PARLIAMENTARY DEBATE
Investigatory Powers Bill (Sixteenth sitting) - 3 May 2016 (Commons/Public Bill Committees)

I beg to move amendment 869, in clause 223, page 172, line 41, leave out sub-paragraph (i) and insert—

‘(i) is about an entity to which a telecommunications service is provided by that telecommunications operator and relates to the provision of that service,”

This amendment clarifies the definition of communications data, limiting requirements on organisations to be providing data about the services that they supply.

It is a pleasure to welcome you back to the Chair, Mr Owen. This is an amendment to the interpretation clause dealing with telecommunications definitions, in particular subsection (5), which deals with the definition of communications data. The amendment would replace subsection (5)(a)(i) with the purpose of clarifying that the definition of communications data applies to the providers of the relevant telecommunications services, rather than allowing an organisation to be required to provide data about services it does not provide. Without the amendment, the definition of communications data is flawed because it does not tie the data to the provider of the telecommunications service and therefore seems set to encompass third-party data, which I know the Home Office denies is the intent.

The amendment would make two small changes. First, it specifies that the telecommunications service has to be provided by that telecommunications operator—in other words, it avoids pulling in third-party data. Secondly, it specifies that the data relate to the particular service provided and not to a different one. I will be interested to hear what the Solicitor General has to say about this amendment, which seeks to clarify and tighten up the clause.

It is good to see you back in your place, Mr Owen. I look forward to a fruitful session.

I welcome the hon. and learned Lady’s remarks. We considered these issues in the context of part 4, in particular third-party data. I do not want to rehearse the arguments about why we consider the code of practice to be the appropriate place to enforce the commitment made by my right hon. Friend the Home Secretary on the Floor of the House on Second Reading. However, the Government note the strength of feeling on this issue, as evidenced by the outcome of the vote on an earlier amendment. We have heard that message loud and clear, so we are considering whether we could do more to make the commitment clear. I hope that that gives the hon. and learned Lady some reassurance that we are taking these matters seriously, and I am grateful to her for raising them.

The aim of the amendment appears to be to prevent a public authority from obtaining third-party data and to prevent a communications service provider from being required to retain those data. I am not sure that the amendment achieves that desired outcome. It would remove third-party data from one element but not from all elements of the definition of communications data. I do not think there is any debate about the need to get the definition of communications data right, but it must correctly and logically classify the data held by CSPs or what can be reasonably obtained by them. The principle of communications data is clear; changing the definition so that the classification of data changes depending on which provider holds it would cause a degree of confusion that I am sure the hon. and learned Lady does not intend.

My first argument is that the clause is not the right place to prevent public authorities from obtaining third-party data or to prevent a CSP from being required to retain them. Clause 53(5)(c) makes it clear that a communications data authorisation can provide for the obtaining of third-party data where that is reasonably practicable for the communications service provider. That maintains the existing provision under the Regulation of Investigatory Powers Act 2000. Where a CSP holds communications data, whether in relation to its services or those provided by a third party for its business purposes, or where it is able to obtain them, they should be available to the public authorities for the statutory purposes in the Bill. We should not put them out of the reach of law enforcement agencies, based solely upon which company holds the information.

I suspect that the hon. and learned Lady’s intent may be to stop a service provider being forced to comply with an unreasonable requirement relating to third-party data—[Interruption.] I am grateful to her for indicating her assent. I assure her and the Committee that, in my view, the Bill already does that. A provider is required to comply with a request for comms data, including third-party data, only where reasonably practicable for them to do so. There is no need to impose a further restriction on that basis.

I recognise the sensitivities of third-party data, but I am afraid that a blanket restriction on its acquisition is not the way forward. We consider that the Bill and the code of practice strike the right balance. On the basis of my earlier assurances to the hon. and learned Lady about getting the language clear, I invite her to withdraw the amendment.

I beg to ask leave to withdraw the amendment.

Amendment, by leave, withdrawn.

Clause 223 ordered to stand part of the Bill.

Clause 224 ordered to stand part of the Bill.

Clause 225

General definitions

I beg to move amendment 870, in clause 225, page 177, line 11, at end insert—

‘(a) an advocate,

(b) a barrister,

(c) a solicitor.’

This amendment provides a definition of a “professional legal adviser” relating to use of the term in clauses 25, 100, 135 and 171.

I am grateful to the Law Society of Scotland for drawing my attention to the necessity of this amendment. When we debated the clauses on legal professional privilege—we have done so on a number of occasions during this Committee’s proceedings—I drew attention at an early stage to the Law Society of Scotland’s evidence to the Joint Committee. It gave evidence alongside the Law Society of England and Wales and expressed its shared and serious concerns about the requirement to provide for the protection of legal professional privilege on the face of the Bill. It is pleased that the Government have taken steps to do that, although it is not happy with the extent of the protection provided. That is perhaps a debate for another day.

