Data Protection Bill [HL]

Baroness Hollins Excerpts

Committee: 2nd sitting (Hansard): House of Lords
Monday 6th November 2017 Lords Chamber

[Lord Knight of Weymouth (Lab)]

My Lords, I support the amendments. I remind the House of my interests in relation to my work at TES, the digital education company.

The noble Baroness, Lady Kidron, and the others who have supported the amendment have given the Government a pretty neat way out of the problem that 13 as the age of consent for young people to sign up to “information society services”, as the Bill likes to call them, feels wrong. I have found that for many Members of your Lordships’ House, 16 feels like a safer and more appropriate age, for all the reasons that the noble Lord, Lord Storey, has just given in terms of defining when children are children. There is considerable discomfort about 13 in terms of where the Bill currently sits.

However, I think many noble Lords are realists and understand that to some extent the horse has bolted. Given the huge numbers of young people currently signing up to these services who are under 13, trying to pretend that we can find a way of forcing the age up to 16 from the accepted behavioural norm of 13 looks challenging. Yet we want to protect children. So the question is whether these amendments would provide that solution. That hinges on whether it is reasonable to ask the suppliers of information society services to verify age, and whether it is then reasonable to ask them to design in an age-appropriate fashion. From my experience, the answer to both is yes, it is. Currently, all you do is tick a box to self-verify that you are the age you are. If subsequently you want to have your data deleted, you may have to go through a whole rigmarole to prove that you are who you are and the age you say you are, but for some reason the service providers do not require the same standard of proof and efficacy at the point where you sign up to them. That is out of balance, and it is effectively our role to put it back into balance.

The Government themselves, through the Government Digital Service, have an exceedingly good age-verification service called, strangely, Verify. It does what it says on the tin, and it does it really well. I pay tribute to the GDS for Verify as a service that it allows third parties to use: it is not used solely by Government.

So age verification is undoubtedly available. Next, is it possible—this was explored in previous comments, so I will not go on about it—for age-appropriate design to be delivered? From our work at TES, I am familiar with how you personalise newsfeeds based on data, understanding and profiling of users. It is worth saying, incidentally, that those information society services providers will be able to work out what age their users are from the data that they start to share: they will be able to infer age extremely accurately. So there is no excuse of not knowing how old their users are. Any of us who use any social media services will know that the feeds we get are personalised, because they know who we are and they know enough about us. It is equally possible, alongside the content that is fed, to shift some aspects of design. It would be possible to filter content according to what is appropriate, or to give a slightly different homepage, landing page and subsequent pages, according to age appropriateness.

I put it to the Minister, who I know listens carefully, that this is an elegant solution to his problem, and I hope that he reflects, talks to his colleague the right honourable Matthew Hancock, who is also a reasonable Minister, and comes back with something very similar to the amendments on Report, assuming that they are not pressed at this stage.

[Baroness Hollins (CB)]

My noble friend made a very strong case. The internet was designed for adults, but I think I am right in saying that 25% of time spent online is spent by children. A child is a child, whether online or offline, and we cannot treat a 13 year-old as an adult. It is quite straightforward: the internet needs to be designed for safety. That means it must be age appropriate, and the technology companies need to do something about it. I support the amendments very strongly.

[Lord Alton of Liverpool (CB)]

My Lords, I, too, support my noble friend Lady Kidron. Last week, with her and my noble friend Lord Best, I was able to attend a briefing session with the right honourable Karen Bradley, the Secretary of State. I found that very helpful. We were looking at the Green Paper on internet safety published on 11 October. It is curious that we are here in Committee talking about some of the same issues when that significant consultation is being undertaken by the Government. I hope that when the noble Lord, Lord Ashton of Hyde, comes to reply to the debate, he will say something about how the Government intend to synchronise the discussion of and consultation on the Green Paper that is under way with the moving horse of legislation that is proceeding through your Lordships’ House.

During our discussions last week, my noble friend raised again the duty to protect. I agree with what the noble Lord, Lord Knight, just said about this providing an elegant way forward. I guess that many of us would want to turn the clock back if that were possible, but we recognise that it is not, and this may well be, therefore, a better way to proceed. It is certainly one to which the Government should be giving considerable attention.

While I am on my feet, perhaps I may remind the noble Lord, Lord Ashton, of the amendment that I moved with my noble and learned friend Lady Butler-Sloss during the debate in April on the digital legislation. I particularly draw his attention to col. 40 on 20 March and the remarks made by his right honourable friend the Minister of State for Digital in the other place on 26 April, when he described the question of prohibited material and definitions, which we had argued should be consistent across varying media platforms. They both said that this was unfinished business that would be returned to. I have studied the Green Paper but have not been able to find the solution to that unfinished business, and wonder whether it will be addressed as the legislation proceeds.

Perhaps I may also ask the Minister about the protection of minors. It has been stated again and again, by all noble Lords who have participated so far, including the noble Lord, Lord Storey, that the protection of children should be a paramount consideration at all times. The Minister may recall the case, which I raised with the Secretary of State and in your Lordships’ House, of some young people who had visited suicide sites. I was horrified to learn from the headmaster of a school in Lancashire, where I arrived to distribute prizes, that a child who had visited a suicide site had taken their own life only that morning. What further protections are being provided to require service providers, for whom self-regulation is clearly not enough, to do rather more about that question?

It has been said that parents do not have a chance in this situation; that is absolutely right. As my noble friend Lady Hollins said, young people spend a vast amount of time on the internet. Many parents do not understand how it works. It is therefore crucial that we do all we can to place pressure on the service providers. I remind the House of the advice that Aristotle gave parents. He said that only a bad parent would place their children in the hands of a foolish storyteller. I fear that many of us, maybe inadvertently and without knowing the full consequences of placing our children in the hands of the Twittersphere and the digital world, with all the information that pours into their minds on a massive scale, have placed them into bad hands. We need to do more to protect them. This is what my noble friend is trying to do and I commend her amendment to the House.

Data Protection Bill [HL]

Baroness Hollins Excerpts

Committee: 2nd sitting (Hansard - continued): House of Lords
Monday 6th November 2017 Lords Chamber

[Lord Stevenson of Balmacara (Lab)]

My Lords, at Second Reading I touched on the question of whether the Bill might be used as a vehicle for rehearsing some of the arguments that we have heard in your Lordships’ House about the issues raised by Sir Brian Leveson in his report. I opined at the time, and am still of the belief, that this would not be the right place to put forward those amendments again, because I would favour an initiative from the other side of the House which tried to build on some of the work that was done in the run-up to the work that was done after the Leveson report was first published, which saw all party groups coming together to try and find a way forward. It seemed that we were beginning to get ourselves into a cul-de-sac on many of these issues. Although there were strong passions and strong beliefs, and good intellectual and other reasons for taking forward some of these issues, the times had changed and the climate had moved on. It was therefore important to try and think again about what would happen.

However, I also said that maybe others would take a different view of that and come forward with amendments on these and related issues. I expressed the view that, if they did, Her Majesty’s Loyal Opposition would look at them on their merits and respond to them as and when they came up. This explains why we have not signed up to some of the amendments that are before your Lordships’ House today.

I also said that our main concern going into Committee would be to make sure that the arrangements under which we currently operated, which were largely set out in the Data Protection Act 1998, were continued. It was very important that all concerned had confidence that the transposition between 1998 and today, and going forward to 25 May 2018, was adequate and sufficient, in terms of how we approached them in relation to that Bill. I am therefore introducing Amendment 42, which is largely a probing amendment aimed at getting Ministers on the record as to whether or not they feel that the transposition has been made fairly and effectively. To the extent that there is an addition to the existing law, as I understand that to be the case, it is in response to a particular aspect of the current regime which does not seem to work well in practice. The Information Commissioner’s Office has made it clear that it feels that it could do with an additional power, which I think is provided for in the Bill, to assist with the ability to reimburse those who have been affected by actions arising from a complaint they have taken forward in relation to the press. If that is the case, I would be happy to have that confirmed. That is the reason for Amendment 42, and I look forward to hearing from Ministers how they respond to that.

In pursuit of a perfectly normal and natural wish to scrutinise the Bill as it is before us, we have two other amendments in this group. Amendment 87B was offered to us by the NUJ, and is on a question which comes up a lot when talking about intellectual property issues relating to photography—not that this is actually about that, but journalism has a common-sense meaning which is often used in language other than that of Bills to reflect all aspects of journalism, including photojournalism. But of course it is not the totality of what photographers do, so this amendment is an attempt to get on the record what Ministers believe to be the sense on page 136, in Part 5, where paragraph 24(2) states that GDPR provisions do not apply,

“to personal data that is being processed only for the special purposes to the extent that … the personal data is being processed with a view to the publication by a person of journalistic, academic, artistic or literary material”.

