vital to safeguarding what we do. We are here to hold the Government to account, not the other way round. The relationship between constituents and their elected representatives is sacrosanct. It is the bedrock upon which our representative democracy stands, and constituents expect that, as they should. But it is not just constituents who rely on the sanctity of their communications with Members.
It is truer and more obvious today than at almost any time in my 30-odd years in this House that, in doing our job, we deal with campaigners—think of the sub-postmasters—journalists, whistleblowers, victims of injustice who may be terrified of being identified and, of course, other Members of Parliament, and that is just a few. They all trust us to keep what they tell us absolutely rock solid, private and confidential.
This Bill will do nothing but further undermine people’s trust in bringing serious matters to our attention. The Horizon scandal, Mid Staffs, sweetheart tax deals with large companies, the mistreatment of prisoners by the British Army, involvement in rendition and torture, and dishonest briefings for immoral wars—every single one of them was brought to our attention by a whistleblower who, in many cases, faced criminal prosecution if they were discovered. Are people likely to continue blowing the whistle with a loosening of the Wilson doctrine? I do not think so.
If I had my way, I would amend the Investigatory Powers Act to prevent communications to and from Members of Parliament from being intercepted at all. At the very least, I would change this proposal to require that the Prime Minister secures the approval of a Supreme Court judge before signing off on any warrant permitting the interception of a Member’s communications. That would take the process completely outside the normal approach under which the Investigatory Powers Tribunal and all the machinery around it routinely says yes to requests, day in and day out. Calling for, allowing or permitting the interception of the communications of a Member of this House or the other place ought to be something clearly extraordinary in the life of a Prime Minister. A Supreme Court judge is far more likely also to have the authority required to face down poorly justified demands, which has not always happened in the past. The Executive should not wield the power to order the surveillance of Members of this House at their sole discretion. The very senior judiciary should provide a vital check on that power.
I suspect this includes the Binyam Mohamed case, the Rangzieb Ahmed case and the Abdel Hakim Belhaj case, for which the Prime Minister had to apologise. We should be ashamed of all these things. I am afraid that, each year, we are seeing more cases in which the UK seeks to share intelligence despite a real risk of torture.
There is no doubt that our intelligence agencies do a difficult and sometimes dangerous job, but getting mixed up in torture does nothing to keep us safe. It undermines the civilised values that we stand for, and we are in a battle of values in the so-called war on terror. It is incredibly important that we maintain the high values that we expect.
My new clause 3 would prevent the repeat of such travesties, as no public authority would be able to hand over information to an overseas authority where, as a result, there is a possibility of
The Conservative party has a proud legacy of standing up against torture, going back to Margaret Thatcher. Under her, we passed the Criminal Justice Act 1988, which made torture, anywhere in the world, an offence under the law.
The Minister has a difficult job; there are no two ways about it. The task faced by the Home Office, and indeed the agencies, in dealing with the threats to this country is incredibly difficult but, from time to time, we have historically slipped from the standards we view as essential to our national character—a proper understanding and belief in the rule of law, and abiding by that rule of law almost irrespective of the circumstances in which we find ourselves. The first test—the first criterion—when considering a Bill such as this should be, “Do we always obey the rule of law? Does the Bill encourage Governments always to obey the rule of law, whether they are dealing with suspects abroad or with subjects at home?”
First, let me refer to new clause 1, which stands in the name of my hon. Friend the Member for Barnsley Central (Dan Jarvis), and say that it is disappointing that we have to have this debate. I am the longest serving member of the ISC, having been on it for nearly eight years. It is a serious Committee; its members take its work seriously and work collegiately. We work on the basis that we support the work of our security services, recognising the difficult job they sometimes have and the dangerous work they do, but that we are also there to provide scrutiny and oversight. If anyone cares to look at our reports over the years, they will see that they are not only thorough, but forensic in their approach. So it is disappointing that the current Government and the previous few have downplayed the Committee’s role.
On Second Reading, I referred to the scrutiny of our intelligence services being a bit like a three-legged stool, as we have the Investigatory Powers Commissioner, the tribunal and the ISC. Together, we should be an effective mechanism to reassure the public that there is oversight of our security services. This is important because the work they do cannot be discussed in open session, and that mechanism gives the confidence that in a parliamentary democracy, where we take freedom of speech and democracy seriously, we have that oversight. The problem with the Government is that, for whatever reason, they have set out their course to undermine our work—I put that on the record.
The new clause will say that the Prime Minister should attend our meetings. It should not be necessary to include such a provision—I believe you served on the ISC at one stage, Madam Deputy Speaker, and so you understand the work we do—but we have a situation where it seems this is seen as not important. The only one in recent times who offered a meeting was the right hon. Member for South West Norfolk (Elizabeth Truss), but that was because she was looking for friends in the last dying days of her Administration, so I do not think it counts. Again, I do not understand the reason behind this. The walls on the way into our office have various photographs of the Committee—you are on one of them, Madam Deputy Speaker—with various Prime Ministers of the day. But this is not about that; it is about the Prime Minister of the day knowing exactly what we are doing and our being able to raise things directly in our secure setting, which we do. That is important, but there is also a wider point to be made about how we scrutinise our security services and give the public that opportunity.
The amendments I have tabled also stand in the names of five other members of the Committee, and we support this Bill. Will we be back in a few years’ time with another Bill? Yes, we will, because, as was said by my hon. Friend the Member for Barnsley Central, technology is changing very fast and we will have to react to it. When the original Bill was taken through by the right hon. Member for South Holland and The Deepings (Sir John Hayes), he recognised that it would not be set in tablets of stone and that this new Bill would be required. The right hon. Member for Haltemprice and Howden (Sir David Davis) is right to say that AI will set some other tests that we have not perhaps thought about yet and those might have to be covered by future legislation. Are we reactive as a Parliament? We always are reactive, but this Bill is important because it will give our security services the abilities to react to the ever-changing world that we face.
