The Parliamentary Under-Secretary of State, Home Office (Lord Bassam of Brighton): My Lords, I beg to move that the Bill be now further considered on Report.
Moved, That the Bill be further considered on Report.--(Lord Bassam of Brighton.)
The noble Lord said: My Lords, I am very much fortified by my success last night on a similar amendment similarly inspired by the notable Dr Charles Lindsey of Manchester University. I am trying yet again to convince the parliamentary draftsmen that they have their grammar wrong.
Clause 48(1) states,
13 Jul 2000 : Column 381
"Both" qualifies two subjects, not three. In any event, the two latter points,
Lord Bassam of Brighton: My Lords, I am, as ever, grateful to the noble Lord, Lord Lucas, for his tremendous concern for the English language and linguistic correctness, if I may so describe it. However, I am extremely puzzled by the amendment. My brief states:
Unfortunately, in attempting to correct the parliamentary draftsmen--as the noble Lord did so expertly yesterday--he has fallen into the trap of perhaps causing more problems than he has sought to solve. Subsection (1) of Clause 48 is the basic disclosure requirement. It requires persons to disclose a plain text version of the protected information. It also makes it clear that there is no legal obstacle to their using their own key to decrypt the information so that they are able to deliver the plain text. According to subsection (1), this requirement works only if three conditions are met. Effectively, by his amendment the noble Lord is asking whether we need all three conditions, and so it falls to me to explain them.
The first condition is that the person is in possession of the protected information--there is no argument between us on that. The second condition is that the person must have a means of obtaining access to that information. I think it is pretty obvious that the purpose is to make clear that a notice does not entitle the recipient to obtain access to the information. Noble Lords will recall that on Amendment No. 44 we explained precisely why we do not agree that there should be such a right. The third condition, in plain and simple terms, is that the person has the means of putting the information into intelligible form. I should be very surprised if the noble Lord intended that condition to be at all optional. A requirement to deliver plain text cannot properly work without all of these conditions being fully satisfied.
The noble Lord has rightly sought to correct an inadequacy in the drafting, but in so doing he has undermined the working principles behind the way in which we see the clause operating. Obviously I take the point about the drafting--perhaps we should look at that again--but I ask the noble Lord, having scored his instant hit yesterday after many years of trying, to withdraw his amendment.
13 Jul 2000 : Column 382
Lord Lucas: My Lords, I am not surprised. There are a couple of points that I still do not understand. If a person is in possession of the information, how can they be lacking a means of obtaining access to it in the way described by the noble Lord? Having listened to the noble Lord, would not it be sensible if the word "both" was left out?
I remain puzzled by the wording of the clause and the way it will work. But I shall not detain the House now; I shall study in Hansard what the noble Lord said. I beg leave to withdraw the amendment.
("( ) Where a person who has been given notice under section 47 believes that compliance with the notice will involve breaching a legal duty of confidentiality to another person, he may, within 24 hours of receipt of the notice, refer the notice to the Interception of Communications Commissioner who shall rule whether that person shall breach that other legal duty or whether the notice shall be withdrawn as disproportionate, having regard to the effects of the notice in either case.").
In these circumstances, they are extremely concerned, first, that they may face enormous legal challenges and, secondly, that their business will emigrate overseas. Any perception--and perception matters here quite as much as the reality--by customers and financial institutions that doing business in this country, in London or elsewhere, would be less secure because the confidentiality of encrypted messages was not protected as thoroughly as elsewhere could have a significant adverse impact on this country as a place to do business, particularly e-business, and on London's attractiveness as a financial centre.
Of course, to some degree it is a question of comparison of perceptions; that is one of the disadvantages of the Government's proud boast that they are in the lead in taking powers to tap the Internet in this way. That is why we have attempted in Amendment No. 56 to suggest what might happen when an organisation, a company or a person has been given a notice under Clause 47. If they believe that to comply with the notice will be to breach a legal duty of confidentiality to someone else, they should have
13 Jul 2000 : Column 383 somewhere to go--in the amendment we suggest the commissioner--to decide which of the legal obligations they should honour.
