Session 2017-19
Internet Publications
Other Bills before Parliament


 
 

Public Bill Committee Proceedings: 22 March 2018          

8

 

Data Protection Bill-[Lords], continued

 
 

Margot James

 

Agreed to  86

 

Schedule  1,  page  126,  line  38,  at end insert—

 

“Safeguarding of economic well-being of certain individuals

 

14B(1)  

This condition is met if the processing—

 

(a)    

is necessary for the purposes of protecting the economic well-being of

 

an individual at economic risk who is aged 18 or over,

 

(b)    

is of data concerning health,

 

(c)    

is carried out without the consent of the data subject for one of the

 

reasons listed in sub-paragraph (2), and

 

(d)    

is necessary for reasons of substantial public interest.

 

      (2)  

The reasons mentioned in sub-paragraph (1)(c) are—

 

(a)    

in the circumstances, consent to the processing cannot be given by the

 

data subject;

 

(b)    

in the circumstances, the controller cannot reasonably be expected to

 

obtain the consent of the data subject to the processing;

 

(c)    

the processing must be carried out without the consent of the data

 

subject because obtaining the consent of the data subject would

 

prejudice the provision of the protection mentioned in sub-paragraph

 

(1)(a).

 

      (3)  

In this paragraph, “individual at economic risk” means an individual who is

 

less able to protect his or her economic well-being by reason of physical or

 

mental injury, illness or disability.”

 

Louise Haigh

 

Liam Byrne

 

Chris Elmore

 

Darren Jones

 

Withdrawn after debate  150

 

Schedule  1,  page  126,  line  38,  at end insert—

 

“Register of missing persons

 

“14A      

This condition is met if the processing—

 

(a)    

is necessary for the establishment or maintenance of any register of

 

missing persons, and

 

(b)    

is carried out in a manner which is consistent with any guidance which

 

may be issued by the Secretary of State or by the Commissioner on the

 

processing of data for the purposes of this paragraph.”

 

Margot James

 

Agreed to  87

 

Schedule  1,  page  127,  line  30,  at end insert—

 

    “( )  

The reference in sub-paragraph (4)(b) to a data subject withholding consent

 

does not include a data subject merely failing to respond to a request for

 

consent.”


 
 

Public Bill Committee Proceedings: 22 March 2018          

9

 

Data Protection Bill-[Lords], continued

 
 

Margot James

 

Agreed to  88

 

Schedule  1,  page  127,  line  39,  at end insert—

 

“( )    

is of data concerning health which relates to a data subject who is the

 

parent, grandparent, great-grandparent or sibling of a member of the

 

scheme,”

 

Margot James

 

Agreed to  89

 

Schedule  1,  page  128,  line  6,  at end insert—

 

    “( )  

The reference in sub-paragraph (2)(b) to a data subject withholding consent

 

does not include a data subject merely failing to respond to a request for

 

consent.”

 

Liam Byrne

 

Louise Haigh

 

Chris Elmore

 

Not selected  171

 

Parliamentary Star    

Schedule  1,  page  128,  line  13,  leave out “necessary” and insert “required”.

 

Liam Byrne

 

Louise Haigh

 

Chris Elmore

 

Not selected  172

 

Parliamentary Star    

Schedule  1,  page  128,  line  17,  leave out “substantial” wherever it occurs.

 

Liam Byrne

 

Louise Haigh

 

Chris Elmore

 

Not selected  173

 

Parliamentary Star    

Schedule  1,  page  128,  line  17,  leave out second “substantial”.

 

Liam Byrne

 

Louise Haigh

 

Chris Elmore

 

Not selected  174

 

Parliamentary Star    

Schedule  1,  page  128,  line  21,  after “process” insert “special category”.

 

Liam Byrne

 

Louise Haigh

 

Chris Elmore

 

Not selected  175

 

Parliamentary Star    

Schedule  1,  page  128,  line  27,  after ““political activities”” insert “may”.

 

Margot James

 

Agreed to  90

 

Schedule  1,  page  131,  line  14,  at end insert—

 

    “( )  

If the processing consists of the disclosure of personal data to a body or

 

association described in sub-paragraph (1)(a), or is carried out in preparation

 

for such disclosure, the condition in sub-paragraph (1) is met even if, when the

 

processing is carried out, the controller does not have an appropriate policy

 

document in place (see paragraph 5 of this Schedule).”


