Crime and Policing Bill

Baroness Coffey Excerpts

Wednesday 4th March 2026 Lords Chamber

I believe we must fill this gap now to protect the digital integrity of our citizens, to give the police the tools that they need and to send a clear signal that England and Wales will no longer be the easy jurisdiction of choice for identity criminals. I beg to move.

[Baroness Coffey (Con)]

My Lords, the noble Lord, Lord Clement-Jones, has got to the nub of an issue that seems to fall between a rock and a hard place. One of the issues that we face in terms of the crime survey, which is now being used by the Government as the primary way of deciding police resources, is fraud. Without doubt, the increasing use of digital identity will be the source of more fraud if we are not careful.

The Government seem to be in a predicament about whether to press ahead with digital ID more generally. We saw the resignation of a Minister at the weekend over their dubious ways of trying to challenge the credentials of a journalist assessing the organisation Labour Together. The Government have reappointed a Minister to undertake this task of establishing a digital identity card, which I am led to believe there will be a consultation announcement on within the next week. I hope that the Government are listening to the noble Lord by getting ahead of the issues that could come about with the mass spreading of digital identity.

I am very grateful to Nationwide, which rang to alert me to a fraud that was happening. I had used my card when I was abroad representing Parliament at the Parliamentary Assembly of the Council of Europe, and suddenly it was being used in a number of places to secure money. That is a reminder, as we move to this digital approach to money, with cash evaporating, that the last Government did a lot to try to protect cash and to make sure that it was still being used on a widespread basis, and I appreciate that. However, it would be useful to get a sense of what the Government are doing to tackle this very real threat of digital identity theft.

This is particularly pertinent because of the 10-year NHS plan—never mind the 10-year NHS cancer plan—regarding how much is being put into the hands of government. With artificial intelligence understandably being introduced to increase productivity and the deployment of public services, somebody’s identity is precious, and the validity and protection of digital identity can become an extraordinary challenge to somebody’s integrity.

The noble Lord, Lord Clement-Jones, supported by the noble Baroness, Lady Doocey, has set out a number of issues in a great deal of detail in Amendment 366, with the proposed new subsection (2)(b) defining what “obtains” would mean. I think it would be helpful to the Committee to understand what protections are in place or being planned by the Government not to mandate the use of initial identity but regarding what their desire is. Again, I understand the desire of the use for government, but what is good for government is also good for general commercial practice.

It would be helpful to get an understanding of why the Government are resisting the amendment—if the noble Lord tests the opinion of the House, I will vote with him in that Division—and a sense of where they believe they have sufficient protections in making this case. We have discussed identity, fake imagery and deepfakes quite a lot during the passage of this Bill. I seem to recall in the last general election that the now Prime Minister was, all of a sudden, in the middle of a deepfake situation, with comments attributed to him that were not made.

We can go further with how technology has advanced in that regard, but where would this go if we started using digital identity to register for elections? Where is this going when it is about accessing cash, frankly, from the Government? I know from running the DWP for three years that, unfortunately, people seem very determined to try to commit fraud to get money to which they are not entitled. But as we continue to try to use AI as a force for good, what are the Government doing to try to stop it being used as a force for bad?

I do not wish to labour the point, but the noble Lord has really hit on something. There is a gap. There is a desire by the Government to do this good, but I think the amendment would plug the gap very well. There are so many instances in this Bill and other Bills which are coming before the House where the Government want all sorts of powers just in case. This is not a “just in case”; this is a “waiting to happen”. It is happening now, so what are we doing to address it?

I go back to the fact that 40% of crime is due to fraud. Two-thirds of that is digital, online fraud. This is affecting not just people in this Chamber but people right across this country, and that is something that I hope the Government will consider carefully. If there was a vote, I would certainly support the amendment to make sure that the Government take note and actually get something done about this. I support the noble Lord’s amendment.

[Lord Davies of Gower (Con)]

My Lords, I thank the noble Lord, Lord Clement-Jones, for bringing back his amendment on Report. His Majesty’s loyal Opposition retain our support for his measures, and I thank him for continuing his campaign.