Where they are placed in the dilemma of whether to dishonour the legal obligations they have entered into with their customers or to disobey the legal notice with which they have been served, it seems to us that the commissioner--the judicial figure--would be the right person to decide which of those legal obligations should be carried out having regard to the importance of the case, the importance of the investigation, the importance of the key and so on, on the one hand, and the effects on the business of giving way and obeying the notice on the other.
We have suggested 24 hours as the time within which the recipients of the notice should be allowed to appeal. The danger will be immediately obvious to them, but while an appeal was running it would hold up the authorities--the police or whoever wanted the key--and they should not be allowed an infinite time for that. We think that 24 hours is a fairly minimal time but that is the suggestion in the amendment. We have not necessarily found a perfect solution but the amendment draws attention to a very real and potentially very damaging problem. I beg to move.
Viscount Goschen: My Lords, my noble friend's amendment is a welcome initiative to highlight one of the central concerns that industry has about the Bill. Of course, in the matter of encryption keys and the disclosure of those keys to public authorities, the potential effect goes far wider than those businesses which are actively involved in e-commerce; it goes to all businesses, particularly those of an international nature.
A provision whereby members of staff or the directors of a firm are put into a position of jeopardy and run the risk of breaching confidentiality undertakings with clients and other people with whom they have interaction is one of the central areas of difficulty over the Bill. My noble friend Lord Cope has suggested one solution--which I am sure would add a significant degree of comfort--but he has also indicated that he is not necessarily wedded to every detail of the amendment. So there is a good opportunity for the Government to come forward and say how they propose to address the situation.
There is a real opportunity here for the Government to be constructive and give some additional comfort to industry. My noble friend has highlighted a significant point. I hope that the Government will take this opportunity.
Baroness Thornton: My Lords, I listened to the debates both yesterday and today. Several noble Lords made contributions on the basis of how industry perceives the problem. I am worried about that. Clearly, future investment depends on how people perceive the framework around this issue. Noble Lords opposite say that the way in which industry perceives the matter is a justification for not making the kind of effort proposed in the legislation. But perhaps industry's perceptions are wrong and the issue that noble Lords should tackle is industry's perceptions. There has been a huge amount of lobbying from the Internet industry. Perhaps noble Lords should ask questions of the Internet industry. Perhaps they should say, "You perceive that there are these problems, these threats and so on that discourage people from investing. But what do you think are the answers to these issues?".
For example, yesterday, I visited the website of the organisation run by Mr Caspar Bowden. I looked at the organisations that are involved in his campaigning and the work that he has done on the Bill. I noticed that not a single childcare organisation or organisation involved with the education of the young and their relationship to the Internet is involved in his campaign. That is very worrying indeed. Does industry gain its perception from those who do not reflect the users about whom we are concerned--the children, the young and those who are vulnerable? I ask noble Lords to address the issue of the perception problem of which they have made so much in the past few days.
The noble Baroness has drawn attention--
Lord Lucas: Yes, indeed, my Lords. The noble Baroness has drawn attention to some very important
problems. We cannot put structures in place which make it difficult or impossible for the police to deal with real crime and real criminals. But what we likewise must do is change the perception of business, in terms of an accurate perception of the risks which the Bill poses for the safety and the sanctity of its encryption structure, which is what it uses to protect its business and what it uses to guarantee its dealings with other people. We have to find a better way of dealing with that problem than is in the Bill at the moment.The amendment addresses one possibility. For example, if Barclays Bank is faced with a raid on its keys, it can appeal to an interception commissioner. It can say, "This is entirely out of proportion. They ought to be satisfied with plain text". It gives a chance for a business to keep control of its keys. We shall come later to Amendments Nos. 62 and 63 and to other amendments which deal with other ways of achieving this purpose.
We do not want to see all the dangers and difficulties portrayed so graphically yesterday by the noble Lord, Lord Stevenson. We do not want to produce in the minds of international lawyers, who I suspect will be the people making these decisions, when they are questioning whether a business should put its headquarters in England, The Netherlands, Germany or Switzerland, the thought that they should cross out England because they cannot be sure of the safety of their key structure. We must avoid that kind of position. Otherwise, as the noble Lord, Lord Stevenson, said, we will loose by stealth, without anybody knowing it, our core international e-business. That will be followed, as surely as night follows day, by the administrative infrastructure of those businesses moving out of this country.
