Investigatory Powers (Communications Data) (Relevant Public Authorities and Designated Senior Officers) Regulations 2025

Lord Hanson of Flint Excerpts

Tuesday 1st July 2025 Grand Committee

Moved by

[Lord Hanson of Flint]

That the Grand Committee do consider the Investigatory Powers (Communications Data) (Relevant Public Authorities and Designated Senior Officers) Regulations 2025

Relevant document: 23rd Report from the Secondary Legislation Scrutiny Committee

[The Minister of State, Home Office (Lord Hanson of Flint) (Lab)]

My Lords, it is a pleasure to be here today to bring forward these regulations, which are enabled by the Investigatory Powers Act 2016, during the passage of which some nine years ago I recall sitting for many hours. The IPA provides a framework designed to protect the public by giving law enforcement and the intelligence services the tools they need to prevent, detect and prosecute crime. It also safeguards the privacy of individuals by setting out stringent controls over the way the IPA powers are used.

Communications data reveals the who, where, when and how of a communication but not, I emphasise, its content, such as what was written or said. CD is routinely relied on as evidence in 95% of serious organised crime investigations and has played a significant role in every major terrorism investigation over the past decade.

These regulations will update the public authorities listed in Schedule 4. Only those public authorities listed in the schedule are permitted to use the CD powers in the Act and therefore have the authority to compel communications data from telecommunications or postal operators. In addition to this safeguard, Part 3 of the IPA sets out the specific statutory purposes for which the communications data may be acquired by the relevant public authorities. The Communications Data Code of Practice provides guidance on the process of making a Part 3 application under the Act, which ensures that the power is used only when it is both necessary and proportionate. The IPA requires public authorities to have regard to the code in the exercise of their functions.

These regulations add 11 new entries to the schedule: the Intellectual Property Office, an executive agency sponsored by the Department for Science, Innovation and Technology; the Driver & Vehicle Standards Agency, an executive agency sponsored by the Department for Transport; the Security Industry Authority, an executive non-departmental public body sponsored by my department, the Home Office; Counter Fraud Services Wales, an organisation hosted by the Velindre University NHS Trust; the integrated corporate services counter fraud expert services team—a bit of a mouthful—situated within the Department for Business and Trade; the integrated corporate services counter fraud expert services team situated within the Department for Energy Security and Net Zero; the counter fraud and investigation team situated within the Department for Environment, Food and Rural Affairs; and the South East Coast Ambulance Service, the North West Ambulance Service, the West Midlands Ambulance Service and the East Midlands Ambulance Service.

Except for the four ambulance trusts, the public authorities to be added are all new entrants to the schedule and to CD powers. Following their addition to Schedule 4, the seven newly added public authorities will be able to apply for an independently approved authorisation via the Investigatory Powers Commissioner’s Office, which, if granted, can be used to compel tele- communications or postal operators to disclose CD for the purposes set out within their designation in Schedule 4. They will not be given the power to internally authorise CD applications.

The four entries relating to the English ambulance trusts retain their CD powers and the ability to internally authorise applications. The umbrella definition of “an ambulance trust in England”, which included a total of 10 English ambulance trusts, has therefore been removed and replaced with the four named individual ambulance trusts. Therefore, six English ambulance trusts will be removed from the schedule because they have confirmed to us that they no longer require those CD powers. The Welsh Ambulance Services NHS Trust and the Scottish Ambulance Service board will also be removed from the schedule, having confirmed that they no longer need to retain their CD powers.

This SI makes no change to the ambulance service in Northern Ireland and its designation in the schedule. The regulations will amend the Insolvency Service’s designation to include the Department for Business and Trade following the machinery of government changes. There is no change to the Insolvency Service’s ability to acquire CD for the purposes already listed in Schedule 4.

In summary, communications data is vital for evidence in criminal and national security investigations. These changes will enable the aforementioned public authorities —I have mentioned them in this introduction—to carry out and fully work through their essential statutory duties in order to safeguard the public from threats. I commend the regulations to the Committee.