I understand that the Minister refrained from supporting the amendment in Committee for fear of unnecessary duplication of legislation. I gently urge him that this provides an opportunity for the opposite. It is common practice across Governments to use new legislation to amalgamate old pieces of legislation into a single draft. This seems the perfect time to do so with digital identity theft.

There is an array of Acts that creates a puzzle from which a digital identity theft offence appears, but it is somewhat distorted, if not fragmented. At least five Acts cover areas of digital identity theft; a wide purview is by no means a bad thing, but they were all designed for a different age. Just reading out the years of our primary Acts demonstrates this: 1968, 1990, 2006 and 2010. Even the Data Protection Act 2018, the most recent application, is for an era without AI.

It is not worth repeating the statistics that we have heard throughout the course of the Bill. A simple fact will suffice: 60% of all fraud cases are identity fraud, and the recent increase has been driven by the internet and artificial intelligence. The Government talk about being ahead of the curve on AI safety and online regulation. That is commendable, but to claim one thing and then refuse to act on it is not. I hope the Minister can at least acknowledge the scale of digital identity theft and its growing prevalence. If he cannot support it now, I hope that he will commit to look into it in the future.

--- Later in debate ---

I assure your Lordships’ House that Parliament will have the opportunity to fully scrutinise legislation introducing national digital ID. The system is expected to be rolled out by the end of this Parliament, and that will be the opportunity to consider these issues around digital ID in the round, also informed by some of the other actions I have talked about, including the forthcoming fraud strategy.

[Baroness Coffey (Con)]

I am actually very pro-digital ID, as long as it is not mandatory, but one of the things to improve take-up is the fear that people will have fraud committed against them. This amendment introduces an offence not necessarily to reduce the likelihood of that, but to provide potential weapons that can be used against criminal forces. That is why I am so keen on this amendment.

[Lord Katz (Lab)]

While I understand the point the noble Baroness is making, I do not want to presage the content of the fraud strategy, which will be upon us really quite soon, or indeed what is in the legislation that will introduce national digital ID. I absolutely take the point that some people want to encourage digital ID because it gives security of identity in a digital form for deployment in a number of different areas, whether claiming a benefit, voting or whatever use it may offer—I will stop there because my expertise on digital ID does not extend much further. All I will say is that, given the comments I have already made about the Fisher review and the forthcoming fraud strategy, which will address emerging fraud risks, including identity theft, I hope that the noble Lord is content to withdraw his amendment.

--- Later in debate ---

[Baroness Coffey (Con)]

My Lords, I started using a computer before 1990. I was one of those children who started using the BBC Micro—one of the best things the BBC ever produced. Indeed, I learned how to code—admittedly only in BASIC, but sufficient in the days when the internet had not even been created—to start working out how to use data in the computer system.

Unlike the previous amendment, I cannot say to the noble Lord, Lord Clement-Jones, nor indeed to the noble Baroness, Lady Doocey, that I would support them if they were to call a Division on this amendment. I completely agree with proposed subsections 2A(a) and 5A(a) that

“the person’s actions were necessary for the detection or prevention of crime”

but not this latter bit that they have lumped into it, saying that

“the person’s actions were justified as being in the public interest”.

I am a great believer in the public interest, but I find that it is being used now to try to justify too many things, including not releasing information from government. In fact, it would be contrary to the public interest, for example, to release information on some of the Bills that we are debating, not just today but at other times during this Parliament.

Let us just try to get a sense of what is going on with the Computer Misuse Act. Why was it introduced? It was introduced to stop manipulation. At what point does manipulation using computers become justifiable in the public interest? For some, that might be a whistleblower caveat. From what the noble Lord set out, I am not quite sure why this is the defining element. I am conscious that the Government may want to automate even more, so what is the balance with what is there to prevent crimes and similar? I appreciate that we do not want bureaucracy and legislation to get in the way of generally trying to stop harm, but what is the impact of the other elements of the noble Lord’s amendments? They could actually deploy harm while still trying to justify it in the public interest.

I appreciate there is sometimes a resistance to old legislation, but old legislation is not necessarily stuck in its time. There are many other Acts that go back hundreds of years that are still perfectly valid because the principles are the same. I would be concerned if we walked into allowing this amendment to go through without testing the opinion of the House to try to assess precisely what actions the noble Lord is trying to allow by making a case for the defence that something be done in public interest. That is why I express my concerns tonight.