I wish to refer to two pairs of amendments that relate to clauses 22 and 23, which go to the issue associated with the triple lock and the authorisations—
Let me get back to the issue about the triple lock, which is important. The issue is sensitive because it relates to intrusion into the communications of Members of this House and of devolved Administrations. We are talking about what is commonly known as the Wilson doctrine, but, it is like a lot of things in this age; it was announced in 1966, when it was about telecommunications and picking phones up, but we are in a different world now, as the right hon. Member for Haltemprice and Howden said. We now have smartphones, and God knows what is going to be invented in the next few years in terms of how we communicate. As with a lot of things, the convention was thought to be the way forward, but clearly in 2015 it was found that the devolved Administrations were not covered by it and neither were MEPs. The Investigatory Powers Tribunal found that it had no legal enforcement at all, so it was credit to the right hon. Member for South Holland and The Deepings and the Investigatory Powers Act 2016 that a formal process was put in place for it—that is important.
Currently, the 2016 Act has three layers of safeguards: the Secretary of State who asks for the warrant; a judicial commissioner who examines the communication that is the target of interception and the type of equipment involved, if it relates to a member of a relevant legislature; and, thirdly, the Prime Minister, who, as the final stop, has to agree this.
The Bill will allow the Prime Minister to designate “up to five” Secretaries of State who can approve the warrants in the event that he or she is unable to be available. As has been raised, the obvious example was when Boris Johnson was incapacitated through covid. When we think about the issue, this measure makes sense. The ISC recognised other unique situations when a Prime Minister may not be available, for example if they were abroad and secure communications were not possible. The ISC was keen that the circumstances needed to be exceptional, but we accept that there is a need for the requirement.
The circumstances in which the Secretary of State may approve a warrant on behalf of the Prime Minister—if the Prime Minister is incapacitated or does not have access to secure communications—are now in the Bill. Importantly, there is also a limit on the number of Secretaries of State who may be appointed for the purpose. Only five Secretaries of State may be designated, and only those who have a responsibility for authorising equipment interference or target interceptions. However, amendments 20 and 22 have been proposed because the Bill as drafted says that a Secretary of State who has “the necessary operational awareness” can be designated to make such decisions on behalf of the Prime Minister. What is “operational awareness”? Does it relate to somebody who has had a briefing? Do they know what they are doing? I am sure a lot of Secretaries of State, as well as junior Ministers, know about and are aware of the warrants.
It was disappointing that it took some time to get the draft code of practice. For the benefit of civil servants, let me put on the record that it is important that any codes of practice attached to a Bill are laid before Parliament with the Bill. We cannot have a situation where Bills are discussed and we are then told later that certain measures will be in the code of practice and thought of later. I am sorry, but the Bill and any codes of practice need to be laid together, so that this House and the other place have an opportunity to look at the codes of practice in detail.
The ISC finally received the draft code of practice last Tuesday, following the meeting I had on Monday with the Minister for Security. That code of practice defines those who had “the necessary operational awareness” as people who had received briefings on operational matters and of warrantry process and legal requirements. We in the ISC think that definition is entirely inadequate, because it does not prevent completely unrelated and inappropriate Secretaries of State from fulfilling such a serious role.
Amendments 20 and 22 in my name and fellow members of the ISC ensure that only those Secretaries of State with the necessary operational experience, such as those required to issue warrants as part of their routine duties under the relevant sections of the Act are permitted to be designated by the Prime Minister under the triple lock. That is important, because it ensures that they are people who not only understand the system but have experience of it. That would provide the flexibility the Government require and ensure that this important power is given to Secretaries of State who have experience of warrantry.
I and the ISC have danced around the head of a pin on this issue with the Minister and civil servants, and hon. Members may ask why it is so important. As the right hon. Member for Haltemprice and Howden has said, the situation in which this provision is used is unique. I cannot speak about any examples in open session, but credit to the agencies that have told us how the measure is used. As a member of the ISC, am I reassured that it is being used appropriately in the cases we saw? I am. However, not to downgrade that fact, the amendments provide reassurance to Members of this House, Members of devolved Parliaments and Assemblies, and others that the measure is being used proportionately and in the correct way.
Amendments 21 and 23 get to one of those points that irritates me. It is like a war of attrition with this Government—they cannot be seen to back down on anything or allow anyone else any victory, no matter how small. The code of practice says that once the designated Secretary of State has authorised something, the Prime Minister “should” be informed of any decision made under the alternative approval process as soon as reasonably practicable. It does not say “will” be.
With that great victory under my belt and those of the members of the ISC, I turn to other amendments. New clause 3, in the name of the right hon. Member for Haltemprice and Howden, deals with
“cruel, inhuman or degrading treatment”.
I understand why he has proposed the new clause. It is always worthwhile debating the issues, which run through the entire Bill. Am I assured that there are processes in place that protect our civil liberties? Yes, I am. However, there are occasions when things can go wrong or people ignore them. I think they have been strengthened greatly, but the right hon. Gentleman refers to an important point. I was on the Committee in 2017 when we did the inquiry into detention and rendition. That took a long time, but it was a good report given where it got to. It unearthed things that were not pleasant but had been done in our names as a democracy.
One conclusion the Committee came to was that in its view the UK tolerated actions and took others that were regarded as inexcusable. Well, they were inexcusable, because as the report outlined, we passed on information to allies who then used it. I think things have changed, and to give Members an example of how the ISC can improve things, we called for a review of the consolidated guidance surrounding the way that security operatives should operate regarding issues of rendition or torture. That led to the Fulford principles, which I think have moved on and tightened up the rules and guidance for members of our security services. That was a big movement forward.
