Chris Philp (Croydon South) (Con):
The Home Secretary recently met my constituent Barry Bednar, whose 14-year-old son Breck was groomed online and, tragically, murdered.
15 Mar 2016 : Column 815
Could she explain to the House how the provisions in the Bill will help to prevent a repetition of Breck’s tragic murder?
Mrs May: My hon. Friend has represented his constituents very well in that matter, and it was an absolutely tragic case. I know the enormous distress that has been caused to Breck’s parents, not just by the initial grooming of their son and its sad consequences, but by other actions that have taken place since in relation to the case. What we are doing in this legislation is important, because it will ensure that the authorities, the agencies, law enforcement and the police will have the powers to enable them better to investigate incidents such as that which led to Breck’s sad death.
Part 1 of the Bill responds to recommendations by David Anderson and others by restricting the use of powers outside the legislation to undertake equipment interference. Where the police or the security and intelligence agencies wish to interfere with a computer or a smartphone to obtain vital evidence and intelligence, a warrant under the Bill will be required. As I have indicated, the Bill also responds to the recommendations of the Intelligence and Security Committee and places a statutory bar on the making of requests, in the absence of a warrant, to other countries to intercept the communications of a person in the UK. There can be no suggestion that the security and intelligence agencies could use their international relationships to avoid the safeguards in the Bill. In answer to a couple of questions earlier I referred to the territorial jurisdiction of the Bill. For the avoidance of doubt, I clarify that I meant, of course, the extraterritorial jurisdiction of the Bill.
The House will know that interception—the obtaining of the contents of a communication, by, for example, listening to a telephone call or reading the contents of an email—is one of the most sensitive and intrusive capabilities available to law enforcement and to the security and intelligence agencies. It is also one of the most valuable, and over the past decade, interception in some form has played a part in every top-priority MI5 investigation. The Bill restricts that power to only a handful of agencies and allows for warrants to be issued only where they are necessary and proportionate for the prevention or detection of serious crime, in the interests of national security or in the interests of the economic wellbeing of the United Kingdom, where that is linked to national security.
Authorising warrants is one of the most important means by which I, the Foreign Secretary and the Northern Ireland Secretary hold law enforcement and the security and intelligence agencies to account for their actions. In turn, we are accountable to the House and, through its elected representatives, to the public.
Part 2 of the Bill will introduce an important new safeguard. As now, a Secretary of State will need to be satisfied that activity is necessary and proportionate before a warrant can be issued, but, in future, it will not be possible to issue a warrant until the decision to issue it has been formally approved by a judicial commissioner. That will place a double lock on the authorisation of warrants. It will preserve that vital element of democratic accountability, but it will, for the first time, introduce independent judicial authorisation.
15 Mar 2016 : Column 816
Mr Dominic Grieve (Beaconsfield) (Con): The Home Secretary may have seen the letter in The Guardian today from a large number of lawyers who suggested that the legislation was intended to give
“generalised access to electronic communications contents”.
Does she agree that that is the very thing that the Bill does not do, and that the double-lock mechanism is there as an assurance that that will not happen?
Mrs May: My right hon. and learned Friend is absolutely right. The point about the Bill is that it makes it possible to intercept communications only under that dual authority—the double-lock that has been put into place—and it is not the case that the authorities are looking for generalised access to the contents of communications. I thank him for bringing that to the attention of the House.
Mr David Davis (Haltemprice and Howden) (Con): As the Home Secretary says, this is an extremely important power but also a very sensitive one. As I understand it, she exercises it about 2,500 times a year, or about 10 times in each working day. Given that they are so sensitive, how long does she take, typically, over one of those decisions?
Mrs May: It is impossible to put a time on it, because each decision differs. The amount of information that is available, the type of case that one is looking at and the extent to which it refers to a matter that is already being considered vary. The amount of time I give to each case is the amount of time necessary to make the right judgment.
Mr David Lammy (Tottenham) (Lab): I am grateful to the Secretary of State, and I recognise the sensitivity of these matters. She will know that there have been cases in which police misconduct is alleged and intercept has been used, and subsequently it has been very hard to use that evidence in front of a jury, particularly in a coroner’s court. Does she envisage any change in that? Is she minded to put that in the legislation?
Mrs May: The right hon. Gentleman has raised a very important point. He will be aware of one particular case in recent years in which the admissibility of evidence at inquest has been an issue. That is not a matter that we are putting in the Bill. It was explored when the closed material proceedings were brought into legislation through certain cases. We are looking actively at whether there are other means by which we can ensure that the appropriate information is available when such cases are being considered.
Mr Kenneth Clarke (Rushcliffe) (Con):
As someone who has also signed thousands of those warrants, with the benefit of hindsight I welcome the judicial commissioner having a look as well. I congratulate my right hon. Friend on making that significant change. Does she recall that the Bill will give the judicial commissioner the power to act only in the same way as a judge might act in a case of judicial review, which means overruling her only if she is behaving in a completely unreasonable way? Does she think that that is necessary, and does she not accept that if a judicial commissioner disagrees with her, there might be some value in at least having a
15 Mar 2016 : Column 817
discussion that covers broader principles of judgment and is not simply based on the fact that she is behaving in a way in which no reasonable man or woman would?
Mrs May: With a degree of prescience, my right hon. and learned Friend refers to the very next issue that I will address in my speech. I was going to point out that I know some right hon. and hon. Members have scrutinised the language in the Bill and have raised exactly that issue. I want to be absolutely clear: under the Bill, it will be for the judicial commissioner to decide the nature and extent of the scrutiny that he or she wishes to apply. Crucially, I can reassure right hon. and hon. Members that commissioners will have access to all the material put to the Secretary of State. The judicial commissioner will look not just at the process, but at the necessity and proportionality of the proposed warrant.
Stella Creasy (Walthamstow) (Lab/Co-op): Will the Home Secretary give way?
Mrs May: If I may, I want to make a little more progress.
Mr Kenneth Clarke: Will my right hon. Friend allow me to ask a supplementary question?
Mrs May: It is more than my life’s worth not to give way to a former Home Secretary.
Mr Clarke: Times have no doubt changed, but the information in individual cases is sometimes very simple and limited, because the case is thought to be so obvious. Will the judicial commissioner have the ability to ask for more information that has not gone before the Home Secretary if he or she wishes to know a bit more about the case and check what has been put before the Home Secretary?
Mrs May: I have to say to my right hon. and learned Friend that that will not be the case. The point is that it is important that the Secretary of State and the judicial commissioner make decisions on the basis of the same information being available to both of them. If the judicial commissioner decides that there is not enough information available, he or she would presumably refuse the warrant. It would be open to the Secretary of State to appeal to the Investigatory Powers Commissioner to look at the warrant again, or if the warrant is refused in such a circumstance, the Secretary of State might themselves say, “Take the warrant back, put in more information and resubmit it.”
Stella Creasy: Will the Home Secretary give way?
Joanna Cherry (Edinburgh South West) (SNP): Will the Home Secretary give way?
Mrs May: I give way to the Scottish National party spokesman.
Joanna Cherry:
On a point of clarification relating to the intervention by the right hon. and learned Member for Beaconsfield (Mr Grieve) about the letter to The Guardian signed by over 200 senior lawyers, is the right hon. Lady aware that the letter takes issue with bulk
15 Mar 2016 : Column 818
interception warrants and bulk equipment interference warrants, which even the Intelligence and Security Committee says should be removed from the Bill?
Mrs May: I will come on to talk about the bulk warrants, but it was clear from the Committee reports that the powers in the Bill are necessary. The ISC raised a question about the bulk equipment interception warrants, but, following that, the Government have produced further information on all bulk cases. We published some case studies and examples of how the powers would be used alongside the redrafted Bill.
Mrs May: I will give way to the hon. Lady, who has been persistent.
Stella Creasy: May I take the Home Secretary to the other end of the telescope, as it were, on this matter? One of the concerns people have about a general access point is not about the warrants, but about the notion that, especially online, we can separate contact and content data. The idea is to allow access to contact data, but that will inevitably be blurred with content data online. Does she accept that there is a challenge in separating contact and content data, which could give rise to some people’s concerns about general access to information? Looking at somebody’s internet correspondence is not the same as looking at a record of their phone calls.
Mrs May: I know that that issue was raised when the draft Data Communications Bill was considered and has been raised in relation to the internet connection records power in this Bill, but such a separation is absolutely possible. We have talked at length with companies about being able to separate, for internet connection records, the websites that a particular device has accessed from the content of whatever has been looked at. It is very important for me to make it clear that when we talk about ICRs, we are talking not about looking at people’s web-browsing history, but about looking simply at the initial point of contact.
In relation to the authorisation process, which we have discussed in relation to the questions asked by my right hon. and learned Friend the Member for Rushcliffe (Mr Clarke), I welcome the Joint Committee’s clear endorsement of the double lock regime and, specifically, the language of the Bill on that point. Right hon. and hon. Members who think that the senior judiciary will simply rubber-stamp Government decisions have clearly never dealt with British judges.
In the case of urgent warrants, the provisions have been tightened in response to the pre-legislative scrutiny.
Simon Hoare (North Dorset) (Con): Will my right hon. Friend give way?
Mrs May: I will make a little more progress, but my hon. Friend may be able to catch my eye later.
In truly urgent circumstances, such as a fast- moving kidnap investigation, a warrant can still come into force as soon as the Secretary of State has authorised it, but that decision will need to be approved by a judicial commissioner within three working days. If the
15 Mar 2016 : Column 819
commissioner disagrees with the Secretary of State’s decision, the commissioner can order that all material gathered under the urgent warrant must be destroyed.
Furthermore, the Bill provides considerable additional safeguards for the communications of parliamentarians and lawyers. In any case, where it is proposed to intercept a parliamentarian’s communications, the Prime Minister would also be consulted, in line with the Wilson doctrine. Equally, the deliberate interception of legally privileged communications can be authorised only in exceptional and compelling circumstances, such as where it is necessary to prevent the loss of life.
Sir Edward Leigh: Will the Home Secretary give way?
Mrs May: I had an idea that my hon. Friend would intervene.
Sir Edward Leigh: Of course Members of Parliament should not be above the law, and the Procedure Committee has ensured that a Member of Parliament who is arrested is treated exactly like a member of the public. We all recognise that, but in some of the most dodgy regimes—ours is not, of course, one of them—Governments do intercept the communications of Members of Parliament. Surely, just so that we can be absolutely reassured, we need the extra safeguard of having you, Mr Speaker, look at such an interception as well. Why not?
Mrs May: I heard my hon. Friend’s earlier exchange with you, Mr Speaker. Two important extra safeguards have been put in this legislation: the first, which is stated in the Bill, is that the Prime Minister will be consulted, but there is also the double lock authorisation. In future, a warrant to intercept anybody—including Members of Parliament, should that be the case—will be subject not just to the determination of a democratically elected individual, but to the independent decision of the judiciary, through the judicial commissioners. That important safeguard has been put into the Bill.
Simon Hoare: The Home Secretary is right to point to the patchy relationship between the judiciary and Governments of all colours. I think the Bill strikes absolutely the right balance. It is absolutely imperative that somebody who is democratically accountable both to this House and to the country has almost the first say on whether such things are done. It is perfectly right for a properly trained judge to have an overview of the process, but it would have been a retrograde step to lose the democratic accountability and the link to decision making in this place.
Mrs May: I thank my hon. Friend for his comments. It is important that we have the balance right. Many people have said, “Just have judicial authorisation”, and some people still believe that the authorisation should be made by the Secretary of State. By having both, we do not lose democratic accountability, but we add the independent judicial authorisation.
Tom Tugendhat (Tonbridge and Malling) (Con): Will the Home Secretary give way?
15 Mar 2016 : Column 820
Mrs May: I will make some progress, if I may, but my hon. Friend may very well try again.
I want to turn to communications data—the who, when, where and how of a communication that provide the communication’s context, but not its content. Such communications data are vital to investigations carried out by the police and the security and intelligence agencies. They have been used in 95% of organised crime prosecutions by the Crown Prosecution Service. They are used to investigate, understand and disrupt terrorist plots. They have played a part in the investigation of some of the most serious crime cases in recent times. They can tie suspects and victims to a crime scene, prove or disprove alibis, and help to locate a missing child or adult.