Given the absence of the term “photography” or “photographer”, I have a slightly rhetorical question, but one to which I am looking for an answer. Can I assume that the sense of that paragraph is that this would catch photographers?

If that is the case, since photography is often done in a way that would not always result in publication, could we have clarity about the situation if the photographers were to rely on this provision in relation to material? Say, for instance, they were taking a number of photographs of a demonstration, some of which would be used but a lot would not be, and then it was felt that there was some other purpose that those photographs could be used for—that was an example given to us by the NUJ. It was concerned that the photographer should not be discriminated against, in the sense that the work of building up a personal archive of photographs taken on the job that did not result in specific publication might not necessarily fit particularly well with that. This is just a probing amendment to see what the response to that is.

The other amendment in our name in this group is Amendment 87E, relating to an issue that has been raised by others in this group. There is what I think is meant to be a transposition from the Data Protection Act 1998 to refer to the question of whether or not the public interest is engaged, and various rules and regulations around that. The notion behind our amendment is that we are not sure it is helpful nowadays for the legislation to refer in specifics to a list of codes and practices, particularly because one of those—I reference paragraph 24(5)(c)—is not correctly described. I think others will speak to this as well. Obviously there is a code of practice that editors of major newspapers have contributed to and which works reasonably well in practice, but the danger about that as an example is that it cuts out a lot of other codes of practice that could easily be mentioned there. Having them there does not seem to advance the argument, which is that the controller must have regard to appropriate codes of practice or guidelines that exist. In the event that any question is raised by the Information Commissioner or others, it is more appropriate for that to be left more general than specific. With that, I look forward to the responses. I beg to move.

[Baroness Hollins (CB)]

My Lords, I will speak to the amendment in my name. I am grateful to the noble Earl, Lord Attlee, who has added his name in support. I will also speak in support of the amendment in the name of my noble friend Lord Skidelsky.

First, I want to explain why the Bill in its current form does not provide an adequate balance between privacy and freedom of expression, despite claims to the contrary by some parts of the media this weekend. Freedom of expression is essential to hold power to account and to expose wrongdoing, and it must be protected. However, the public also need to be protected from those who might seek to abuse such freedoms with the primary business purpose of selling newspapers.

The need for balance was recognised by Lord Justice Leveson in his 2012 report, and these amendments seek simply to implement some of the Leveson recommendations on data protection. It is worth remembering how some newspapers exploited private data in the past. Operation Motorman was a lengthy police investigation. The Information Commissioner reported on it in 2006, detailing the kinds of information that private investigators were buying unlawfully or obtaining by deception, including bank records, medical records, tax records, benefits records, phone records—thousands of transactions obtained from just one private investigator and commissioned by journalists. The victims whose data had been illegally accessed were not celebrities or public figures being investigated for genuine public interest reasons. They were just ordinary people with tenuous connections to those in the public eye: the sister of a well-known MP’s partner; the mother of a man once linked romantically to a “Big Brother” contestant; the decorator who had once worked for a lottery winner; and the GP who was doorstepped by a Sunday newspaper in the mistaken belief that he had inherited a large sum from a former patient. All these were victims of data misuse, and we are still learning how widespread those practices were.

Some argue that that is history and that newsroom practices have changed since the Leveson report, but the economic pressures which drove newspapers to desperate practices before are even more acute now. Many of the same editors and senior executives are still in place, and many in this House will remember similar promises of reform made by newspaper editors in the wake of the Calcutt report nearly 25 years ago. Does the Minister agree that this time, it is our responsibility to act decisively to protect the public from the less scrupulous elements of the press?

There is an exemption in the Data Protection Act 1998 for journalism, and this is reproduced in the Bill, but the exemption as drafted effectively offers a blank cheque to publishers and would allow them to breach data rights with little protection for the public from abuse. The GDPR is clear: exemptions should be made only when they are necessary to reconcile the right to protection of personal data with freedom of expression. My amendments are designed to ensure that this balance is properly preserved. They have been drafted by a senior QC and are based on recommendations made by Lord Justice Leveson, himself an independent senior judge, after a public inquiry in which he heard evidence and arguments from all sides, including the newspaper industry. I should declare an interest here and remind the Committee that I gave evidence to the Leveson inquiry.

--- Later in debate ---

[Lord Lester of Herne Hill]

My Lords, I have tried to explain that the objection to the post-Leveson deal was that it was punitive and unfair. That is why the press chose, as is its right, not to be part of it. It chose instead a system of self-regulation with a very independent Court of Appeal judge, who, when he took office, made it clear that he would insist upon the system working properly and independently, as he has ever since. It is true that he has had to struggle against resistance by some newspapers, but that is the system we have.

[Baroness Hollins]

The noble Lord’s support for IPSO as being substantially better than the PCC is surprising. It has done no standards investigations, issued no fines and made no front-page corrections. I do not understand how that can be seen as regulation.

The noble Lord described Hacked Off as a movement set up to support celebrities. It was actually motivated by the Dowlers and sustained because of concerns about people like the McCanns and Christopher Jefferies. It is not about celebrities. Celebrity money has provided some of its support because they were motivated by hearing about those appalling abuses. That is what it is about.

All my amendments would do is incentivise a regulator to seek approval of its independence. Why will IPSO not seek approval and recognition of its independence? Why is it so afraid? Is it because it is not independent?

[Lord Lester of Herne Hill]

My Lords, I am not here on behalf of IPSO; I am not counsel for IPSO. I have simply tried to explain historically why we are where we are and the arguments the press made in the past that I was party to at the time, as was the noble Lord, Lord Pannick. If there are points to be made about the way in which IPSO works, no doubt they will be made by Members of the House. I stand corrected by the noble Baroness, Lady Hollins, who reminds me that it was not only celebrities who were abused, which is completely true.

What I am trying to say is that no democracy in the world has a system of press regulation that has been formulated post Leveson. It is objectionable to our national and regional newspapers. They will not change and suddenly agree to a different system because of anything which your Lordships say or do. It is a free press and the sensible thing to do is to make the system work. I believe that under Sir Alan Moses it is working, but if it is not working sufficiently, I am sure that they would be interested in any suggestions. It is hopeless if your Lordships believe that you can bully them into giving up their self-regulation in favour of the statutory system which they reject.

--- Later in debate ---

[Baroness Hollins]

My Lords, I want to make a couple of comments. I take exception to the suggestion that my amendments are in some way bullying. If anything, it is the newspapers that are bullying: for example, bullying the Government not to commence Section 40 of the Crime and Courts Act 2013. This is not the wrong Bill: it is about data protection. All that my amendments would do is implement Lord Justice Leveson’s recommendations on data protection. It is a data protection Bill, and that is what they are about.

The so-called IPSO code is owned by the Regulatory Funding Company and, as I understand it, only its sub-committee can change it. IPSO then has to take it or leave it. The RFC also refused to allow IMPRESS to use it. It seems very strange to have that code named in the Bill. I will think carefully and review what needs to come back on Report, but I would welcome an opportunity to discuss this further with the noble and learned Lord to try to understand why there is such a difference of view about it.

[Lord Skidelsky]

I should like to make just one point. The noble and learned Lord, Lord Keen, came close to admitting that to put IPSO in the Bill was a mistake—I say came close to admitting—whereas it would have been perfectly all right to have just said, “the editors’ code”. There is something there to discuss, because if you call it the IPSO editors’ code, that looks as if you are favouring a particular organisation, rather than a code. The code is owned by the newspaper publishers; it is their code; we need to take that into account. It is less obnoxious just to have “the editors’ code”, than to have an organisation named in the Bill as the effective carrier of that code. I do not know whether the noble and learned Lord is willing to consider leaving out mention of the organisation. If so, it would be interesting to discuss how best to do that. I may come back to this on Report, but thank him very much for his speech.

Data Protection Bill [HL]

Baroness Hollins Excerpts

Committee: 6th sitting (Hansard): House of Lords
Wednesday 22nd November 2017 Lords Chamber

As to whether Clause 165 should remain part of the Bill, this has been carried over from the Data Protection Act 1998, which singled out the media for special provision of ICO funding for a complainant. Since the acceptance of the Act into law, this provision has not been used once. But, even if it were used, I would object to the clause singling out the media over any other processors of information. If an estate agent or a building contractor, or a member of any number of other industries, were to breach data protection law, the ICO would not have the ability to fund a complainant. I would ask the Minister to look again at whether Clause 165 is needed or whether it would be a threat to free speech.

[Baroness Hollins (CB)]

My Lords, I start by adding my strong support to the elegant amendments of the noble Earl, Lord Attlee, and thank him for his perceptive evaluation of the media storm about Section 40 of the Crime and Courts Act.