The purpose of the amendment is to deal with the definition of items subject to legal privilege at line 29, on page 175. The amendment deals with the definition in relation to Scotland and would define a “professional legal adviser” as a person who is an advocate—that is, of course, the correct professional designation for counsel in Scotland or a Scottish barrister—a barrister or a solicitor. The aim is to avoid leaving the definition of a “professional legal adviser” open to too wide or ambiguous an interpretation. It will limit the definition of those who are qualified to provide professional legal services to advocates, solicitors and, in certain circumstances, barristers. I will be interested to hear what the Solicitor General has to say about the proposed definition of a “professional legal adviser”.

When I saw the amendment, I was reminded of points I made earlier regarding the dangers of over-defining either legal professional privilege itself or those who are subject to it. Let us remind ourselves that legal professional privilege exists not to create a special category of person—in this case, a lawyer—who is exempt from requirements by which the rest of us have to abide, but to protect the client and the integrity of the advice that a lawyer may give to their client. My concern about the proposed definition is that it limits the definition of what items would be subject to legal privilege. For example, legal executives might well be in the position where they are giving advice and are covered by legal professional privilege. Even paralegals could be, should be and would be covered by legal professional privilege.

I absolutely accept the intention behind the amendment, but however well intentioned it might be, trying to define “professional legal adviser” in the Bill would actually damage and undermine the importance of legal professional privilege. We have had many debates about it, but I think the Bill serves to protect that privilege. We are continuing to discuss the precise extent to which that is reflected in all parts of the Bill, but there is no doubt about the Government’s clear intention. I am proud to be a Minister supporting this approach because I always felt that RIPA was deficient in that respect—I held those views long before I became a member of the Government. I am pleased that we are making such progress.

I am interested in the Solicitor General’s point about legal executives or paralegals. Does he agree that, in so far as communications with such individuals would require protection, they would be protected by subsection (1)(b)(ii), which specifies

“communications made in connection with, or in contemplation of, legal proceedings and for the purposes of those proceedings”?

That is a good point, but there is a danger that we overcomplicate the situation and end up restricting what is commonly understood as the important legal professional privilege that exists between lawyer and client. Instead of overcomplicating it, it would be far better to keep maters straight and reflect the position provided for in the Police and Criminal Evidence Act 1984, which applies here in England and Wales, the Police and Criminal Evidence (Northern Ireland) Order 1989 and the definitions relating to Scotland. The other statutes for England, Wales and Northern Ireland do not define “professional legal adviser” and I do not see a compelling need to do so here. As I have explained, the Bill goes a long way towards protecting that important legal privilege and serving the interests that that privilege is all about. It is not about the lawyers but the client. Fundamentally, it is that communication that merits special protection.

I wholly accept that it is not about lawyers but about the client, but is there not a need to define what is meant by “professional legal adviser”? That is all this is about really.

The hon. and learned Lady puts her case with her customary spirit and brio, if I may say so, but despite her attempts to persuade me, I am concerned that if we seek to narrow the definition in the way the amendment would, the sort of unintended consequences that I know the hon. and learned Lady would be very reluctant to see happen might flow. We should not, in the context of primary legislation, start to define what is better explained in other ways. For that reason, I urge her to withdraw the amendment.

I hear what the Solicitor General has to say, and in the circumstances I beg to ask leave to withdraw the amendment.

Amendment, by leave, withdrawn.

Clause 225 ordered to stand part of the Bill.

Clauses 226 to 231 ordered to stand part of the Bill.

Schedule 9 agreed to.

Clause 232 ordered to stand part of the Bill.

Schedule 10

Minor and consequential provision

With this it will be convenient to consider:

New clause 24—Duration of this Act—

“(1) This Act expires at the end of one year beginning with the day on which it is passed (but this is subject to subsection (2)).

(2) Her Majesty may by Order in Council provide that, instead of expiring at the time it would otherwise expire, this Act shall expire at the end of a period of not more than one year from that time.

(3) Such an Order may not provide for the continuation of this Act beyond the end of the year 2022.

(4) No recommendation may be made to Her Majesty in Council to make an Order under subsection (2) unless a draft of the Order has been laid before, and approved by a resolution of, each House of Parliament.”

New clause 24 is a true sunset clause, modelled on clause 1 of the Armed Forces Bill currently before Parliament. We had a spirited debate before the break about potential replacements for clause 222, which is a clause of review. The new clause is another alternative—a sunset clause in the true meaning of the term, which would provide for the Act to expire at the end of a certain period, subject to certain provisos. I do not intend to push the new clause further at this point, given the position we took in relation to new clause 23.

Yes, I confirm I will not press the new clause.

Question put and agreed to.

Clause 233 accordingly ordered to stand part of the Bill.

New Clause 12

Warrants: notification by Judicial Commissioner

“(1) Upon completion of conduct authorised by a warrant under this Part, or the cancellation of a warrant issued under this Part, a Judicial Commissioner must notify the affected party, in writing, of—

(a) the conduct that has taken place, and

(b) the provisions under which the conduct has taken place.

(2) The notification under subsection (1) must be sent within thirty days of the completion of the conduct or cancellation of the warrant.

(3) A Judicial Commissioner may postpone the notification under subsection (1) beyond the time limit under subsection (2) if the Judicial Commissioner assesses that notification may defeat the purposes of an ongoing serious crime or national security investigation relating to the affected party.