Parts 3 and 4 of the Bill will preserve that power for the police and the security and intelligence agencies, but also provide strong privacy safeguards. Requests for communications data will require the approval of an independent designated senior officer and will be subject to consultation with communications data experts. In addition, requests for communications data by local authorities will also require authorisation by a magistrate, and requests by any public authority, including the security and intelligence agencies, to identify a journalist’s source will require the authorisation of a judicial commissioner.
I have outlined how communications data are vital in providing investigative leads and for pursuing suspects, but where communications take place using social media or communications apps, it does not make sense that those communications are currently out of reach. For example, in respect of online child sexual exploitation, the absence of such records often makes it impossible to identify abusers. As I have said, such an approach defies logic and ignores the realities of today’s digital age. The only new power in the Bill is the ability to require communications service providers to retain internet connection records, when served with a notice issued by the Secretary of State, and after consultation with the provider in question.
To reiterate, internet connection records do not provide access to a person’s full web browsing history. An internet connection record is a record of what internet services a device or person has connected to, not every web page they have visited. I am pleased that the Joint Committee agreed with the Government on the necessity of that power, and concluded that
“on balance, there is a case for Internet Connection Records as an important tool for law enforcement.”
Indeed, the Committee went further and said that law enforcement should be able to access those records for a wider range of investigative purposes, and the Bill reflects the Committee’s recommendations.
Mr David Hanson (Delyn) (Lab): The Home Secretary is right to say that about the Joint Committee, but it also wanted greater clarity about those internet connection records. It also wanted to ensure—I would welcome her assurance on this—that the capability existed for the retention of those records, and it asked whose cost that would be.
Mrs May:
We have clarified definitions in the Bill, and that point was made not only by the Joint Scrutiny Committee but by the Science and Technology Committee.
15 Mar 2016 : Column 821
In considering this issue we have spent—and continue to spend—a long time discussing the technicalities of this issue with companies that could be subject to such notices, because companies operate in different ways. I reiterate that the Government will reimburse in full the reasonable operational costs that companies will be subject to in relation to this matter.
Mr Hanson: That is important, and I support the Home Secretary’s objective in this case. She will know that the Bill contains a figure of around £180 million for that cost. Is she satisfied—the providers were not—that that figure will cover the costs of the implementation of such a scheme?
Mrs May: The right hon. Gentleman raised that issue with me when I gave evidence to the Joint Scrutiny Committee, and was concerned about the cost. We have discussed in detail with companies the technical arrangements for access to internet connection records, and we have assured ourselves of the feasibility of that. As is currently the case for such matters, the Government will be prepared to reimburse those costs.
Nicola Blackwood (Oxford West and Abingdon) (Con): The Home Secretary is generous in giving way. We welcome the improvements to the Bill, but I hope she received my letter today detailing the outstanding concerns of the Science and Technology Committee. In particular, we feel that technology capability notices remain a key area of uncertainty regarding encryption, and despite the commitments made at the Dispatch Box, we must have long-term certainty for the tech sector on reimbursement of costs. Those questions will be central to delivering a coherent piece of technical legislation that is fit for a fast-moving area of our economy, and it must be dealt with as quickly as possible as the Bill proceeds through the House.
Mrs May: I reiterate the point that I made previously and again just now: 100% of the compliance costs will be met by the Government. My hon. Friend asks me to provide a long-term commitment for that, and we are clear about that in the Bill. As she will be aware, it is not possible for one Government to bind the hands of any future Government in such areas, but we have been clear about that issue in the Bill and I have been clear in my remarks today.
Alongside the draft code of practice, I have published—at the Joint Committee’s request—a comparison of the differences between the proposals in the Bill and those set out by Denmark in recent years. I have also held further discussions with UK and US communications service providers on the proposals in the Bill, and we will continue to work closely with them as we implement this new power. As a guarantee of that, we have included a commitment that the Home Secretary will report to Parliament on how the Bill is operating within six years of Royal Assent. If Parliament agrees, it is our intention that a Joint Committee of both Houses will be formed five years after the Bill receives Royal Assent, specifically to undertake a review of the new legislation and to inform the Home Secretary’s report.
Part 5 of the Bill deals with equipment interference—for example, the acquisition of communications or information directly from devices such as computers or smartphones.
15 Mar 2016 : Column 822
By bringing existing powers into the Bill, we have responded to recommendations made by David Anderson, QC, and by the Intelligence and Security Committee. The Bill places those powers on a clear statutory footing, and makes their use subject to the issue of warrants that must be approved by a judicial commissioner.
Hon. Members will be aware that not only are those powers already available to law enforcement bodies, but they are vital to so much of their work to prosecute serious criminals. In exceptional circumstances, that capability is also used to deal with threat-to-life situations that fall short of serious crime, most typically to identify missing persons. For example, we all expect that when a child goes missing and the parents know the password to their social media account, the police should be able to use that password to search for vital clues. The Bill preserves capabilities that are already available to law enforcement, and makes it clear that they can be used to save lives. Nevertheless, these are intrusive powers and their use must be strictly limited. In future, all equipment interference warrants will require the approval of a judicial commissioner.
The draft code of practice, which I published alongside the Bill, constrains the use by law enforcement of more novel or advanced techniques that hon. Members might reasonably expect to be the preserve of the National Crime Agency and similar bodies. Equipment interference warrants may only be served on communications service providers with the personal agreement of the Secretary of State.
Alongside the draft codes of practice, and in response to recommendations of the Intelligence and Security Committee, we published a comprehensive public case setting out how bulk powers—for interception, communications data and equipment interference—are used, and why they are more necessary than ever before. There are, of course, limits to how much can be said about those most sensitive bulk capabilities without handing an advantage to criminals and those who mean us harm. For that reason, the security and intelligence agencies have provided further, classified detail about the use of those powers to the Intelligence and Security Committee.
As the publicly published case for bulk powers makes clear, such powers are vital to the effective working of the agencies. They have played a significant part in every major counter-terrorism investigation over the past decade, including in each of the seven terrorist plots disrupted since November 2014. They have been essential to detecting more than 95% of cyber-attacks against people and businesses in the UK identified by GCHQ over the past six months, and they enabled more than 90% of the UK’s targeted military operations during the campaign in the south of Afghanistan.
Part 6 of the Bill places these powers on a clearer statutory footing and makes them subject to robust and consistent safeguards. In future, bulk warrants will need to be authorised under the double lock regime that I have described. Furthermore, the examination of any data obtained under a bulk warrant will need to be for an operational purpose that has been approved by a Secretary of State and an independent judge.
Joanna Cherry:
Other hon. Members have mentioned protection for the communications of parliamentarians. Does the Home Secretary agree that the provision in the
15 Mar 2016 : Column 823
Bill does not protect parliamentarians from having their communications to and from constituents scooped up by bulk collection provisions, or with communications data or internet connection records, which could lead to whistleblowers being identified?
Mrs May: I could give a variety of responses to those points. The hon. and learned Lady must be aware that certain bulk powers are predominantly those for foreign usage, rather than in relation to the United Kingdom. With bulk powers, where there is any interaction with individuals in the UK, the double lock authorisation is still necessary to ensure that the examination of the information is subject to the same sort of tests regarding necessity and proportionality.
Part 7 applies those safeguards to the retention and use of bulk personal datasets. Such information is already used by the security and intelligence agencies to keep us safe, and may be acquired under existing powers. However, the Bill introduces powerful new privacy protections so that the personal data of innocent people are always subject to strong robust safeguards, irrespective of how they were acquired.
I said that privacy safeguards are at the heart of this Bill, and the guarantor that those safeguards will be effective and adhered to—both in substance and in spirit—will be the new Investigatory Powers Commissioner, or IPC. Created under part 8 of the Bill, the commissioner, who will hold or have held high judicial office, will oversee a world-leading new oversight body, bringing together the existing responsibilities of the Interception of Communications Commissioner, the Intelligence Services Commissioner and the Chief Surveillance Commissioner. The new Investigatory Powers Commissioner will be provided with an enhanced budget and a dedicated staff of commissioners and inspectors, as well as technical experts and independent legal advisers. They will have access to the staff and systems of the agencies, and will have a remit to provide Parliament and the public with meaningful assurance about how the powers in the Bill are being used. When a person has suffered as a result of a serious error in how the powers in the Bill are used, the IPC will have a new power to inform the victim without the need to consult the Investigatory Powers Tribunal, which will itself stand ready to hear any claim and will have the power to quash warrants, award compensation or take any other remedial action it feels appropriate.
I turn now to part 9 of the Bill and clause 217, which provides for requests to be made to communications service providers to maintain permanent technical capabilities to give effect to warrants, and, in connection with that, to maintain the ability to provide copies of communications in an intelligible form. Let me be clear: this provision only maintains the status quo. It allows law enforcement and the security and intelligence agencies to ask companies to remove encryption that they have applied or that has been applied on their behalf. It would not—and under the Bill could not—be used to ask companies to do anything it is not reasonably practicable for them to do.
Finally, alongside the Bill, we have taken forward the recommendation made by Sir Nigel Sheinwald to develop an international framework to ensure that companies
15 Mar 2016 : Column 824
can disclose data, a point I made in response to my hon. Friend the Member for The Wrekin (Mark Pritchard). We are in formal negotiations with the United States Government and are making good progress. The provisions in the Bill are drafted to accommodate any such agreement. Any company co-operating with its obligations through an international agreement will not be subject to enforcement action through the courts.
The Bill provides unparalleled transparency on our most intrusive investigatory powers, robust safeguards and an unprecedented oversight regime, but it will also provide our law enforcement and intelligence agencies with the powers they need to keep us safe. Because of its importance, our proposals have been subject to unprecedented levels of scrutiny, which has resulted in a Bill that really does protect both privacy and security—it is truly world-leading. I look forward to the revised Bill now receiving full and careful consideration by both Houses. I commend it to the House.
2.12 pm
Andy Burnham (Leigh) (Lab): I echo the condolences the Home Secretary rightly paid to the family of the police officer in Northern Ireland who lost his life in the course of his duties. They are in our thoughts today.
Let me start with the principle on which I think there is broad agreement. From the Government Benches to the Opposition Benches, from Liberty to the security services, there is a consensus that the country needs to update its laws in this crucial area, and that, if the police and security services are to be given new powers, there must be broad agreement that those powers be balanced with much stronger safeguards for the public than have previously existed. That, it seems to me, is a good platform from which to start.
The Bill is commonly seen through the prism of terrorism, but, as the Home Secretary said, it is about much more. The parents of a young child who had gone missing would want the police to have full and urgent access to all the information they need to bring them to safety. The Bill is about the ability to locate missing children or vulnerable adults. It is about reducing risks to children from predatory activities online. It is about preventing extremists of any kind creating fear and hatred in our communities, and it is about defending the liberties we all enjoy each and every day. Despite that, the truth is that we are some way from finding a consensus on the form the proposed legislation should take.
Three months after I was elected to this House, two planes flew into the World Trade Centre in New York, with highly traumatic consequences. In the 15 years since, we have all been engaged on a frantic search. What is the right balance between individual privacy and collective security in the digital age? As of yet, we have not managed to find it. The arguments in the previous Parliament over the forerunner to this Bill loom over our debate today, as does the current stand-off in the United States between Apple and the FBI. I would say that that is an unhelpful backdrop to this debate. It suggests that privacy and security concerns are irreconcilable: a question of either/or, choosing one over the other. I do not believe that is the case. We all share an interest in maximising both our individual privacy on the one hand and our collective security on the other. As a House of Commons, our goal should be to give our constituents both.
15 Mar 2016 : Column 825
Finding that point of balance between the two should be our task over the next nine months. As the Home Secretary knows, I have offered to play a constructive part in achieving that. The simple fact is that Britain needs a new law in this area. Outright opposition, which some are proposing tonight, risks sinking the Bill and leaving the interim laws in place. To go along with that would be to abdicate our responsibility to the police, security services and, most importantly, the public. I am not prepared to do that. Just as importantly, it would leave the public with much weaker safeguards in place and I am not prepared to do that either.
Mr Alan Mak (Havant) (Con): The shadow Home Secretary rightly says that the Bill will help us to fight terrorism. Will he join me in welcoming the new powers to fight cybercrime and financial crime, and will he join me in the Lobby tonight to vote for it?
Andy Burnham: I will not be joining the hon. Gentleman in the Lobby tonight, because I do not believe, as I will come on to explain, that the Bill is acceptable in its current form. As he will have heard me say in my opening remarks, I am in broad agreement with the Government’s objectives. I am not seeking to play politics with the Bill or to drag it down. I hope he will find some assurance in those words.
