Read Bill Ministerial Extracts
Lord Fuller
Main Page: Lord Fuller (Conservative - Life peer)Department Debates - View all Lord Fuller's debates with the Home Office
(2 months, 3 weeks ago)
Lords Chamber
Lord Blencathra (Con)
My Lords, identity theft, as my noble friend Lord Holmes of Richmond said, is no longer a niche crime; it is the dominant fraud type in the UK and getting worse. In 2024, over 421,000 fraud cases were filed to the national fraud database and almost 250,000 were identity fraud filings, making identity theft the single largest category recorded by industry partners. CIFAS, the credit industry fraud avoidance system, recorded a record number of cases on the national fraud database in 2024. The organisations themselves prevented more than £2.1 billion of attempted loss, yet criminals are shifting tactics. Account takeovers rose by 76% and unauthorised SIM swaps surged, driven by the rapid adoption of AI and generative tools that let fraudsters create convincing fake documents and synthetic identities at scale.
We have all read of some of the high-profile examples: celebrity impersonation via deepfakes and cloned voices has been widely reported; manipulated videos and voice clones purporting to show public figures from Elon Musk to Martin Lewis, Holly Willoughby and others, have been used to generate investment scams and phishing campaigns. Documented victim losses include large individual losses linked to celebrity impersonation scams. One NatWest customer is reported to have lost £150,000 after responding to a scam impersonating Martin Lewis.
However, I think we are all more concerned with the tens of thousands of ordinary people who are not celebrities and who lose all their savings to these crooks. They are the victims who suffer real financial loss and damage, with long and costly recovery processes, while businesses face rising prevention costs and operational strain. I therefore strongly support the concept of the draft clause and the need for it. While it is well intentioned, I fear that it has some technical difficulties. It is a bit broad and vague about what “obtains” and “impersonate” mean. It also risks overlap with the Fraud Act, the Computer Misuse Act and the Data Protection Act, and lacks some clear defences for legitimate security research and lawful investigations. It also needs to address AI and the deepfake-specific methods, and set out what we can do about extraterritorial reach, for example, or aggravating factors for organised, large-scale operations.
We all know that my noble friend Lord Holmes of Richmond is, as we have just heard, an absolute expert on AI; he recently addressed a top-level group of the Council of Europe on this subject. May I suggest that he and the noble Lord, Lord Clement-Jones, get together with the Home Office or other government digital experts and bring back on Report a more tightly drafted amendment? Among other things, it should tighten the definitions of “obtain”, “impersonate” and “sensitive”; ensure that the mens rea is tied to dishonesty or intent to cause loss or gain; include recklessness in enabling others; limit the scope to unlawfully obtained data or use that bypasses authentication; and explicitly include AI/deepfake methods when used to bypass checks or cause reliance. It should also have clear defences for lawful authority and make sure that duplication is avoided, whether it be with the Fraud Act, the Computer Misuse Act or the Data Protection Act. Finally—I know this is an impossible ask, and that Governments find it almost impossible to do—something should be done about extraterritorial reach, because that is terribly important.
I say to the Minister: there is a gap in the legislation here. We should plug it, and we may have time to bring back on Report a more tightly drawn amendment that would deal with all the concerns of noble Lords and the possible problems I have just raised.
Lord Fuller (Con)
My Lords, I rise briefly to support strongly the comments of my noble friend Lord Blencathra and the principle of the amendment laid by the noble Lord, Lord Clement-Jones. This is a timely amendment, possibly timelier than the noble Lord anticipated, because today the Government have announced the promotion of a Minister to promulgate digital IDs among the population.
Digital IDs are going to have a huge vista and connection, not just in linking to personal data but in other areas of life: in the relationship between the state and the individual; and in the payment of parking tickets, road tolls, stamp duty and fishing licences—a different sort of fishing, as it begins with an “f”, not a “p”. So I agree with the noble Lord, Lord Clement-Jones, on the thrust of the amendment, although I accept that some polishing is required.
If the Government are to promote digital IDs, the population at large need to have confidence not just that they will be correctly introduced but that there are safeguards against such impersonation. I strongly support the principle of this amendment and say to the noble Lord, Lord Hanson of Flint, that if the Government resist it in principle, what confidence can the man in the street have that the Government are sincere about the safeguards they intend to introduce, alongside their intention for digital IDs—to get that balance right between the state and the individual, coupled together against the criminal?