(4) A Judicial Commissioner must consult with the person to whom the warrant is addressed in order to fulfil an assessment under subsection (3).”.—(Joanna Cherry.)

This amendment would introduce a requirement that all equipment interference produces a verifiable audit trail. This will be particularly vital to the success and legitimacy of prosecutions. It is recommended that further provision for the independent verification of audit trails is included in Part 8 (Oversight Arrangements).

Brought up, and read the First time.

I beg to move, That the clause be read a Second time.

With this it will be convenient to discuss the following:

New clause 13—Audit trail of equipment interference—

“Any conduct authorised under a warrant issued under this Part must be conducted in a verifiable manner, so as to produce a chronological record of documentary evidence detailing the sequence of activities (referred to hereafter as ‘the audit trail’).”.

New clause 18—Notification by Intelligence and Surveillance Commissioner—

“(1) The Intelligence and Surveillance Commissioner is to notify the subject or subjects of investigative or surveillance conduct relating to the statutory functions identified in section 196, subsections (1), (2) and (3), including—

(a) the interception or examination of communications,

(b) the retention, accessing or examination of communications data or secondary data,

(c) equipment interference,

(d) access or examination of data retrieved from a bulk personal dataset,

(e) covert human intelligence sources,

(f) entry or interference with property.

(2) The Intelligence and Surveillance Commissioner must only notify subjects of surveillance under subsection (1) upon completion of the relevant conduct or the cancellation of the authorisation or warrant.

(3) The notification under subsection (1) must be sent by writing within 30 days of the completion of the relevant conduct or cancellation of the authorisation or warrant.

(4) The Intelligence and Surveillance Commissioner must issue the notification under subsection (1) in writing, including details of—

(a) the conduct that has taken place, and

(b) the provisions under which the conduct has taken place, and

(c) any known errors that took place within the course of the conduct.

(5) The Intelligence and Surveillance Commissioner may postpone the notification under subsection (1) beyond the time limit under subsection (3) if the Commissioner assesses that notification may defeat the purposes of an on-going serious crime or national security investigation relating to the subject of surveillance.

(6) The Intelligence and Surveillance Commissioner must consult with the person to whom the warrant is addressed in order to fulfil an assessment under subsection (5).”.

The new clause relates to part 5 of the Bill, which deals with equipment interference—more colloquially known as “hacking”. The effect of the new clause would be to require that the targets of hacking, or the targets of equipment interference, are notified after the fact, as long as that does not compromise any ongoing investigation. The effect of the new clause would mean that the judicial commissioners were under a mandatory statutory duty to notify those subject to surveillance once a particular operation or investigation had ended. At present, unlawful surveillance only comes to light as the result of a chance leak, whistleblowing or public interest litigation of the sort brought by Liberty and other non-governmental organisations and concerned citizens. That is deeply unsatisfactory and is also potentially contrary to our obligations under the European convention on human rights. If a person’s article 8 and other Human Rights Act-protected rights have been infringed, in order to have access to an effective remedy, as required under human rights law, the person must first be made aware of a possible breach. This was stated by the Court in Strasbourg in Klass v. Federal Republic of Germany back in 1978 and reiterated more recently in Weber and Saravia v. Germany in 2006. In both cases, the European Court of Human Rights reiterated

“that the question of subsequent notification of surveillance measures is inextricably linked to the effectiveness of remedies before the courts and hence to the existence of effective safeguards against the abuse of monitoring powers, since there is in principle little scope for recourse to the courts by the individual concerned unless the latter is advised of the measures taken without his or her knowledge and thus able to challenge their legality retrospectively.”

More recently, in the case of Zakharov v. Russia in December 2015, the Grand Chamber of the European Court of Human Rights found that judicial remedies for those subjected to interception in Russia were generally ineffective, particularly in light of the total absence of any notification requirement with regard to the interception subject, which meant that there was no meaningful ability to mount retrospective challenges to surveillance measures, and therefore such provision as there was in Russia was ineffective. Do we want to be passing legislation that is as ineffective in the protection of our constituents’ rights as that in Russia?

The Bill, as it stands, provides a new power for the Investigatory Powers Commissioner to inform someone subjected to a surveillance error by a public authority, but not by a communications service provider, if the commissioner is made aware of it and considers it sufficiently serious, in the public interest, not prejudicial to national security, and so on. We debated that at some length last week. For an error to be serious, it must have caused significant prejudice or harm to the person concerned.

As we also discussed last week, the Bill states that a breach of the Human Rights Act is not, in itself, sufficient for an error to be considered serious, which is a serious shortcoming of the Bill. When notifying someone of an error, before making a decision the Investigatory Powers Commissioner must ask the public authority responsible for the error to make submissions to the commissioner about the matter concerned. That is a narrow, arbitrary and highly discretionary power that will relate only to the most serious errors that judicial commissioners discover during their very limited audit of the use of surveillance powers, which highlights the conflicted position in which judicial commissioners may find themselves, and it does not discharge the Government’s human rights obligations to provide post-notification by default unless they can justify continued secrecy. That is very significant because the security repercussions of hacking into a device or network create an even greater imperative for post-notification, as we discussed at length when we debated amendments and clauses under part 5.