Simon Hoare: The right hon. Gentleman’s position, I am afraid, does not sound particularly persuasive or tenable, certainly to those outside this place. I just wonder what message it sends from his party, supposedly a Government in waiting. Instead of trying to thrash out the detail in Committee and on Report, by abstaining this evening the message will be very clear about what the Labour party actually thinks on this important issue.
Andy Burnham: I disagree entirely. As I said, we will not oppose the Bill because we will be responsible. I have recognised that the country needs a new law. I have also said, as I will come on to explain, that the Bill is not yet worthy of support. There are significant weaknesses in the Bill. I am sorry, but I am not prepared to go through the Lobby tonight and give the hon. Gentleman and his Government a blank cheque. I want to hold the Government to account. I want to see changes in the Bill to strengthen the Bill. When they listen, they will earn our support. That is entirely appropriate and responsible for an Opposition party to do.
The higher the consensus we can establish behind the Bill, the more we will create the right climate in the country for its introduction. As the Home Secretary said, it could create a template to be copied around the world, advancing the cause of human rights in the 21st century. The prize is great and that is why I am asking those on the Opposition Benches to work constructively towards it.
I repeat today that I do not think our mission is helped by misrepresentation. In my view, it is lazy to label the Bill as a snoopers’ charter or a plan for mass surveillance. In fact, it is worse than lazy: it is insulting to people who work in the police and in the security services. It implies that they choose to do the jobs they do because they are busybodies who like to spy on the
15 Mar 2016 : Column 826
public, rather than serve the public. I do not accept that characterisation of those people. It is unfair and it diminishes the difficult work they do to keep us safe.
Suella Fernandes (Fareham) (Con): Does the right hon. Gentleman agree that the three independent reviewers all agree that our services categorically do not carry out mass surveillance and work within the boundaries of legislation?
Andy Burnham: I agree with the hon. Lady. The idea that they have the time to do that is fanciful. They are going straight to the people they need to be concerned about on our behalf, and that is why I reject the characterisation that is often placed on this proposed legislation.
Catherine West (Hornsey and Wood Green) (Lab): What does my right hon. Friend make of the comments from the UN’s special rapporteur on privacy, Joseph Cannataci, who last week criticised the Bill, saying that authorising bulk interception would legitimise mass surveillance?
Andy Burnham: We need to explore the plans in detail. As I said, I do not accept that the Bill is a plan for mass surveillance, but we need to work hard over the next nine months to take those concerns away.
That said, there are well-founded concerns about the Bill. As we just heard, there is a genuine worry that providing for the accumulation of large amounts of personal data presents risks to people’s privacy and online security. More specifically, there is a worry that investigatory powers can be abused and have been abused in the past. In recent years, there have been revelations about how bereaved families, justice campaigners, environmental campaigners, journalists and trade unionists have been subject to inappropriate police investigation. What justification could there ever have been for the Metropolitan police to put the noble Baroness Lawrence and her family under surveillance? It has not been proven but I know that the Hillsborough families strongly suspect that the same was done to them.
Mark Spencer (Sherwood) (Con): A lot of this debate has been about looking at people’s files, but does the right hon. Gentleman recognise that this should be about victims, including child victims, of crime? Has he had any representations from charities representing victims of crime and children’s charities?
Andy Burnham: I have had such representations, as the Government have, which is why I said the Bill was about much more than terrorism; it is about giving the police and the security services the tools they need to keep us safe in the 21st century. That is why I am not playing politics with the Bill or adopting a knee-jerk oppositionist approach; I am taking quite a careful and considered approach. That said, the Government have not yet done enough to earn my support.
Steve Brine (Winchester) (Con):
I have a lot of respect for the right hon. Gentleman, as he knows, and I would like to congratulate him on what he said about rejecting the conspiracy theories about this being a snoopers’ charter—it was deeply responsible of him to say that—but surely the Second Reading of a Bill is when we agree or
15 Mar 2016 : Column 827
disagree with the principle of a Bill. He has said he agrees with the principle of the Bill, and there are many behind him—perhaps not behind him in the Chamber right now, but they are in the Labour party—who agree with that. Surely, therefore, the opportunity today is to vote for the principle of the Bill on Second Reading, after which we can scrutinise it upstairs and back on the Floor of the House on Report. The right thing to do, therefore, is to support the Government tonight.
Andy Burnham: I will let the hon. Gentleman form his own view on the right parliamentary tactics for the Opposition, but I will be deciding that position, and I do not think I would be serving the public simply by giving the Government a blank cheque this evening. It is my job—[Interruption.] Wait a second!—to hold them to account on behalf of the public and to get the most I can to protect the public as best we can through the Bill. I am approaching that job, as part of Her Majesty’s Opposition, with the utmost seriousness.
Alongside bereaved families, there have been cases of journalists claiming that material was inappropriately seized from them, most recently in connection with the “plebgate” affair. Last year, a former senior police officer-turned-whistleblower came to an event in Parliament and said that he and a colleague had been involved in supplying information that led to the blacklisting of construction workers. I would refer those who claim that these fears are exaggerated to the biggest unresolved case of this kind—the 1972 national building workers’ strike and the convictions of 24 pickets, known as the Shrewsbury 24. It is widely believed that their prosecution was politically orchestrated, with the help of the police and security services.
Steve Rotheram (Liverpool, Walton) (Lab) rose—
Andy Burnham: I give way to my hon. Friend, who knows a great deal about this matter and has championed those still fighting for justice.
Steve Rotheram: My right hon. Friend mentions the case of the Shrewsbury pickets, which is a stark example of the misuse and abuse of state power. Does he agree, therefore, that it is essential that the Bill contains the strongest possible safeguards specifically to ensure that great, historic injustices, such as the politically motivated incarceration of pickets in 1972, can never happen again?
Andy Burnham: My hon. Friend puts it very well, which is why fears about such legislation run deep on the Labour Benches. We know the truth about what happened, even though it is not widely known yet by the public, because we have seen the documents. I have here a memo from the security services sent at the time to a senior Foreign Office official—I am glad that the Foreign Secretary is winding up tonight, because this concerns his Department. It is headed “Secret” and talks about the preparation of a television programme that went out and the trial of the Shrewsbury pickets, and it says, at the top:
“We had a discreet but considerable hand in this programme”.
That is from the security services, so why would people on the Labour Benches not fear handing over more power to the police and security services without there being adequate safeguards?
15 Mar 2016 : Column 828
Andy Burnham: It happened close to the hon. Gentleman’s constituency, so I will give way.
Mr Speaker: Order. Just before the hon. Member for The Wrekin (Mark Pritchard) intervenes, I advise the House that, although everything is being done perfectly properly, and the Home Secretary and the right hon. Gentleman have been generous in giving way, 48 Back Benchers wish to contribute. Those who have or seek the Floor might wish to take account of that point. I call Mark Pritchard.
Mark Pritchard: I will be brief, Mr Speaker.
The shadow Home Secretary is quite right to point out that abuses, where they have taken place, are absolutely wrong, but does he also recognise that the Bill contains a new offence of misusing communications data, which is something he should welcome?
Andy Burnham: I will come to that very point, but these are not historical matters, because the convictions I just referred to still stand. I pay tribute to the Government, because they have a good record on this, but we need to go further to give the full truth about some of the darkest chapters in our country’s past, so that we can learn from them and then build the right safeguards into the Bill. The Bill will fail unless it entirely rules out the possibility that abuses of the kind I have mentioned could ever happen again. That is the clear test I am setting for the Bill.
That is also why I welcome the principle of the Bill. It leaves behind us the murky world of policing in the ‘70s, ’80s and ’90s, and holds out the possibility of creating a modern and open framework that makes our services more accountable while containing much improved safeguards for ordinary people. The Bill makes progress towards that goal, but it is far from there yet. It is clear that the Home Secretary has been in listening mode and responded to the reports of the three parliamentary Committees, but of the 122 recommendations in the three reports, the Government have reflected less than half in the revised Bill. She will need to be prepared to listen more and make further significant changes to the Bill if she is to achieve her goal of getting it on to the statute book by December.
I want to take the House through six specific concerns that we have with the Bill. The first is on privacy. As I said, people have a right to maximise their personal privacy, and given people’s worries about the misuse of personal data, the Intelligence and Security Committee was surely right to recommend that privacy considerations be at the heart of the Bill. A presumption of privacy would set the right context and provide the basis from which the exceptional powers are drawn. It would be the right foundation for the whole Bill: respect for privacy and clarity that any intrusions into it require serious justification. The Home Secretary said that privacy protection was hardwired into the Bill. I find it hard to accept that statement. I see the changes on this point as more cosmetic; they have not directly answered the Committee’s concerns. I therefore ask the Government to reflect further on this matter and to include a much stronger overarching privacy requirement, as recommended by the Committee, covering all the separate powers outlined in the Bill.
15 Mar 2016 : Column 829
Also on privacy, we do not yet believe that the Government have gone far enough to protect the role of sensitive professions. The Committee noted that the safeguards for certain professions must be applied consistently across the Bill, no matter which investigatory power is being used to obtain the information, but it is hard to see how that is achieved at the moment. On MPs and other elected representatives, the Bill codifies the Wilson doctrine, but there is a question about why it stops short of requiring the Prime Minister to approve a warrant and requires only that he be consulted. The Bill could be strengthened in that regard. On legal privilege, the Law Society has said that, although it is pleased to see that the Government have acknowledged legal professional privilege, it needs more adequate protection, and it believes that that should be in the Bill, not just the codes that go with it.
Mr David Davis: On the Wilson doctrine, the wording of the Bill, as I understand it, relates to communications between Members of Parliament and constituents. That does not cover the whole Wilson doctrine, which covers communications between Members of Parliament and whistleblowers, between Members of Parliament and each other, and between Members of Parliament and campaigning organisations. They should all be protected. Does the right hon. Gentleman agree?
Andy Burnham: I do agree with the right hon. Gentleman. I was making the point that the provisions need to be strengthened in respect of prime ministerial approval, but also in the way that he describes to give our constituents that extra trust, so that if they come to speak to us in our surgeries, they can be sure that they are speaking to us and nobody else.
Sir Edward Leigh: If there is a matter of acute public concern and a whistleblower is making himself a real nuisance to the Government, and communicates that to his Member of Parliament, should one member of the Government, the Home Secretary, ultimately authorise it, with it then being referred to the Prime Minister, who might also be affected by the decision? He would effectively be judge in his own court and surely it is at least arguable that some other scrutiny should be involved.
Andy Burnham: I think the Home Secretary has indicated that there would be, because her decision would be subject to the double lock, including judicial approval. My point is, why should the Prime Minister be only consulted by the Home Secretary as part of that process? It seems to me that there is a role for the Prime Minister finally to approve any such warrant, and I believe the Bill could be strengthened in that regard.
There is also the question of journalists. The National Union of Journalists believes that the Bill weakens existing provisions. Clause 68, which makes the only reference to journalists in the entire Bill, sets out a judicial process for the revelation of a source. Its concern is that journalists are wide open to other powers in the Bill. Given the degree of trust people need to raise concerns via the political, legal or media route, and given the importance of that to democracy, I think the Government need to do further work in this area to win the trust and support of those crucial professions.
15 Mar 2016 : Column 830
Our second area of concern relates to the thresholds for use of the powers. The Bill creates a range of powers that vary in intrusiveness, from use of communications data and internet connection records at one end to intercept, equipment interference and bulk powers at the other end. There is a real concern that the thresholds for them are either too low or too vague.
Let us take internet connection records. The Home Secretary has previously described ICRs as “the modern equivalent” of the “itemised phone bill”, and the Government intend them to be made available on the same basis—that is, for the detection or prevention of any crime. The Joint Committee noted, however, that this is not a helpful description or comparison. ICRs will reveal much more about somebody than an itemised phone bill. They are closer to an itinerary, revealing places that people have visited.
The question for the House is this: is it acceptable for this level of personal information to be accessed in connection with any crime—antisocial behaviour or motoring offences, for instance? I do not believe it is, and I think a higher hurdle is needed. This is a critical point that the Government will need to answer if they are to secure wider public support for their Bill. People have legitimate fears that if ICRs become the common currency in law enforcement, much more information will be circulating about them, with the potential for it to be misused.
The Government need to tell us more about why they need this new power and they need to set a stricter test for its use—in connection with the prevention or detection of more serious crime or a serious incident such as a missing person, for instance. That is what I think the hurdle should be: serious crime rather than any crime, and I would welcome hearing the Home Secretary’s response on that point.
