1

House of Commons

Tuesday 20 March 2018

Public Bill Committee

New Amendments handed in are marked thus

Amendments which will comply with the required notice period at their next appearance

Amendments tabled since the last publication: 230 to 232

Data Protection Bill [Lords]

Note

This document includes all amendments remaining before the Committee and

includes any withdrawn amendments at the end. The amendments have been

arranged in accordance with the Order of the Committee [13 March 2018].

Margot James

117

Schedule  10,  page  187,  line  5,  at end insert—

“Safeguarding of children and of individuals at risk

3A  (1)  

This condition is met if—

(a)    

the processing is necessary for the purposes of—

(i)    

protecting an individual from neglect or physical, mental or

emotional harm, or

(ii)    

protecting the physical, mental or emotional well-being of an

individual,

(b)    

the individual is—

(i)    

aged under 18, or

(ii)    

aged 18 or over and at risk,

(c)    

the processing is carried out without the consent of the data subject for

one of the reasons listed in sub-paragraph (2), and

(d)    

the processing is necessary for reasons of substantial public interest.

      (2)  

The reasons mentioned in sub-paragraph (1)(c) are—

(a)    

in the circumstances, consent to the processing cannot be given by the

data subject;

Public Bill Committee: 20 March 2018                  

2

Data Protection Bill-[Lords], continued

(b)    

in the circumstances, the controller cannot reasonably be expected to

obtain the consent of the data subject to the processing;

(c)    

the processing must be carried out without the consent of the data

subject because obtaining the consent of the data subject would

prejudice the provision of the protection mentioned in sub-paragraph

(1)(a).

      (3)  

For the purposes of this paragraph, an individual aged 18 or over is “at risk” if

the controller has reasonable cause to suspect that the individual—

(a)    

has needs for care and support,

(b)    

is experiencing, or at risk of, neglect or physical, mental or emotional

harm, and

(c)    

as a result of those needs is unable to protect himself or herself against

the neglect or harm or the risk of it.

      (4)  

In sub-paragraph (1)(a), the reference to the protection of an individual or of

the well-being of an individual includes both protection relating to a particular

individual and protection relating to a type of individual.”

Member’s explanatory statement

Schedule 10 makes provision about the circumstances in which the processing of special

categories of personal data is permitted. This amendment adds to that Schedule certain processing

of personal data which is necessary for the protection of children or of adults at risk. See also

Amendments 85 and 116.

Margot James

35

Clause  94,  page  55,  line  8,  leave out “day” and insert “time”

Member’s explanatory statement

This amendment is consequential on Amendment 71.

Margot James

36

Clause  94,  page  55,  line  9,  leave out “day” and insert “time”

Member’s explanatory statement

This amendment is consequential on Amendment 71.

Margot James

37

Clause  94,  page  55,  line  10,  leave out “days”

Member’s explanatory statement

This amendment is consequential on Amendment 71.

Margot James

38

Clause  94,  page  55,  line  11,  leave out “the day on which” and insert “when”

Member’s explanatory statement

This amendment is consequential on Amendment 71.

Public Bill Committee: 20 March 2018                  

3

Data Protection Bill-[Lords], continued

Margot James

39

Clause  94,  page  55,  line  12,  leave out “the day on which” and insert “when”

Member’s explanatory statement

This amendment is consequential on Amendment 71.

Margot James

40

Clause  94,  page  55,  line  13,  leave out “the day on which” and insert “when”

Member’s explanatory statement

This amendment is consequential on Amendment 71.

Brendan O’Hara

Stuart C. McDonald

135

Clause  96,  page  56,  line  8,  after “law” insert “unless the decision engages an

individual’s rights under the Human Rights Act 1998”.

Margot James

41

Clause  97,  page  56,  line  34,  leave out “21 days” and insert “1 month”

Member’s explanatory statement

Clause 97(4) provides that where a controller notifies a data subject under Clause 97(3) that the

controller has taken a decision falling under Clause 97(1) (automated decisions required or

authorised by law), the data subject has 21 days to request the controller to reconsider or take a

new decision not based solely on automated processing. This amendment extends that period to

one month.

Margot James

42

Clause  97,  page  56,  line  39,  leave out “21 days” and insert “1 month”

Member’s explanatory statement

Clause 97(5) provides that where a data subject makes a request to a controller under Clause

97(4) to reconsider or retake a decision based solely on automated processing, the controller has

21 days to respond. This amendment extends that period to one month.

Margot James

43

Clause  99,  page  57,  line  28,  leave out “day” and insert “time”

Member’s explanatory statement

This amendment is consequential on Amendment 71.

Margot James

44

Clause  99,  page  58,  line  3,  leave out “day” and insert “time”

Member’s explanatory statement

This amendment is consequential on Amendment 71.

Public Bill Committee: 20 March 2018                  

4

Data Protection Bill-[Lords], continued

Margot James

45

Clause  99,  page  58,  line  5,  leave out “the day on which” and insert “when”

Member’s explanatory statement

This amendment is consequential on Amendment 71.

Margot James

46

Clause  99,  page  58,  line  6,  leave out “the day on which” and insert “when”

Member’s explanatory statement

This amendment is consequential on Amendment 71.

Liam Byrne

Louise Haigh

Chris Elmore

Darren Jones

159

Clause  109,  page  61,  line  13,  after “is” insert “provided by law and is”

Member’s explanatory statement

This amendment would place meaningful safeguards on the sharing of data by the intelligence

agencies.