It may be that this is not the right way of achieving our purpose. It may be that this amendment offers too many opportunities for the criminal to impose a day's delay and to use it. But we must in the course of today at least find some way to make it absolutely clear that a reputable organisation running a large international business will never lose control of its keys, will always be in a position of being able to maintain its security, and that it is absolutely clear to the most cynical of foreign lawyers that that is the case.
The Earl of Northesk: My Lords, I rise to support the amendment. Perhaps I may say to the noble Baroness, Lady Thornton, that this matter is not only one of perception; to a certain extent it is all fact. To try to illustrate the point, I should like to quote from someone called George Hall, Director of Corporate Affairs at ICL. He had just announced a 10-year, £350 million contract to supply--the irony is lost on me--the Home Office's IT services and support. Yesterday he said:
13 Jul 2000 : Column 386
Lord Bach: My Lords, I delayed rising to my feet because I thought we would probably hear something from the Liberal Democrat Benches on this important issue. Obviously, we shall not.
I am grateful to noble Lords for having had a proper, decent debate on this important amendment, which stands in the name of the noble Lord, Lord Cope of Berkeley. The amendment would mean that if a recipient of a Clause 47 notice believed that complying with it would breach a confidentiality agreement, he or she could refer the matter to the interception commissioner for a ruling on whether the notice should be withdrawn.
I have to be even more circumspect about litigation in another jurisdiction, on a contract governed by foreign law. I can, however, confirm what the Minister of State said in another place. He said that a person's duty of confidentiality to another, however it arises, will always be compromised to a greater or lesser extent by national rules requiring the disclosure of information. In this respect, Part III of the Bill does no more than the many disclosure requirements approved by Parliament over the years.
There are difficult issues here. The representations we have received on this point have largely come from industry. But we have continually said in discussing the Bill that, for legitimate businesses not themselves suspected of criminality, the disclosure of plain text rather than keys must be the expected norm. This information is no more than information to which a variety of authorities have lawful access now under a variety of statutory powers. That is the reality.
Perhaps I may make two other brief points. We shall come shortly to government Amendment No. 70, which specifically requires that a person asking for a key must consider how much more data may be revealed than is strictly required. That offers some reassurance on the issue. We shall come to that amendment later. Even later than that we shall come to Amendment No. 87, which stands in the names of the noble Viscount, Lord Goschen, and the noble Lord, Lord Cope. While I do not want to reveal everything at this stage about how the Government will respond to that amendment, it may be that the noble Viscount and the noble Lord will receive some good news. In the light of what I have had to say, I hope that the noble Lord will feel able to withdraw the amendment.
Lord Cope of Berkeley: My Lords, I am grateful to the Minister for his response to the amendment. I hope that it will help to reassure those outside the House who are concerned about this matter. Perhaps I may make a brief point in response to the noble Baroness, Lady Thornton. She was concerned that in moving amendments we may sometimes overemphasise perception. But we have always emphasised, too, that such perceptions are based on the reality of the situation as it stands before us. That is why perceptions are difficult to change. One of the organisations that has said it is considering moving overseas as a result of the Bill is Poptel, the large Internet service provider. On its website it lists its clients as including the British Association for Study & Prevention of Child Abuse and Neglect. I beg leave to withdraw the amendment.
Amendment, by leave, withdrawn.
Moved accordingly, and, on Question, Motion agreed to.
Consideration of amendments on Report resumed on Clause 48.
Lord Bach: My Lords, I encouraged an intervention on that amendment alone. There was reason for doing so; that reason has obviously not reached the noble Lord.
Lord McNally: My Lords, the general suspicion about government access to keys formed part of the earlier discussion and will unfold more strongly as the amendments are debated. That general unease is widely shared. I received an open letter with about 50 signatories. The key sentence states:
13 Jul 2000 : Column 401
The noble Baroness, Lady Thornton, may find it interesting to note that among the signatures are those of representatives of the Royal College of General Practitioners, the Royal College of Nursing, the Brook Advisory Centres and others. I think that they are in her bailiwick in terms of the Bill, yet they still have concerns about the implications. I do not want this matter to be seen as an attempt at a division between a cold-hearted and indifferent industry lobbying vigorously on one side and the caring professions lining up behind the Government on the other. I beg to move.