We need to bring this back on Report. I hope the Minister is prepared to meet the noble Lord, Lord Clement-Jones, and others to address this principle, so that the Government get off on the right foot, if they intend to promote digital IDs, and not resist this, because there is a world of pain if they do.
My Lords, I thank the noble Lord, Lord Clement-Jones, for tabling this amendment. I know that the creation of a specific identity offence has been a long-standing concern of his, so I appreciate the opportunity to contribute to this debate. I tentatively support the principle behind his amendment, although this issue is deserving of more scrutiny and thought than we are perhaps able to give it as an amendment in Committee.
I recognise the impetus for this amendment. Identity theft has long been the primary means by which criminals commit fraud; and, with a booming online world exacerbated by the introduction of artificial intelligence, digital identity theft is fast becoming a serious issue. CIFAS, the leading non-profit fraud prevention service, has documented the rise in identity theft. Last year, as we have heard from my noble friend Lord Blencathra, over 420,000 fraud cases were filed to the national fraud database, a 13% increase on the previous year. The main driver of this increase was identity fraud, with 250,000 filings, representing a 5% annual increase.
CIFAS cites online fraud as a primary cause of this increase; AI and generative technologies enable criminals to exploit people at speed and scale. Documents and identity cards are being forged at a more sophisticated level than before, with many now able to pass verification checks. Targets are often the elderly, as criminals target the least technologically capable and therefore most vulnerable victims.
Lord Fuller
Main Page: Lord Fuller (Conservative - Life peer)Department Debates - View all Lord Fuller's debates with the Home Office
(4 weeks ago)
Lords ChamberMy Lords, I started using a computer before 1990. I was one of those children who started using the BBC Micro—one of the best things the BBC ever produced. Indeed, I learned how to code—admittedly only in BASIC, but sufficient in the days when the internet had not even been created—to start working out how to use data in the computer system.
Unlike the previous amendment, I cannot say to the noble Lord, Lord Clement-Jones, nor indeed to the noble Baroness, Lady Doocey, that I would support them if they were to call a Division on this amendment. I completely agree with proposed subsections 2A(a) and 5A(a) that
“the person’s actions were necessary for the detection or prevention of crime”
but not this latter bit that they have lumped into it, saying that
“the person’s actions were justified as being in the public interest”.
I am a great believer in the public interest, but I find that it is being used now to try to justify too many things, including not releasing information from government. In fact, it would be contrary to the public interest, for example, to release information on some of the Bills that we are debating, not just today but at other times during this Parliament.
Let us just try to get a sense of what is going on with the Computer Misuse Act. Why was it introduced? It was introduced to stop manipulation. At what point does manipulation using computers become justifiable in the public interest? For some, that might be a whistleblower caveat. From what the noble Lord set out, I am not quite sure why this is the defining element. I am conscious that the Government may want to automate even more, so what is the balance with what is there to prevent crimes and similar? I appreciate that we do not want bureaucracy and legislation to get in the way of generally trying to stop harm, but what is the impact of the other elements of the noble Lord’s amendments? They could actually deploy harm while still trying to justify it in the public interest.
I appreciate there is sometimes a resistance to old legislation, but old legislation is not necessarily stuck in its time. There are many other Acts that go back hundreds of years that are still perfectly valid because the principles are the same. I would be concerned if we walked into allowing this amendment to go through without testing the opinion of the House to try to assess precisely what actions the noble Lord is trying to allow by making a case for the defence that something be done in public interest. That is why I express my concerns tonight.
Lord Fuller (Con)
My Lords, I will speak against Amendment 367. I have the gravest concerns about it. I am not going to echo everything my noble friend Lady Coffey said, but it amounts to a hackers’ charter. I take security and IT security very seriously. I am responsible for IT security in my business. We are in a sensitive industry—we are involved in global trade—never more so than today, when ammonia and natural gas are under global pressure as part of a war. You have to take these things seriously.
When I joined your Lordships’ House two years ago, there was a briefing and I was pleased that I was one of a handful of Peers and MPs who had a password manager. Every password I have is at least 16 characters—they are random and not one is repeated. You have to take this stuff seriously—no pet names, not using your wife’s name or possibly a wedding anniversary. Using a VPN is important as well.
No matter what precautions you take, however, someone is always going to have a go. What this amendment does is give the malevolent hacker a free pass to get through: a ready defence. It is not just that. We need to recognise that technology is changing all the time. All the things I may do with passwords are not enough. Even using face, voice, biometrics and two-factor authentication, cloned SIM cards or using public wifi to intercept signals are important ways in which even the most diligent and careful person can have their data compromised. There are people who want to abuse your privacy or insult your business. We can simply create a crime, but we must take a huge number of steps to avoid jeopardy or giving them a “get out of jail free” card.