Liam Byrne

Louise Haigh

Chris Elmore

Darren Jones

160

Clause  109,  page  61,  line  18,  at end insert—

“(3)    

The transfer falls within this subsection if the transfer—

(a)    

is based on an adequacy decision (see section 74),

(b)    

if not based on an adequacy decision, is based on there being appropriate

safeguards (see section 75), or

(c)    

if not based on an adequacy decision or on there being appropriate

safeguards, is based on special circumstances (see section 76 as amended

by subsection (5)).

(4)    

A transfer falls within this subsection if—

(a)    

the intended recipient is a person based in a third country that has (in that

country) functions comparable to those of the controller or an

international organisation, and

(b)    

the transfer meets the following conditions—

(i)    

the transfer is strictly necessary in a specific case for the

performance of a task of the transferring controller as provided

by law or for the purposes set out in subsection (2),

(ii)    

the transferring controller has determined that there are no

fundamental rights and freedoms of the data subject concerned

that override the public interest necessitating the transfer,

(iii)    

the transferring controller informs the intended recipient of the

specific purpose or purposes for which the personal data may, so

far as necessary, be processed, and

Public Bill Committee: 20 March 2018                  

5

Data Protection Bill-[Lords], continued

(iv)    

the transferring controller documents any transfer and informs

the Commissioner about the transfer on request.

(5)    

The reference to law enforcement purposes in subsection (4) of section 76 is to be

read as a reference to the purposes set out in subsection (2).”

Margot James

118

Schedule  11,  page  190,  line  4,  leave out “day falls before the day on which” and

insert “time falls before”

Member’s explanatory statement

This amendment is consequential on Amendment 71.

Margot James

119

Schedule  11,  page  190,  line  7,  leave out “day” and insert “time”

Member’s explanatory statement

This amendment is consequential on Amendment 71.

Margot James

120

Schedule  11,  page  190,  line  9,  leave out “the date of”

Member’s explanatory statement

This amendment is consequential on Amendment 71.

Margot James

121

Schedule  11,  page  190,  line  17,  leave out “day” and insert “time”

Member’s explanatory statement

This amendment is consequential on Amendment 71.

Brendan O’Hara

Stuart C. McDonald

Liam Byrne

Louise Haigh

Chris Elmore

Darren Jones

136

Page  63,  line  1,  leave out Clause 113

Member’s explanatory statement

This amendment would remove delegated powers that would allow the Secretary of State to create

new exemptions to Part 4 of the Bill.

Public Bill Committee: 20 March 2018                  

6

Data Protection Bill-[Lords], continued

Margot James

122

Schedule  13,  page  194,  line  36,  leave out from beginning to end of line 4 on page

195

Member’s explanatory statement

This amendment is consequential on the omission of Clause 121 (see Amendment 47).

Margot James

47

Page  66,  line  23,  leave out Clause 121

Margot James

48

Clause  124,  page  68,  line  24,  leave out “with the day on which” and insert “when”

Member’s explanatory statement

This amendment is consequential on Amendment 71.

Margot James

49

Clause  125,  page  69,  line  9,  leave out “with the day on which” and insert “when”

Member’s explanatory statement

This amendment is consequential on Amendment 71.

Brendan O’Hara

Stuart C. McDonald

137

Clause  142,  page  77,  line  34,  at end insert—

“(3)    

The Secretary of State must consult the Scottish Government and obtain its

consent before establishing an inquiry under subsection (1).”

Member’s explanatory statement

This amendment would ensure that before any inquiry was established, the UK Government must

have consent from Scottish Government.

Margot James

50

Page  77,  line  18,  leave out Clause 142

Public Bill Committee: 20 March 2018                  

7

Data Protection Bill-[Lords], continued

Margot James

51

Clause  143,  page  77,  line  37,  after “notice”)” insert “—

(a)    

”

Member’s explanatory statement

See the explanatory statement for Amendment 52.

Margot James

52

Clause  143,  page  77,  line  40,  at end insert “, or

(b)    

require any person to provide the Commissioner with information that

the Commissioner reasonably requires for the purposes of determining

whether the processing of personal data is carried out by an individual in

the course of a purely personal or household activity.”

Member’s explanatory statement

This amendment and Amendments 51 and 54 enable the Information Commissioner to obtain

information in order to work out whether processing is carried out in the course of purely personal

or household activities. Such processing is not subject to the GDPR or the applied GDPR (see

Article 2(2)(c) of the GDPR and Clause 21(3)).

Margot James

53

Clause  143,  page  78,  line  23,  leave out “with the day on which” and insert “when”

Member’s explanatory statement

This amendment is consequential on Amendment 71.

Margot James

54

Clause  143,  page  78,  line  30,  at end insert—

“(10)    

Section 3(14)(b) does not apply to the reference to the processing of personal data

in subsection (1)(b).”

Member’s explanatory statement

This amendment secures that the reference to “processing” in the new paragraph (b) inserted by

Amendment 52 includes all types of processing of personal data. It disapplies Clause 3(14)(b),

which provides that references to processing in Parts 5 to 7 of the bill are usually to processing to

which Chapter 2 or 3 of Part 2, Part 3 or Part 4 applies.

Margot James

55

Clause  146,  page  81,  line  3,  leave out “with the day on which” and insert “when”

Member’s explanatory statement

This amendment is consequential on Amendment 71.