[Lord Fuller (Con)]

My Lords, I will speak against Amendment 367. I have the gravest concerns about it. I am not going to echo everything my noble friend Lady Coffey said, but it amounts to a hackers’ charter. I take security and IT security very seriously. I am responsible for IT security in my business. We are in a sensitive industry—we are involved in global trade—never more so than today, when ammonia and natural gas are under global pressure as part of a war. You have to take these things seriously.

When I joined your Lordships’ House two years ago, there was a briefing and I was pleased that I was one of a handful of Peers and MPs who had a password manager. Every password I have is at least 16 characters—they are random and not one is repeated. You have to take this stuff seriously—no pet names, not using your wife’s name or possibly a wedding anniversary. Using a VPN is important as well.

No matter what precautions you take, however, someone is always going to have a go. What this amendment does is give the malevolent hacker a free pass to get through: a ready defence. It is not just that. We need to recognise that technology is changing all the time. All the things I may do with passwords are not enough. Even using face, voice, biometrics and two-factor authentication, cloned SIM cards or using public wifi to intercept signals are important ways in which even the most diligent and careful person can have their data compromised. There are people who want to abuse your privacy or insult your business. We can simply create a crime, but we must take a huge number of steps to avoid jeopardy or giving them a “get out of jail free” card.

In my view, this amendment would mean that, if somebody finds something, they get off, but if they do not find anything then they are guilty. All those years ago when I was at school, we were taught about trial by ordeal. If you gripped a red hot iron bar and you got blisters, you were guilty; if a lady was put on the ducking stool and she drowned, she was probably innocent. This is the sort of perverse outcome that this amendment would provide.

Further, it denies how technology is changing in so far as AI is concerned. In our minds, we have a spotty teenager hacking away at their computer, perhaps late into the night while playing Fortnite on the other screen. What this amendment does is give an opportunity for AI, mechanisation, and the industrialisation and automation of structured hacks on a phishing expedition—a mass insult or mass trolling to try to scrape as much as they possibly can. The public interest is in the eye of the beholder, and because there is no pure definition that is challengeable, and so one would have to go to the law or ask international lawyers what amounts to a statement of the law, we are going to get in a muddle.

I cannot support Amendment 367, not just because I think it is naïve, in so far as it is thinking about the individual at home, but because it fails to understand the way that technology is changing so rapidly—the industrialisation, AI and so forth, and the volume attacks. We cannot give a perverse incentive that allows those people with malevolent intent to get off while individuals, business and the economy, at home and abroad, are under attack.

[Lord Katz (Lab)]

My Lords, I am once again grateful to the noble Lord, Lord Clement-Jones, for his amendment and for returning to this very important subject. I am also grateful to the noble Baroness, Lady Coffey, the noble Lord, Lord Fuller, and the noble Lord, Lord Cameron of Lochiel, for contributing to this short but vital debate. I thank the noble Lord, Lord Clement-Jones, for taking the time last week to meet with myself and officials to discuss this issue.

Cyber security professionals play a crucial role in protecting the UK’s digital systems. I support the intention behind this amendment; we broadly agree on the benefits of introducing a statutory defence. That is why we have been developing a limited defence to the offence of unauthorised access to computer material, provided for in Section 1 of the Computer Misuse Act, that will allow trusted cyber security researchers to spot and report vulnerabilities in a responsible manner.

We have made significant progress in shaping a proposal, but some details, including ensuring adequate safeguards, still need refinement. To date, we have briefed over 100 industry and expert stakeholders, including both cyber security firms and system owners, to finalise the approach. Engagement to date has revealed strong support for reform, alongside clear calls to ensure that the defence is workable for a range of cyber security researchers. We will provide a further update once that work is complete.

The noble Lord, Lord Fuller, said that the principle of a limited statutory defence risks creating a hacker’s charter. I stress that we are working with the whole industry—including, of course, the system owners—to develop a nuanced approach that is future-proofed and allows for responsible work in this area.