At the other end of the scale, the justification for using the most intrusive powers in the Bill is on grounds of “national security” or, as the Home Secretary said, “economic well-being”. While I understand the need for operational flexibility, there is a long-standing concern that those tests are far too broad. There is a feeling that “national security” has been used to cover a multitude of sins in the past. Let us remember that official papers from the domestic building workers’ strike in English market towns in 1972 are still being withheld on grounds of “national security”! How on earth could that possibly be justified?
Tom Tugendhat: The right hon. Gentleman is bringing up a point that relates to proportionality, but it strikes me as odd that he has rammed it home so strongly when the Bill itself mentions proportionality and the oversight of the Information Commissioner includes looking at proportionality. The right hon. Gentleman is going on and on about it, but it is actually in the Bill.
Andy Burnham: I do not believe it is. I put it to the hon. Gentleman that national security is a very broad term that is not defined in the Bill. The Joint Committee encouraged the Government to define it in order to give people greater security. As I have just said, activities have been carried out in the past under the banner of national security that I think he would struggle to justify as such.
15 Mar 2016 : Column 831
The problem with the “economic well-being” test is that it potentially opens up a much wider range of activities to the most intrusive powers. The Bill states that matters of economic well-being must be only “relevant” to national security, not directly connected to it, as the Home Secretary seems to imply. This raises the issue of what extra activities the Government want to cover under this banner that are not covered by national security. A cyber-attack on the City of London has been mentioned, but surely that would already be covered by national security provisions.
Let me put two suggestions to the Home Secretary. First, I suggest that she accept the Joint Committee’s invitation to define “national security” more explicitly. Alongside terrorism and serious crime, it could include attacks on the country’s critical or commercial infrastructure. Secondly, if she were to do that, the economic well-being test could be dropped altogether. That would build reassurance among Opposition Members that there could be no targeting in future of law-abiding trades unionists, as we have seen happening in the past.
The third area of concern is with ICRs themselves—both their content and their use.
Sir Edward Garnier (Harborough) (Con): Is the right hon. Gentleman seriously suggesting that a judicial commissioner would permit a politically motivated interception on a trade union?
Andy Burnham: I would gladly share with the right hon. and learned Gentleman some of the papers I have about the historic injustices that we have seen in this country—[Interruption.] But it is relevant, because those convictions still stand to this day. I said earlier—I do not know whether he was in his place—that revelations have been made that information supplied to blacklist people in the construction industry came from the police and the security services. I welcome the move to codify all this in law so that those abuses cannot happen again, but I hope that he will understand that Labour Members want to leave nothing to doubt. Why should the most intrusive warrants be used on the test of economic well-being? What does that mean? Are we not entitled to say that national security alone can justify intrusion on people’s privacy in that way?
Mrs May: I have been listening carefully to the response of the right hon. Gentleman to my right hon. and learned Friend the Member for Harborough (Sir Edward Garnier). Let me press him on the point that my right hon. and learned Friend raised, because it is very important. We are inserting the judicial authorisation of warrants. I did not think—I said this in my speech—that any Member should question the independence of the judiciary. It seems, however, that he is doing just that. Will he now confirm that he is not questioning that?
Andy Burnham:
I am not doing that in any way, shape or form. It is wrong for the Home Secretary to stand there and imply that I was. What I am talking about is the grounds on which her Bill gives the police and the security services the ability to apply for warrants. [Interruption.] Conservative Members should listen: I am saying to the Home Secretary and to them that
15 Mar 2016 : Column 832
those grounds should be as tightly defined as possible, and I do not think it helps if she is proposing that they can be brought forward on grounds of “general economic well-being”. In the past, her party has taken a different view from ours, and this opens up a much wider range of potential activities that could be subject to the most intrusive warrants. That point is both fair and, if I may say so, well made.
Dr Andrew Murrison (South West Wiltshire) (Con): My question to the right hon. Gentleman is this: why did it not occur to him on 4 November. On that date, he stood there and said:
“Having listened carefully to what the Home Secretary has said today, I believe that she has responded to legitimate concerns and broadly got that…balance right.”—[Official Report, 4 November 2015; Vol. 601, c. 974.]
What has changed in the interim?
Andy Burnham: Has the hon. Gentleman been listening? I began by saying the very same thing and said that we would work with the Government to get it right, but surely I am entitled, am I not, to raise specific concerns about the wording in the Bill—in this case, wording about “economic well-being”, which I believe opens up a large range of activities that could fit under that banner. I am saying to Government Members that if they want my help, they should help us get that definition right to reassure the public.
Angela Rayner (Ashton-under-Lyne) (Lab): Millions of trade unionists, and many of my constituents, are genuinely concerned about the stretch of these powers. The two Front Benchers are being very decent at the moment in trying to introduce safeguards, but it is important for my right hon. Friend to scrutinise the legislation as he is currently doing, so that people can have confidence in it in the long term.
Andy Burnham: My hon. Friend has put it very well. It is a fact that trade unionists and other campaigners have been subject, over time, to inappropriate use of investigatory powers. If the Conservatives do not understand that, they need to go away and look into the issues. They need to get at the full truth about Orgreave and Shrewsbury, so that they can understand why some people who do not share their political views on life have a different feeling about legislation of this kind. If they did go away and do that, they would probably find that they could reassure people, and that there would be more public support for the Bill.
Andy Burnham: I am going to make some more progress now.
As I understand it, the intention of the authorities in building internet connection records is to list domains visited, but not uniform resource locators. There would not be a web-browsing history, as the Home Secretary said. The ICRs would show the “front doors” of sites that had been visited online, but not where people went when they were inside. That will give some reassurance to people who fear something more extensive, but the definition of ICRs in clause 54 remains extremely vague and broad. I see nothing that would prevent them from becoming much more detailed and intrusive over time,
15 Mar 2016 : Column 833
as technology evolves. The draft code of practice gives an illustration of what would be included, but it does not build confidence, as it acknowledges that information may vary from provider to provider.
It would help everyone if the Government set out a much stricter definition of what can and cannot be included in ICRs, and, in particular, specified that they can include domains but not URLs. The current confusion about ICRs is unhelpful and clouds the debate about the Bill. It needs to be cleared up.
As for the use of ICRs, schedule 4 sets out far too broad a range of public bodies that will be able to access them. It seems to me that the net has been cast much too widely. Is it really necessary for the Food Standards Agency and the Gambling Commission to have powers to access an individual’s internet connection record? I will be testing the Government on that. If there were a suspicion of serious criminality in respect of the food chain or a betting syndicate, surely it would be better to refer it to the police at that point. I must say to the Home Secretary that we shall want to see a much reduced list before this part of the Bill becomes acceptable to us.
Mr Nick Clegg (Sheffield, Hallam) (LD): Does the right hon. Gentleman agree that not only are ICRs poorly and very broadly defined, but, even in the context of a narrow definition, the Government would still be proposing that every website or domain visited by every citizen in the country, every minute of every day, should be retained and stored for 12 months? Does he agree that that principle, whatever the definition, constitutes a very extensive power for the Government?
Andy Burnham: I do agree. If such information were published, it would reveal far more about someone than an itemised phone bill. The Home Secretary began this whole process by saying that they were the same, and that this was simply the modern equivalent. It is not. It would reveal a great deal about someone.
The reassurance that I would hope to give is that it is not necessary to limit the information, but it is necessary to raise the threshold allowing the records to be accessed, in order to make this a test of serious crime rather than any crime. At present, the Bill refers to “any crime”, but I do not think it acceptable for the kind of information to which the right hon. Gentleman referred to be available in the context of lower-level offences. I hope that he may be able to support me on that point.
Our fourth area of concern relates to bulk powers. It is a fact that criminals and terrorists, operating both here and overseas, may use a variety of means to conceal their tracks and make it hard for the authorities to penetrate closed or encrypted communications networks. I accept the broad argument advanced by the authorities that power to extract information in bulk form can provide the only way of identifying those who pose a risk to the public, but the greater use of some of those bulk powers takes investigatory work into new territory. The routine gathering of large quantities of information from ordinary people presents significant privacy concerns, and points to a need for the warrants to be as targeted as possible. The operational case for the individual bulk powers was published by the Government alongside the Bill, but it is fair to say that the detail has failed to convince everyone. It is still for the Government to convince people that the powers are needed.
15 Mar 2016 : Column 834
Lucy Frazer (South East Cambridgeshire) (Con): I am sorry to backtrack slightly, but I have just looked up the provision relating to “economic well-being”, which is fairly qualified. Clause 18(2) ties economic well-being to
“the interests of national security”.
However, it also states that a warrant will be necessary
“in the interests of the economic well-being of the United Kingdom so far as those interests are also relevant to the interests of national security”.
That provision is further qualified by subsection (5), which states that a warrant will be issued only
“if it is considered necessary…for the purpose of gathering evidence for use in…legal proceedings.”
“information relating to the acts or intentions of persons outside the British Islands.”
It is clear that the position is extremely limited.
Let me add that, as a barrister who has presented a number of cases to judges, I believe that judges who look at legislation every day are perfectly adequate to the task of considering these principles.
Andy Burnham: I thank the hon. and learned Lady for the law tutorial. Her point may be one for Committee rather than Second Reading. However, I did refer to it earlier. The Bill uses the word “relevant”; it does not use the words “directly linked to national security”. She pulls a face, but I am sure that I speak for every Labour Member when I say that there is no room for ambiguity when it comes to these matters. The Government must be absolutely clear about what they mean. We have seen trade unionists targeted in the past on the basis of similar justifications, and we will not allow it to happen again.
Tom Tugendhat: The right hon. Gentleman wants the Home Secretary to draft a law that envisages every new provision, every change in technology, every change in crime and every change in threat over the next 50 or 100 years. The Home Secretary cannot do that and nor can the right hon. Gentleman, which is why the Home Secretary has instead introduced a system of oversight, proportionality and judicial checks and balances, in order to provide the flexibility that is necessary for our nation to have security in a changing world.
Andy Burnham: I disagree. I am making a legitimate point about which we feel strongly. I am saying that the most intrusive powers in the Bill should be strictly limited to national security. The hon. Gentleman has a different view, but I believe that serious crime and national security should be the strictly limited grounds on which the most intrusive warrants are applied for. I hope that he will approach the issue in a spirit similar to the one in which I have approached it: I hope that he will look into the concern that I have raised in more detail and try to understand why Labour Members feel so strongly about it.
Joanna Cherry:
The hon. and learned Member for South East Cambridgeshire (Lucy Frazer) talked about barristers presenting cases to judges. Does the right hon. Gentleman agree that, given the double-lock model in the Bill, there will be no barristers arguing the case before the judicial commissioner? That is exactly the
15 Mar 2016 : Column 835
point. There will be no gainsayer and no proposer; there will simply be a judicial review, an exercise carried out by the judicial commissioner on his or her own.
Andy Burnham: That is an important point, which I shall come to in a moment.
I was talking about bulk powers. Important concerns were raised by the Intelligence and Security Committee about scope, oversight and the more generic class warrants, and I do not believe that they have been adequately answered. One of the Joint Committee’s recommendations was that the Government should establish an independent review of all the bulk powers in the Bill. Given the complexity and sensitivity of the issue, I think that the House would benefit from that, so my specific ask is for the Home Secretary to commission such a review, to be concluded in time for Report and Third Reading.
Our fifth concern is about judicial oversight, and relates to one of our earliest demands in respect of the Bill. The Government have given significant ground in this area, and, as the Home Secretary said, the Bill is stronger as a result. However, we believe that it could be stronger still. It currently says that, when deciding whether to approve a decision to issue a warrant, a judicial commissioner must apply
“the same principles as would be applied by a court on an application for judicial review.”
The point has just been made by the hon. and learned Member for Edinburgh South West (Joanna Cherry).
I have previously shared with the Home Secretary my fear that that could mean a narrower test, taking account of only the process and reasonableness of the Home Secretary’s decision rather than the actual merits and substance of an application. I was listening carefully to what she said at the Dispatch Box earlier, and I thought I heard her provide reassurance that a much broader consideration could be provided by a judicial commissioner. I hope that that is the case, and if it is, why not delete the judicial review clause from the Bill? That would make it absolutely clear this is not just a double lock but an equal lock, in which the judicial commissioner has the same ability look at the entire merits of the case.