I do not think the right hon. Member for Haltemprice and Howden will push the new clause to a vote, but it reinforces the point that if we have a situation whereby, again, we get information that is passed to one of our allies, we must ensure that those principles are upheld. Am I confident that they are upheld now? I think I am, but how did we get to that pretty damning report in 2017? We got there because those principles and the guidance in place were not followed. We must be vigilant about that, and over the years the right hon. Gentleman has done not only this House but the country a service through his tenacity on these subjects.
I understand where the right hon. Member for Haltemprice and Howden is coming from but—I must be careful what I say—I do not agree, because this is not about the security services wanting to see what someone has ordered on Amazon Prime or put in their Tesco basket this weekend. There are occasions when Members of Parliament will be brought into investigations not because they have done anything wrong, but because they have been targeted. For example, we had a statement today about MPs being targets. Should they know about it? In the right circumstances, yes, so that they can take reactive measures against it.
There may be situations regarding Members of Parliament and warranting powers in which they are not the main target, but they may be a target themselves, so such a measure would be difficult. Again, I will not say too much, but I think this provision is used more often than we think for those reasons. It is not because Members of Parliament, or Members of the Scottish Parliament or the Welsh or Northern Ireland Assemblies are doing things wrong, but because increasingly those who want to harm us are targeting our communications.
New clause 4 would
“remove the ability of the Secretary of State to authorise the interception of the communications of, or the obtaining of communications intended for, or private information belonging to, Members of Parliament.”
Again, it is good to have this debate, but I would support such a measure for the reasons I have outlined.
The other change in the Bill concerns bulk data. The right hon. Member for South Holland and The Deepings covered the original investigatory powers in detail, but there are now big data sets held not only by public authorities but by others, and that has made it more important that our security services are able to access them. Whenever we do this, however, it means more intrusion, so let me deal with the issue of oversight in the Bill, and with the broader, more intrusive powers to obtain internet connection records for the discovery of targets.
Again, that is something that I and other ISC members totally support, but the authorisation process is internal. One stance that the ISC has taken throughout all this is that if we are to give more powers to our security services, there must be a balance. There will not be a situation whereby what people have seen can be identified, but this power will drag in a lot of people who, as the right hon. Gentleman said earlier, are completely innocent. As I said, there is a need for such a power, but we thought there should be more oversight from the Investigatory Powers Commissioner. Therefore, the points I made about amendment 15 are important.
The Investigatory Powers Commissioner’s Office does a great job of ensuring public support for what we do, but, again, there is an issue around bulk datasets. Some of the examples that were given to ISC members—thanks must go to the Minister, who arranged a meeting for the Committee to be briefed on this—make sense when it comes to the issue of low or no reasonable expectation of privacy. It is burdensome, for example, to access the electoral register, but today the Government have said that somehow that is a secret document. Well, that is not the case under this Bill, in which case it is important that the security services should be able to use it, rather than having to go through the warrantry process. That goes to the point, which my hon. Friend the Member for Barnsley Central raised earlier on, about the definition of “low expectation”.
Another perfectly legitimate reason that the security services need these measures is related to testing new AI models of learning. They need access to these new big datasets, which are out there and which companies use, and the Bill will allow them to have it without going through the warrantry system. If intelligence is going to be on the front foot when it comes to AI, we will have to have these big datasets that will teach the systems how to do it.
The problem comes back my hon. Friend’s question of what is deemed a low or no reasonable expectation of privacy. That is something we have considered throughout this process. One thing the ISC has considered is adding to the existing categories. One suggestion we put forward was that, when the agencies do this, they should have to email the Investigatory Powers Commissioner to notify them that they have done it.
Possibly the Minister’s suggestion of how Sir Brian Leveson is going to do it will give the public some reassurance. Let us not forget that Sir Brian has the power to take action if things are not being done correctly. If we read his reports, we can see that he is not fearful of doing these things. A fair compromise has been put forward. I think we have one and a half victories so far—
May I finish by thanking the members of our security services for the work that they do? I also thank them for the way that they have engaged with the ISC on the Bill. Hopefully, with the changes that have been brought forward, we can reach agreement on the Bill and our security services will have the ability to face up to the challenge that is coming forward: the ever growing use of larger datasets, and the more sophisticated way in which state actors and non-state actors have access to technology. That will enable the security services to do what we all want to do, which is to keep individual citizens and, just as importantly, our democracy safe.
That is why I hope that the next concession that the Minister will make will relate to the pool of deputies, and that in the language the ISC suggests that he adopts we ensure that it is a controlled group, based on either current responsibilities or previous experience. I am sure that we can discuss with him any changes to the wording that he thinks are necessary, but as the right hon. Member for North Durham explained, the current provisions allow for only one restriction: that the member of the Cabinet in question should receive a briefing on how to conduct their warrantry responsibilities. We do not think that that is restrictive enough, given the significance of this decision-making process. I am grateful to the Minister for what he has already said about notification of the Prime Minister in the process. That is a sensible change, which I welcome.
I invite the Minister to consider that if the powers contained in part 4 are to be used, they are very significant restrictions on commercial freedoms. If we are going to use them, it seems to me we should require three things. First, there should be a materiality threshold in the use of those powers, so that any change would not be sufficient to cause these significant infringements on commercial freedom. It should be a material change only. Secondly, there should be no indefinite hold on product development because, as I say, that is a significant infringement on commercial freedom. Thirdly, there should be a way to appeal a decision to prevent the development or roll-out of a new product.
It seems to me that, were we to have those restrictions, that would not inhibit the Government’s perfectly reasonable ability to stop people developing products that stop us applying the security controls that we all want to see to keep us safe, and would strike the balance better between the powers that the Government must have and the ability that we need commercial manufacturers and developers to have to develop new products that benefit consumers. I hope that the Minister will consider that point when he comes to think about the development of the legislation, but in view of what the right hon. Member for North Durham said, that is all I need to say.