When we debated part 5, it was noted by me and others that a hack, once it has been carried out, may compromise the security of the hacked device, leaving it open to further exploitation by criminals or even other Governments. It is the equivalent of the state breaking into a house, conducting a search and then leaving without locking the doors and without the resident realising that all that has happened. It is one thing for the state to hack into a device where it is strictly necessary and proportionate, but it is quite another for the state to leave the scene, leaving individuals vulnerable to criminal attacks with no way of protecting themselves. If the Government wish their security and law enforcement agencies to have this significant power, they must accept the concomitant responsibility. The purpose of new clause 12, put briefly, is to put the judicial commissioners under a mandatory statutory duty to notify persons after the fact, once an operation or investigation has ended, unless there are very good reasons not to do so.

I have listened with great care to the arguments of the hon. and learned Lady. I absolutely agree that, where a serious error has occurred in the use of investigatory powers, the commissioner should be able to inform those affected. We have clause 198(1) to deal with that. However, I do not agree with the principle that as a matter of course, everyone or anyone subject to the use of a lawful investigatory power should be notified of the use of those powers, even with the caveat “unless it would damage an ongoing serious crime or national security investigation”. Such a principle would mean that we could not exclude the possibility of having to notify suspected criminals and terrorists that powers had been used against them, just because a specific ongoing investigation had stalled or indeed ended with evidence of wrongdoing, but without sufficient evidence to meet the prosecution test.

As hon. Members will know, suspected criminals and terrorists will often appear on the radar of the police and security services at different times and in different contexts. Clearly, it would not be at all appropriate to inform them that investigatory powers had been used in one case, as that could prompt them to change how they behave or communicate and hamper subsequent investigation.

National security is particularly important in relation to this matter, because the amendment would require the commissioner to make the subject of interest aware of the conduct that had taken place. That would not only run contrary to the long-standing policy of successive Governments of neither confirming nor denying any specific activity by the security and intelligence agencies; it would essentially require the techniques that they use in specific cases to be made public. That cannot be in the public interest. It would assist terrorists and criminals in their operations, which I am sure cannot be the intention behind the amendment.

Furthermore, the commissioner can delay notification only on the basis of serious crime rather than of crime generally, meaning that the amendment would require the commissioner to inform suspects in active criminal investigations that their communications data had been acquired. One example is an investigation into stalking. It may well not meet the serious crime threshold, but as we have discussed in another context, communications data could be essential, because they could show contact between two parties. My worry about the amendment is that it would require the stalker to be informed that his communications data had been requested, which surely cannot be the intent.

Does the Solicitor General agree that new clause 12(3) deals with the very problem that he has just identified? It says:

“A Judicial Commissioner may postpone the notification under subsection (1) beyond the time limit under subsection (2) if the Judicial Commissioner assesses that notification may defeat the purposes of an ongoing serious crime or national security investigation relating to the affected party.”

I am afraid that it does not, because it uses the words “serious crime”. I have given an example that might not be seen as a serious crime, although as we all know, stalking is absolutely no joke to the victims and can lead to extremely serious consequences for them. I know that the hon. and learned Lady agrees with me about all that.

Beyond the principled objections to the amendment, there are numerous practical problems. It would not be practical, for example, for the commissioner to make everyone whose data were subject to a data retention notice aware of that fact. The commissioner would have to require the relevant telecommunications operator to provide them with a list of all relevant customers, and that operator would have to inform the commissioner every time a new customer joined the service. I worry that it would be pretty easy for criminals to use that process to identify services that they could use to avoid detection, and that unreasonable burdens would be put on all the public authorities covered by the Bill.

By way of probing, if we were to delete the word “serious”, so that the subsection read, “notification may defeat the purposes of an ongoing criminal investigation or a national security investigation,” would that deal with the Solicitor General’s concerns?

I am grateful to the hon. and learned Lady for the way in which she is seeking a reasonable compromise, but I worry that her proposed approach is, on that basis, unnecessary. We already have checks and balances in the framework of the Bill that allow for serious error to be properly identified and dealt with, and for those affected to be notified. As I was saying, I worry that we would end up placing unreasonable burdens on public authorities by requiring them constantly to make a case to the commissioner about whether what they were doing would hamper national security or crime investigations if suspects were told that investigatory powers were being used against them. It would be far better for the police to spend their time and money on getting on with the work of investigating criminals than on determining whether individuals should be informed about what we should not forget is perfectly lawful investigative activity, with the caveat I mentioned about serious error.

Furthermore, in the context of bulk warrants under parts 6 and 7 of the Bill, the public authority or commissioner would need to examine all the data collected under the warrant to identify those individuals whose data had been collected. That would be impracticable and would actually lead to greater intrusions into privacy, because, as we know, bulk data are not examined to that degree unless there is a specific purpose and a properly framed approach. I am sure that cannot be the intention of the amendment. These proposed new clauses are at best unnecessary and at worst frankly unhelpful, and risk undermining the work of our law enforcement and security and intelligence agencies.

On new clause 13 and the audit trail point, the draft code of practice, at paragraph 8.5, requires that

“When information obtained from equipment interference is used evidentially, the equipment interference agency should be able to demonstrate how the evidence has been recovered, showing each process through which the evidence was obtained.”