Our sixth and final concern relates to the misuse of the powers. I accept the concerns of the Police Federation that there need to be safeguards for the collection of data in a lawful manner, but I also agree with its view that the Bill needs to make it clearer that an overarching criminal offence is created for the deliberate misuse of any of the powers. That should relate to the obtaining of data and to any use to which those data are subsequently put. Both should be a criminal offence. That would provide an extra safeguard for the public.
I have set out six substantive issues that must be addressed. Given the seriousness of these concerns, people have questioned why we are not voting with the Government tonight—[Interruption.] We are voting neither with them nor against them. The simple answer is that we need new legislation but the Bill is not yet good enough. That is why we have set these tests. Simply to block this legislation would in my view be irresponsible. It would leave the police and security services in limbo and, as communications migrate online, that would make their job harder. We must give them
15 Mar 2016 : Column 836
the tools they need to do the job. If we did not put new legislation on the statute book, we would leave the public exposed to greater risk because they would not have the safeguards that are in the Bill.
However, let me be clear that there is no blank cheque here for the Government. We will not be voting for the Bill tonight because it is some way from being good enough, and if the Government fail to respond adequately to the concerns I have raised, I give notice to them that we will withdraw our support for the timetabling of the Bill. It is as simple as that. The public interest lies in getting this right and in not sacrificing quality to meet the deadline. The time has come for the House to lay politics aside and to find a point of balance between privacy and security in the digital age that can command broad public support.
We on these Benches have worked hard to uncover the truth about some of the dark chapters in our country’s past precisely so that we can learn from them and make this country fairer for those coming after us. I want a Bill that helps the authorities to do their job but protects ordinary people from intrusion and abuse by those in positions of power. I also want Britain to be a country that gives its people individual privacy and collective security. Our shared goal should be a Bill that enhances our privacy, security and democracy and—with goodwill and give and take on both sides—I believe that that is within our grasp.
Mr Speaker: Order. In the light of the extensive interest in this debate, we shall need to begin with a limit of eight minutes on Back-Bench speeches, though I give notice to the House that that limit will almost inevitably have to fall. I begin by calling the Chair of the Intelligence and Security Committee of the House, the right hon. and learned Member for Beaconsfield (Mr Grieve).
2.53 pm
Mr Dominic Grieve (Beaconsfield) (Con): I am grateful for the opportunity to participate in this debate. I want to summarise the views of the Intelligence and Security Committee on the Bill. The Committee has published two reports on the matter. In addition, the Government and the agencies have provided us with further evidence since we published the second report, and I want to update the House on that.
The present Committee and its predecessor are satisfied that the Government are justified in coming to Parliament to seek in broad terms the powers that the Bill contains. None of the categories of powers in the Bill—including the principle of having powers of bulk collection of data, which has given rise to controversy in recent years—is unnecessary or disproportionate to what we need to protect ourselves. In that context, I go back to what I said in my intervention on the Home Secretary, which was that certain individuals in this debate are labouring under a false understanding of what the legislation is really about. We also welcome the fact that the Government have sought in the Bill to provide much greater transparency than previously existed. It has been frequently said, but it is worth repeating, that the Regulation of Investigatory Powers Act 2000 was often incomprehensible, and that is precisely what we need to get away from.
15 Mar 2016 : Column 837
The basic problem is that, by its very nature, the operational detail of the secret work done by the agencies cannot be revealed without damaging or endangering their capabilities. Assurances are therefore needed that the extensive powers and capabilities that they undoubtedly have are taken on trust in so far as any potential for misuse is concerned. That is why the Intelligence and Security Committee was set up and the various commissioners appointed. It is noteworthy that, apart from a few exceptions based on mistake rather than on malicious intent, all those bodies have consistently given the investigatory powers used by the agencies a clean bill of health. From my own experience not only as Chairman of the ISC but as Attorney General, I believe that the agencies operate to high ethical standards and are scrupulous in confining the use of their powers and capabilities to legitimate purposes. I think that that is in their DNA. A previous head of GCHQ, Sir Iain Lobban, has said that if he had asked his staff to do something unethical, they would simply have refused.
However, such an environment produces its own problem. For those of us within the bubble, our experience of the nature of the agencies’ role risks making us complacent about the legitimate concerns of those outside that bubble. The fact that a particular power might never, to our knowledge, have been misused does not mean that we should disregard the possibility of creating transparent safeguards for its use, if this can be done without interfering with operational capability. We also have to accept the possibility that times might change and standards slip. It is important that we should provide safeguards against such slippage.
It is with that in mind that I turn to our response to the Bill. The recommendations made in our report were intended to improve the legislation by trying to provide greater clarity and transparency and increased safeguards where we thought it would be possible to do so. We are pleased that the Government responded to nine of our 22 recommendations, including three key ones. We particularly welcome the revisions made to increase safeguards relating to legal professional privilege, although I have noted the comments that were made earlier today and I suspect that this matter can be looked at still further in Committee.
A number of our recommendations were not accepted. We were disappointed that the Bill does not include a clear statement on overarching privacy protections. We accept that the Bill has safeguards, but they come across as slightly piecemeal. This seems to be a missed opportunity to provide the necessary level of public reassurance, even if the practical consequence would not make a vast amount of difference. The same point arises in relation to putting all powers relating to investigatory powers operations in one place. The Government have chosen to leave some powers elsewhere, even though we thought it would have been helpful to put them all in the Bill.
I turn now to the three most significant issues. The first was our concern that the authorisation procedures for the examination of communications data were inconsistent in respect of safeguards for those in the United Kingdom. There are different routes for obtaining such material. Generally speaking, law enforcement agencies will access such material via a specific request to a communications service provider, which is subject to senior officer authorisation, but it could also be obtained via GCHQ bulk interception capabilities as a by-product. In those circumstances, although there are
15 Mar 2016 : Column 838
many safeguards relating to examining content, the same safeguards do not exist in respect of the data on their own. We thought that that was inconsistent and might be changed. The Government have helpfully responded by pointing out that this could make the burden too onerous for senior officers. We believe, however, that that matter could be addressed and we hope that it will be looked at again during the passage of the Bill.
Mr Steve Baker (Wycombe) (Con): Does my right hon. and learned Friend think that this matter could be addressed by increasing the independence of judicial oversight, so that judges would be much more able to refuse a warrant? Might that not also increase public acceptance of these measures?
Mr Grieve: This is an area that does not currently have warrantry. It is an area in which there is specific authorisation, and that is what we have been looking for. However, we will listen carefully to what the Government have to say about the practical problems that that might pose.
The second issue concerns the agencies’ use of equipment interference. Our concerns focused on the way in which the use of this capability is authorised, rather than on the need for it, which is clear to us. In particular, we were not initially provided with evidence that explained the need for a bulk power, as opposed to a targeted thematic one. That is why we reported in the way we did. Following publication of our report, we received additional evidence from the agencies as to why they need bulk equipment interference warrants to remain in the Bill and they actually made a persuasive case. More importantly, the Committee was reassured that information obtained by such means will be treated in exactly the same way, with exactly the same controls, as data acquired under a bulk interception warrant. The Committee is therefore broadly content that there is a valid case for the power to remain in the Bill, but, just as with bulk interception warrants, we want to see the safeguards and controls in detail and hope to do so in the near future.
The third issue is that the Committee expressed concern about the process for authorising the obtaining of bulk personal datasets. It is undoubtedly necessary and proportionate that agencies should have the power to obtain them, because they can be vital to their work in helping to identify subjects of interest, but they largely contain private information on large numbers of people of no relevant or legitimate interest to the agencies at all.
Catherine West: Does the right hon. and learned Gentleman accept that there is a question mark over which agencies can then access such information? I have received many emails with concerns about the net having been cast too wide in respect of agencies such as the Food Standards Agency, the Gambling Commission and others, and that the information could be misused. That is the kind of perception that people care about out there.
Mr Grieve: I understand the hon. Lady’s concern, which can be looked at. From what the Committee saw, we do not think that that problem should arise with the agencies that do have access, but I am sure the Home Secretary will want to respond in due course.
15 Mar 2016 : Column 839
Intrusiveness needs to be fully considered as part of the authorisation process, which was why the Committee recommended that that could be done far better if class-based authorisations were removed from the Bill and a requirement made that Ministers should authorise the obtaining and periodic retention of each dataset. The Government came back and suggested that that would be too onerous for Ministers, but we suggested that the recommendation could be met through increasing the role of commissioners in renewing orders and amending the duration of authorisations, which could be longer than at present. Our point was that it was right that Ministers were constantly sighted as to what datasets were being obtained and we were anxious that that might not always happen under the current form of authorisation.
The Committee also raised several more minor concerns that are set out in our report and can be returned to on Report if they cannot be resolved in Committee. Given the time available, I apologise that I cannot go through them all here. However, we are pleased that urgent warrants must now be approved within three days rather than the five days originally proposed. The same can be said of the clause 134, which provides for retrospective oversight when UK material has been inadvertently collected through its maker coming into the country.
There were, however, two further matters of concern. We were troubled that we have not yet seen the actual list of operational purposes that must underpin any draft bulk warrant, which goes to the heart of the legislation. We have seen examples that appear entirely valid, but we hope and expect a full list to be supplied to us before the Bill has completed its passage so that we can reassure the House. We also remain of the view that the Committee should be able to refer any concern about the use of an investigatory power to the Investigatory Powers Tribunal on behalf of Parliament. That would help to provide reassurance that there was a mechanism other than private complaint.
The Bill is capable of further improvement, but the Government have listened and I will certainly be supporting the Government on Second Reading. The Bill is undoubtedly necessary on the grounds of national security and is well intentioned. I trust that during its passage we will also be able to ensure that it fulfils the equally important role of being seen as an upholder of our freedom and liberty.
3.4 pm
Joanna Cherry (Edinburgh South West) (SNP): Before I begin my speech, on behalf of the Scottish National Party I want to associate myself with the comments of the Home Secretary and shadow Home Secretary regarding the death of the prison officer in Northern Ireland and extend my party’s heartfelt condolences and sympathies to his family, colleagues and friends.
The SNP joins the MPs from all parties in the House who have grave concerns about many aspects of the Bill. We do not doubt that that the law needs a thorough overhaul and welcome attempts to consolidate a number of statutes in order to have a modern, comprehensive law. We also recognise that the security services and police require adequate powers to fight terrorism and
15 Mar 2016 : Column 840
serious crime. However, such powers must always be shown to be necessary, proportionate and in accordance with the law. In particular, powers must not impinge unduly on the right to privacy or the security of private data. We feel that many of the Bill’s powers do not currently pass those tests. For that reason, the SNP cannot give its full support to the Bill in its current form. We intend to join others in the House to ensure that the Bill is as extensively amended as possible. We shall be abstaining today, but if the Bill is not amended to our satisfaction, we reserve the right to vote against it at a later stage.
The Bill is a rushed job that comes on the back of a draft Bill that lacked clarity and did not go far enough to protect civil liberties. In recent weeks, three parliamentary Committees have expressed significant misgivings about many aspects of the draft Bill and made extensive recommendations for its revisal. The Bill was published barely two weeks after the ink was dry on the last of those three reports, leaving insufficient time for the Government to go back to the drawing board to deal adequately with the concerns expressed by the three Committees. Like others in the House, SNP Members were concerned to read last week that the United Nations special rapporteur on the right to privacy concluded that some of the Bill’s proposals fail the benchmarks set in recent judgments of the European Court of Justice and the European Court of Human Rights. [Interruption.] Government Members may scoff, but I invite them to read his report as it contains a careful exploration of recent case law and should not be dismissed lightly.
The benchmarks suggest that surveillance should be targeted by means of warrants that are focused, specific and based on reasonable suspicion. Under the Bill, however, targeted interception warrants may apply to groups of persons or more than one organisation or premises. Bulk interception warrants lack specificity and lack any requirement for reasonable suspicion, giving licence for speculative surveillance. The shadow Home Secretary questioned whether we should be using the term “mass surveillance” in relation to this Bill, and I wonder whether it would be more accurate to say that aspects of the Bill permit “suspicionless surveillance”, which leads to civil liberties concerns. Another aspect of the Bill that concerns us is that an actual threat to national security is not required.