In my view, this amendment would mean that, if somebody finds something, they get off, but if they do not find anything then they are guilty. All those years ago when I was at school, we were taught about trial by ordeal. If you gripped a red hot iron bar and you got blisters, you were guilty; if a lady was put on the ducking stool and she drowned, she was probably innocent. This is the sort of perverse outcome that this amendment would provide.
Further, it denies how technology is changing in so far as AI is concerned. In our minds, we have a spotty teenager hacking away at their computer, perhaps late into the night while playing Fortnite on the other screen. What this amendment does is give an opportunity for AI, mechanisation, and the industrialisation and automation of structured hacks on a phishing expedition—a mass insult or mass trolling to try to scrape as much as they possibly can. The public interest is in the eye of the beholder, and because there is no pure definition that is challengeable, and so one would have to go to the law or ask international lawyers what amounts to a statement of the law, we are going to get in a muddle.
I cannot support Amendment 367, not just because I think it is naïve, in so far as it is thinking about the individual at home, but because it fails to understand the way that technology is changing so rapidly—the industrialisation, AI and so forth, and the volume attacks. We cannot give a perverse incentive that allows those people with malevolent intent to get off while individuals, business and the economy, at home and abroad, are under attack.
Lord Cameron of Lochiel (Con)
My Lords, I am grateful to the noble Lord, Lord Clement-Jones, and the noble Baroness, Lady Doocey, for bringing back this amendment on Report. As was our position in Committee, we recognise the need to update the Computer Misuse Act 1990 and bring it in line with the online reality in which we now live, 36 years after the Act.
I am grateful that, in Committee, the Minister acknowledged the need for the Government to examine the pro-innovation regulation of technologies review by the noble Lord, Lord Vallance, and come to their own conclusions. He was right then that it is entirely reasonable to expect cyber security to be updated with the growth in internet use and the corresponding growth in cyber attacks.
Little more needs to be said, other than that we support the intentions of the noble Lord, Lord Clement-Jones. I hope that the Minister will be able to update the House on the changes to the Act that the Home Office has considered.
My Lords, I support my noble friend Lord Jackson. I was delighted to move the amendment in Committee in his absence and to attract so much cross-party support. We also had the support of the police, of the esteemed former Met Commissioner, the noble Lord, Lord Hogan-Howe, who I am glad to see in his place, and, as we have heard, from Dame Chi Onwurah, a very distinguished Labour MP.
As it is so late, I rise to say only that I agree entirely with my noble friend. The sight of distressed people in the Apple store, some from abroad, having to buy new phones and trying to get back into their accounts, affected me profoundly. It made me determined to change the incentive structure, both for criminals and indeed for retailers, which actually benefit from emergency sales of mobile phones. Given the degree of concern expressed across the Committee, at a much more civilised time, and the changes that my noble friend Lord Jackson has made to the amendment to try to meet any concerns, I very much look forward to a positive response from the Minister and to getting after this ghastly criminal operation.
Lord Fuller (Con)
My Lords, I will speak briefly to Amendment 368 in support of my noble friend Lord Jackson, because losing your phone is not just inconvenient. When your device is stolen, a crime has been committed, and operators have a responsibility to take a much more leading role in disincentivising the opportunities to steal, to make it a lot easier to reunite people with a phone that might have been lost and to discourage the black market in stolen goods.
It is a late hour, but I hope to tell a little uplifting story about my experiences today, because today I found a phone on the Tube as I got off at Westminster. It turns out that the gentleman sitting next to me, who had got off at Victoria on the way from Fulham, had left it behind. I am an honest chap. I had a look: it was a pink case with two phone numbers inside. I called them and there was no answer, but I texted them and, by and by, there was a response. To cut a long story short, the phone was reunited with the owner—perhaps, as I have the phone number now, I might send them the YouTube clip and possibly the Hansard as well. The phone was deposited at Westminster Tube with TfL staff, who were really good. They were actually really interested and keen to help this poor, unfortunate chap.
But what if someone had not been quite so honest? What if that phone number was not tucked inside the pink case? How would it have been secured and returned? I did not expect to talk to this group, but my experience today shows how important this amendment is. The man in the street should not rely just on the kindness of strangers. The phone companies should not make it harder to reunite; we should prevent the perverse incentives.