My Amendments 170K, 170L, 170M, 171A, 172AA, 172E and 174AA would remove the existing pre-publication staying mechanism currently available to data controllers when they may be processing data for special purposes. The old Data Protection Act required that a determination had to be made by the Information Commissioner before any data protection claim could be brought in court where data might be processed for journalism. This determination, set out in a “determination notice”, would specify whether the data was indeed being processed for the special purpose of journalism.

Any claim which might involve the special purposes could be stayed in this way. This means that someone has no way of accessing the courts to establish if such publication of their personal data was legal—for example, because it was in the public interest—until after it happened. In contrast, people can do this with a privacy claim—and the sky has not fallen in, nor has investigative journalism been affected. Data privacy claims should be no different.

The new Bill currently replicates the process that was set out in the old Bill. Unlike other areas of law, and unlike processing for other purposes, before any member of the public can bring a data protection claim in the courts against a data controller prior to publication, Clauses 164 to 166 of the Bill require the ICO to make a determination as to whether the data was being processed for journalistic purposes. This means that when an individual’s data rights are unlawfully breached for publication, without any public interest justification, they can do nothing to prevent use and publication of that data until the determination process is complete, with appeal. That data could include, for example, private medical records or financial transactions that expose deeply personal information.

In practice, this means that ordinary people are denied the right to challenge in court the legality of the data being processed prior to publication. Moreover, determination is slow. When the Information Commissioner produces the determination notice, it is then subject to appeal by the publisher. Lord Justice Leveson argued that this whole mechanism is wrong in principle, and that it should be removed. This amendment would have that effect, by removing journalism from those purposes to which the stay could apply. Publishers and the public would still have access to court action, and the courts could determine whether the material has been unlawfully processed and, if it has, whether publication is protected in the public interest under the existing exemptions in the Bill.

Journalistic exemptions in the Bill would be entirely unaffected by the amendments. Where breaches are in the public interest and undertaken for publication, journalists remain exempt from all the exemptions listed elsewhere in the Bill. That is right, and it will be protected. However, the additional stay, which prevents victims of data protection breaches by newspapers trying to prevent the damage that would be done by publication before they can argue their case in court, would be removed. In summary, nothing in the amendments will interfere with investigative journalism—that is not my intention. Because this is a complicated area, with many amendments to these clauses, I certainly stand ready to discuss with colleagues the best way forward in this area before Report.

My Amendment 179A would require the Government to proceed with a public inquiry into allegations of data protection breaches by or on behalf of newspapers. Such an inquiry would be similar to the already-agreed second half of the Leveson inquiry. In 2005 it was reported, though only in the Guardian, that thousands of individuals had had their personal data, including private phone data, stolen by or on behalf of newspaper publishers. Noble Lords will recall that Operation Motorman was the scandal that allowed phone hacking to occur, but it was far more widespread than just phone hacking. It affected tabloids and other newspapers alike. Data was illegally harvested by private investigators in the pay of newspapers and used for stories or to hack phones, often without any public interest justification. A whole industry of illegal data theft propped up the front pages and exclusives of some of our most powerful and recognisable newspapers for a decade.

The Information Commissioner published two reports on Operation Motorman, first, about this practice and, secondly, on the findings of the police investigation. These included the revelations that 58 clients or journalists working for the Daily Mail had used private investigators, and that 1,482 transactions were identified between the investigators and Mirror Group titles such as the Daily Mirror and the Sunday People. Rarely was there any public interest justification. For example, the victims of crime were targeted and their partners, their colleagues and even their painters and decorators were targeted, too. Some newspapers even rehired private investigators who had been convicted of illegal data handling.

This is not ancient history. The judge in the Mirror hacking civil trial ruled that the Daily Mirror, the Sunday Mirror and the News of the World used an entirely different set of private investigators hundreds, if not thousands, of times to steal phone billing data and “reverse phone numbers”, and that this was a precursor to hacking their phones. In a new civil action against the Sun, it is alleged that that newspaper continued to use a series of private investigators for illegal activities on an industrial scale all the way up to 2011, if not beyond.

A public inquiry, the Leveson inquiry, was established to investigate these matters, and I gave evidence to part 1. However, part 2, established to investigate the extent of breaches of data privacy and other illegality, and to investigate the cover-up of it, has still not taken place. This requirements of the amendment would be satisfied by the Government proceeding with Leveson part 2.

I believe I am not alone in your Lordships’ House in finding the Government’s positioning and repositioning on Leveson part 2 shameful. In 2011, when the scandal of hacking broke, the inquiry was established in two parts, the first to deal with regulation and the second to deal with illegality and allegations of corruption and cover-up. The Government claimed they were committed to part 2 of the inquiry once relevant trials had concluded. Those of us affected by this conduct took the Government at their word.

A few years ago, though, the Government began to revise their position following heavy lobbying from the press. After this House voted overwhelmingly in support of one of my amendments to the Investigatory Powers Bill last year, the Government faced the prospect of a Commons defeat and announced a consultation on Leveson part 2 on the day of that vote. That consultation was judicially reviewed by a victim of press abuse who had been promised by the Government that part 2 would happen. The Government defended that judicial review by claiming that they had an open mind on the matter of Leveson part 2, but within three months their party manifesto for the 2017 general election pledged to scrap Leveson part 2 altogether.

Today, we are no further forward. The Government have still not published the outcome of last year’s consultation. The integrity of the consultation was questioned, and the Government’s intentions were rather exposed by the manifesto commitment to scrap Leveson part 2, although I gather that Conservative Members of neither this House nor the other place were consulted. Nor were victims consulted, despite previous prime ministerial promises to them on this matter.

I see no alternative but to return to legislation and the role of Parliament to see that the Government stand firm on these matters and do not cave in to the press lobby. I hope colleagues will support this amendment. I would not of course return with it on Report should the Government proceed with Leveson part 2 with the agreed terms of reference before then.

[Lord McNally (LD)]

My Lords, this debate is part of the unfinished business of Leveson in relation to both Section 40 and Leveson part 2. As the noble Baroness, Lady Hollins, explained, we are having to do this not because we are hijacking the Bill but because the Government have used various devices to avoid their commitments on those parts of Leveson. It is unfinished business because sections of the press, for which the noble Lord, Lord Black, is an eloquent spokesman in this House, have deliberately tried to frustrate the will of Parliament. The noble Baroness, with telling eloquence, has spoken for the people who were hurt and damaged by the excesses exposed by Leveson. They do not feel that they have received either closure or justice; nor is there much evidence of the press mending its ways.

I was one of the privy counsellors who signed the royal charter. The coalition Government went out of their way to defend the freedom of the press. Looking back, it is easy to forget just how much public horror, distaste and loathing there was for what was shown to be happening by the Leveson inquiry. Frankly, a Government of the day who had not been interested in the freedom of the press would have had a free hand to deal with it in the most draconian way. So I sometimes resent—not speeches in this House, of course, although they occasionally refer to this—articles in the Times and other papers that see any amendment as an immediate attack on the freedom of the press. We who are tabling these amendments want to strengthen the freedom of the press.

The Conservative Government, freed from the constraints of coalition, have gone back on their word to implement Section 40 and dragged their feet about Leveson 2. They added insult to injury by including the IPSO code in their list of approved codes but ignoring the Impress code, which had been approved by the Press Recognition Panel. The noble Earl, Lord Attlee, explained very well how the charter would have given a defence in the David v Goliath contest often faced by the ordinary citizen.

We are in Committee, so we will listen to the Government’s response to the amendments moved by the noble Baroness, Lady Hollins, the noble Earl, Lord Attlee, and the noble Lord, Lord Black. We will then make our decision on issues to vote on at Report. I listened very carefully to the noble Lord, Lord Black, and, as the noble Earl, Lord Attlee, said, he gave us food for thought, although he often sounds like the boy who murdered his parents and then asked for mercy because he was an orphan. However, there are issues there that need to be considered.

My approach, and the two amendments that I have signed, come from a person whom I know that the noble and learned Lord, Lord Keen, knows very well: the man on the Clapham omnibus. My concern, so very well expressed by the noble Lord, Lord Colville, is that it seems to me, as the man on the Clapham omnibus, that to ask investigative reporters to get prior permission is counterintuitive. Again, I would be very interested to hear the Government’s explanation, particularly of Clause 164(3)(c), which my amendment would delete, and how it would impact on investigative reporting.

--- Later in debate ---

[Lord Keen of Elie]

The noble Lord makes a perfectly good observation about this provision. It brings me to one of the questions posed independently and neutrally by the noble Lord, Lord Stevenson, on whether the provisions of the Bill as drafted simply implement the provisions of the 1998 Act or extend its provisions. The answer is that they do not change the regime found in the 1998 Act except in respect of Clause 164(3)(c). I acknowledge the significance of that provision and I am happy to look again at that issue in light of the expressions of concern I have heard from around the Committee about it.