There will, however, be circumstances when equipment interference is used on an intelligence-only basis—that is, a non-evidential basis. Given those points, and given that it is in the interests of law enforcement and the intelligence agencies to ensure that where equipment interference is used to support a criminal investigation, that is done accordance with evidential standards, new clause 13 is, with respect, not necessary.

If that new clause is in fact about the enhancement of oversight, we have made it clear that while the powers of the new commissioner are being significantly increased, their resources will be greatly increased, which means that they will be able to audit, inspect and review equipment interference agencies as they see fit. In addition, the draft code of practice for equipment interference will require the relevant agencies to keep extensive records to support and enable oversight. There has been no suggestion from the current oversight commissioners in respect of property interference warrantry that a statutory requirement for an audit trail is necessary.

The hon. and learned Lady properly made reference to recent ECHR authorities, most notably Zakharov, a case that I have looked at in the context of these debates. We have to be careful about Zakharov, because it deals with the targeted interception regime—a particular aspect of the debate, as she knows—rather than the bulk regime, in relation to which it is sometimes prayed in aid. I give that caveat in the spirit of fairness, because of course the Zakharov case contained reference to Kennedy v. United Kingdom, a 2010 case in which the UK was found to be in compliance with article 8. In particular, the role of the Investigatory Powers Tribunal was seen as an important part of the checks-and-balances mechanism that allowed the Court to come to the conclusion that the article 8 requirements were satisfied.

I would like to put my new clauses to the vote.

Question put, That the clause be read a Second time.

I beg to move, That the clause be read a Second time.

The new clause relates to part 4 of the Bill, in particular clause 78, and to the retention of communications data. It would exclude the providers of rural or community access communication services and small service providers from the obligation to collect and retain data, which I believe would be in accordance with policy statements made by the Home Office. I am indebted to William Waites, Duncan Campbell and Adrian Kennard for drawing our attention to the need for this new clause and for assisting in its drafting. I can do no better than remind hon. Members of the statement submitted by Mr Waites on behalf of his organisation, HUBS CIC—document 53 in the written evidence submitted to the Committee—in which he explains:

“I am a founder and director of HUBS CIC, a Scottish Community Interest Company whose purpose is to facilitate broadband provision in rural and remote parts of the country outwith the reach of the large, well-known carriers.”

Hon. Members will be aware of this issue, which has been debated elsewhere in the House in this Session. The statement continues:

“HUBS’ members are small Internet Service Providers typically with tens to hundreds of individual end-user subscribers each. Together they provide the only available Internet service in large swathes of the West Highlands and the South of Scotland…HUBS does not provide service to end-users but instead makes bulk Internet services available to its members that would not otherwise be obtainable due to their small size.”

The members’ concern about clause 78

“is about how the data retention requirements…in particular, and the new obligations and duties on Telecommunications providers in general relate to service providers operating in the environment of HUBS’ membership…A typical member’s entire network infrastructure will cost on the order of tens or hundreds of thousands of pounds. It is optimised for lightweight, energy efficient operation. There are no data centres or indeed cabinets that have adequate physical security for safely storing the most intimate records of individuals’ on-line activities…Indeed it is recognised in general that keeping sensitive data secure is so important, that the best way to meet this obligation is simply to not record it.”

Therefore,

“Constructing facilities in each of these service providers to extract, record, securely store and make available any ‘Internet Connection Records’…would cost at least as much as their entire infrastructure…HUBS, though it is designed to enable the micro ISPs to benefit from economies of scale, cannot help here because it does not know the individual end users…Due regard should also be given to the social dynamics. If an ISP has a couple of dozen subscribers, two or three of which are actively involved in operating the network, data retention has a very different flavour.”

That is very often the position in rural and far-flung communities. It is like asking neighbour to spy on neighbour. I am sure that is not what the Government intend, but the new clause would spell that out. It would give providers of rural or community-access communication services and small service providers the reassurance they require in the Bill.

To put it shortly, the provisions in clause 78 are clearly designed for a very different environment from that which I have described, so those who operate within that environment are keen to have the Government’s assurance that they will be excepted from the requirements of the clause.

I am not sure what the Minister is saying. Is he saying he could look at the amendment and make it better, or that the principle underlying it is not acceptable?

Order. The Minister is intervening on Ms Cherry.

Sorry, Mr Owen, I have lost my train of thought. The concern behind the amendment is that although certain assurances have been given, I have tried to explain that, without a guarantee that requirements will be placed on such providers, they may simply grind to a halt. Is there any way round that? That is the purpose of the amendment.

I am sure the last thing the denizens of the west or the south of Scotland want is some mass influx of terrorists to start using their small internet service providers. On the other hand, they do not want their hard-won and hard-fought-for internet access to be completely compromised by unreasonable requirements being put on it. They are concerned that, although assurances have been given, there is nothing in clause 17 to prevent the Government from putting what would be practically and financially crippling requirements on them. That is the purpose of the amendment.

Ms Cherry, are you moving the new clause or withdrawing it?

The arithmetic is inevitable, Mr Owen. I would like to think carefully about what the Minister has said, and go back to the organisations concerned and discuss it with them so I will withdraw the new clause for now.