But there is another point. The phone is no longer just a phone. It is not just a device to doomscroll on late at night. It is not just a device to play “Candy Crush”. The phone is now a token—part of our security infrastructure and part of the devices that secure our economy. I do not believe that this has been fully understood. I got locked out of my parliamentary account the other day, and because I had left my phone behind, I could not do my work, neither my commercial work nor the work associated with this House. I do not think that the penny has quite dropped with the operators to recognise that they are now part of the security infrastructure of our economy. It is not just the inconvenience of losing a phone and queuing up, as my noble friend says, in the Apple store to replace it; this is part of the technological infrastructure of our nation. Technology has moved on, and the phone companies must do so too.
Lord Fuller
Main Page: Lord Fuller (Conservative - Life peer)Department Debates - View all Lord Fuller's debates with the Home Office
(3 weeks, 2 days ago)
Lords Chamber
Lord Young of Acton (Con)
My Lords, I support Amendment 387B. I declare my interest as a director of the Free Speech Union.
I am grateful to the Minister for summarising the final report of the College of Policing and the National Police Chiefs’ Council on non-crime hate incidents, for the courtesy he has shown me and the co-sponsors of this amendment in the run-up to this debate, and for arranging for me and others to be briefed by Sir Andy Marsh and his team at the College of Policing about the recommendations in the final report, which I will get to shortly.
As I made clear to the House in Committee, I have long-standing concerns that the investigation and recording of non-crime hate incidents has been a huge waste of police time and had a chilling effect on free speech. According to a report for Policy Exchange published in November 2024, police in England and Wales are spending an estimated 60,000 hours a year investigating and recording NCHIs—non-crimes. That is time that could be spent solving actual crimes. Based on FoI requests submitted by the Telegraph and others, the Free Speech Union estimates that over a quarter of a million NCHIs have been recorded since they were first introduced in 2014, and that is in England and Wales alone. That is an average of more than 65 a day.
Why so many? Because if a hate incident is reported to the police by a member of the public, they have little choice but to record it as an NCHI. All that is required is that the victim, or indeed any witness, believes that the incident in question was motivated by hostility towards one or more of the victim’s protected characteristics. No additional evidence is required. Examples include a man accused of whistling the theme tune to “Bob the Builder” whenever he saw his neighbour, a woman who said on social media she thought her cat was a Methodist, and two schoolgirls who told another girl in the school playground that she smelled like fish.
It is hard not to laugh, but for the people who have had NCHIs recorded against them it is no laughing matter. If you apply for a position or a voluntary role that requires you to carry out an enhanced Disclosure and Barring Service check, an NCHI can show up on your record. That is why I say that NCHIs have had a chilling effect on free speech. People are rightly concerned that, if they say something that another person takes offence at, it can permanently blot their copybook and may prevent them getting a job as a teacher or a carer, or volunteering at a charity like the Samaritans. There is also the broader concern that the amount of time the police are spending on investigating and recording non-crimes is undermining public confidence in the police.
That is why I welcome the recommendations that the Minister has shared with us. It sounds like we have finally seen the back of NCHIs—something that the Free Speech Union has been campaigning for for six years now. Assuming that the National Police Chiefs’ Council and the Secretary of State sign off on these proposals, the kind of incidents that were recorded as NCHIs in the past will in future be recorded, as I understand it, as anti-social behaviour incidents, and only those that meet the higher threshold—that is, that recording the incident is considered necessary for the prevention or detection of a crime or for another policing purpose, and it complies with the new recording guidance.
I am particularly encouraged by what we have heard about the new guidance. We have been assured that it will have due regard to the right to freedom of expression and in that way, we hope, protect the police from being dragged into bad-tempered arguments on social media as well as petty disputes between neighbours. In future, if someone calls a control room to complain about a supposedly offensive remark they have seen on Twitter or overheard across the garden fence, the call handler can say, “I’m sorry, but that’s not a policing matter”. That is all to the good, and I take this opportunity to congratulate the College of Policing and the National Police Chiefs’ Council on producing such a sensible report. This is a welcome dose of common sense that I hope will go some way to restoring public confidence in the police.
Nevertheless, I do not intend not to press the amendment. Our amendment would not prevent the police recording incidents where doing so served a legitimate policing purpose, even in some circumstances logging those incidents on an intelligent management system. Noble Lords, including the noble Baroness, Lady Brinton, raised concerns about that during the debate in Committee, and we have adapted our amendment accordingly.