The powers to retain internet connection records and the bulk powers go beyond what is currently authorised in other western democracies and thus could set a dangerous precedent and a bad example internationally. The only other western democracy to authorise the retention of material similar to internet connection records was Denmark, which subsequently abandoned its experiment having found that it did not yield significant benefits for law enforcement. I see the Home Secretary looking at me and I am sure that she will argue that her proposed scheme differs from Denmark’s, but the devil is in the detail, which we will need to consider closely in Committee. The USA is rolling back from bulk data collection having found it to be unconstitutional in some cases and of questionable value in fighting terrorism. It is for this Government to justify why they alone are required to go so much further than other Governments in western democracies. Such operational cases as have been produced are anecdotal and hypothetical and do not constitute independent evaluation of the utility of bulk powers.
15 Mar 2016 : Column 841
Lucy Frazer: If the hon. and learned Lady thinks that international comparisons are important, does she agree that the judicial authorisation procedure proposed by the Home Secretary goes further than in other European examples, such as Germany, the Netherlands and France?
Joanna Cherry: We need to compare apples with apples and oranges with oranges. A more correct comparison is with jurisdictions such as Canada and America, the systems of which are more similar to ours than the continental European jurisdictions that the hon. and learned Lady describes, but I will come back to that when I get to authorisation.
I am sure everyone in this House wants to get the balance right between protecting civil liberties, and giving the security services and the police the necessary and proportionate powers to fight serious crime and terrorism. However, we in the Scottish National party believe that the Government’s attempt has not got that important balance right and we are looking forward to working with other parliamentarians to try to get it right. We are worried that the Government are not giving sufficient time for the consideration of this enormous Bill. The 14 Home Office documents relating to the Bill that were released to Parliament on 1 March, including the Bill itself, extend to 1,182 pages, which is almost treble the amount of material released with the draft Bill last November. There is a suspicion that the amount of material being released in large tranches, coupled with relatively short timescales within which to consider and amend proposals, is an indication that the Government do not really want proper parliamentary scrutiny of this. We are determined to do our best to make sure that sufficient parliamentary scrutiny is provided.
Mrs May: Let me be absolutely clear about this. I have been in this House long enough to see Bills go through the House where parliamentarians have complained when the Government have failed to bring codes of practice that should sit alongside the Bill to the House at the very first stage of the debate. This Government have brought those codes of practice to the House more than several days before Second Reading, precisely so that Members of this House have an opportunity to see them and consider them alongside the Bill.
Joanna Cherry: But the Home Secretary misunderstands my complaint—it is not about the fact that the material has been produced. My complaint is that the material has been produced with a timescale following thereon that is not sufficient for us to scrutinise it properly. I must make something crystal clear before I go any further: the SNP will not be morally blackmailed or bullied by Conservative Members into blind support for a Bill of dubious legality in some respects, which seeks powers that go beyond those of other western democracies. We are not going to tolerate any suggestion that by seeking proper scrutiny of the Bill and full justification for the far-reaching powers sought, we are being soft on terrorism and serious crime. I would associate myself with the other main Opposition party in that respect.
Let me give hon. Members an example of why they can be assured that the SNP is not soft on terrorism or serious crime. We have been in government in Scotland for nine years and we have shown ourselves to be a responsible Government. Although issues of national
15 Mar 2016 : Column 842
security are reserved, we have always co-operated closely with the UK Government, for example, when Glasgow airport was attacked by terrorists in 2007. Our record in fighting crime in Scotland is second to none. The Scottish Government have got recorded crime down to a 41-year low and we are committed to a progressive justice policy. We will not, therefore, stand accused of being “soft” on serious crime or terrorism, because that is simply not a fair statement to make.
In the coming years, we confidently expect to be devising the security policy of an independent Scotland, and it will be a responsible security policy that will not only seek to work closely with near neighbours on these islands, but will look to international models from other democracies and strive to take proper cognisance of international human rights norms and the rule of law. That is all we are about in our opposition and in our scrutiny of this Bill.
Our concerns about the Bill are not just our concerns. They are shared by: the parties sitting around me; many Conservative Members sitting opposite me; many of the members of three parliamentary Committees; non-governmental organisations; the technical sector; eminent legal commentators—more than 200 senior lawyers signed that letter in The Guardiantoday; communications service providers; and the UN special rapporteur on the right to privacy. [Interruption.] I hear somebody shout confidently from the Government Benches that the 200 lawyers who signed that letter are wrong. I suggest that he or she—I think it was probably a he—looks at the list of those who signed it and perhaps accords them a bit more respect; there is room for a difference of opinion here.
Sammy Wilson (East Antrim) (DUP): For clarification, so that the hon. and learned Lady is not seen to be speaking for my party, may I ask whether she accepts that the balances in the Bill that the Secretary of State has outlined are, by and large, supported by people in Northern Ireland, simply because we have gone through the experience of terrorism and know how important such safeguards are for the general public?
Joanna Cherry: I always listen carefully to what the hon. Gentleman and his colleagues have to say because, as he says, they have experienced terrorism—indeed, they are, sadly, still experiencing it as a result of the tragic news we heard today. I apologise if I in any way included him in a sweeping statement, but I do not agree with him that the Government have got the balance right, and that is the whole purpose of my speech today.
The point I am seeking to make is that it is the job of a responsible Opposition not only to oppose responsibly and to scrutinise, but to articulate and inform public concerns. The public are concerned about this, and there is greater public knowledge about this Bill than perhaps there was last time around. A survey commissioned by Open-Xchange found that only 12% of the public believe that the Home Secretary has adequately explained the impact of the Bill to the UK public and presented a balanced argument for its introduction. I suspect that it is possibly a little unfair, pinning it all on the Home Secretary, because it is the responsibility of all of us in this House to inform our constituents about this Bill and where it is going.
15 Mar 2016 : Column 843
Simon Hoare: Will the hon. and learned Lady give way?
Joanna Cherry: I hope the hon. Gentleman will not mind if I make some progress for the time being and possibly give way later. I mentioned the letter to The Guardian. I am conscious that the right hon. and learned Member for Beaconsfield (Mr Grieve), the former Attorney General, has expressed his view on the matter. I would always accord that the respect it deserves, but I respectfully disagree with him. The letter to The Guardian from the lawyers today was focused initially on the problem of bulk intercept. Even the Interception of Communications Commissioner’s Office, the independent watchdog, has said that bulk intercept provides “generalised initial interception”, and that is the issue here—it is the generality, and the lack of focus and specificity, that the lawyers are worried about.
Mr Grieve: I should emphasise that I take the letter seriously, because I regard it as a serious matter. If what was happening was what was set out in the first objection by those writing it, it would be a very serious matter indeed: the House would be sanctioning a system by which there was generalised access to electronic communications, in bulk. The point at issue is that that is not what actually goes on at all. Not only that, but if one looks at the Bill, one sees that it is clear that that should not be able to go on and that we will prevent it from happening if there is any possible risk of it. We have been round this issue on many occasions, and this is why there is a difficulty of communication and understanding on something that is fundamental to the way in which the agencies go about this work.
Joanna Cherry: I can only reiterate that I and many others, including more than 200 lawyers who signed this letter, disagree with the right hon. and learned Gentleman on this occasion and about this point. One thing that this issue illustrates is the importance of having very focused language in Bills dealing with such major matters of constitutional importance, rather than having vague language, which is not properly understood and which can on a later day be twisted by those it suits, to expand to cover powers that were not envisaged at the time. We are all well aware that that has happened in the past.
We should not dismiss too lightly the importance of the notion of the rule of law overarching this Bill. If the Government really want this legislation to be world-leading, they cannot have legislation that potentially violates international standards. As things stand, the UK is still bound by the jurisdiction of the European Court of Justice; there were no proposals to withdraw from the charter of fundamental rights in the agreement negotiated by the Prime Minister over Europe last month. We are still awaiting proposals for the repeal of the Human Rights Act, but the Government have recently been moving to reassure us that we will not be withdrawing as a signatory from the Council of Europe. We are therefore still going to be bound by the Court in Luxembourg and the Court in Strasbourg. Many distinguished lawyers believe that if this Bill is not significantly amended, the law of the UK will be on a collision course with those European Courts. I remind the Government that an unamended Bill could result in unnecessary and expensive litigation. It could require Parliament to revise the law all over again at some point
15 Mar 2016 : Column 844
in the future. That should not happen, provided that we ensure that the law meets international standards.
[Interruption.]
I hear Government Members shouting at me, “Which parts?” I will come to that when I get into the meat of my speech.
[Interruption.]
I suggest that they read the report that has come from the UN rapporteur on the right to privacy, and consider the law here. They may prefer to follow in the footsteps of Russia, which last December passed a law allowing its constitutional court to decide whether to comply with international human rights courts, but I would suggest that, on these matters at the very least, Russia is perhaps not the best role model for the United Kingdom.
I want to challenge the premise that the more privacy we sacrifice, the more security we gain, because that is not backed up by the evidence. Indeed, some of this House’s Committees have heard evidence that swamping analysts with data can impede investigation, because they are unable to find the crucial needles in the haystack of information before them. We should be looking at how to achieve security in a really intelligent way, not blanket data retention and suspicionless surveillance.
The Home Office responded to the Intelligence and Security Committee’s recommendations by simply adding one word to the start of the Bill so that the first part now refers to “privacy”. It has not, however, added any detail relating to any overarching principles of privacy. Its response to the ISC seems somewhat cynical.
I have indicated that the SNP is concerned about a number of aspects of the Bill. Time does not permit me to tackle all of them, but I am concerned about four in particular. I will endeavour to keep my comments to a minimum, bearing in mind that I speak on behalf of the third party in the House.
Our first issue with the Bill is the legal thresholds for surveillance; the second is the authorisation process, which the shadow Home Secretary has already talked about; the third is the provision for the collection of internet connection records; and the fourth is bulk powers, which I have already mentioned.
On the legal thresholds for surveillance, the Government essentially want to re-legislate on RIPA’s three broad statutory grounds. The SNP is not alone in its concern that those grounds are unnecessarily broad and vague and dangerously undefined. The Joint Committee on the draft Bill recommended that it should include definitions of national security and economic wellbeing, but that has not been done. The ISC recommended that economic wellbeing should be subsumed within a national security definition, finding it “unnecessarily confusing and complicated”. Those recommendations have been dismissed and the core purposes for which extraordinary powers can be used remain undefined and dangerously flexible.
On the authorisation of warrants, we welcome the move towards greater judicial involvement, and we acknowledge the fact that the Government have moved considerably towards the double lock. However, I agree with the shadow Home Secretary, because we also want an equal lock. Judicial review is not the same as judicial authorisation. Judicial review creates the illusion of judicial control over surveillance, and it does not achieve enough movement away from the status quo.
I want to give some concrete examples of that. The case law of the United Kingdom Supreme Court shows that, in civil proceedings that do not relate to deprivation
15 Mar 2016 : Column 845
of liberty, a less intensive standard of judicial review is applied—more Wednesbury reasonableness than strict necessity and proportionality—and that is why many fear that that is what will happen if the Bill is passed unamended. There will be little or no scope for review on the merits.
Suella Fernandes: Will the hon. and learned Lady accept that she is simply wrong? In their evidence to the Joint Committee, of which I was a member, Sir Stanley Burnton, senior judicial commissioner, and Lord Judge, senior surveillance commissioner, were clear that the Wednesbury unreasonableness standards had no place in this context. The wording of the Bill is clear, importing a clear judicial review standard involving necessity and proportionality.
Joanna Cherry: The hon. Lady will no doubt be unsurprised to hear that I do not accept that I am wrong. She is cherry-picking her way through the evidence that was heard. There was evidence contrary to the position that she has stated. I accept that there is a debate about this point, but I take the side that the review of judicial review principles does not go far enough. Why not go as far as other countries? Why not have one stage of judicial authorisation? That is the norm in comparable jurisdictions, by which I mean the United States, Australia and Canada. Judicial authorisation would help us, because it would encourage co-operation from US technology firms.
On a practical note, a two-stage process—whereby the issue goes to a Minister first and then to a judicial commissioner—risks delay. There is a huge volume of surveillance warrants, and it looks like there will be an awful lot more as a result of this Bill. It is unsuitable for a small number of Cabinet Ministers to deal with them.
I want to deal with another false premise that is often used to justify ministerial involvement in the issuance of warrants. Some people seek to argue that Ministers are democratically or politically accountable to this House on the issue of surveillance warrants, but that is a misconceived argument. Ministers are not really democratically accountable for their role in issuing warrants, because, first, the disclosure of the existence of a warrant has been criminalised and it will remain as such under the Bill. Secondly, all of us know—even those such as me who have been in this House for only nine months—that requests for information concerning such matters in this House are routinely parried with claims about national security. I do not accept that Ministers are practically, politically or democratically accountable to this House on the issuance of warrants. To return to the jurisprudence of the Strasbourg Courts, they have made it very clear that it is important to have effective supervision by an independent judiciary. We query whether the double lock mechanism meets that test.