[Lord Harper (Con)]

My Lords, I will not detain noble Lords for long. I have three questions for the Minister. First, I want a little detail on the process that is undertaken by the department. Who triggers the review into which organisations have these powers, whether that is as a result of requests from organisations that currently do not have powers but require them or whether it is a periodic review that the department will undertake? It would be helpful to know a bit more about the process.

Secondly, I have a question on the powers that are now given to the Driver & Vehicle Standards Agency, which is an executive agency of the Department for Transport. I have looked at those powers and at the other parts of the Department for Transport that have similar powers. They all seem very sensible, so I support the change that is being made. My question is on the Driver & Vehicle Licensing Agency, which is another executive agency of the Department for Transport. As far as I can tell, it does not have these powers, but I would have thought that the same arguments that apply to the DVSA—around public safety and the criminality involved in, for example, forging driving licences, which are important identity documents—would also require the use of communications data. Why has the DVSA been given these powers and not the DVLA? Surely the arguments for one are also true in the case of the other.

The other area is that provoked by the report from the Secondary Legislation Scrutiny Committee on the arguments around the ambulance trusts. It makes a reasonably coherent argument that there seems to be some inconsistency. I understand that organisations that require these powers must demonstrate that they have a compelling need and that they have appropriate compliance activities in place. It seems a little odd, therefore, that the powers are being removed from all the ambulance trusts in England. They are being restored for four of them but I do not understand, because there is no detail set out, what it is about those four that means that there are compelling needs that do not apply to the others. Also, of the four that are kept, only one had requested to keep the powers; the others had not expressed a preference. Given that organisations are supposed to have a compelling need in order for them to have these powers—I remember the debate when, as the Minister set out, the Investigatory Powers Bill was going through both Houses of Parliament; I was Chief Whip at the time—it seems to me that, in the case of three of those ambulance trusts, the compelling need case cannot have been made because they did not respond to say that they needed the powers. The powers appear to have been left with them only because they had not specifically said that they did not want them, but that does not appear to be the legal and policy test applied by the department. I would be grateful if the Minister could set that out.

I have a final point on resourcing. The instrument and its Explanatory Memorandum say that there is going to be an increase in requests made to the Investigatory Powers Commissioner’s Office because all these organisations will need approval to use these powers. The assessment by the department says that it expects those requests to be minimal, but it does not set out the basis on which it has reached that conclusion. Obviously, there are resourcing requirements that will flow from that, so it would be helpful if the Minister could set out the basis on which that conclusion was reached.

--- Later in debate ---

[Lord Davies of Gower (Con)]

My Lords, we on this side recognise the Government’s intention to update the Investigatory Powers Act introduced by the previous Government, and we are supportive of introducing measures that protect the public by giving law enforcement the tools they need to prevent and prosecute crime.

As noble Lords across the Committee are aware, technology is a fast-moving space. As society’s use of technology changes, it is essential that we adapt and it is imperative that our public authorities are fully equipped with capabilities to prevent criminals exploiting technology features, hiding their identity, evading detection and putting the public at risk.

This statutory instrument amends the Investigatory Powers Act by providing 11 new public authorities with the power to obtain communications data. Seven of the new public authorities listed will have the power to apply for an independently approved authorisation to compel telecommunications and postal operators to disclose communication data. The remaining four entries are English ambulance trust services that were previously designated under the definition of an ambulance trust in England, which included a total of 10 ambulance services in England. Under the changes, this definition has been removed and replaced with individual entries, as six of these ambulance services have confirmed they no longer require the communication data powers.

Following the Home Office’s review of Schedule 4, this instrument ensures that only public authorities with a need to acquire communications data will be able to request access. While we on these Benches do not oppose the amendments being made, we must question why certain ambulance services will hold the ability to retain this power over other ambulance services.

We recognise that some ambulance services should retain these powers, which may help in preventing serious injury or death, but we must consider whether the inconsistent treatment of ambulance services presents any future risks. We understand that access to communications data is useful for some ambulance services, but we must not rule out that others might require access in future. Can the Minister assure us that services requiring access in future will not be unduly limited or delayed if judged to be in the pursuit of legitimate public interest?