 
 

Public Bill Committee Proceedings: 22 March 2018          

10

 

Data Protection Bill-[Lords], continued

 
 

Liam Byrne

 

Louise Haigh

 

Chris Elmore

 

Not selected  177

 

Parliamentary Star    

Schedule  1,  page  131,  line  19,  leave out sub-paragraph (b)

 

Liam Byrne

 

Louise Haigh

 

Chris Elmore

 

Not selected  178

 

Parliamentary Star    

Schedule  1,  page  131,  line  28,   at end insert “, or

 

(c)    

risks to fair and equal competition”

 

Margot James

 

Agreed to  91

 

Schedule  1,  page  133,  line  17,  leave out from “interest” to end of line 21

 

Margot James

 

Agreed to  92

 

Schedule  1,  page  134,  line  18,  leave out “on the day” and insert “when”

 

Schedule, as amended, 1 Agreed to.

 

Clauses 11 to 13 Agreed to.

 


 

Liam Byrne

 

Louise Haigh

 

Chris Elmore

 

Darren Jones

 

Negatived on division  153

 

Clause  14,  page  7,  line  30,  at end insert—

 

“(1A)    

A decision that engages an individual’s rights under the Human Rights Act 1998

 

does not fall within Article 22(2)(b) of the GDPR (exception from prohibition on

 

taking significant decisions based solely on automated processing for decisions

 

that are authorised by law and subject to safeguards for the data subject’s rights,

 

freedoms and legitimate interests).

 

Brendan O’Hara

 

Stuart C. McDonald

 

Not called  130

 

Clause  14,  page  7,  line  34,  at end insert—

 

“(2A)    

A decision that engages an individual’s rights under the Human Rights Act 1998

 

does not fall within Article 22(2)(b) of the GDPR (exception from prohibition on

 

taking significant decisions based solely on automated processing for decisions

 

that are authorised by law and subject to safeguards for the data subject’s rights,

 

freedoms and legitimate interests).

 

(2B)    

A decision is “based solely on automated processing” for the purposes of this

 

section if, in relation to a data subject, there is no meaningful input by a natural

 

person in the decision-making process.”


 
 

Public Bill Committee Proceedings: 22 March 2018          

11

 

Data Protection Bill-[Lords], continued

 
 

Margot James

 

Agreed to  10

 

Clause  14,  page  8,  line  4,  leave out “21 days” and insert “1 month”

 

Margot James

 

Agreed to  11

 

Clause  14,  page  8,  leave out line 10 and insert “within the period described in Article

 

12(3) of the GDPR—”

 

Margot James

 

Agreed to  12

 

Clause  14,  page  8,  line  16,  at end insert—

 

“(5A)    

In connection with this section, a controller has the powers and obligations under

 

Article 12 of the GDPR (transparency, procedure for extending time for acting on

 

request, fees, manifestly unfounded or excessive requests etc) that apply in

 

connection with Article 22 of the GDPR.”

 

Clause, as amended, Agreed to.

 


 

Margot James

 

Agreed to  13

 

Clause  15,  page  8,  line  31,  after “21” insert “and 34”

 

Margot James

 

Agreed to  14

 

Clause  15,  page  8,  line  34,  after “21” insert “and 34”

 

Clause, as amended, Agreed to.

 


 

Margot James

 

Agreed to  93

 

Schedule  2,  page  135,  line  7,  at end insert—

 

“( )    

Article 19 (notification obligation regarding rectification or erasure of

 

personal data or restriction of processing);”

 

Margot James

 

Agreed to  94

 

Schedule  2,  page  135,  line  19,  after “provisions” insert “and Article 34(1) and (4)

 

of the GDPR (communication of personal data breach to the data subject)”


 
 

Public Bill Committee Proceedings: 22 March 2018          

12

 

Data Protection Bill-[Lords], continued

 
 

Liam Byrne

 

Louise Haigh

 

Chris Elmore

 

Darren Jones

 

Brendan O’Hara

 

Stuart C. McDonald

 

Negatived on division  156

 

Schedule  2,  page  136,  line  30,  leave out paragraph 4

 

Margot James

 

Agreed to  95

 

Schedule  2,  page  138,  line  15,  at end insert—

 

“( )    

Article 19 (notification obligation regarding rectification or erasure of

 

personal data or restriction of processing);”

 

Margot James

 

Agreed to  96

 

Schedule  2,  page  139,  leave out lines 17 to 27 and insert—

 

“2. The function is designed to

The function is—

 
 

protect members of the public

(a)    

conferred on a person by an

 
 

against—

enactment,

 
 

(a)    

dishonesty, malpractice

(b)    

a function of the Crown, a

 
 

or other seriously

Minister of the Crown or a

 
 

improper conduct, or

government department, or

 
 

(b)    

unfitness or

(c)    

of a public nature, and is exercised

 
 

incompetence.

in the public interest.”