Clause, by leave, withdrawn.

New Clause 25

Discharge of the powers, duties and functions: obligations

“The discharge of the powers, duties and functions under this Act is subject to an obligation to have due regard to the following—

(a) the public interest in protecting national security,

(b) the public interest in the prevention and detection of serious crime,

(c) the public interest in the protection of the privacy and the integrity of personal data,

(d) the public interest in the security and integrity of communications systems and networks,

(e) the principle of necessity,

(f) the principle of proportionality; and that no interference with privacy should be considered proportionate if the information which is sought could reasonably be obtained by other less intrusive means,

(g) the principle of due process, accountability and respect for the human rights of those affected by the exercise of powers under this Act, and

(h) the principle of notification and redress.”—(Keir Starmer.)

Brought up, and read the First time.

I beg to move, That the clause be read a Second time.

With this it will be convenient to discuss the following:

New clause 26—Discharge of the powers, duties and functions: protection of national security—

“The discharge of the powers, duties and functions under this Act is subject to an obligation to have due regard to the public interest in protecting national security.”

New clause 27—Discharge of the powers, duties and functions: prevention and detection of serious crime—

“The discharge of the powers, duties and functions under this Act is subject to an obligation to have due regard to the public interest in the prevention and detection of serious crime.”

New clause 28—Discharge of the powers, duties and functions: protection of the privacy and integrity of personal data—

“The discharge of the powers, duties and functions under this Act is subject to an obligation to have due regard to the public interest in the protection of the privacy and the integrity of personal data.”

New clause 29—Discharge of the powers, duties and functions: security and integrity of communications systems and networks—

“The discharge of the powers, duties and functions under this Act is subject to an obligation to have due regard to the public interest in the security and integrity of communications systems and networks.”

New clause 30—Discharge of the powers, duties and functions: necessity—

“The discharge of the powers, duties and functions under this Act is subject to an obligation to have due regard to the principle of necessity.”

New clause 31—Discharge of the powers, duties and functions: proportionality—

“(1) The discharge of the powers, duties and functions under this Act is subject to an obligation to have due regard to the principle of proportionality.

(2) No interference with privacy should be considered proportionate if the information which is sought could reasonably be obtained by other less intrusive means.”

New clause 32—Discharge of the powers, duties and functions: process, accountability and respect for the human rights—

“The discharge of the powers, duties and functions under this Act is subject to an obligation to have due regard to the principle of due process, accountability and respect for the human rights of those affected by the exercise of powers under this Act.”

New clause 33—Discharge of the powers, duties and functions: notification and redress—

“The discharge of the powers, duties and functions under this Act is subject to an obligation to have due regard to the principle of notification and redress.”

I welcome you back to the Chair, Mr Owen, for what I anticipate will be our last debate in this Bill Committee as we take this clutch of new clauses together. I say it is our last debate, but in some ways new clause 25 concerns an issue that we have been debating throughout Committee, from the very opening sitting and through every sitting we have had since. The discussion has been to-ing and fro-ing over whether there ought to be more specific provision for weight to be given to privacy in each clause or each time a power is set out, or whether there ought to be some overriding clause.

The new clause is an overriding privacy clause that is consistent with the recommendation of the Intelligence and Security Committee. For the Labour party, it is an important provision, upon which we place considerable weight. In other words, somewhere in the Bill, there needs to be a recognition of the real rights and interests that are affected by the powers in the Bill. A clause is needed to ensure consistency through the Bill, as there are examples of different powers being dealt with in slightly different ways. That clause should also act as a reminder to decision makers about the key principles they are applying in pretty well all the decisions they make. Perhaps most importantly, the clause should reassure the public on the key principles that run through the Bill.

I will concentrate on new clause 25. Considerable thought has been given to how an overriding privacy clause could be put together in a way that has meaning—and therefore gives confidence to the public—but is not so detailed as to be impractical to operate as an overriding clause. The way that the new clause has been put together is that four important public interests are recognised in paragraphs (a) to (d).

First is the public interest in protecting national security. That runs through the Bill and is the starting point. The second is the national interest in preventing and detecting serious crime, which also runs through all the powers we have debated. Thirdly, there is the public interest in the protection of privacy and the integrity of personal data. Now and again that crops up in the Bill, although not consistently, but it is an overriding interest. Fourthly, there is the public interest in the security and integrity of communications systems and networks. Those are the four powerful public interests.

Paragraphs (e) to (h) deal with the principles to be applied, including the principle of necessity and the principle of proportionality. As we have heard, there are examples where, although the Minister and the Solicitor General understandably say, “Well, of course that would be the reference point for decision making,” they are not on the face of the Bill. The new clause would provide the reassurance that that was the framework against which decisions were made.

As far as the principle of proportionality is concerned, the second limb of paragraph (f) is taken directly from the code of practice. It has been thought through and put into the code of practice but, for reasons I have argued previously, ought to be on the face of the Bill. Paragraph (g) deals with

“the principle of due process, accountability and respect for the human rights of those affected by the exercise of powers under this Act”,

and paragraph (h) deals with

“the principle of notification and redress.”