Baroness Thornton: My Lords, I too have accessed these lists. There are no childcare organisations involved. I point out to the noble Lord, Lord Cope, that I discussed the matter with Poptel because its name is on the list. It is an organisation with which I have been familiar for many years. It was very keen to assure me that its clients are not involved in this matter. The question here is that children's interests are not represented by these organisations. That is the problem.
Lord Phillips of Sudbury: My Lords, Amendment No. 57 is grouped with Amendments Nos. 58 and 59. If it is convenient, I shall deal with the three together. The three amendments address broadly the same point as was addressed by Amendment No. 50 which was debated at some considerable length last night. Your Lordships will remember that I endeavoured to paint a scenario where Steve and Willie were engaged in exchanging information and where, wholly innocently, Willie could find himself on the wrong side of the law in circumstances also addressed by Clause 48(3) of the Bill.
Lord Lucas: My Lords, the truth of it is that the Government's present position leaves Willie exposed. It appears that there is very little that the Government wish to do about it. It seems to me that there are difficulties in dealing with the problem piecemeal in trying to make it slightly more difficult for the Government or their agents to raid someone's keys and therefore expose correspondence and business to attack. The measures proposed in these amendments are sensible in themselves, but they go only part of the way. The more we hear about the Government's attitude and concerns, the clearer it becomes that we need to be more radical in our efforts to make sure that keys should be kept confidential where that is essential.
Lord Bassam of Brighton: My Lords, the effect of Amendment No. 57 will be as follows. The fact that someone does not have the protected information in his possession would not be enough to convert the disclosure requirement into a requirement to disclose a key. The implication is that the person served with that notice should be able as of right to obtain access to the information in order to provide the plain text.
We have already debated Amendment No. 44 which raised the same point. I explained at that stage why the idea of access to protected information in all circumstances simply would not work.
Lord McNally: My Lords, the Minister is right in that what we are seeking is a proper balance in these matters. I do not believe that at the moment the Government fully appreciate how serious and deep is the concern about access to keys. I believe that high-tech industries use simple words for very clever and scientific matters. I have always believed that the nuclear industry could have found a better word than "flask" for carrying its nuclear waste given the implications of fragility in the word "flask". In some ways a key gives an impression of something one has on a chain on a belt rather than a complicated code which gives access to an immense amount of information.
The suspicion remains among people who hold these codes that agencies will try to obtain the most advanced codes to gain access to most information. I appreciate that during the passage of the Bill the Government have offered various reassurances to meet that concern. In a later debate we may deal with whether they are trying to achieve the impossible.
13 Jul 2000 : Column 404
Having listened carefully to what the Minister has said today, I have become more enamoured not of the wording of the amendment but of the concept behind it. It is that when a business is faced with a demand for a key--I presume that business will make the most use of the measure--rather than giving it to someone who may be hostile to its commercial interests, it should be able to hand it to a third party who is trusted by both the government agency and the business. That third party should then perform the decryption. In that way, the party which requested the decryption of the information is obtaining exactly what it wants but in a way which will not give the owner of the key access to the information--the Government understandably asked for that in reply to our earlier amendments--and the owner of the key can be sure that the key will not leave his control. It is no worse for him than the idea of giving his solicitor control of the key.
I do not have a recipe for arriving at the trusted third parties but it would not be difficult. The Government merely have to let it be known that they want various people to qualify as trusted third parties. I am sure that some of the major firms of solicitors, which are never short of ideas about how to earn fees and are electronically sophisticated in particular with regard to security, would step forward; perhaps other people would, too.
The amendment would address the problems of, say, a major American investment bank deciding where in Europe to place its core security operations. It would have the comfort of knowing that in all but the most exceptional circumstances its keys and security would remain under its control and the Government would be able to obtain exactly what they wanted. They could obtain the key to use on the information which was in their possession, or on information which was to come into their possession, without the results of the decryption being available to the keyholder.