To be clear, this amendment will not prevent the police recording incidents involving a hate element for intelligence-gathering purposes. However, I still have concerns that historic NCHIs could show up in enhanced DBS checks. That is why proposed subsection (5) in this amendment says that the police must not disclose historic NCHIs that would not meet the new higher recording thresholds. I think your Lordships would agree that data entries that would not be made under the new regime, but which are hanging around on police computers, must not be disclosed in enhanced DBS checks.
I have reluctantly come to accept that asking the police to comb through their databases and delete historic NCHIs that would not meet the new recording threshold would be too resource-intensive because of the sheer number that had been recorded, and that demand no longer appears in our amendment. Nevertheless, proposed subsection (5) says that any NCHIs that police come across that would not be recorded under the new regime must be deleted. I do not think that is a big ask, and it would enable people who believe NCHIs have been recorded against their names—trivial incidents that would not be recorded under the new criteria—to ask the police to delete them.
I welcome the assurance that the new recording guidance will have due regard to the right to freedom of expression, but, in the absence of putting any of these recommendations in statute, what guarantee do we have that the College of Policing, under new leadership, or a different Home Secretary, would not dispense with that requirement? Consequently, proposed subsection (4) in the amendment says:
“Guidance in relation to incident recording must have due regard to … freedom of expression”.
That brings me to a broader point. As I understand it, the Government’s plans for taking forward these recommendations—assuming they are signed off—is to include them in guidance, but not statute. The government amendment in this group will repeal the statutory basis for the current NCHI regime, thereby clearing the ground for a new regime to spring up in its place. But that new regime will be wholly reliant on guidance. I do not doubt the Minister will do what he has said he will do with the full support of my noble friend Lord Herbert, the chair of the College of Policing, Sir Andy Marsh the CEO and the chief constables on the national council. But what about their successors? What happens if a more authoritarian Government replace the current one?
The only way to future-proof these recommendations, to guarantee that this new, more sensible arrangement is not short-lived and that NCHIs do not spring back to life, Freddy Krueger-like, in a few years’ time, is to give the new regime some statutory underpinning. Proposed subsection (1) in this amendment drives a stake through the heart of NCHIs and makes sure they cannot be resurrected in the absence of primary legislation to the contrary. No Parliament can bind its successors. Indeed, if the Home Secretary wants to take up some, but not all, of the report’s recommendations, the Government could amend this amendment at Third Reading. In the meantime, I urge them to support these sensible suggestions and put them on a statutory footing.
In my view, too many of the rules governing how public authorities behave are found in guidance when they should properly be in statute. Indeed, the current NCHI regime, which I think we are all agreed is not fit for purpose, emerged from guidance issued by the College of Policing in 2014 and was not put on a statutory footing until 2022, by which time it was too late for Parliament to wrest control over it. A bureaucratic leviathan had been created in the form of ever more voluminous guidance. Let us not make the same mistake again. Something as important as what incidents reported to the police are investigated and recorded and, in some cases, disclosed in enhanced DBS checks is properly a matter for Parliament, which is why I urge your Lordships’ House to support this amendment.
Lord Fuller (Con)
My Lords, as the leader of the local authority, I had to address a public meeting in Wymondham in Norfolk at least 10 years ago, I cannot quite remember. It was about providing accommodation in the local plan for Gypsies and Travellers. I see here in the Chamber this evening at least four former council leaders, and I hope they will sympathise with the dilemma I faced. It is a thorny subject. Not many people have sympathy for Gypsy and Traveller families, but it is one of those hands you are dealt when you become a leader. The meeting was highly charged. I was in the lions’ den, but at least I was able to rely on a briefing from the council solicitor and monitoring officer as to what was the safe ground: the procedure about the local plan, the process about assessing needs, the duty to balance the needs of the settled and travelling communities and the obligations to follow the law. My job was to hold the ring.
I do not think I made any friends that evening, but I was the messenger for a law that not everybody appreciated. But, if the council did not follow the law, who else would? I got out alive and, in the circumstances, I think it probably went as well as it could have. The alternative was probably not to turn up, and that would not have been right at all. So imagine my surprise when I was called to a police interview a few days later to answer for a non-crime hate incident. I was supported by the council’s solicitor, who confirmed that, yes, I had accurately reported the process and the law at the meeting. Right was on my side. But that meant nothing. Perhaps someone in the audience that evening in Wymondham had hurty feelings. Perhaps they had an axe to grind against Gypsies and Travellers. Perhaps they were political opponents. Ironically, perhaps they were prejudiced against me.