Some noble Lords also questioned the need for the provision of assistance in special purposes proceedings. Under Clause 165, individuals who are a party, or a prospective party, to special purposes proceedings may apply to the commissioner for assistance in those proceedings. For the application to be accepted, the commissioner must be convinced that the matter is of substantial public importance. There is, as I have implied, an equivalent provision in the 1998 Act. I understand that it has only ever been used once. In my respectful submission, that in itself indicates the effectiveness of the provision. It is not necessary because people know it is there and can be relied on, but only if that very high test of substantial public importance is met. Therefore, we consider it appropriate to retain this as a safeguard for data subjects. It is, I respectfully suggest, an important contributor to maintaining the balance between privacy and freedom of expression that has to underlie all these provisions.

Amendment 179A, spoken to by the noble Baroness, Lady Hollins, would require the Government to establish an inquiry with terms of reference similar to those contained in part 2 of the Leveson inquiry, but in relation to data protection only. As I have mentioned, a consultation was launched to look at Section 40 of the Crime and Courts Act 2013, which also asked whether proceeding with part 2 of the inquiry was still appropriate, proportionate and in the public interest. As I stated previously, it is the Government’s intention to publish a response to that consultation by Christmas; therefore, we do not believe that this amendment is appropriate, given the decisions that are currently being taken on that matter.

[Baroness Hollins]

My Lords, the Minister stated that the response to the consultation will be published before Christmas. Can he further reassure the Committee that it will be published before Report so that noble Lords can reconsider their amendments?

[Lord Keen of Elie]

I am obliged to the noble Baroness. It is the Government’s intention that the consultation response should be published before Christmas. I cannot say that it will be published before Report but we will keep noble Lords advised of any decision with regard to a specific date for publication.

[Baroness Hollins]

If is not to be published before Report, would it be possible for me to meet the Minister to discuss these matters?

[Lord Keen of Elie]

I am certainly open to any meeting that the noble Baroness would wish to engage in to discuss these matters. In so far as I am able to inform her, and indeed the Committee, of developments, I will seek to do so.

Data Protection Bill [HL]

Baroness Hollins Excerpts

Report: 2nd sitting (Hansard): House of Lords
Wednesday 13th December 2017 Lords Chamber

[The Deputy Speaker (Baroness Garden of Frognal) (LD)]

My Lords, I have to inform the House that if Amendments 50 or 50A are agreed to, I cannot call Amendments 51 or 52 by reason of pre-emption.

[Baroness Hollins (CB)]

My Lords, the government amendment is excellent and I support it. However, it does not go far enough. I have therefore introduced a manuscript amendment.

My Amendment 50A would simply add two further provisions—my Amendments 51 and 52—into government Amendment 50, and would do no more than what Lord Justice Leveson recommended: to rebalance data protection law and prevent speculative trawling for stories. Operation Motorman was a police investigation in 2003, which I have mentioned before in debate, and it found that private data was being stolen on behalf of newspapers. That information, taken from private, medical, police, local authority, bank and many other confidential records, was used for stories or to hack phones. Those findings were considered by Leveson, who also reviewed the submissions of media organisations, and he was able to cut through some of the rhetoric—the kind of rhetoric that we have seen splashed across several newspapers today. He found that data protection law was fundamentally imbalanced in favour of publications at the expense of the public. That is not right. Just as the Human Rights Act strikes a balance between Article 10 speech rights and Article 8 privacy rights, so the GDPR obliges us to strike the same balance on data protection. This is not just following our own precedent; it is the right thing to do and is a legal requirement.

This amendment would implement some of Leveson’s recommendations. First, it would change the test for the exemption to apply to ensuring that the data processing in breach of the individual’s rights was necessary for future or continuing publication rather than undertaken just with a view to publication, as in the DPA and currently in the Bill. This is Leveson recommendation 48A and would protect the public from fishing operations when journalists process data without any specific intention to publish. Let me be clear: the data itself would not have to be published but the processing would need to have been done with an intention to publish—that is all. Secondly, this amendment would ensure that the exemption should be available only where the likely interference with privacy resulting from the processing of the data is outweighed by the public interest in publication. This properly strikes the balance between privacy and freedom of expression—this is Leveson recommendation 48C—and this balance is specified in the GDPR.

These amendments are the product of representations from all sides at the Leveson inquiry which sought a compromise—a way to protect the free-expression rights of publishers and to ensure that the public are protected. I thank the noble Lords, Lord McNally and Lord Stevenson, who have supported this amendment, and I also acknowledge assistance from a number of sources including the victim-representative organisation Hacked Off. I hope the House will support these reforms to bring balance to data protection law.

[Lord Brown of Eaton-under-Heywood (CB)]

My Lords, in this group of amendments I support government Amendment 50 and oppose, therefore, the plainly incompatible manuscript amendment to which the noble Baroness, Lady Hollins, just spoke. Its incompatibility is surely obvious. First, and perhaps most critically, in proposed new sub-paragraph (2)(a) it would substitute the words,

“necessary for the future or continuing publication”,

for the Minister’s words,

“being carried out with a view to the publication”.

There would be two important consequences of that. First, as the noble Baroness said, it would involve establishing the necessity of processing, plainly a steeper and more exacting test to be satisfied than the test of processing “with a view to” publication. I respectfully suggest that necessity is too high a hurdle to demand with regard to processing data in these most important areas of our life—journalism, academe, art and literature. Linked to that, the proposed change would seriously inhibit prepublication preparatory work, most obviously and particularly work of investigation and research with a view to publication but which may in the end never result in publication.

As the noble Baroness also rightly told your Lordships, the second change from the Minister’s draft is the proposed addition by her of new sub-paragraph (2)(c), which again is designed to stand as a possible obstacle to the journalistic processing of data. Essentially, I am sure it will be accepted that Amendment 50A attempts to tip the balance rather against journalists and others who are seeking to invoke these exemptions. They tend to introduce a presumption in favour of privilege whereas I suggest it ought properly to be a presumption in favour of freedom of speech.

I would respectfully remind the House of Section 12 of the Human Rights Act 1998, which is headed “Freedom of expression”. It basically forbids any restraint on pretrial publication unless the court or tribunal,

“is satisfied that the applicant is likely to establish that publication should not be allowed”;

and it requires that particular regard be had to the importance of the convention right to freedom of expression and, so far as journalistic, literary or artistic material is concerned, regard also to the extent to which publication would be in the public interest.

I respectfully urge the Minister to stick with his draft, brought before us in the shape of Amendment 50.

--- Later in debate ---

Tabled by

[Baroness Hollins]

50A: Schedule 2, page 142, line 1, leave out sub-paragraph (2) and insert—
“(2) Sub-paragraph (2A) applies to the processing of personal data carried out for the special purposes if—(a) the processing of the personal data is necessary for the future or continuing publication by a person of journalistic, academic, artistic or literary material,(b) the controller reasonably believes that the publication of the material would be in the public interest,(c) the likely interference with privacy resulting from the processing of the data is outweighed by the public interest in publication.(2A) The listed GDPR provisions do not apply to the extent that the controller reasonably believes that the application of those provisions would be incompatible with the special purposes.”

[Baroness Hollins]

My Lords, I want to take a moment to respond to some points made by noble Lords who do not support my amendment. I suggest that they protest too much. Some noble Lords have suggested that the necessary test is too high, but I stress that the amendment simply requires an intention to publish, not a requirement to publish. I also understand that in 1998 the noble Lord, Lord Lester, argued that the provision “undertaken with a view” was too speculative. He did not support it at that time, so it is surprising that he opposes my amendment today.

My advice from eminent lawyers is that these amendments do not in any way breach human rights law. Instead, they reinstate an equal balance between freedom of speech and personal privacy. Nor is there any reason why, for example, this amendment would require footage from Hillsborough to be destroyed. It would stop newspapers hanging on to data illegally for any unspecified period. That is just one of the good things this amendment would do. The amendments would not allow debate on necessity from the subject of a planned story. The subject would not know about it, and many journalists have commended the importance of these amendments.

I have thought about these amendments. I think there has been some wilful misrepresentation of the role of the Press Recognition Panel. None of the amendments in this or the later group would favour Impress over any other recognised independent regulator. The noble Lord, Lord Black, implied in Committee that he believed that IPSO would meet the Leveson criteria if it applied to the Press Recognition Panel for approval. It could move towards recognition, so to say that this is about trying to favour Impress is nonsense.