We recognise that these powers are necessary, but they need to be complemented by adequate resources if they are to be wielded effectively. Can the Minister therefore update us on what consultations his department has undertaken with the public authorities empowered by the regulations? Can he confirm that those authorities have adequate resources and legal advice on the use of the new powers?

We recognise that the addition of entries to Schedule 4 increases the demand and strain on the resources of the Investigatory Powers Commissioner’s Office. This concern has been raised in Brian Leveson’s annual report on the use of communications data. It is essential that the Government consider ways to reduce pressures on the operational effectiveness of the Investigatory Powers Commissioner’s Office. Can the Minister set out what steps will be taken to address this?

In conclusion, while we do not oppose the measures being introduced, we would like some reassurance that those ambulance services that have been excluded will not be disadvantaged in the pursuit of preventing injury or death. We urge the Minister to recognise the impact of the amendments on the resources of the Investigatory Powers Commissioner’s Office and ask for further clarification on how these authorities will be supported in exercising these powers in the interests of the public.

[Lord Hanson of Flint (Lab)]

I am grateful to noble Lords for the short and useful debate. As my noble friend Lord Jones, who I have known for a very long time, said, it is useful to challenge the Executive on a number of matters to date.

If I may, I will start with my noble friend Lord Jones, who made an all-encompassing comment regarding the Investigatory Powers Commissioner. The current IPC is Sir Brian Leveson. He will be well known to Members of this House and has served in a number of capacities, including as a High Court judge. The commissioner is assisted by a team of 13 commissioners, who must all have held senior judicial office. Together they are responsible for the use of investigatory powers by public authorities. They are supported by a body of civil servants, known as the Investigatory Powers Commissioner’s Office, which includes authorising officers and inspectors. Self-evidently, as I mentioned earlier, they were put in place by the Investigatory Powers Act 2016. Their responsibilities include a statutory obligation to inspect the use of certain investigatory powers and to exercise delegated functions, as part of which they independently review communications data under Section 60A applications submitted by public authorities.

My noble friend touched on a point raised by the noble Lord, Lord Harper, and the noble Lord, Lord Davies of Gower, on the budget. In the financial year 2023-24, the Investigatory Powers Commissioner’s Office operated within a budget of £15.74 million, of which it spent only £13.06 million. That was confirmed in the IPCO annual report 2023, which was published in May of this year. I hope that helps my noble friend.

I am grateful for his service, not just in both Houses but on the Intelligence and Security Committee, and for his kind words about my service. I hope that also answers in part the points made by the noble Lord, Lord Harper—who I will come back to in a moment—and the noble Lord, Lord Davies of Gower.

The noble Lord, Lord Harper, made a very valid point about what the process is for a public authority to be added to Schedule 4. Public authorities can be added to Schedule 4 either through primary legislation or by the use of a delegated power provided at Section 71. The delegated power provided at Section 71 provides that we have an enhanced affirmative procedure, which includes the requirement for a 12-week statutory consultation with the Investigatory Powers Commissioner.

The changes being made here are, in a sense, the result of the bodies themselves asking either to be included or removed from the Act. If they wanted to be added to Schedule 4, they had to supply a very comprehensive business case that officials in the Home Office have examined and evaluated in some detail. The Home Office has then had to include a 12-week consultation process with public authorities and the Investigatory Powers Commissioner. In this case, the consultation period for the new additions began on 23 October 2024 and completed on 17 January 2025. The IPC agreed that the seven public authorities had made a clear case for access, and the IPC response informed the Home Secretary’s policy assessment to include the amendments in the regulations that we have put before the Grand Committee today.

[Lord Harper (Con)]

I would be grateful if the Minister would allow me to probe this a bit further. To be clear, on the ambulance trust, given that the wide-ranging power for all ambulance trusts in England already existed in the schedule, what exactly was the trigger for a consultation? These trusts already had the power; this just changes the way the power has been described in the legislation. Further, if there was some kind of interaction between the trusts and the department and some trusts specifically asked for this, for those that did not, given that there was a conversation and a consultation process and there is supposed to be a compelling need, why has the power been left in place for those ambulance trusts that did not say they needed it?