We agree with many others that the case for collecting internet connection records, including the claimed benefit for law enforcement, is flawed. That is not just my say-so: there are many concerns across the industry. People who understand the technicalities far better than I do have explained the problem to me. I again associate myself with what the shadow Home Secretary said: the internet is not like the telephone system. An internet connection record cannot be compared to a telephone bill. The phone system consists of a set of records
15 Mar 2016 : Column 846
relating to when A calls B. If we collect phone system records, we will see at what time A called B and the duration of the call. As I understand it, the internet is more like a mailbox that collects packets of information and then takes them from A to B.
To take a rather middle-aged example, if somebody uses the Facebook messenger service, all the internet connection record will show is that he or she has connected to Facebook messenger. It will not show with whom he or she then communicated, because that occurs at a higher or lower level or in another unreachable packet. The internet connection record will not show the when, where and who that the Government say they want, and which they already get from phone records.
What the internet connection records will show is a detailed record of all of the internet connections of every person in the United Kingdom. There would be a 12-month log of websites visited, communication software used, system updates downloaded, desktop widgets, every mobile app used and logs of any other devices connected to the internet. I am advised that that includes baby monitors, games consoles, digital cameras and e-book readers. That is fantastically intrusive. As has been said, many public authorities will have access to these internet connection records, including Her Majesty’s Revenue and Customs, and the Department for Work and Pensions, and it will be access without a warrant. Do we really want to go that far? There is no other “Five Eyes” country that has gone as far. David Anderson QC said:
“Such obligations were not considered politically conceivable by my interlocutors in Germany, Canada or the US”
and therefore, he said, “a high degree of caution” should be in order.
Finally, let me turn to bulk powers. I have already made the point that even the Interception of Communications Commissioner’s Office says that bulk provides at the outset generalised initial intercept. We became aware of these bulk interception programmes only when they were disclosed by Edward Snowden in June 2013—whatever Members think about those disclosures and whether they were appropriate, that is how we became aware of the matter. This House has never before debated or voted on bulk powers, so we are being asked to do something very novel and very challenging, and we must do it properly.
The power to conduct mass interception has been inferred from the vaguely worded power in section 8(4) of RIPA, which illustrates the danger of vaguely worded legislation. Targeting bulk warrants at a telecommunications system or at entire populations rather than at specific individuals is a radical departure from both the common law and human rights law, yet that is the approach that will be maintained in this Bill. In many respects, that is the most worrying part of the Bill. Indeed, it is the part of the Bill about which the UN special rapporteur on privacy is most concerned. Let me read what he said, because it is very respectful of the tradition of the United Kingdom and it makes some very good points. He said:
“It would appear that the serious and possibly unintended consequences of legitimising bulk interception and bulk hacking are not being fully appreciated by the UK Government. Bearing in mind the huge influence that UK legislation still has in over 25% of the UN’s member states that still form part of the Commonwealth, as well as its proud tradition as a democracy
15 Mar 2016 : Column 847
which was one of the founders of leading regional human rights bodies such as the Council of Europe, the SRP encourages the UK Government to take this golden opportunity to set a good example and step back from taking disproportionate measures which may have negative ramifications far beyond the shores of the UK. More specifically, the SRP invites the UK Government to show greater commitment to protecting the fundamental right to privacy of its own citizens and those of others and also to desist from setting a bad example to other states by continuing to propose measures, especially bulk interception and bulk hacking, which prima facie fail the standards of several UK parliamentary Committees, run counter to the most recent judgements of the European Court of Justice and the European Court of Human Rights, and undermine the spirit of the very right to privacy.”
The rapporteur is appealing to the better tradition in this country, and saying that we should look at this Bill very carefully. He is suggesting not that we should throw it out, but that we scrutinise it very carefully, bearing in mind how far it intends to go in comparison with other countries and with existing international case law.
Andy Burnham: The hon. and learned Lady has made a very good speech this afternoon. Government Members should be working a little harder to reach out and build consensus. Before she finishes, may I invite her to say whether she will be supporting our call in Committee and on Report to make internet connection records accessible only through a warrant based on serious crime, not any crime, to give protection, and also for a clear definition of national security?
Joanna Cherry: Those are both issues on which we will work with the Labour party. I have already indicated that we intend to attempt to amend the Bill extensively in Committee. We are very concerned about internet connection records. We query whether their retention is necessary or appropriate at all, but we will look seriously at proposals put forward by other parties and will work with them.
The SNP is in favour of targeted surveillance. We welcome the double lock on judicial authorisation as an improvement, but it does not go far enough. Our concern is, quite clearly, that many of the powers sought in this Bill are of dubious legality and go further than other western democracies without sufficient justification. It is for that reason that we cannot give this Bill, in its current form, our full support. We will work with others to attempt to amend it extensively. Today, we shall abstain, but if the Bill is not amended to our satisfaction, we reserve the right to vote it down at a later stage.
3.33 pm
Mr Kenneth Clarke (Rushcliffe) (Con):
That is one of the most combative and partisan speeches in support of an abstention on the Second Reading of a Bill that I have heard from a Member of this House for a very long time. I urge the hon. and learned Member for Edinburgh South West (Joanna Cherry) and her Scottish National party colleagues to calm down a bit and accept that everyone is in agreement that this is a huge and comprehensive Bill. Its terms are often quite obscure, and it is not light reading to try to analyse it. I think we are all agreed that some issues need to be addressed in Committee and at later stages. Despite her excellently combative speech—I have nothing against partisan politics
15 Mar 2016 : Column 848
on the right occasions—it would be useful to accept that there is almost a consensus in this House about the principles that we should be adopting. As I think the standards of liberal democracy in this country at the moment are not too bad, we need legislation that enshrines them for the future, in case even wilder protest groups eventually get elected to the House, so that we stick to those principles.
The principles are, I think, that we wish to give the strongest possible support to our intelligence and policing authorities to defend the national interest and to defend our citizens. There are very real dangers in the modern world and we must not be left behind. When our intelligence and police services are dealing with terrorists, or serious organised crime—drug trafficking, human trafficking and so on—or child abuse, as people have said, I want them to be as tough as anybody else’s intelligence and police services. I want them to be as effective as they possibly can be and as successful in avoiding risk; that is essential.
Spies—the intelligence services—have had to do slightly odd things ever since they first emerged on the scene, ever since they started steaming open envelopes and started intercepting telephone calls. We must not be left behind by technology, and we must not be left behind by modern society. The spies have to act in the same way towards the internet as they have been acting towards envelopes in the post for the past 200 years. I hope we are all agreed on that. I hope we also accept that this poses a dilemma for a liberal democracy like our own, because we have to do this as well and as toughly as anybody else in the world, and to the highest technical standards, without compromising our underlying values. The reason we want such actions to be so effective is that we have, we hope, the highest standards of human rights and the highest regard for the rule of law and democratic accountability, but perhaps the thing we have neglected the most in recent times as the pace of events has speeded up is privacy—the privacy of the individual. We have recent examples—although not in this area—of the abuse of privacy by the press and others, of which we are only too well aware. I think our citizens expect that their privacy should be intruded on only in the right cases.
The real heart of the test of getting the balance right—we all talk about getting the balance right—is the proportionality of very intrusive powers, which should only ever be used when the national interest is threatened and our security is at stake. That should be—
Mr Clarke: I will give way just once.
Sir Edward Leigh:
I am sorry I am worrying on about this issue, but my right hon. and learned Friend has been Home Secretary. Let us suppose that there is a matter of national security and acute political crisis, and a Home Secretary feels it is necessary to authorise some snooping, for want of a better word—I am sorry to use that word—on a Member of Parliament’s communications with a constituent who has raised these issues. The Home Secretary said when I intervened earlier, “Don’t worry; the judge will authorise it or review it, and the Prime Minister will consider it too.”
15 Mar 2016 : Column 849
Judges are very responsible, but they do not really understand these acute political sensitivities. Should not somebody else, like the Speaker, have some sort of oversight to protect these very valuable communications between Members of Parliament and their constituents?
Mr Clarke: I do not think I am persuaded, although I do not totally reject my hon. Friend’s case. I was about to say that we must realise there are dangers in a democratic society if we are not constantly vigilant against some future Administration—although none that I have experienced, either in opposition or in government—abusing this. There are western democracies —I think some things have happened in America at times that we would not approve of here—where political opponents, political rivals, have found the intelligence services and other sources of information used against them. [Interruption.] My right hon. Friend the Member for Haltemprice and Howden (Mr Davis) recklessly suggests France. A Frenchman might not agree, but it would not surprise me if that were the case. In modern politics, the temptation to do that is actually quite strong.
The other reason for insisting that this legislation is as tight as we can make it is that it is all too easy to get accustomed to these things. I was Home Secretary, and Home Secretaries are overwhelmed with applications for warrants. In the middle of the night, doing a red box—contrary to popular belief, I was conscientious about my red boxes—there is very little time to make decisions. There are vast numbers of applications. I used to make a point of challenging one or two just to find out more detail than I had been given.
The volume hitting my right hon. Friend the Home Secretary is massive, compared with that which I experienced. That shows that there is a danger. In the intervening 20 years, the world has changed so profoundly that I suspect she has vastly more of these cases to consider than I had, and I suspect some of them involve much more difficult matters of judgment than most of the ones that I faced. Even in those days, when I suspect we were less concerned about these things, I found some pretty surprising applications being made if I went into what they were about. It is too easy even for the best people in the intelligence service—
Hannah Bardell (Livingston) (SNP): Will the right hon. and learned Gentleman give way?
Mr Clarke: No. Others want to get in and I do not think I will get any more injury time. I apologise.
It is too easy for those in the intelligence and police services to get used to such power. It is too tempting to use it against people who are causing trouble by making complaints or leaks. There have been examples of that, and that is what this Bill is about.
My right hon. Friend the Home Secretary has brought forward a Bill that makes the biggest advance that I can remember for a generation, introducing the principle of judicial involvement and judicial oversight, for which I have the greatest possible respect. It is a quite dramatic change. We have also strengthened the powers of the Intelligence and Security Committee, and I hope my right hon. and learned Friend the Member for Beaconsfield (Mr Grieve), the former Attorney General, will make the fullest use of them. That Committee is always faced
15 Mar 2016 : Column 850
with the problem that it cannot debate in public most of what is ever done or heard in private. We have to rely on having the right people to hold to account those concerned.
We need to get the Bill right. Most of the points are not the big, wide, partisan points that I was talking about a moment ago. They are in the detail—the devil is in the detail—and there are some quite important points that we should still question. It is true that there is a vast amount of activity under the general title of economic wellbeing. I have known some very odd things to happen under that heading. National security can easily be conflated with the policy of the Government of the day. I do not know quite how we get the definition right, but it is no good just dismissing that point.
Most of my points are Committee points and several have been raised already. I did not know that Igor Judge had given his opinion to the Select Committee that the Wednesbury test of reasonableness was not appropriate. He is an old opponent of mine in the courts, and an old friend of mine for most of his life. I am an out-of-date and extinct lawyer and he is a very distinguished and very recent lawyer. Presumably, if the judge thinks the Home Secretary is not following the legal principles, he can overrule an application.
Questions of judgment and proportionality are the most important of all and worry me most. The one Committee point that I shall raise, and the one I feel most strongly about, was raised by the shadow Home Secretary. I am worried by part 3. The whole debate is conducted on the basis that we should all lie fearful in our beds and that the Bill is designed to deal with terrorism, jihadists, child abusers and human traffickers. Actually, vast numbers of people are getting powers. Part 3 gives all kinds of curious public bodies—every local authority, county and district, where one official can get the approval of one magistrate—access to huge amounts of information. Too much is already available. I doubt the wisdom of that. I think we will find other points that should be corrected during the progress of the Bill through this House.
3.43 pm
Mr Nick Clegg (Sheffield, Hallam) (LD): I associate myself with the remarks by the Home Secretary and others, and join in sending heartfelt condolences to the family and friends of the prison officer who tragically lost his life in Northern Ireland.