I remind the House that my family was subject to data-fishing trips with no genuine public interest. Have the media changed their behaviour? I suggest not and I give a couple of quick examples. IPSO is not the game changer that has been suggested. It is still not a very clean game. I remind noble Lords of a couple of front page code breaches followed by tiny footnotes for a correction with no equivalent prominence. “1 in 5 Brit Muslims’ sympathy for jihadis”.

“Queen backs Brexit”. These reflect some of the most important topics being debated in the country today, yet they are not corrected adequately. Or the Mirror front page: “Ebola terror as passenger dies at Gatwick”.

In fact, nobody had Ebola, there was no terror because nobody knew about it and it was not at Gatwick. The Mirror printed a tiny apology and IPSO did nothing about it. Or the lady who lost a huge amount of weight and agreed to a feature in a local magazine which described her successful weight loss. She said she had had to shower before she lost weight because she could not fit in the bath. The Daily Star picked up the story: “Too fat to wash! Grubby gran who weighed 27 stone didn’t bath for 20 years”. This was not true, was not the story and IPSO did nothing.

I have listened to the Government’s arguments. All that Amendment 50A does is to raise the bar for processing data to be “necessary” for an intended future publication. I am an academic myself. I argue that the ethical standard of the processing of personal data being necessary is a standard that is already in place in our universities. These are Lord Justice Leveson’s recommendations. He considered that the Data Protection Act was not in balance. I think that it is right that the public’s privacy rights and publishers’ free expression rights are properly balanced to protect the best of both. We will not make progress in achieving this balance by some of the hyperbole we have seen in the press and in the House today about these amendments. We will make progress by listening to all sides, considering the arguments and coming to a reasoned conclusion. That is what Sir Brian Leveson was appointed to do.

I have heard the suggestion of noble Lords that it is not the right moment to vote on this amendment and that there is going to be an opportunity to debate these issues further in the new year, by which time, perhaps, we will have the result of the consultation that was begun as an urgent 10-week consultation a year ago, on the day that a previous amendment in a similar vein was to be voted on in the other place. We have still not got the report from that consultation. I think I want to wait to see what is going to emerge from the consultation and I hope that it will be forthcoming before we reach Third Reading.

Amendment 50A not moved.

Data Protection Bill [HL]

Baroness Hollins Excerpts

Report: 2nd sitting (Hansard - continued): House of Lords
Wednesday 13th December 2017 Lords Chamber

Moved by

[Baroness Hollins]

53: Schedule 2, page 142, line 10, leave out sub-paragraph (3)

[Baroness Hollins (CB)]

My Lords, I thank the noble Lords, Lord McNally and Lord Blencathra, for supporting this group of amendments, which flow directly from three fundamental principles with which I believe the majority in your Lordships’ House will agree. First, we are entitled to the same rights over our personal private data as we are to our personal privacy and family life; secondly, a healthy democracy requires that journalists are free to expose corruption, incompetence or wrongdoing in high places; and thirdly, it is imperative that we protect citizens from those who might seek to abuse those protections and in doing so cause great personal distress.

Perhaps it would be helpful to offer some context here. Last week, several of the many foot soldiers who have assisted newspapers to obtain information illegally came into Parliament to describe the sheer scale of that abuse at a meeting for a group of parliamentarians. Two of them have written to noble Lords supporting these amendments. Their revelations were extraordinary, going far beyond what is in the public domain, and not just confined to tabloid newspapers. We heard how individuals of interest to the press were remorselessly targeted in the quest for stories—ordinary people, whose personal and private data was harvested and exploited, not to advance the democratic ideal of public interest journalism but to sell more newspapers. I do not know whether these practices have stopped, but new titles are still being implicated. Even if they have stopped, the competitive pressure on newspapers makes it possible that they will start again. We heard how hard it was for these whistleblowers to speak up and how others employed to engage in similar illegal practices have been silenced with money. I publicly applaud their courage and note the extraordinary stress and fear that they live under because of their positions. They were being employed to do illegal acts at the behest of newspaper proprietors and editors. It was not about freedom of speech—it was an abuse of power. The main perpetrators were not the foot soldiers, yet they are the most likely to be held to account. That is why we need adequate protection for the public, and for journalists, who may be prevented by the editors from speaking up.

The Bill quite properly imposes constraints on how businesses, institutions and even charities can use our private data, but it will allow the rules to be broken under certain circumstances. It is our responsibility to scrutinise the Bill to ensure that those who are permitted to break those laws—to breach the data privacy rights by which everyone else is bound—are in fact acting in the best interests of democracy and not simply on a journalistic whim: to put it crudely, a fishing trip, or something purely for personal or corporate gain.

In that spirit, this group of amendments would achieve a number of things: to address the current imbalance in the Bill whereby the newspaper’s right to publish overrides a citizen’s right to a private life; to enhance the protections in the Bill for public interest investigative journalism; to implement recommendations in the Leveson report in respect of data protection law; to protect the public from data misuse; and, finally, to provide an incentive for newspapers to sign up to an independent regulator so that the public can have faith that their interests are being safeguarded.

This group of amendments, working together, follows the recommendations of Sir Brian Leveson’s report in respect of data protection legislation, specifically the special purposes exemption and his recommendations to reform the Data Protection Act 1998 in line with public interest. When these recommendations were put to the Government in 2012, their response was to ask us to wait for the right legislation to be debated in Parliament. This is the right Bill.

Amendment 53 removes the existing clause in the Bill that gives the right to free expression precedence over the right to privacy. In Committee, the noble and learned Lord, Lord Keen, argued that removing the clause that elevates free expression above privacy would be incompatible with the GDPR. However, my advisers suggest that article 85 of the GDPR allows for exemptions only where they are necessary to reconcile the protection of personal data with the freedom of expression. There is no special importance for free expression; the rights must be balanced. Our default position must surely be compliance with the GDPR.

Amendments 54 and 56 are designed to ensure that when public interest is being considered for the purpose of the journalistic exemption, the codes assist journalists whether or not their publication is governed by one of the designated codes. The present wording would mean that, for example, a Guardian journalist—whose publication is not governed by any of the codes mentioned—would not have to consider any of them. Changing two of the words in the Bill—“must” to “may” and “relevant” to “appropriate”—provides more flexibility.

I move on to Amendments 59 and 64. Leveson said that, to protect investigative journalism and sources, all publishers should continue to enjoy several important exemptions. However, after hearing evidence from lawyers, newspapers and victims, Lord Justice Leveson concluded that a number of exemptions in the 1998 Act were superfluous to the purposes of investigative journalism and should be removed to protect the public from abuse, and could be done so at no risk whatever to genuine public interest journalism. These amendments offer a compromise.

Where Leveson recommended that certain exemptions be entirely removed—recommendation 49(a) to (f)—my amendments would retain them for newspapers that have demonstrated their commitment to accountability by joining an independent press self-regulator. Furthermore, having listened to the noble Lord, Lord Black, in Committee, I have tried to reflect his wishes by including some new exemptions in Amendments 60, 62 and 63 for such newspapers. Belonging to a self-regulator that has been recognised under the Leveson system is the mark of a publication that understands the need for independent, effective and transparent accountability. Such publishers should be entitled to the full list of exemptions, because the public can have faith in their commitment to public interest journalism.

However, neither we nor the public can have faith in publishers that continue to insist on marking their own homework. These amendments would allow those publishers to keep the exemptions necessary for genuine investigative journalism in the public interest and to protect their sources. But they would lose access to those exemptions that Leveson deemed to be superfluous and open to abuse.

Publishers committed to genuine investigative journalism have nothing to fear from these amendments. If they wish to enjoy access to the longer list, they need only join a recognised independent self-regulator or bring their own self-regulator up to the minimum standards of effective, independent scrutiny and redress that the public have a right to demand. I will not go through each of the exemptions to which publishers would lose access should they reject independent regulation as it would detain your Lordships’ House for too long—they are listed in the amendment itself. Moreover, they are listed in the Leveson report, and cover such basic requirements as for data to be kept accurately.

Amendment 217 would ensure that these provisions would be passed into law on Royal Assent, so that the Government could not use the same tactics of executive non-commencement as they have done previously, going back on commitments on press reform.

[Lord Black of Brentwood (Con)]

My Lords, in speaking to Amendments 59 and 64 I remind the House of the declaration of interests that I made on the previous group of amendments.

It will not surprise noble Lords or the noble Baroness that I am wholly opposed to these amendments, which are pernicious in their effect. This is because they fly in the face of the GDPR, which under article 85, as I understand it, mandates us to ensure that there are exemptions for journalistic activities. The amendments set their face against a successful domestic legal regime established by the 1998 Act which, thanks to the work of Gareth Williams and his colleagues on the Labour Front Bench at the time, has worked so effectively for two decades to balance rights to privacy and free expression. They single out legitimate journalism for special punishment in breach of the Human Rights Act. Above all they are simply a crude form of bullying—that is the best word I can use—to force the press into a state-sponsored system of regulation.