The proposal would provide a neat answer to the problems faced by industry and it would give the Government everything for which they have asked to date. The amendment, if properly phrased and organised--I make no claims that it is that--would go a long way towards overcoming the problems we have discussed today. It would also leave the Government all the facilities they require and it would leave the noble Baroness, Lady Thornton, sure that nothing about the system of protection we had devised for major companies would obstruct the access to justice which the people she rightly brings to the fore will require. I beg to move.
Lord McNally: My Lords, the Deputy Speaker, the noble Baroness, Lady Gardner, flashed steely looks at me because of the tenuous hold I have on Report stage proceedings. As I would have withdrawn the probing amendments had I moved them, I slip in behind the noble Lord, Lord Lucas, to make the point that I would and should have made, which is that we are looking to provide industry with comfort and assurance. Ministers appear to work on the basis that everyone believes that government agencies will behave with absolute propriety and security. Yet, as has been pointed out on a number of occasions, the legislation is being examined not only by those of us who have grown up in the comfort of British society but by those on the outside looking at its cold print.
We are probing whether the kind of comfort and cordon sanitaire which exists between providing the agencies full access and access to the information they legitimately require cannot be provided by the kind of device proposed by the noble Lord, Lord Lucas.
Lord Cope of Berkeley: My Lords, it appears to be necessary to say once again that all noble Lords and those outside who have commented are of the opinion that the agencies of the police, Customs and so forth need to be able to access the Internet from time to time in a way which is similar to that in which they have been able to tap telephones and so forth. The key is the Internet equivalent of that.
We are not trying to prevent that, but we are trying to ensure that the mechanism is not such as to drive firms overseas. My noble friend, in his amendment, makes a valuable suggestion--he has done so in respect of this Bill and others--which is well worthy of consideration.
It is a genuine attempt to be helpful to the Government in producing a new mechanism and I hope that the Minister will be able to respond favourably. It is different from the original suggestion of a key escrow, for example. It is a much safer system whereby trusted third parties can act as intermediaries. There may be clear reasons why the Minister has difficulties with the amendment but, unless they are pressing, I urge him to welcome it.
Both amendments say that a burden may be placed on the recipient of a notice to prove that the plain text being disclosed is a faithful, intelligible version of the
The essential point is that the very circumstances in which the authorities might consider asking for a key to be disclosed are those which involve, for example, an individual or organisation suspected, as I said earlier, of involvement in some form of criminality. I am not sure that it would be possible or, more importantly, desirable in those circumstances to impose a direction for such persons to obtain proof either from a solicitor or from anyone else about the authenticity of the information they are being asked to disclose. If the high tests set out in Clause 49 for requiring that a key be disclosed are met--because, for example, someone is suspected of being a criminal--it does not seem to us to be appropriate or even sensible to trust that person to prove, by whatever means, the authenticity of the relevant plain text.
In addition, critical timing considerations may be involved in cases which involve a criminal investigation. We do not see how an additional proof stage could be built into the procedure without it damaging the effectiveness of the Part III power and having a profoundly detrimental effect on investigations. As in the case of other amendments, in putting these additions into the Bill I am sure that that was not the intention of the noble Lord, Lord Lucas, or of other noble Lords who are interested in this particular amendment and in the one which has not been moved. However, I am sure that they understand what the effect might be in putting this extra hurdle in the way because, effectively, that is what it amounts to.
This issue is bound up with the test for asking for keys set out in Clause 49. Although I understand the heartfelt plea on behalf of the industry, we do not believe that these changes are workable. On that basis, I ask the noble Lord to withdraw his amendment.
Lord Lucas: My Lords, when I realise that the noble Lord is about to reply to one of my amendments, I often close my eyes and open my ears to discover whether I can hear the little sigh that he utters when he is of the opinion that what I have suggested is utterly absurd. On this occasion there was no sigh and I am comforted by that. Indeed, I believe that the reply which the noble Lord gave to the amendment was immensely helpful because he outlined what the Government see as its problems. I believe that I can see a way through that and will follow up that line between now and Third Reading.