Now, they are principles and therefore are not fixed. The principle of accountability does not mean that everything must, necessarily, be transparent in the way it might be for other powers and duties in other Acts. The principle of notification does not mean there must always be notification. These are broad principles to be applied through the Act.

Whenever one tries to devise an overarching clause such as this, it is a careful exercise, or a judgment call, to try to decide what ought to be in and what ought not to be in. That is why the new clauses that follow are in the nature of a menu or suite of options. I am grateful to the Public Bill Office for giving me guidance on how to devise a number of clauses that would allow the Committee as a whole to look at each of these eight provisions and take a view on which ones ought to be included in an overarching privacy clause. My strong preference is not to get to new clause 26 and onwards, because I do not think that would be a particularly satisfactory way of dealing with an overarching privacy clause.

May I indicate, absolutely clearly and transparently, that I will listen carefully to what the Government say? In other words, I do not pretend for a moment that these new clauses could not be improved upon by different drafting. The issue we are probing is whether in principle there ought to be an overarching privacy clause, or an overarching set of public interests and principles, and if so, what broadly speaking would be included in them.

In that sense, new clause 25 can be properly described as a strongly probing clause. In other words, what we want to draw out are the views of the Committee on what an overarching clause ought to have in it; and if it is then necessary to have another joint exercise at drafting such a clause, then so be it.

I rise to speak as someone who, as a lawyer, will have interpreted clauses such as this to advance a particular case, giving weight to a particular clause or using it to enhance a case or stress a particular fact. To take paragraphs (g) or (h), for example, when we have already discussed notification perhaps not being necessary, they might be construed as saying that notification was necessary in a particular clause where it has no meaning at all. Will the hon. and learned Gentleman acknowledge that, in inserting in an overarching clause, we might be hostages to fortune, by including intentions that we did not intend in specific provisions?

I am grateful for that intervention; there are really two answers. The first is that it has been the constant refrain from the Minister that most of these principles run through the Bill and that therefore they are unnecessary, although I would say it is necessary to flush them out in this form.

To give another example, when the Human Rights Act was being passed, there was a real concern about how freedom of expression would operate in practice, and the Government of the day were persuaded that there ought to be a clause that really indicated to the courts that special consideration or weight ought to be given to freedom of expression.

All that has meant in practice is that the courts, when dealing with freedom of expression, have looked carefully at that clause and given it due weight. It works pretty well in practice; it does not tie the hands of a court. However, it is a reminder to a court of what the most important public interests were in the view of those passing the legislation and what the principles running through the Bill were. More importantly, it was a reminder to decision makers. For every case that goes to court, there are however many hundred thousand decisions that are made by decision makers on the ground.

I have some experience in Northern Ireland of working with the police over there in implementing the Human Rights Act. Counter-intuitively in many ways, having statements of necessity and proportionality built into the decision-making process really helped them, because they were able to assess, probably better than most others, why they thought what they were doing was necessary, and able to articulate why they thought it was proportionate, and they actually came to very good decisions as a result of what might be seen as broad principles being built into their decision-making process.

Such a provision would assure the public as to how the Bill is intended to operate and what the strong currents going through it are. I genuinely think it would help decision makers in the fine decisions, when they are not quite sure where the balance lies, and it would be a reminder to the courts of the particular public interests and principles that Parliament intended to lay down as running through the Bill. The danger of such a clause is always that it will be overused by lawyers, but I do not think that is what has happened in practice with similar provisions.

Order. We are not ready for you yet, Minister.

I can assure you, Mr Owen, that I will not detain you, the Minister or the Committee for long, save to endorse what my hon. and learned Friend the Member for Holborn and St Pancras has said.

If this is to be our final debate in Committee, I pay tribute to the forensic diligence exercised by my hon. and learned Friend throughout our proceedings and as exemplified by new clause 25 that he has tabled. The crux of so much of what we have discussed in Committee has been balance—where the right balance is between the protection of individual privacy and the ability of our security, intelligence and law enforcement agencies to protect us as a nation. We all have different beliefs about where the balance lies and it is the job of the Committee and the House to establish that balance.

As my hon. and learned Friend has made clear, adding this overarching new clause would give the public a level of comfort—a level of trust, indeed—that we have the balance correct. The new clause would remind us, right at the start of the Bill, of the principles that we think underpin the legislation. That would provide the public with the comfort that they require and also imbue a sense of trust in the final Act that we hand over to the judiciary, the Home Secretary and the agencies that are charged with protecting us. Given the structure of the Bill and the repeated application of certain measures to different areas of activity, an overarching clause would provide a solid foundation to the rest of the Bill’s structure.

I commend my hon. and learned Friend for his work, and in particular for the new clause, because it helps to achieve the balance between protection of privacy and the protection and defence of the realm. I hope that it goes a long way towards winning the support of more sceptical members of the public who might be looking for reasons why they should not support the Bill; now, we can give them a reason why they should.