I shall start with the positive. Of course, my colleagues and I acknowledge that this Bill represents progress in some important respects. It is far more comprehensive than any previous piece of legislation and now covers all the powers that were previously unavowed. It contains important improvements in oversight and accountability, and compared with its predecessor, RIPA, it is easier to understand. However, as the Home Secretary, who alas has just departed, will know, she and I discussed the Bill yesterday. I am not a supporter of it, not for technical reasons but for reasons of principle, which I will come to. We feel that her Department has not responded in full to the criticisms of the three parliamentary Committees and that the Bill is, therefore, not yet in a fit state.
There are many problems, but I would like to highlight two in particular. First, as the former Attorney General, the right hon. and learned Member for Beaconsfield (Mr Grieve), said, the Intelligence and Security Committee
15 Mar 2016 : Column 851
was heavily critical of the way in which privacy protections were articulated in the draft Bill. In responding to the ISC’s request for a new part dedicated wholly to privacy, the Government have in effect done little more than change one word in a title. They have demonstrated precisely the point that the Committee made when it described the privacy protections in the Bill as an “add-on”.
I share the Committee’s concerns. The powers authorised by this Bill are formidable and capable of misuse. In the absence of a written constitution, it is only the subjective tests of necessity and proportionality that stand in the way of that misuse. The Bill should be far, far more explicit than it currently is that these powers are the exception from standing principles of privacy and must never become the norm.
The Home Office appears, unfortunately, to be institutionally insensitive to the importance that should be attached to privacy. A Department that cared about privacy would offer more than a one-word response to the ISC. A Department that cared about privacy would not have quietly shelved the privacy and civil liberties board, which this House voted to establish just last year. A Department that cared about privacy would have examined more proportionate alternatives to storing every click on every device of every citizen, instead of leaping to the most intrusive solution available.
Mark Spencer: What would the right hon. Gentleman say about privacy when it came to a victim of child abuse who was unable to find the perpetrator because of some of the restrictions he wants to put in the Bill?
Mr Clegg: As I know from my time in government, one of the greatest tools in going after precisely the perpetrators of such heinous crimes is matching the devices they use to them through IP addresses. That is why we passed legislation—the unfortunately acronymed DRIPA—which is being challenged in court by other Members of this House right now. It is also why, as I will explain in a minute, there are much more effective ways of achieving that objective than having a great dragnet, which is being advocated in the Bill.
Internet connection records, or ICRs, are my principal concern. We have been here so many times before—in 2008, 2009 and 2012. I cannot think of another proposal in Whitehall that has been so consistently championed, not, I should stress, by the police and the intelligence services, whose punctiliousness, scrupulousness and expertise I admire as much as anyone else, but by the Home Office, despite its failing to convince successive Governments. That is not the way that policy ought to be made.
The Home Secretary said that ICRs are significantly different from weblogs. The only differences that I can see are the exclusion of third-party data, welcome though that is, and the addition of some restrictions on the purposes for which the data can be accessed, although I note that some of those restrictions have now been relaxed again in clause 54 of the new Bill.
In terms of collection and retention, the scheme is the same—the name might be different, but the scheme is the same. Service providers will be required to keep records of every communication that takes place on their networks, and of potentially every click and swipe
15 Mar 2016 : Column 852
where there is an exchange of data between someone’s device and a remote server, for 12 months. It is the equivalent to someone in the days of steaming open letters keeping every front cover of every envelope from across the whole country stored in some great warehouse somewhere for 12 full months. It did not happen then, and it should not happen now.
The implication of this is very big indeed: it is that the Government believe, as a matter of principle, that every innocent act of communication online must leave a trace for future possible interrogation by the state. No other country in the world feels the need to do this, apart from Russia. Denmark tried something similar, as was referred to earlier, but abandoned it because the authorities were drowning, of course, in useless data, as they would have drowned in useless envelopes many years ago if they had tried this then. Australia considered it, but the police themselves said it was disproportionate. Many European countries, interestingly, have recently gone exactly the other way, relinquishing data retention powers following the ruling of the European Court of Justice in the so-called Digital Rights Ireland case in 2014.
At the request of David Anderson, QC, the Home Office has produced a so-called operational case for internet connection records, which we can all read. I would suggest that students of politics and government would do well to study that document, which is a model exercise in retro-fitting evidence to a predetermined policy. Naturally, it sets out how these data could be useful to the police and intelligence agencies. What it does not do, but should do, is to start from the operational need, where a lack of data is obstructing criminal investigations, and explore different options for meeting that need, while balancing the twin requirements of security and privacy.
It is simply false to claim that this dragnet approach is the only way to provide the Government with better tools to go after criminals and terrorists online. For example, as I said earlier, we could incentivise companies to move to the new industry standard for IP addresses at a much faster rate. That might sound terribly technical, but it is important, because our doing so would, at a stroke, go a long way towards solving the key problem of how to tie IP addresses on individual devices to suspects, which is one of the principal purposes of this Bill.
During my time in government, I saw very little sign that the Home Office had devoted any serious consideration to alternatives to ICRs. As the operational case illustrates, that is because this is not a case of evidence-based policy but of policy-based evidence. On top of that, we still do not know how it will actually work and how it would be defined. The Internet Service Providers Association states in its briefing for this debate:
“In its attempt to future-proof the Bill, the Home Office has opted to define many of the key areas in such a way that our members”—
“still find it difficult to understand what the implications would be for them.”
The costs of ICRs are also unclear. The Government’s estimate is just over £170 million over 10 years, but the Internet Service Providers Association says that it does “not recognise” that figure, and BT has said that it believes the costs will be significantly higher.
15 Mar 2016 : Column 853
Internet connection records are at the heart of this Bill. They are not just a technicality: they are principally at the heart of what information is stored on all of us for long periods by the Government in our name. This dragnet approach will put us completely out of step with the international community, there are practical problems with the proposal, and the terms used in the Bill are still unclear. That is why I urge Members in all parts of the House to properly scrutinise this far-reaching and poorly evidenced proposal, and to withhold parliamentary consent for such a sweeping power until the questions that I and others have raised are properly addressed.
3.52 pm
Sir Edward Garnier (Harborough) (Con): Any Bill that fundamentally affects the relationship between the citizen and the state is bound to be controversial. This Bill is no exception, even though much of what it does is to consolidate in one statute powers to interfere in the citizen’s private life and communications that are presently to be found in existing statutes. Although article 8 of the European convention on human rights permits interference with the rights protected by it if
“in accordance with the law and…necessary in a democratic society in the interests of national security”
and so on, Parliament has a particular duty to examine closely legislation of this sort to ensure that the Government and the security and law enforcement agencies are not asking for too much and that we are not supinely giving them too much. We find the words “necessity” and “proportionality” frequently in this Bill, and that is not an accident.
Today’s debate is not new. Much of what will be said today will have been said in the debates on the 20th-century and early-21st-century legislation that is to be consolidated into this Bill. As technology has advanced we have had to adapt our laws, first, to cope with the ability of those who wish to do us harm to do so more quickly and effectively, and, secondly, to ensure that technology is not used by the state improperly to interfere with the citizen, just because it can.
As long ago as the 14th century, Parliament outlawed eavesdropping under the Justices of the Peace Act 1361. In essence, for the past 600 years or so, the intrusion into the private lives of others by use of illegal listening devices, be it the human ear or electric surveillance machinery, has been a topic of public debate. No one doubts that our law enforcement agencies and the security services need to be able to detect and prosecute serious crime, and to counter terrorist and other threats to the country and our fellow citizens. The threat to our country and its interests is, I am sure, as serious today as it has been since the second world war, and the capacity of the criminal underworld or our national enemies to transfer money, to traffic people for enslavement or sex or to move drugs, weapons and explosives has been greatly enhanced by the internet and other forms of electronic telecommunication. Whereas in 1361, the dark, a disguise and the speed of a horse were all that the King’s men had to contend with, so much of what we have to contend with now is unseen, unheard, instantaneous and undetectable. It is getting more and more difficult to stay ahead of the criminal gangs and terrorists who have access to the most sophisticated of communication systems, which can be operated from an iPhone anywhere in the world.
15 Mar 2016 : Column 854
Nusrat Ghani (Wealden) (Con): Does my right hon. and learned Friend agree that to help our police and security services to transfer what they do in the physical world, they need the powers to do that work in the digital world, and that without the Bill we are asking our security services to do their job with one hand tied behind their back?
Sir Edward Garnier: I agree with that.
I do not have time in this Second Reading debate to do more than state that, as a matter of principle, I wholeheartedly support the aims and policy behind the Bill. The proposals to enable the state to intercept others’ communications or to interfere with equipment in a way that would, without this legislation or the laws it replaces, be unlawful, are sensible. The requirement for the Secretary of State to issue warrants that have to be approved by judicial commissioners, and other protections against the state’s misbehaviour with regard to the collection and retention of communications data, are rightly in the Bill. The ability to acquire bulk data is necessary. The checks and balances governing the police, and the internal supervision arrangements referred to in schedule 4, are right, subject to further consideration of the seniority of the officers involved. All that and more is justified and defensible in the interests of protecting us from harm.
That said, there is no room for complacency or any suggestion that the Bill is the perfect answer to a difficult set of problems, which are most obviously defined as the border between public protection and freedom on the one hand, and excessive state power on the other. In my time as a Law Officer I had, from time to time, to deal with the security services and the law enforcement agencies. I hope that I will not be accused of undue naiveté, but my experience of them in government was that they were scrupulous to obey the will of Parliament and the law. I was impressed by the fact that, from the top down, there was a genuine desire to do only what was right and to seek clarification where the law was complicated or capable of being misconstrued, so that they did not stray across the line between what was possible and what was lawful.
Based on my experience, I am sure that those entrusted with the type of work described in the Bill will conduct themselves within the law and that, if errors are made, it will not be for want of trying to keep on the right side of the law. The number of intercepts warranted every year by a Secretary of State may not be large in comparison with the billions of emails sent, mobile telephone calls made and internet searches carried out every year. It may be—I am guessing—that the three Secretaries of State will collectively issue fewer than 5,000 each year. If the law is to be obeyed, however, every warrant must be considered by the Secretary of State or a Scottish Government Minister. The Foreign Secretary, the Defence Secretary and the Home Secretary will have to give every application for a warrant from an intercepting authority the time and the close attention that it deserves.
Of course, I believe what the Home Secretary said in her response to the intervention from my right hon. Friend the Member for Haltemprice and Howden (Mr Davis), and no doubt she will never take shortcuts. The current holders of those offices are hard-working Ministers, who are capable of reading a closely argued and complicated brief late at night after a long day of
15 Mar 2016 : Column 855
other work in their Departments, in Parliament or travelling here or overseas. Even if I have overestimated the number of applications for warrants that they will receive each year, I am reasonably sure that they will consider several every day. That is much reinforced by what my right hon. and learned Friend the Member for Rushcliffe (Mr Clarke) had to say a moment or so ago.
This should not be a tick-box exercise. Although I accept that some applications will be more straightforward than others, I do not expect that even in the easier cases, it will be a question of skim-reading the application and initialling it. Each application must be fully argued on paper on its own facts and considered personally by the Secretary of State. I hope that no submission to the Secretary of State will merely recite the wording of clauses 17 and 18; I hope that all submissions will go into detail about why the warrant is necessary, not least because they will have to be carefully reviewed by a judicial commissioner. That is all the truer in urgent cases when a judicial review follows the issuing of the warrant, or in cases involving legal privilege under clause 25.
My concerns about the practicalities of all this are added to when one considers this point, which was also made by my right hon. and learned Friend. Authorisations under part 3 of the Bill are likely to be numbered in the many hundreds of thousands every year and will be made by what, to my eye, look like middle-ranking police officers and other officials. As one can see from schedule 4, those officials are inspectors and superintendents, majors and lieutenant colonels, and civil servants of that rank. As I learned yesterday, some of them will be part-timers. I need to be assured that the necessity or expedience of every case will not outweigh the need for formality and proper scrutiny of every such application. If we are to have complete confidence in the vetting system, I urge Ministers on the Front Bench and the rest of the Government to think very carefully about those aspects of the process.
Finally, clause 222 requires the Secretary of State to prepare a report on the operation of the Act five and a half years after the Bill has been passed. In any view, that is too long. I suggest that it should be done after two years. If the Government refuse to reduce the period, I hope that my right hon. and learned Friend the Member for Beaconsfield (Mr Grieve) and the ISC—as well as Mr David Anderson, the independent reviewer, who produced an invaluable report last summer—will want to do so themselves.