It is not only the national press that would be affected by the noble Baroness’s amendments but the whole of the local press, from the Maidenhead Advertiser—a great newspaper—to the Barnsley Chronicle, and many thousands of magazines such as Reader’s Digest, Country Life and Angling Times. It would also stifle international media, including the Wall Street Journal and Huffington Post. What these many thousands of publications have in common is not that they have been intruding on individual privacy, harassing people or anything of that kind, but simply that they do not want to be part of a system of regulation established by the state and changeable by politicians. They want to be part of a system of self-regulation which has existed in this country for 300 years.

That judgment has not been entered into lightly; it is a matter of deep-seated belief. Even Sir Brian Leveson, whose name has been bandied around a great deal in these debates, expressly acknowledged it as principled. It is also a choice which is entirely lawful. If these amendments were passed they would wholly undermine a fundamental tenet of public law—that it is unlawful to punish someone who has done nothing wrong. Given that the choice of publishers to be part of the Independent Press Standards Organisation and not of Max Mosley’s regulator is both principled and lawful, it is impossible to see how singling them out for special treatment could ever be compatible with the ECHR and the EU Charter of Fundamental Rights. I do not believe this House would want to put itself in such a position.

Nor should this House—the defender of our democratic values—want to introduce a legal regime which would undermine legitimate investigative journalism, and that is what these amendments would do. As we heard with the last group of amendments, journalistic exemptions are absolutely vital to enable investigation to take place and to develop. The Telegraph’s exposure of MPs’ expenses, for example, would have been impossible without these protections because it relied on handling of data. Is the noble Baroness really saying that she wants to put on the statute book laws that would make it impossible to subject this House to such scrutiny? I do not expect so.

These are contentious issues which arouse great passion, as we saw with the last group of amendments, which is one reason among many why they should not be played out in a highly technical Bill about data protection and one which is rightly constrained both by the terms of the GDPR and the Human Rights Act. The Bill as amended in Committee—building on the successful operation of the 1998 Act and making it fit for purpose in a digital age—is carefully crafted and balances rights to privacy with the equally fundamental right of free expression. It protects both individuals and free speech. The House will interfere with that balance, which is the foundation stone of our democracy, at its peril.

--- Later in debate ---

[The Advocate-General for Scotland (Lord Keen of Elie) (Con)]

My Lords, while we have already debated amendments that are challenging to a free press, I fear that this group of amendments would be potentially hostile to the concept of a free press. Where there are abuses the answer is to enforce the law, not to shut down the media. I adopt the observations of the noble Lord, Lord Pannick, and my noble friend Lady Wheatcroft in that regard.

Amendment 53 would remove the requirement to give special weighting to the public interest in freedom of expression and information. This is something that we consider an essential way of ensuring that information that is in the public interest is not buried due to the data protection regime that is put in place. In this context, giving special weight to the public interest in freedom of expression and information is an important way of ensuring that we provide constitutional protection of freedom of speech, as required pursuant to Article 10 of the European Convention and the Human Rights Act.

Amendments 54 and 56 relate to the codes of practice to guide journalists in conducting the essential public interest balancing test that has to be carried out. We have already debated this in the previous group, before the dinner break. Amendment 54 intends to take away the absolute requirement to have regard to the listed codes of practice when determining whether publication would pass the public interest test. This requirement is a way of strengthening the obligations on journalists. In line with the enhanced protection of the GDPR, we are making sure that those journalists who are covered by one of the listed codes must have regard to their relevant code.

In a related amendment, Amendment 56, the noble Baroness, Lady Hollins, has suggested that we alter the language of the condition on the special purposes exemption at paragraph 24 of Schedule 2 to the Bill by changing “relevant” to “appropriate”. This amendment makes it unclear which code should be consulted in a given case. We want to ensure that the code which pertains to a particular set of journalists is the code to which they have regard when carrying out the public interest test.

We are not being unreasonable in resisting Amendments 54 and 56. They may look innocuous, just slightly changing the language of the Bill, but if we are to be true to the GDPR, we must ensure that in our law we have resolved the article 85 requirement to set where the public interest lies in managing the balance between privacy and freedom of expression. If we make the use of these codes discretionary and their application vague, we will simply undermine that balance.

Finally, I turn to the amendments from the noble Baroness that aim to create a special group of exemptions only for those journalists who are members of an approved regulator. As drafted, the Bill is designed to protect journalists who should be able legitimately to rely on these exemptions when undertaking journalism in the public interest, regardless of which regulator they belong to or whether they belong to any at all. The reality of the press landscape today is that the vast majority of publishers are not members of an approved regulator. As such, limiting certain exemptions to only those who are members of an approved regulator would limit the ability of most journalists in this country to undertake investigative journalism in the public interest. Whatever the motive or the intention behind these amendments, they are, I am afraid, either wrecking amendments or amendments designed to force publishers to sign up to a regulator to which they object—and that is not acceptable.

Section 40 of the Crime and Courts Act 2013 was mentioned. As we have previously discussed, the Government are currently considering Section 40 with regard to part 2 of the Leveson inquiry. We do not believe that using data protection legislation is an appropriate means of trying to incentivise compliance with, for example, Section 40.

The noble Lord, Lord Stevenson, observed just three weeks ago, and earlier this evening, that this is not perhaps the place for this debate. He commented:

“I do not think the Bill is the right place to rerun some of the long-standing arguments about Leveson”.—[Official Report, 22/11/17; col. 195.]


I concur with that observation, which he just reinforced with his observations about the need for us perhaps to look more clearly at what the real issue is rather than being distracted by trying to act as tail-end Charlies to a particular piece of legislation on data protection.

There will be a response to the consultation on Section 40 and Leveson 2, but I shall make one comment with regard to the suggestion about delay in that consultation process. Noble Lords may recollect that the Secretary of State was the subject of a judicial review application which made it impossible for her to proceed with the consultation because the terms of the consultation were the subject of legal challenge. Thereafter, when the consultation proceeded, there were more than 174,000 responses. They had to be analysed and considered, but the fact that there was that number of responses perhaps gives weight to the observation of the noble Lord, Lord Stevenson, about there being an issue that needs to be addressed, and therefore we must look forward to the response to the consultation. I invite the noble Baroness to withdraw the amendment.

[Baroness Hollins]

Before the Minister sits down, will he confirm that he will reflect on this debate, which has been very important, and in the light of the promised consultation report allow the debate to continue in the new year?

[Lord Keen of Elie]

I cannot guarantee the continuation of this debate, although the noble Lord, Lord Stevenson, appears determined to see it continue in the new year, under reference to his Amendment 165, and I look to engaging with him in a further interesting discussion on the topic at that stage. Beyond that, I say to the noble Baroness that the Government and Ministers are listening and considering these issues.

--- Later in debate ---

[Lord Keen of Elie]

The position with regard to the consultation and the response to the consultation is as I indicated before the break. Sir Brian Leveson has, very properly, asked to see material pertaining to the consultation and the responses to it because he is a necessary party in this context. Until he has had a reasonable opportunity to do that, it would not be appropriate for us to respond.

[Baroness Hollins]

My Lords, I would like just to make one or two corrections for the record. The noble and learned Lord suggested that the amendment, which would reserve some exemptions for newspapers signed up to a recognised regulator, would actually prevent the majority of journalists from engaging in investigative journalism. That is not the case. The exemptions required for investigative journalism remain intact for all journalists, regardless of their regulator.

There are one or two other corrections. The noble Lord, Lord Black, continues to misrepresent the establishment of the Press Recognition Panel, for example by saying that it is subject to interference by the Secretary of State. That is just not the case. It is so patently untrue that I can only assume that the noble Lord has not researched the facts, because it is a point that he has made before.

With respect to my noble friend Lord Pannick’s faith in the legal profession being able to sort out any illegal acts by newspapers, I will just say that affording the money to pay a lawyer and the time to mount a legal claim is not usually possible or a priority for victims of press abuse, particularly when they are in the midst of personal trauma. It is just not a priority. I personally would prefer that newspapers behaved themselves and did not fill lawyers’ pockets with money.

I take exception to being described as a bully. I have heard no compassion or concern for the victims of press abuse. Do noble Lords have any idea what it is like to be bullied by newspapers day after day after day? Any idea at all? To call my amendments bullying is unforgivable. Imagine the effect on the lady I spoke about before, who had lost weight and was described as a “grubby gran”. Imagine what that did to her mental state. I wonder whether she has been able to retain her weight loss.