First, and briefly, our amendment 13 builds on the discussion in Committee about the offence created by the 2016 Act that will be amended by clause 12. We argued in Committee that the so-called example of “lawful authority” for obtaining communications data in proposed new subsection (3A)(e) of the 2016 Act was an extension of the power rather than a restatement of it. The Minister countered that he was actually seeking only to put existing codes of practice into statute. There is obviously a line of argument that codes of practice do not always necessarily comply with the law, but having gone away to look at the codes of practice it seems that there is a difference between what is currently in the codes of practice and what is currently in the Bill. The wording of amendment 13 reflects the code; the wording of proposed new paragraph (e) seems potentially broader than that. The question for the Minister is why the wording is so different, and whether he can assure us that it is not meant to be interpreted any more broadly than the existing exception in the codes of practice.
The remaining amendments set out our more fundamental concerns with the Bill. In particular, there are three areas where we question the strength of the oversight regime: in relation to bulk personal datasets, internet connection records, and Government notices to companies under clause 21. We regard advanced judicial oversight as important and reassuring not just for members of the public but for those who are exercising the powers. Clause 2 on bulk personal datasets is the first example of where we believe that oversight is being unnecessarily watered down. We are told that the system of advanced judicial authorisation is causing delays and stifling operational flexibility, but to us the answer is to fix those logjams in the oversight system, not to water that system of oversight down. The case for a lighter-touch system of category authorisations has not been made to our satisfaction. That is why we tabled amendment 7, which would take out clause 2.
At the very minimum, why not strengthen the ex post facto oversight beyond annual reviews and reports? Amendment 11 highlights one way to do that, so that the judicial commissioners are reviewing whether what is being done under category authorisations is lawful, cancelling authorisations where that is not found to be the case, and ensuring therefore that we have a clear picture of how the new powers are being used. I noted with interest what the Minister said about the role of IPCO, which we absolutely regard as helpful. However, it would be insufficient, and certainly less robust than our proposal in amendment 11.
“The Judicial Commissioner, on reviewing any notifications received under subsection (2), must cancel the category authorisation if the Commissioner considers that section 226A no longer applies to any dataset that falls within the category of datasets”.
I wonder why he thinks that the wrongful inclusion of one individual dataset in the category would invalidate the category as a whole, because that seems to me to be the effect of what that part of his amendment would do.
Let me move on from the question of oversight in relation to bulk personal datasets to the issue of “no” or “low” expectations of privacy in relation to such datasets, and how that test will operate in practice. Throughout the passage of the Bill, we have been repeatedly given some very easy examples of so-called “low/no” bulk personal datasets. For example, we have spoken about phone books, academic papers, public and official records, and other data that many people would have access to routinely. It was helpful that, in relation to what is now our amendment 9, the Minister said in Committee that Facebook posts and CCTV pictures would be considered sensitive and would not be caught by these provisions. It is very helpful to have that on the record.
None the less, it would to be useful to have greater precision in the Bill. Amendment 8 would take out reference to “low” expectations of privacy altogether, so that only “no” expectations would be covered by the new provisions. To us, “low” is such a difficult question to adjudicate—low expectations in particular. That is especially the case when we are dealing with datasets of potentially huge numbers of very different people with very different reasons for having very different expectations of privacy, particularly in how that would relate to different organisations. We cannot think of a single dataset example provided during the passage of the Bill that would not be adequately covered by “no reasonable expectation of privacy”. If that is the case, if that is really all the Bill will be used for, why not just accept the amendment? It would be useful to have an understanding of what “low” expectation of privacy is designed to cover.
Amendment 15 brings us to internet connection records. In 2016, the Government emphasised the very targeted nature of the ICR powers, but here we are being asked to incrementally expand those powers so that they are slightly less targeted. To us, that means that the independent assessment of proportionality and necessity is pivotal, so we think that it should be subject to advance judicial oversight. Even the explanatory notes accept that there are difficulties in formulating sufficiently targeted queries, noting that
“such queries are highly susceptible to imprecise construction”
and that “additional safeguards” are required.
For us, the required additional safeguard is judicial oversight. We were led to believe that the powers would be used only exceptionally, so it is hard to see how a judicial authorisation requirement would cause any significant problem. The Government argue that there may be times when warrants are needed on an emergency basis, but that could be dealt with by having emergency processes or very limited exceptions—it is not an argument against a general rule of advance judicial oversight.
I turn to the impact on technology companies of the Bill’s various provisions relating to notices—although the right hon. and learned Member for Kenilworth and Southam probably made more sensible and eloquent points than those I am about to make. The written evidence that the Bill Committee received shows that tech companies, academics and human rights and privacy campaigners are still a million miles away from the Government in their understanding of how the provisions will work and of the impact that they will have on products and services. Apple wrote to the Committee that these provisions
“would dramatically disrupt the global market for security technologies, putting users in the UK and around the world at greater risk.”
It is frustrating and disappointing that we did not have the opportunity to explore those differences in detail through witness testimony. The Minister did his best to reassure us, and he made some important arguments about extraterritoriality and conflicts of laws, but given the serious concerns that have been raised, it is worth again asking the Minister to explain why those witnesses are wrong and he is correct. In particular, the Government’s explanation that the new pre-notification requirement in clause 21 is
“not intended as an approval mechanism”
has not dampened concerns. Apple argued in evidence to the Committee that
“Once a company is compelled to provide notice of a new security technology to the SoS, the SoS can immediately seek a Technical Capability Notice to block the technology.”
Other provisions in the Bill around maintaining the status quo during notice review periods work in tandem with these provisions to deliver what Apple and others see as a de facto block on adoption of new technology—that is the risk that they are highlighting, and it is what the Minister must address in his speech. It is why we have tabled amendments to take out some of those provisions. It is also why we have tabled amendment 19: an alternative that would introduce advance judicial oversight and, hopefully, a degree of reassurance that the new notification notice regime under clause 21 will not deliver the unintended effects that many fear.