I add my support and that of the Scottish National party to the new clause. I will tell hon. Members about an example of such a clause in Scottish legislation, which they might wish to look at. In doing so, I pay generous tribute to honourable Labour and Liberal Democratic parties which passed it. In coalition in the first Session of the Scottish Parliament, they passed a wonderful piece of legislation, the Mental Health (Care and Treatment) (Scotland) Act 2003. It was based on a report produced by a committee chaired by the late right hon. Bruce Millan, a former Secretary of State for Scotland and a very distinguished gentleman.

The 2003 Act sought thoroughly to modernise and codify the law of Scotland on mental health and, in particular, to take into account the human rights of those who have mental health problems. To do that, it set out in section 1 of the Act general principles that everyone discharging functions under the legislation must stand by. It is a piece of legislation that has very much stood the test of time and it has greatly enhanced the protection of the human rights of those in Scotland with mental health problems. It has also balanced that against the protection of the public in certain situations. The new clause does not take a legislative approach that is without precedent. If Members want to see how it might be done, they can find a similar example to new clause 25 in section 1 of the Mental Health (Care and Treatment) (Scotland) Act 2003.

I am grateful to the Minister for how he has put his final observations. It was in keeping with how all our debates have been conducted over our various sittings. I will not press any new clause to a vote. Pretty much every time that my wife and I take our children into a restaurant, no matter how many options are on the menu, they inevitably want something that is not on the menu. That is the position I find myself in now. I am happy that the suggested ingredients will be taken away and put together in a way that reflects the clause that the Minister, I am glad to say, has said he will introduce. I beg to ask leave to withdraw the motion.

Clause, by leave, withdrawn.

Question proposed, That the Chair do report the Bill, as amended, to the House.

Before other hon. Members make comments, I would inform them that when the Division bell goes, I will put the Question, whether a Member is in full flow or not, so that we do not have to come back after the vote, which will take up to three-quarters of an hour.

Thank you, Mr Owen. I have been handed a note which says, “Vote shortly”, and I think that is an instruction not to take long, but it would be remiss of me not to pay tribute and to say thank you to so many people who have made this process work as well as it has worked.

I start of course with yourself, Mr Owen, and your co-chair, who have taken us through the proceedings in an efficient and orderly way and allowed the points to be debated in the way they needed to be debated and drawn out where they needed to be drawn out. We are genuinely grateful to you for that.

I also thank the Public Bill Office. This has been a huge exercise and, on occasion, amendments that we thought we had lodged were not lodged where we thought they had been lodged and therefore, at 10 o’clock and 11 o’clock at night, the team upstairs was working to find the amendments, put them back in the proper order and make sure that we had them for the next day’s deliberations. It was not just what we might consider the ordinary working hours.

I think I am right in saying that, for better or worse, more than 1,000 amendments have been tabled by Labour party, Scottish National party and Government Members. That is a pretty record number. I think we have had up to 40 Divisions on the Bill. There has been a huge amount of work over and above, and we are all grateful for it. We are grateful for the work done to ensure that Hansard properly reflects what has gone on in this debate, so that things are put on the record accurately and that others can see what was argued, why it was argued and how it was argued not only when the Bill progresses through the House but also if and when it becomes an Act. We are also grateful to the other staff—the Doorkeepers and so on—who have helped with the process.

May I thank the Home Office team? Although, in a sense, they provide the notes to Government Members, I know how hard they have to work behind the scenes to ensure that what appears, particularly from the Minister and the Solicitor General, is informed, up to the minute and seemly and deals with difficult and probing issues. That is a huge amount of work behind the scenes. They have been helpful to the Opposition as well—

And we finished a day early. I would like to pay tribute to both the Minister and the Solicitor General. There are different ways of doing this. I am not over-experienced in it, but I know that sometimes there can be trench warfare, where both sides simply dig in, fire their ammunition and little is achieved. They have both listened to what we have said by way of our submissions and agreed on a number of occasions to think again in relation to the Bill. That is genuine progress, although it may not be reflected in the number of votes we have won. This is my second Bill Committee, and the number of votes I have won is still a very round number. However, I genuinely think we have achieved through our dialogue and through the approach of both the Opposition and the Government something that will pay dividends and will strengthen the Bill when it becomes an Act.

I also want to pay tribute to the SNP team. As will have been evident, there has been a lot of work behind the scenes to ensure that we are not duplicating one another’s work and that we think through what we do. That has been very helpful.

Order. I think the hon. and learned Gentleman should sit down and allow Ms Cherry to speak for herself, because we are going to a vote.

I will. I hope that the hon. and learned Lady will mention the non-governmental organisations that have helped us. Thank you.

I add my thanks to all those who have been mentioned so far. It has been a true pleasure to work so closely with the hon. and learned Member for Holborn and St Pancras. I pay tribute to the people behind the scenes who have greatly assisted Opposition Members in our preparation for this Committee.

A number of non-governmental organisations have been mentioned. I will not mention any one in particular; they know who they are, and they have been of great assistance to us. I also want to thank my hon. Friend the Member for Paisley and Renfrewshire North. This is my first time on a Bill Committee, and without his assistance, I would have been in even more of a guddle than I was on some occasions. I am very grateful to him for keeping me right.

I add my thanks to all members of the Committee, the Clerks in particular, officials, the Official Report, the Doorkeepers and so on.

Question put and agreed to.

Bill, as amended, accordingly to be reported.