 
 

Margot James

 

Agreed to  97

 

Schedule  2,  page  140,  line  42,  at end insert—

 

“Audit functions

 

7A  (1)  

The listed GDPR provisions do not apply to personal data processed for the

 

purposes of discharging a function listed in sub-paragraph (2) to the extent that

 

the application of those provisions would be likely to prejudice the proper

 

discharge of the function.

 

      (2)  

The functions are any function that is conferred by an enactment on—

 

(a)    

the Comptroller and Auditor General;

 

(b)    

the Auditor General for Scotland;

 

(c)    

the Auditor General for Wales;

 

(d)    

the Comptroller and Auditor General for Northern Ireland.”

 

Margot James

 

Agreed to  98

 

Schedule  2,  page  140,  line  42,  at end insert—

 

“Functions of the Bank of England

 

7B  (1)  

The listed GDPR provisions do not apply to personal data processed for the

 

purposes of discharging a relevant function of the Bank of England to the


 
 

Public Bill Committee Proceedings: 22 March 2018          

13

 

Data Protection Bill-[Lords], continued

 
 

extent that the application of those provisions would be likely to prejudice the

 

proper discharge of the function.

 

      (2)  

“Relevant function of the Bank of England” means—

 

(a)    

a function discharged by the Bank acting in its capacity as a monetary

 

authority (as defined in section 244(2)(c) and (2A) of the Banking Act

 

2009);

 

(b)    

a public function of the Bank within the meaning of section 349 of the

 

Financial Services and Markets Act 2000;

 

(c)    

a function conferred on the Prudential Regulation Authority by or

 

under the Financial Services and Markets Act 2000 or by another

 

enactment.”

 

Margot James

 

Agreed to  99

 

Schedule  2,  page  141,  line  18,  leave out “body” and insert “person”

 

Margot James

 

Agreed to  100

 

Schedule  2,  page  141,  line  19,  leave out “body” and insert “person”

 

Margot James

 

Agreed to  101

 

Schedule  2,  page  142,  line  7,  column 2, at end insert—

  

“() section 244 of the

 
  

Investigatory Powers Act

 
  

2016;”

 
 

Margot James

 

Agreed to  102

 

Schedule  2,  page  142,  line  37,  at end insert—

 

“1A. The Scottish

By or under—

 
 

Information

(a)    

the Freedom of Information

 
 

Commissioner.

(Scotland) Act 2002 (asp 13);

 
  

(b)    

the Environmental

 
  

Information (Scotland)

 
  

Regulations 2004 (S.S.I.

 
  

2004/520);

 
  

(c)    

the INSPIRE (Scotland)

 
  

Regulations 2009 (S.S.I.

 
  

2009/440).”

 
 

Margot James

 

Agreed to  103

 

Schedule  2,  page  143,  line  7,  leave out “or under any” and insert “an”


 
 

Public Bill Committee Proceedings: 22 March 2018          

14

 

Data Protection Bill-[Lords], continued

 
 

Margot James

 

Agreed to  104

 

Schedule  2,  page  143,  line  7,  at end insert—

 

“5A. The Financial

By or under the Financial Services

 
 

Conduct Authority.

and Markets Act 2000 or by another

 
  

enactment.”

 
 

Margot James

 

Agreed to  105

 

Schedule  2,  page  143,  line  22,  at end insert—

 

“12. The Charity

By or under—

 
 

Commission.

(a)    

the Charities Act 1992;

 
  

(b)    

the Charities Act 2006;

 
  

(c)    

the Charities Act 2011.”

 
 

Margot James

 

Agreed to  106

 

Schedule  2,  page  146,  line  22,  leave out “16(4)(a) or (b)” and insert “16(4)(a), (b)

 

or (c)”

 

Margot James

 

Agreed to  107

 

Schedule  2,  page  149,  line  23,  leave out “with the date on which” and insert

 

“when”

 

Margot James

 

Agreed to  108

 

Schedule  2,  page  149,  line  25,  leave out “the date of”

 

Margot James

 

Agreed to  109

 

Schedule  2,  page  150,  line  45,  at end insert—

 

“( )    

Article 19 (notification obligation regarding rectification or erasure of

 

personal data or restriction of processing);”

 

Margot James

 

Agreed to  110

 

Schedule  2,  page  151,  line  1,  after “processor)” insert “—

 

(i)    

Article 34(1) and (4) (communication of personal data breach to the

 

data subject);

 

(ii)    


 
PreviousBack to StartNext
 

Revised 22 March 2018