This is the right Bill for these amendments. They are amendments to data protection legislation, and the victims of press abuse have waited a considerable length of time for an opportunity to take them forward. They are not hastily drawn-up, but the result of an extensive and impartial inquiry, and are as relevant today as they were in 2012. Sir Brian Leveson’s recommendations relate to the processing of data, not to the medium of publication, so it is irrelevant that the media landscape is changing.

I am grateful for the contributions of noble Lords who have spoken, in part because they demonstrate just how much there appears to be two parallel worlds. I assure your Lordships that I will return to this matter, but I beg leave to withdraw my amendment.

Amendment 53 withdrawn.

Data Protection Bill [HL]

Baroness Hollins Excerpts

Report: 3rd sitting Hansard: House of Lords
Wednesday 10th January 2018 Lords Chamber

Moved by

[Baroness Hollins]

127A: Before Clause 137, insert the following new Clause—
“Inquiry into issues arising from data protection breaches committed by or on behalf of news publishers
(1) The Secretary of State must, within the period of three months beginning on the day on which this Act is passed, establish an inquiry under the Inquiries Act 2005 into allegations of data protection breaches committed by, or on behalf of, news publishers.(2) The inquiry’s terms of reference must include, but are not limited to,— (a) to inquire, in respect of personal data processing, into the extent of unlawful or improper conduct within news publishers and, as appropriate, other organisations within the media, and by those responsible for holding personal data;(b) to inquire, in respect of personal data processing, into the extent of corporate governance and management failures at news publishers;(c) in the light of these inquiries, to consider the implications for personal data protection in relation to freedom of speech; and(d) to make recommendations on what action, if any, should be taken in the public interest.”

[Baroness Hollins (CB)]

My Lords, some in this Chamber have taken the view that the Leveson agreement, which united all parties across both Houses just four years ago, has been overtaken by events and that yet another inquiry into press regulation is now needed. That is precisely the pattern of events that has followed virtually every single inquiry into press misconduct over the last 70 years, when Governments of both left and right have first prevaricated and then surrendered to concerted press lobbying, with missed opportunity after missed opportunity. Let us be clear where we are: Parliament has already legislated, with the help of a cross-party consensus, for much of the Leveson frame- work. We have a royal charter and a Press Recognition Panel, both following the Leveson recommendations. We have the establishment of a recognised press self-regulator, which meets the Leveson criteria. So a failure to fulfil the whole cross-party agreement does not represent a failure of the Leveson inquiry, or of the recommendations that followed, but rather of political courage to complete the jigsaw.

This amendment, tabled by me and supported by the noble Lords, Lord Stevenson, Lord McNally and Lord Lipsey, would require the Government to proceed with a public inquiry into data protection breaches at national newspapers. I am grateful for their support and for the encouragement I continue to receive from so many Members across your Lordships’ House. But a brand new inquiry is unnecessary, as the spirit of this amendment would be fully satisfied by the completion of the second part of the Leveson inquiry. That is my amendment’s intention, which is why the terms of reference specified in the amendment so closely resemble those of part 2 of the Leveson inquiry, within the scope of the Bill with respect to data protection.

There are three reasons why part 2, or a very similar inquiry, should go ahead. First, there is the sheer scale of unlawful conduct and the lack of any accountability. Secondly, there are the traumatic consequences for the many ordinary people who are victims. Thirdly, there are the ongoing implications for the conduct of powerful press organisations today. I shall deal with each in turn briefly.

Part 2 of the Leveson inquiry was designed to delve into the extent of criminality, its cover up, and the collusion between press and police, how it was able to persist, and who was ultimately responsible. We know, for example, that private data belonging to thousands of individuals was illegally accessed on a more far-reaching scale, and in many ways more consequential, than in phone hacking. This type of data theft was rarely in the public interest and was therefore unlawful. We know that these activities were not restricted to the News of the World—far from it: they took place at the Mirror, the Sunday People and the Sun, while evidence has emerged that they took place at the Daily Mail, the Express and the Times as well.

A six-week civil trial of the Sun for four claimants, with 50 more following, is starting imminently, alleging widespread data theft from 1998 through to this decade and an illegal cover-up. There has still been no inquiry into this widespread illegal conduct, and the only senior newspaper executive held to account is Andy Coulson at the News of the World. If corporate misbehaviour on this scale had occurred in any other industry, our newspapers would quite rightly have been calling for heads to roll and for government to intervene.

It is perhaps unusual to mention this, but I have some special guests today who have been personally affected by the misuse of their personal data. I have not spoken personally before, and it is not easy to do so, but it seems that some people do not understand what goes on in our media. Members of your Lordships’ House may be familiar with some of the abuses and intrusions that my family suffered and know that I gave evidence to part 1 of the Leveson inquiry, but they may not be aware that our data rights were repeatedly breached by newspapers. One consequence of having your personal data stolen, and not knowing how, is what it does to your own behaviour. I actually withheld information about my daughter’s progress from close family and friends after her life-threatening spinal injury because I began to suspect people I knew of speaking to the media. I stopped trusting people, even people in my own family, my neighbours and my best friends. I did not trust them. I did not know about hacking and blagging. I actually used to joke about how I thought perhaps the journalists who sent flowers to the hospital every day had put a chip in them so that they could capture our conversations in the waiting room when my daughter was fighting for her life in intensive care. That is what I thought. My daughter’s story was primarily a good news story, the triumph of hope over adversity, a story of recovery, not tragedy, but we had to cope with frequent door-stepping and long-range lenses being used to steal pictures, and the intrusion went on for months and months.

At the time of my daughter’s injury, I was a university professor and the head of a prestigious academic professional college. I was amazed by the prevalence of plagiarism in the press. Plagiarism in academia is a dismissible matter. I had no idea, until my family was the subject of intense media scrutiny over many months, just how commonplace plagiarism is. Typically, one paper’s so-called news on Wednesday would simply be downloaded and reprinted, virtually word for word, in a second unrelated paper on Thursday and in another on Friday, and if the second and third papers added a couple of new words, they might even call it an exclusive. When I, as an academic, publish findings, they have to be accurate. One newspaper article had 28 supposedly objective facts, of which only two were correct. The noble Lord, Lord Black, will be pleased to know that the Daily Telegraph was the most restrained newspaper, but your Lordships’ House may be surprised to know that the only serious and accurate article about the implications of a high-level spinal injury for a pregnant woman was in Hello magazine. It was a good article.

Data theft—often disingenuously referred to as leaks—also affects public bodies. I asked to see the Secretary of State in the Department of Health after a story about my learning-disabled son appeared in the Daily Mail. The account was uncannily similar to some evidence he had given in confidence to a government taskforce. The Secretary of State apologised and said it was the fourth data leak that month, but could not or would not tell me how this intensely private information came to be published in a national newspaper. I spoke about that to the Leveson inquiry. The response was that the information was already in the public domain. It was not, and my son was a vulnerable adult, and printing his photograph put him at risk.

Some people experienced much worse than this, and their names are etched in all our memories. Remember the heartache of the Dowler and the McCann families? Alongside other media assaults, these families had personal data stolen and processed by the media. There are countless other private individuals whose lives have been irrevocably changed by hostile and misleading reporting, often following data breaches through the theft of medical records, bank account details, phone numbers or other private data.

Before today’s debate, I met with Edward Bowles, whose 12 year-old son Sebastian lost his life in a bus crash in Switzerland. At a time of such trauma, his and his family’s suffering was made worse by the conduct of national newspapers which, in addition to repeated other intrusions, stole images of the family and published them without consent. These included images of Mr Bowles and his nine year-old daughter grieving after Sebastian’s death, and family photographs taken from Edward’s private Facebook account. Sebastian’s last personal messages to his family from the school’s website were obtained and published without even asking the family.

These data breaches were committed by newspapers with no public interest whatever and occurred in the middle of part 1 of the inquiry, when the press were supposedly on their best behaviour. This is why we still need to understand how such gross and widespread abuse was allowed to happen in the first place and to ensure that ordinary people are protected from those who steal private data to further their own corporate interests. We do not know how much improper and unlawful use of our data was going on, or may still be going on, because of a widespread cover-up. Corporate governance structures remain unreformed and many of the same newspaper executives remain in place.

I chaired a meeting for journalist whistleblowers before the Recess and we heard evidence of the kinds of data theft that they were commissioned to carry out by their editors in pursuit of stories with no public interest whatever. They were confident that these practices persist today, despite assurances from editors and proprietors that those days are gone. Their stories deserve a wider audience. Part 2 of the Leveson inquiry would allow them to be told and allow us to understand from the past how we can better protect the public interests of both private individuals and journalists in the future. The Government have been consulting on whether to complete the Leveson inquiry since November 2016—over a year ago. It should never even have been a matter of consultation but simply a matter of good faith that an inquiry promised to victims of crime should be completed. The failure to go ahead brings public inquiries into disrepute.