Finally, I put on the record our support for the amendments tabled by members of the Intelligence and Security Committee, whose work on the Bill has been as helpful as ever—I congratulate them on their one-and-a-half victories so far. As is often the case when it comes to Bills of this type, we also put on record our support for several of the amendments tabled by the right hon. Member for Haltemprice and Howden (Sir David Davis), some of which are similar to amendments that we tabled in Committee, while others are similar to amendments that we supported during the passage of other Bills, including the National Security Act 2023. In particular, new clause 3, which is designed to place an absolute prohibition on the UK sharing intelligence with foreign Governments where there is a real risk of torture or cruel, inhuman or degrading treatment, is long overdue and would close a serious gap in the law. For us, that is self-evidently the right thing to do.
The purpose of that legislation was both to draw together a number of the capabilities of the agencies necessary for them to keep us safe, and to put in place a series of mechanisms to ensure that there was proper scrutiny and accountability for those powers. We introduced the principle of a double lock, whereby both politicians and judicial commissioners were necessary to authorise some of those very powers. They matter because of the threats we face. Those threats are, as has been said by a number of contributors, metamorphosising. They were bound to do so, and we anticipated that when the original Act was considered in this place.
I accept the argument used by the shadow Minister, the hon. Member for Barnsley Central (Dan Jarvis), that that does not end here tonight. Those threats will continue to change, and it will be necessary to update the legislation to reflect those changes, for our security services and police need two things to do the job that we expect them to do on our behalf: capacity—namely, skills and resources—and capability, which includes legislative powers.
I welcome the spirit in which the provisions that we are considering have been debated so far by both sides of the House and by members of the ISC. Like my right hon. and learned Friend the Member for Kenilworth and Southam (Sir Jeremy Wright), I do not wish to add unduly to that consideration, except to say two or three things. The first is that the Minister has engaged with the ISC formally and with members of the ISC informally in an effort to improve the legislation. It is right that he should do that—it has always been the spirit in which these kinds of measures have been considered—and I did so myself when in his shoes, I worked closely with my then shadow, who now, as Leader of the Opposition, aspires to be Prime Minister, and built a relationship with him accordingly, based on trust and a shared determination to do right by the right intelligence and security services and the police, because we wanted to do right by the British people.
The second thing is that I must press the Minister to go further in five particular ways. Well, actually, four, because he has already satisfied one of my requirements in response to the right hon. Member for North Durham (Mr Jones), whom I thank for his contribution and his generous remarks. [Interruption.] He has come back into the Chamber to hear my appreciation I see. We work closely together on the Committee, on which we both serve. It is serious, and sometimes onerous, work, but it is enjoyable because we know that it is important. In this place, what could be better than that?
So, there are perhaps four matters on which I would like to press the Minister. I am hopeful that, given what I just said about him, we may be able to make progress. The first is the matter of the extension of what has become known as the triple lock. The right hon. Member for North Durham referred to it, as did the former Attorney General, my right hon. and learned Friend the Member for Kenilworth and Southam.
In considering delegating prime ministerial authority to other Ministers, we have had discussion at length. It seemed sensible to me that, in doing so, we might say that other Ministers could perform the role of Prime Minister in respect of authorisations if they had operational experience or responsibility. That would be a reasonable way of narrowing the number of Ministers involved to people who had salient understanding and experience. That marriage of either being responsible or having been responsible would perhaps be the best way forward, although I appreciate that the Minister has made a case that the number of Ministers involved needs to be broadened because the Prime Minister may be incapacitated in some way or another. There is a case for what the Government are trying to do, with the caveat I have introduced.
Turning to communications data and the way that will be dealt with, and the additional bodies that will have access to some powers that have previously only been in the hands of a very few, could the Minister clarify that in respect of local authorities, this will not be a permissive power? There are times when local government in its regulatory role will be working with the police, dealing with very serious and organised crime—I am thinking of licensing, trading standards and so on, for example. Where serious criminals can be involved in matters that pertain to the functions of local authorities, I accept that there are some cases in which they should have those quite extensive powers, but one would not want to think that every parish council in the land would enjoy the same legal powers as the SIS or MI5.
We spoke earlier about IPCO, and its role and association with Government. As the Minister will know and as the right hon. Member for North Durham referred to, this legislation provides for a report to be made available to the ISC on an annual basis. There has been some concern that that report might be rather different from the one that is made available to Ministers and others, and my anxiety is that it should not be different. All that it should exclude is current operational matters; nothing else should be excluded from what my Committee considers, and clearly, it needs to be the same as what IPCO gets. We cannot have three or four different reports.
This is going to be a challenging business for whoever the Security Minister is, but recognising the dynamism of the threat we face and therefore the necessity of an equally dynamic response is of great significance and value. I hope the Minister, when he sums up, might find some words that will allow him to recognise the sensible suggestion made by the shadow Minister, and the spirit in which it was made. That would be further evidence of the Minister’s stature, of which I am an advocate at the moment, but I am seeking further adherents to my cause.
With those few remarks and endorsing much of what has already been said, I will draw my speech to a conclusion with this thought. I spoke earlier about Thomas Mann and his description of tolerance and evil, but perhaps Chesterton put this most succinctly when he said:
Every time we have doubt and fear when facing the wicked people who seek to do us harm and who took the lives of our dear colleagues, we give them solace. Every time we stand firm, and do what is necessary to defend our nation and its people, we do what is right. The Minister has the great privilege of leading that effort tonight, and in doing so he should have the support of all men and women of good will across this House.