I reassure the noble Lord, Lord Clement-Jones, that the Government intend to legislate for a statutory defence against Section 1 of the Computer Misuse Act once this work has been completed and when parliamentary time allows. We are not quite there yet, so this Bill is not the right vehicle, but we are committed to delivering a solution that is proportionate and practical for both researchers and law enforcement. Like his colleague on the Liberal Democrat Front Bench—the noble Baroness, Lady Pidgeon—did earlier, the noble Lord tempts me to somehow forecast what might be in a future King’s Speech. I cannot be that precise.

As a possible response, the noble Lord mooted the Cyber Security and Resilience (Network and Information Systems) Bill, which will be a carry-over Motion. I am not going to get into the detail of that tonight, but I am very keen that we stay in communication. The noble Lord has asked some complex questions. He is going to write to me, and I am very happy to respond in kind. In light of the progress we made at the meeting we had last week, and the progress we were making on developing a proposal that has acceptance across the industry and is future-proofed and nuanced—we are, of course, very keen to continue the dialogue—I hope the noble Lord will withdraw his amendment.

[Baroness Coffey (Con)]

The Minister just said that he will exchange correspondence with the noble Lord. Will he make sure that that is copied to everybody who is participating in this debate?

[Lord Katz (Lab)]

Yes.

--- Later in debate ---

[Lord Clement-Jones (LD)]

My Lords, I rise to support Amendment 368 from the noble Lord, Lord Jackson, on which he has campaigned so strongly. It addresses a crime that has become a blight on our streets: the industrialised theft of mobile devices. We must remove the profit motive from street crime. If a phone is useless the moment it is stolen, the thefts will stop. California proved it and the technology exists; the only thing missing is the will to legislate. I urge the Minister to move beyond collaboration and accept the amendment.

[Baroness Coffey (Con)]

My Lords, I agree with that proposal.

[Noble Lords]

Oh!

[Baroness Coffey (Con)]

It is the Government who have kept their Back-Benchers here at this time of night and kept the debate going. I am allowed to speak, am I not? The noble Lord, Lord Clement-Jones, sprang up before me. But for all the Back-Benchers complaining about people debating this important issue, it was the Government’s decision to keep the debate going to this point, and some of that is to prevent a Division on the matter.

I am trying to understand—a question that my noble friend and the noble Lord, Lord Clement-Jones, put so eloquently—why the Government are not accepting this amendment. They have given every indication that they will not. I appreciate that losing a mobile phone may be inconvenient, but the number one issue is the impact on tourism in London. It is why Sadiq Khan has painted up and down Oxford Street the words, “Don’t stand here”—because you might be attacked for your phone. It is ridiculous that, in our capital, the Mayor of London is painting these signs. It is all over the Tube as well that you might get your phone pinched. Yet the Government, for some reason, do not seem prepared to get tough with the mobile phone companies and prevent, as a former Metropolitan Commissioner has pointed out, a pretty lucrative business model which could be addressed—not just the thefts but the physical incidents that are happening, principally, though not only, in our capital—by taking forward my noble friend’s amendment.

It worries me that there is a risk of getting tribal on this, when we do not need to. Does the Minister want to intervene? I think she just said something from a sedentary position. I see she does not want to intervene. Does somebody else want to intervene? Was that the noble Lord, Lord Forbes? Does he want to intervene, with his experience of Newcastle? No, he does not want to intervene.

This is affecting not only citizens but tourists, and that has a massive impact on the attraction of our capital. The Government should be taking this issue a lot more seriously than they seem to be and trying to stop a crime that is one of the principal causes, in crime survey statistics, of people being frightened to go out and about on the streets of our capital city.

I am somewhat disappointed that this debate is happening close to midnight. I am conscious that Government Back-Benchers do not want to be here, and I can see that the Opposition Back-Benchers do not want to be here, but I do, because I care about people in our communities.

I appreciate that my noble friend will not want to test the opinion of the House tonight, but we must find a way to tackle this issue for the sake of everybody. Parliament must listen to the concerns of people across this country, and those trying to visit this country, and tackle something that has become so pernicious that it is a genuine threat to the prosperity of the many businesses that rely on people coming to this country and going out to enjoy themselves.