[Lord Hanson of Flint (Lab)]

The noble Lord puts his finger on the point that, originally, all ambulance trusts were included in the schedule. As part of their general reflection, the six English ambulance trusts that are being removed by the regulations today specifically said they do not need those powers anymore. That left Scotland, Wales and Northern Ireland. Scotland and Wales equally said they do not want the power, so they are being removed, and Northern Ireland has not requested removal and therefore is in the schedule.

Of the four remaining trusts, one of them determined that it wanted to retain the powers under the Act. Again, as part of the consultation, that went through the Investigatory Powers Commissioner’s Office, which agreed. Three of the trusts did not respond to the Home Office in relation to the consultation and discussion that we had. They had not requested to be removed. We asked them if they wanted to stay on, and they have not responded. For the safety of the Home Office’s reputation and for the security of reducing risks, we have left them on, but we will continue to press them to ensure that, if they wish to be removed, they can be.

I have discussed already with officials that I think we should be going back to those trusts again. We can bring a further instrument forward, but I do not think it is appropriate that we take them off because they have not responded. There is an argument about whether they should have responded—that is a legitimate challenge to put to me and to the Home Office, and I am having discussions on it internally—but I do not want to take them off in case that decision was just a slip between cup and lip.

[Lord Harper (Con)]

I am grateful for that answer. I can certainly understand—and do not necessarily disagree with—a safety-first approach from the Minister. I have one further question: given that ambulance trusts broadly all do the same thing, has the Home Office or the health service undertaken any work to understand for what reasons those trusts that have wanted to keep the powers are using those powers, to test whether they are actually necessary? If they are necessary, for what reason do those trusts that do not want the powers, or have not asked for them, not need them? It does not seem entirely obvious why some ambulance trusts would need the powers and some would not.

[Lord Hanson of Flint (Lab)]

That is a fairly valid challenge. The decision to apply is for the ambulance trusts. They were initially all included. Some have determined that they have not used this power, and therefore they do not wish to have it any more. One trust has maintained the power because it wishes to use it, and three have not responded, so we have kept them on just in case because we do not want to risk operational errors.

The type of purpose that they could use it for may well be, for example, that an individual who comes into contact with the ambulance trust is in the middle of a mental health episode, is disorientated, does not know who they are and is not aware of where they are, what they have done or where they have been. There could be individuals who are involved in alcohol intoxication. There is a range of reasons why there might need to be access. As it happens, the vast majority of trusts have said they do not need or want this power. If one trust has said it wants to retain the power, it is reasonable that we assess that further downstream. But the determination is that the trusts themselves decide whether they want that power. Therefore, we are making sure that there are no operational risks in that.

On removing the authorities that did not respond, I am not particularly pleased that we did not have a response from three authorities—I will put that on the record. They should respond accordingly. But there is always the danger that, if we took them off now, they may end up using their powers without realising they do not have them any more. They may find themselves in a litigious position, and I do not want to see that either.

For the moment, that is a very valid challenge and this should be kept under review, but that is the logic behind it—if that helps the noble Lord.

[The Earl of Erroll (CB)]

In case it may help, I was involved in the original RIPA 2000 and discussions about this. I remember the whole thing about ambulances. The reason it was thought of then was vexatious 999 calls to the ambulance service. Obviously, that had happened somewhere, but, clearly, it does not happen in many areas, so they do not need this training. But, if it does happen in some areas, it is quite reasonable that it should be retained somewhere just in case, because it may need tidying up. It will probably depend on whether there are particular individuals in certain areas, and you may need to give the powers and take them away again. I seem to remember that that was one of the main reasons we gave it in the first place.

[Lord Hanson of Flint (Lab)]

I am grateful to the noble Earl for that intervention. The decision that the Home Office has taken is that it is for organisations to apply. With the ambulance trusts, once we have determined that we will remove the general exemption—because organisations have requested removal—we are then in a position to allow them to do that. Both noble Lords have made fair challenges on the assessment and oversight of that. Ultimately, the Investigatory Powers Commissioner is the determinant of that matter, and I am facilitating that process today.