However, there is one area of detail that I want to comment on, which is about the triple lock amendment—amendment 22—on the qualifications and experience of the Secretaries of State who, under the widening of the triple lock, could if the Prime Minister of the day is incapacitated for some reason, be drawn into making a warrant to intercept the communications of a Member of this Parliament, or indeed a Member of any of the devolved legislatures in the UK. The right hon. Member for Haltemprice and Howden (Sir David Davis) was very explicit about why that particular protection should be in existence, and I completely agree with his analysis. One of the ways we defend our democracy is by allowing Members of Parliament to do their unique jobs without interference unless it is for an exceptional and a very good reason, and has been authorised at the highest level.
There has been a lot of to-ing and fro-ing while the Bill has been going through its parliamentary stages about precisely how this widening of the power to make such a warrant away from the Prime Minister, if he or she is indisposed or unable to be near secure communications, should actually be defined. We have got down to the stage where everybody agrees that to make the system robust there should be an expansion, and we have even come up with a number of Secretaries of State—five—who should be authorised in such exceptional circumstances to make that warrant.
We are now down to the last piece of disagreement between the ISC and the Minister, which is about what the qualifications of those Secretaries of State should be. In seeking to try to draw out precisely what the Government mean, we have asked as a Committee that the relevant Secretaries of State who may be down to do this duty ought already to be responsible for warrantry, or have had previous responsibility for it. Thus far, however, the Government and the Minister have been unwilling to be that deliberate in the arrangements they have made.
As the right hon. and learned Member for Kenilworth and Southam (Sir Jeremy Wright) said in his contribution to the debate, the only qualification apart from being a Secretary of State that the Government appear to have admitted is that the person standing in for the Prime Minister ought to have had a 20-minute security briefing about warrantry.
Clearly, the Minister’s very welcome decision to make the concession on amendment 23, as my right hon. Friend the Member for North Durham (Mr Jones) has just pointed out, strengthens the situation, because that means the Prime Minister will have to be notified of such a warrant. However, my right hon. Friend is also correct in pointing out that the warrant cannot be rescinded if it has already been granted. I therefore gently ask the Security Minister whether he will not take the opportunity, in responding to the debate, to give the ISC members and the public we all represent the reassurance that the Secretaries of State who may have this power delegated to them either will already be responsible for warranting, or will have previously had responsibility for warranting. I do not understand why he cannot just get up and give us that final assurance. If he does, I think we will have done extremely well on Report and in Committee. I am rather disappointed that the Minister is not leaping to his feet, since he has been leaping to his feet a lot while my colleagues have been making their speeches. I see no such flicker in him as I am making mine. I suspect and hope that that is because he is just thinking about how he will wind up the debate and give us that final assurance that we need.
The whole debate around the Investigatory Powers (Amendment) Bill demonstrates that when threats evolve, the requirement to meet them also has to evolve. We know that this area is rapidly developing, and we know also that we will probably be back in the not-too-distant future to see how these powers can be changed again to defend our democracy and meet some of the threats of serious organised crime and terrorism, which our security forces help us deal with day in, day out. We also know that if our citizens are to give us effective permission and consent to take some of these powers, any increase in powers has to be accompanied by an increase in proper oversight, to reassure them that democracy is being defended, not undermined. That includes oversight by the ISC, which is why I am a big supporter of new clause 1 as tabled by my hon. Friend the Member for Barnsley Central (Dan Jarvis). It is important that that can be an ongoing reassurance.
I do not want to repeat a lot of the arguments made by colleagues, and it is important now to listen to what the Minister has to say. I thank him for the concessions he has made, and I hope he can make just a slight move towards us on the warrantry issue in the instance of the triple lock, so that we can be even more content than we are now.
The intelligence services carry out vital work in keeping us safe in a dangerous world, as we have heard from many colleagues this evening. The secrecy that surrounds what the agencies do inevitably means that the majority of people who work for them will never receive public praise or recognition, so I take this opportunity to thank them for their brave and dedicated efforts on our behalf. This Bill provides important updates to the law to enable them to operate effectively and to adapt to fast-moving technological change and innovation. This kind of update to legislation will be essential again and again in years to come to enable our intelligence services to keep ahead of those who would seek to do us harm. For example—this is at the heart of what we are doing today—it makes no sense to require, as the current law does, that the intelligence services undertake the full range of actions designed for holding sensitive, confidential and private information when dealing with datasets that are readily available to the public or to commercial users and over which there is little or no expectation of privacy.
For instance, it is good to see that Government amendments 3 and 6 provide additional certainty on which organisations will be able to use new intrusive powers and how they will be constrained in their use. Controversial examples of past local authority deployment of such powers were debated at length in relation to the Investigatory Powers Act 2016. It would have been worrying for this Bill to reach the statute book without further clarity on that point.
I welcome the tightening up of the provisions in the Bill on the triple lock, which determines the very rare circumstances when the communications of a legislator can be intercepted. That includes amendments in the other place specifying that only five designated Secretaries of State may sign off on these warrants in place of the Prime Minister, and only when the Prime Minister is unable to do so because of incapacity or an inability to access secure communications.
Like others, including the hon. Member for Wallasey (Dame Angela Eagle), whom I am privileged to follow in this debate, I think the Government still have some work to do on the matters raised in amendments 21 and 22, which were tabled by my colleagues on the ISC, to provide confidence that this highly sensitive task will be carried out responsibly and lawfully. We need to ensure that the designated Secretary of State is someone whose routine duties include signing warrants or who has relevant operational experience of doing so. As someone who scrutinised and signed intercept warrants for nearly four years as Northern Ireland Secretary, I know how important that practical understanding and awareness is. Having said that, I very much welcome the statements that have been made on how the code of practice will operate in this area and on ensuring that the Prime Minister is notified of any warrants agreed on his behalf.