[Lord Cameron of Lochiel (Con)]

I thank my noble friend Lord Jackson for his amendment regarding cloud-based services and access restrictions for lost or stolen devices. As my noble friend said, a similar amendment to the one before us was presented in Committee, during which it was pleasing to see Cross-Bench support from noble Lords on this proposed solution to an increasing problem.

Mobile phone theft is now a high-volume and high-impact crime. It is particularly prevalent in urban areas, obviously, and can often cause distress to its victims, as well as financial loss. Rather than simply creating new offences or imposing more severe punishments, we must address the current incentives that sustain the criminal market for stolen mobile devices. As was our position in Committee, we must act to remove the profit motive that fuels this behaviour in the first instance.

Amendment 368 in the name of my noble friend Lord Jackson seeks to achieve that precise goal. By requiring providers to take reasonable and timely steps to block access to services once the device is verified as lost or stolen, stolen phones would no doubt be less valuable on the resale market. This would result in the substantial removal of the economic rewards that drive organised and individual phone theft. The blocking of access to cloud synchronisation and authentication services would plainly strip stolen devices of much of their value to criminals. Quite bluntly, this proposal has the potential, as we have heard from other noble Lords, to undermine the business model of those stealing phones.

The amendment would also build on important safeguards. It would require a verified notification, a mechanism for appeals or reversal in cases of error or fraud, and an obligation to notify both the National Crime Agency and local police forces, thereby strengthening intelligence. Of course we must recognise that any operational mandate of this kind must be technically feasible and proportionate—the Secretary of State must therefore set appropriate standards and timelines through regulation—but the principle behind my noble friend’s amendment is vital. If smartphones lose value as criminal commodities, the incentive to steal them will be reduced. We on these Benches give this amendment our fullest support, and I look forward to the Minister’s response.

[Lord Hanson of Flint (Lab)]

Once again, I am grateful to the noble Lord, Lord Jackson, for tabling this amendment. I begin by saying to the noble Baroness, Lady Coffey, in particular, but also to the noble Lords, Lord Fuller, Lord Hogan-Howe and Lord Jackson, and the noble Baroness, Lady Neville-Rolfe, that this Government take mobile phone theft seriously. That is why we have measures in the Bill to take it seriously, and why my right honourable friend the Home Secretary convened a mobile phone summit for the first time last year. That is also why we encouraged the Met to undertake its conference next week on mobile phone theft.

That is also why, in figures I can give to the noble Baroness, over the past year—the first year of this Labour Government—mobile phone thefts in London have fallen by 10,000, a reduction of 12.3% from the previous Government’s performance. It is a real and important issue. We are trying to tackle it and are improving on the performance from the time when she was Deputy Prime Minister. I just leave that with her to have a think about that, even at this late hour.

[Baroness Coffey (Con)]

So will the Minister accept my noble friend’s amendment?

[Lord Hanson of Flint (Lab)]

I will come on to that in a moment, if I may. I accept the principle of the work the noble Lord, Lord Jackson, is bringing forward, but I do not accept it in the context that the noble Baroness put it: that we are doing nothing. We are doing quite a lot. I say to the noble Lord, Lord Jackson, which is the important thing—

--- Later in debate ---

[Baroness Coffey (Con)]

I did not say that the Minister was doing nothing.

[Lord Hanson of Flint (Lab)]

The noble Baroness did, actually. She said that nothing was happening under this Government. Every Member on this side of the House heard her say that.

The hour is late so I will go to the nub of the issue, which is the amendment from the noble Lord, Lord Jackson. Law enforcement partners—the police and the Home Office—are taking robust action to drive down instances of mobile phone theft. We have delivered the most comprehensive, intelligence-led response to mobile phone theft, and Operation Reckoning, supported by the Home Office through the Metropolitan Police Service, is tracking down criminal gangs on this issue, going to the point the noble Baroness did not mention.

I agree that we need to take action to make sure the companies that design these devices provide services, play their part and do absolutely everything they can to ensure that a stolen mobile phone is not a valuable commodity and therefore not worth stealing, which was the very point the noble Lord, Lord Hogan-Howe, mentioned. Law enforcement partners—all of us in the law enforcement sector—are currently working in collaboration with technology companies and partners, including phone manufacturers, to look at the technical solutions, which, I must say to the noble Baroness, is something that the previous Government did not do. The Home Office is supporting this important work, and I thank everybody involved for their constructive engagement.