It is time to stop prevaricating and act decisively. I hope the noble and learned Lord the Minister will be in a position to assure your Lordships’ House that he has a firm commitment to commence part 2 of the Leveson inquiry. Without such a promise, I intend to divide the House, and I hope the House will support both my amendments and the important amendments of the noble Earl, Lord Attlee, Amendments 147, 148 and 216, which are tabled as a package. I hope we will make serious and genuine progress towards independent press regulation today. I beg to move.

[Earl Attlee (Con)]

My Lords, I have Amendment 147 and the consequential Amendments 148 and 216 in this group. It may be convenient if I suggest to the House the choreography of how this group might work. The noble Baroness, Lady Hollins, has moved her amendment, which is what we are debating now and will decide on. I will speak to my amendments only once now, and other noble Lords can contribute to all the amendments being debated. I expect that the Minister will reply, the noble Baroness, Lady Hollins, will respond, and we will then deal with her amendment. After the formalities with other amendments, I will formally move my Amendment 147 and deal with any points arising from this debate in respect of it. I believe it is in order for noble Lords to make a substantive contribution after I move my amendment, at that time, but it may be more convenient for the House for noble Lords to do so now, during this current debate.

It goes without saying that I fully support the noble Baroness, Lady Hollins, in her Amendment 127A. We must get to the bottom of what has been going on. My amendments would incentivise media operators to sign up to an independent press regulator in respect of data protection claims. This is achieved in the same way as the yet-to-be-commenced Section 40 of the Crime and Courts Act 2013. My consequential Amendment 216 ensures that Amendments 147 and 148 come into effect on Royal Assent, and deny Ministers the discretion not to implement what Parliament might agree to, as has been done with Section 40.

--- Later in debate ---

[Baroness Hollins]

My Lords, I am grateful to the Minister for his thoughtful response and to noble Lords who have spoken. I was accused of bullying the press during the last debate on this Bill in December, and of harassment today—astonishing accusations under the circumstances. These amendments are designed precisely to provide access to justice and protection from the real bullies—the corporate publishers, the wealthy proprietors, their editors and their well-paid lawyers. Victims have to be psychologically very robust to take a case to court and to take on these bullies, and most choose not to. My family chose not to.

These amendments are about providing accountability and curbing the abuse of power through understanding the extent of the data breaches that have taken place, and I believe—and I am not alone in believing—that we have seen only the tip of the iceberg. Journalist whistleblowers speaking to Members of your Lordships’ House before Christmas gave us good evidence that data breaches continue.

To the noble Lord, Lord Pannick, I say that if newspapers took data breaches seriously they would be clamouring for the Leveson inquiry to be finished, to get to the bottom of it. I would ask: why have the Mirror Group and other newspaper groups been trying to cover up for so long if they are committed to reform? If Sir Brian Leveson were to advise that part 2 is not needed, it would be easy enough for this clause to be removed later.

I am sure that we are united in wanting high-quality news provision. There are many challenges to achieving this, whether in print or online. With no disrespect to the Minister, I suggest that my Amendment 127A provides just the incentive the Government need to focus their attention on unfinished business from the Leveson inquiry, as well as the serious longer-term issues mentioned in the debate. It would require—encourage—the Government to proceed with a public inquiry into data protection breaches by the media, whether this one or the existing part 2 of Leveson. It is mildly insulting to be told that my amendment is premature. Frankly, the Government have had long enough to think.

I spoke briefly earlier about some of the personal consequences of data theft for me and my family, and I want to bring your Lordships’ House back to a consideration of the victims. Nothing prepared my family for the media frenzy that followed my daughter’s life-changing injury, and it continued for months. The relentless intrusion, stalking and data stealing by the press was a life-changing experience for me. I once said that it was worse than adjusting to my daughter’s injury. Even 12 years later, new evidence is emerging about the probable theft of my daughter’s medical records. My eyes were opened to inaccurate, corrupt and illegal practice and yet the public still believe what they read. From the comments made by some noble Lords today, I sense continuing ignorance about the current low standards in some publications. It is very difficult to believe. I found it hard to believe what happened to me and what I see still happening to people today. It is hard to believe that it is really happening.

The Minister promises serious future attention. This is a Government whose intention was laid out in their election manifesto: to abandon part 2 of the Leveson inquiry, which could have been well under way, and thus to abandon the victims of press abuse. The terms of the Leveson inquiry were established by Parliament for good reasons and they are as relevant today as they were six years ago. Leveson part 2 is overdue and it should begin without delay. It is an inquiry begun by government and delayed by government, hence the purpose of Amendment 127A.

Perhaps I could end by reflecting on the last time a Government failed to stand up to the power of the press. The Prime Minister at the time, Sir John Major, admitted to Sir Brian Leveson that it was a missed opportunity. We must not allow it to be missed again. Parliament could provide a little extra encouragement and support to government by agreeing to my amendment today. I wish to test the opinion of the House.

Data Protection Bill [HL]

Baroness Hollins Excerpts

Ping Pong (Hansard): House of Lords
Monday 21st May 2018 Lords Chamber

[Lord Cormack (Con)]

My Lords, I completely concur with that last sentiment. I hope we will not have a long debate this afternoon. I hope we will accept what the other place has said, and I hope we will therefore behave entirely constitutionally. I have high regard for the noble Lord, Lord McNally, and he knows that is genuine. However, I urge him, as the constitutionalist he is and I know him to be, and as the man who was such an effective spokesman for the coalition Government, to realise that we have come to the end of the road here. This House has asked the other place to think again. I did not want it to do it once more last week, but this House did, and by a fairly significant majority. However, 25 May looms, and it is important that this Bill gets on to the statute book. That does not mean that the issues raised by the noble Lord, Lord McNally, and my noble friend Lord Fairfax—in a fairly blistering opening to his speech—cannot be returned to again. Many of us have thought that this Bill was not the right one on which to hang these amendments. But again, that is over—we have had that debate. I hope now that we can proceed quickly to a decision, but that we will not need to do so in the Division Lobbies. I appeal to the noble Lord, Lord McNally, whom I regard as a friend. He said his piece very effectively, but I hope he will not press the amendment.

[Baroness Hollins (CB)]

My Lords, I have been proud to support the completion of the Leveson public inquiry, not just for the benefit of past victims, including my family, but mainly to prevent future victimisation. I make it quite clear that although I am disappointed, I reluctantly accept the decision of the other place that it does not wish to proceed with and complete a public inquiry. However, some of the misrepresentations about my amendment that were made in the other place were quite disappointing, and some speakers remained in denial about the continuing bad behaviour of some elements of the national media. So, to my surprise, since last week’s vote I have been approached by some Members from the other place who voted with the Government, to ask me not to give up.

Some noble Lords believe that my amendments have secured real progress in holding the press to account through the new government amendments. I have a more guarded response. I am very interested in the amendment in the name of the noble Lord, Lord McNally. It would prevent state interference in press regulation and appoint a truly independent reviewer, and would restore the place of the Press Recognition Panel—the PRP—without the Government directing it. I look forward to due consideration by the Minister of that suggestion.

What people want is an apology and a promise that it will not happen again. As a victim, a mother, a grandmother and a psychiatrist, I try to put people first. Instead, it seems that the focus is on money, with promises that the media will engage with IPSO’s low-cost arbitration scheme, which is just one of the 29 other equally important Leveson criteria for an effective regulator. In addition, it appears that the proposed review in four years’ time is being done in secret and with no clear criteria.

As always, I am willing to meet Ministers at the DCMS, IPSO and the ICO, and invite other victims to join me; and perhaps, one day, a victim-first approach will be embraced by them all. I say to the Government that despite their new provisions, they have let them get away with it again. However, now is not the time to press this further; rather, it is a time to watch and wait.

[Lord Falconer of Thoroton (Lab)]

My Lords, Amendment A3 in my name is an amendment to Motion A. I will speak to it now although it will be formally moved later.

I want to make two points, the first of which is to explain the purpose of my Amendment A3. Before I do so, however, I want to take up what the noble Lord, Lord, Cormack, said. He begged the noble Lord, Lord McNally, to withdraw his amendment, a point which the noble Lord, Lord Fairfax, made from a slightly different point of view. It is important to listen to what the noble Lord, Lord McNally, is saying—and I strongly support what he is saying. He accepts that in the context of this Bill, the question of Leveson 2 has effectively been decided. We have sent it back twice to the Commons and, first with a majority of nine and then with a majority of 12, the Commons said that it did not want Leveson 2.