Lastly, I want to consider amendment 15 on internet connection records. The current rules mean that to lawfully access an internet connection record, the intelligence services must know the precise service accessed and the time it was accessed. Clause 16 would extend that power to identify individuals using one or more specified internet services for a specified period. In the Bill, there is simply no limit on the number of services or the length of period specified. There is nothing in clause 15 to confine the new power to sites that are inherently suspicious. The intelligence services, for example, might reasonably want to collect information on access to uncontroversial, widely used sites by people who are of concern to them, but the disadvantage of that is that it means routine online activity by many entirely innocent people could also be scooped up.
I acknowledge that we are talking about only communications data—that is, the who, when, where of online activity—and not the content of the communication. I also concede that the general needs on necessity and proportionality provide an important constraint, as will the commitment to delete data collected relating to people not of interest to the security services. However, as my right hon. and learned Friend the Member for Kenilworth and Southam (Sir Jeremy Wright) said on Second Reading, the fact that data is not retained does not mean that it is not intrusive to collect it. I think that there is a credible case for inserting a requirement to seek the permission of a judicial commissioner, rather than letting decisions be made internally by the intelligence agencies.
This is an important Bill, which I very much hope the House will pass this evening, but there remain real concerns about clause 15 and the width of intrusion that it would involve. I therefore urge the Minister once more to consider additional safeguards to govern the exercise of these new powers to access internet connection records, so that we guarantee proper scrutiny and public confidence and ensure that the regulation of our intelligence services continues to be world leading.
It is an absolute honour and pleasure to follow the right hon. Member for Chipping Barnet (Theresa Villiers). May I put on the record my thanks to her for her time as Secretary of State for Northern Ireland? We appreciate her commitment and efforts over those years. Her intelligence about and interest in Northern Ireland have not dissipated because she is no longer the Secretary of State for Northern Ireland; indeed, they have added to the occasion.
It is a pleasure to speak on the Bill, which, as the Minister will know, I have done on numerous occasions. I am aware of the complexity of the issue and of the need to give privacy its rightful place in our national security. As others have done, I put on the record my thanks to all the security and intelligence services for all that they have done and still do. We owe them a great debt.
During the previous debate, I asked the Minister for his assurances regarding whether the right balance had been struck, yet I have still been contacted by constituents who continue to express their concerns. I will not detain the House for long—about five minutes—but will highlight again the concern that my constituents continue to express, to give them one last chance to receive assurances on the Floor of the House.
My constituents’ remaining concerns relate to something that we in this place have much cognisance of and that we treasure: the freedom within a democratic society to live our lives in peace as long as we are not adversely affecting the lives of others. That is a precious right, and one that none of us in the House wants to remove. I will refer to clauses 1 and 2 and highlight four companies that have expressed concerns to get the Minister’s response. My constituents have highlighted the following:
“In addition to the concerns of civil society, I would like to draw your attention to some of the comments submitted in evidence to the Bill’s Committee from the tech industry.
Apple: ‘In addition to impacting the safety of billions of users around the world who rely on security technologies developed by Apple and other companies, the Bill in its current form would undermine fundamental human rights. In fact, just this year, the European Court of Human Rights held that requiring a company to provide a means to decrypt all encrypted communications on its platform violated the right of privacy in Article 8 of the European Convention on Human Rights.’
TechUK: ‘This could impede the ability of TechUK members to modify products and services over time to protect users from active security threats, to innovate, and enhance their services for their users.’
Information Technology Industry Council: ‘We strongly encourage greater scrutiny of these implications so that the Bill will not have a chilling effect on a company’s ability to conduct business or in current or future innovations, and that it will serve to further international efforts on shared goals around trust and security.’
Computer and Communications Industry Association: ‘Over time, this will push tech firms to refocus product development away from addressing the priorities of UK consumers, towards Government demands for access. The obstacles the new regime creates will be a drag on innovation and therefore undermine the quality of digital services on offer.’”
I will give the last sentence of the quotation from the Computer & Communications Industry Association:
“They could risk deterring investment in improving service for UK consumers and contribute to a sense that the UK is not a safe market in which to invest.”
Those are the four tech companies, and the questions are on the record—I put them in Hansard—so that perhaps the Minister can give me an answer. Will he outline what mitigations are in place for the matters affecting those four companies in order to secure the tech industry’s place in the fabric of our lives in the United Kingdom?
I am pleased that the Minister has accepted amendment 23, which was tabled by the right hon. Member for North Durham (Mr Jones). The Democratic Unionist party was minded to support that amendment, but, because it has been accepted, we will not need to do so.
While I am aware of valid concerns, I am also aware of the need for this Bill, which the gallant Minister will know about better than most in the House. He served in Northern Ireland, so he understands the implications for us in Northern Ireland and the lives that we have led for some years. I was a part-time soldier in the Ulster Defence Regiment and in the Territorial Army for 14 and a half years. I have been a recipient of security intelligence and know how it can save lives. I am here today because of intelligence, which found out what the IRA’s intentions were. That is a fact. That has affected not just me; over the years, the intelligence services have saved the lives of other hon. and gallant Members. I have many friends who served and who are alive today because of the intelligence service or the Security Service. I had many other friends who unfortunately are not alive today; I remember them as well, so I do.
We must remember that the whole objective of the Bill is to keep us safe, to keep us secure and to ensure that our lives with our families can continue. I do hope that a balance has been struck, as the Minister outlined, because freedom is a prize worthy of getting it right. I know that the Minister wants to get it right, and I want it to be right. Madam Deputy Speaker, you want it to be right as well. Let us do it and get it right tonight.