I say to the noble Lord, Lord Jackson, in particular, that it is our preferred approach to allow this collaborative work between mobile phone manufacturers, mobile phone operators, law enforcement partners and the Home Office to continue, so that we find a positive solution to this problem, rather than accepting the amendment before us today and mandating a specific, untested solution through legislation. It does not mean that we will not do this—we want to try to do it—but we have to make sure that we do it in a way that works, is sustainable and is in partnership with the mobile phone authorities. The approach we are taking will reduce the risk of legislation not achieving the desired output.

I want to be clear to the noble Lord that we are working on that now. If it does not work, and if we find blockages and we do not make progress, we reserve the right to look at any and all options. At the moment I cannot accept his amendment, because it would mandate us to do something, but we are already trying to work on this to make sure that what we do works. We are doing that in partnership with all those authorities. At the same time, we are doing practical stuff by tracking down people and putting more police on the beat, including the 13,000 neighbourhood police officers that we are introducing over the next few years. We are also ensuring that we take action through the Bill on tracking mobile phones and giving police superintendents more action. That is a positive programme of action. However, I cannot accept the noble Lord’s amendment and I ask him to withdraw it. If he does not withdraw it, I will ask my noble friends to vote against it.

--- Later in debate ---

[Lord Jackson of Peterborough (Con)]

Yes, I will. I do not want the noble Baroness opposite heckling. She has not been here for most of the debate. If she does not want to take part in an erudite, interesting debate on this issue, she could probably go elsewhere.

This is an important issue about people. The reason I got involved in this is because—as you do—I got into a discussion with a taxi driver. The taxi driver told me about picking up an American tourist, who was in floods of tears because her dream trip to London had been utterly ruined by phone theft. She was bereft and distraught. I then began to look at the excellent work that the Science, Innovation and Technology Select Committee had done. The fact of the matter is that there is no substance to the Minister’s assertion that the technical solutions are misplaced, not in place or not ready—they are. A number of the tech companies, such as Samsung and Google, have confirmed to the Select Committee that they are in place and that there is a technical solution to it.

[Baroness Coffey (Con)]

My noble friend is making a valid point. The reason I made the point I did earlier is because I understand that the Back-Benchers are irritated at being here at this time of night debating such an important issue.

[Noble Lords]

Oh!

[Baroness Coffey (Con)]

Well, that seems to be the case. My concern is that we hear about collaboration, but here is a tool that the Government can readily deploy, with the backing of Parliament, in order to strengthen their hand, and not wait for more time. I am conscious that all sides of the House want this to end. However, I have to say that the attitude so far has been that it is inconvenient to discuss this important matter.

[Lord Jackson of Peterborough (Con)]

I concur with the spirit of my noble friend’s observation.

I have given the Minister plaudits in the past for doing a very difficult job on marshalling the Bill through the House—his diligence, his hard work, his commitment to the Bill. We support many of the aspects of the Bill, and we believe his heart is basically in the right place. What frustrates us—he must understand this—is seeing that his own senior Back-Bencher, who chairs a Select Committee, is robustly critical of a senior politician such as the Home Secretary for her inaction, while bringing forward technical solutions in a non-partisan way with a multi-party Select Committee. I find it quite difficult to understand why the Government should not accept it, because, at the end of the day, the Government would get the credit from the people of this country for doing that.

However, I accept that the Minister feels constrained. I take him at his word that he will continue a proper, thorough dialogue with the tech companies, based on empirical data and facts, and talk to senior police officers—people who know about building out crime and designing out crime. I hope that a future Bill will be tabled and that the Government will feel confident enough to include a clause incorporating what we have discussed.

We are discussing this at 11.50 pm because some earlier amendments were debated at significantly greater length than we expected. I would have pressed this to a vote but, notwithstanding everything that has been said, I hope that the Minister will reconsider and talk to his colleagues. This is a very good proposal. It is not a Tory proposal or a Labour proposal, but a proposal that will help people. As my noble friend Lady Coffey said, it will do a lot for tourism and put us where we ought to be: as a pre-eminent technological superpower, doing something to change things for the better.

On that basis, I beg leave to withdraw the amendment.