Amendments 3 to 6 to clause 14 concern the restoration of specified public authorities’ general information powers to secure the disclosure of communications data from a telecommunications operator by compulsion. I pay tribute and thanks to my right hon. Friend the Member for South Holland and The Deepings (Sir John Hayes). I hope that Members will have noticed that I have listened carefully to Members across the House, and I believe that this Bill has been pulled together carefully alongside the Intelligence and Security Committee. It is a slight shame I cannot thank the right hon. Member for New Forest East (Sir Julian Lewis) in person, who is sadly at a funeral today. He has played an important role in contributing to and leading the engagement of which I have had the advantage in preparing this Bill.
Let me quickly touch on one or two points. My right hon. and learned Friend the Member for Kenilworth and Southam (Sir Jeremy Wright) spoke about notices. It is important to note that the notices do not block innovation. They do not stop a technical patch or infringe on companies’ ability to update their systems. All they do is make sure that the existing level of access remains while that is being looked at. That is a reasonable element to ensure that the British people are kept safe by the British law enforcement authorities.
The reason for not accepting amendments 22 and 23 —I understand the points made by right hon. and hon. Friends and Members across the House—is that we are talking about a very limited number of people. One Secretary of State is already used to do the initial request. The second person on the triple lock is a judicial commissioner—a judge. The third therefore has to be one of the four Secretaries of State left. Therefore, it is important that we make sure that it is somebody in whom the Prime Minister has confidence. Given that we are about to have a new Government—I hope the new Conservative Government, but still a new one—it is entirely possible that there will be a new Cabinet and that the routine explanation will not be satisfactory. As routine duties do not have legal clarity, we will not use them.
The removal of clause 15 from the Bill would prevent the intelligence agencies and the National Crime Agency from detecting some national security and serious crime threats, and those intent on committing child sexual exportation and abuse. Given the robust oversight of the regime in general, and the internet connection records in particular, we simply do not believe that this is in the best interests of the British public. Removal would benefit only those who threaten our safety and serve to make the work of the intelligence services and the NCA significantly harder as they seek to protect us and bring paedophiles to justice. The Investigatory Powers Commissioner already has the necessary powers to inspect and report on all parts of the CD regime. If the Investigatory Powers Commissioner wishes is to focus attention on condition D of the internet connection record, they have the power to do so. With those clarifications, I commend the Bill to the House.
Question put, That the clause be read a Second time.
Question put, That the clause be read a Second time.
Amendment proposed: 7, Page 3, line 9, leave out Clause 2.—(Stuart C. McDonald.)
Question put, That the amendment be made.
Proceedings interrupted (Programme Order, 20 March).
The Deputy Speaker put forthwith the Question necessary for the disposal of the business to be concluded at that time (Standing Order No. 83E).
Amendments made: 3, page 35, line 5, after “exercise” insert “by a specified public authority”
Amendment 4, page 35, line 17, at end insert—
Amendment 5, page 35, line 35, at end insert—
Amendment 6, page 35, line 35, at end insert—
Third Reading
I pay huge tribute to all the contributions from across this House, and particularly to my hon. Friend the Member for North Cornwall (Scott Mann), who whipped this through in exemplary fashion and will be delighted that since my appointment he has not had to take a Minister’s place on a Bill. He will also be grateful, along with me, to Lord Sharpe in the other place who has led on this Bill brilliantly, and taken us through with exemplary speed. I thank the hon. Member for Barnsley Central (Dan Jarvis), who has been a great friend for many years. We have now completed a Bill together, which really does bring us that bit closer. I also say an enormous thanks to Phoebe, Fintan, Francesca, James, Emer, Lucy x 2, Megan, Sophie, and Tom Ball, whose exemplary work in the Bill Committee has been fantastic.
As I said, the Bill will improve our abilities. Perhaps the Minister would also like to put on record his thanks to the ISC, which he forgot to do. It might have been a painful process at times, but can I give him some advice, possibly for the future? He may well have been able to solve some of these issues earlier in our discussions, and avoided keeping his colleagues here on a Monday night—[Interruption.] The Secretary of State for Levelling Up, Housing and Communities says from a sedentary position that that was impossible, but the Minister has agreed to our amendments.
Finally, the biggest thanks we need to give is to the men and women of our security services who, as the Minister said in his earlier contribution, do not get any recognition publicly. They do their work day in, day out, some in very dangerous circumstances, to keep us all safe.
The Investigatory Powers Act 2016 set out a detailed framework for use of investigatory powers. The existence of such a legislative framework was welcome, as were some aspects of the framework itself. We worked hard to try to improve that framework, but, ultimately, believed that it fell short of what was required and so we voted against that Bill on Third Reading. We are in much the same place today. We get the motivations for this Bill; they are understood and we are sympathetic with some of what the Bill seeks to achieve. However, we are not convinced that all the powers are shown to have been necessary and proportionate and that there are not other ways to get to where those seeking the new powers need to be.
At the same time, with more extensive powers and more extensive use of those powers, there should come greater oversight. In our view, the Bill heads us in the opposite direction, watering down or failing to put into place necessary advanced judicial oversight. Such oversight, we believe, is of benefit in providing reassurance not only to members of the public concerned with implications for their private lives, but to the very people who need to navigate these powers—members of our security and intelligence services and other public bodies. Instead, they are left to make difficult almost impossible judgments as to their lawful use, necessity and proportionality. Therefore, we do not take this step lightly, but for those reasons we will be voting against Third Reading tonight.
I wish to take the opportunity to thank the Minister for his work on the Bill. I wish him well with future endeavours. I also thank the SNP and all those Members who have contributed to this process, particularly those members of the ISC, who have made an outstanding contribution to proceedings.
On behalf of the whole House, I express our thanks to the civil servants working in the Home Office who have done an exceptional job, as have the Clerks of this House, who have worked very hard on what is after all a technical Bill.
It is always welcome when collegiate, cross-party working takes place in this House. I am very grateful that, on this occasion, we have been able to work together on getting this important Bill right.
Question put, That the Bill be now read the Third time.
Contains Parliamentary information licensed under the Open Parliament Licence v3.0.