It seems to me that the Government need the flexibility that they have asked for and which the noble Lord has enlarged upon in his reply. There should be
As I said, that requires some thought and some drafting. So long as it is included as an option and not as something which the Government or their agencies are forced to do, then it should not be a burden to them when it is critical that they obtain possession of a key. However, it will be of considerable comfort to the companies and businesses concerned when the Government are able to go the extra step to provide reassurance that their security will not be breached more than is absolutely necessary.
As I said, I shall follow up this matter between now and Third Reading. I believe that it would fit particularly well with a later amendment in the name of my noble friend Lord Cope of Berkeley. Therefore, when we come to consider that, I shall return to the point in order to illustrate to the Minister how I believe they might work in together. In the meantime, I beg leave to withdraw the amendment.
Amendment, by leave, withdrawn.
Clause 49 [Cases in which key required]:
Lord Cope of Berkeley moved Amendment No. 64:
It is a matter of the greatest controversy, not only in the e-community, if I may call it that--the businesses which are Internet service providers, and so on--but also in the wider world of banking and commerce, and wider. The first and most obvious reason is perfectly simple and well known. The Internet is a very open system--an international system in the fullest sense. So far as concerns banks and companies, the keys protect information of the highest value--contracts, negotiations in progress, current transactions, and so on. So far as concerns individuals, the information is personal and, in many cases, of the most delicate character.
I believe that if one says to a bank, "We must be able to access the keys of your electronic information systems", that is very similar to saying, "We must have a spare set of the keys to all your safes and all your strong rooms so that we can enter them by ourselves at any time". That would not encourage people to leave their valuables in bank safe deposits or, for that matter, to deposit their money with those banks, particularly if they could just as easily deposit them in a safe deposit box elsewhere.
13 Jul 2000 : Column 408
Essentially, the Internet is a worldwide system and it is easy to use an overseas service rather than one in the United Kingdom. The Bill started off by almost completely overlooking that fact. People can move to a country where they have more confidence in the security of their valuable information more easily than they can move their valuable property from one safe deposit box to another. That is why companies and similar institutions talk increasingly about moving.
Earlier, Ministers were rather dismissive of the idea that companies were worried or would move operations overseas. However, I hope that our debates during previous stages of the Bill helped to convince the Government of the seriousness of that threat. For obvious reasons, some companies have been unwilling to talk about it, but increasing numbers have been willing to talk either directly or through their organisations.
The open letter that the noble Lord, Lord McNally, referred to a few minutes ago showed that concern is not confined to companies, but extends to all sorts of charities and campaigning organisations. Apart from the organisations that the noble Lord mentioned, I notice that some of the many other signatories of the letter included Amnesty International, Unison, the Manufacturing, Science and Finance Union and the Medical Foundation for the Care of Victims of Torture. The letter says:
13 Jul 2000 : Column 409 company, because, from the smallest to the largest, every company uses the Internet to some extent and some of them rely on it heavily.
We all agree that the police, Customs and Excise, and the intelligence services must be able to do their duty and catch criminals, including paedophiles, drug barons and terrorists. To do that, they need the Internet equivalent of telephone tapping. They are losing the ability to keep track of communications because of the growth of the Internet. That is the dilemma that we all face.
The Minister was kind enough yesterday to recognise the constructive spirit in which we have tried to approach the problems of the Bill. The amendment is another example of that constructive approach. We are pressing the principle on the Government, although I am not wedded to the drafting. Changes could still be made at Third Reading if necessary. However, the principle is important.
Those who signed the open letter, as well as many other companies and organisations, are pressing for the Bill to be withdrawn, whereas we are trying to produce a solution to the dilemma. The proposal in the amendment is that, as with the tapping of telephones, a warrant from the Secretary of State should be required for the police and other authorities to access a key.
Throughout our debates, the Government have tried in two ways to reassure us and all those who are concerned. First, they have said that they envisage keys being required only rarely, although that is not how the Bill was originally written. That reinforces the case for the Home Secretary to be the person to authorise access to keys. If there are not going to be many cases, it will not be a huge additional burden for him and his officials.
Secondly, because we have pushed so hard in earlier debates and because of outside pressure, the Government have tabled Amendment No. 66, which says that access to keys will be granted not on the say-so of a police superintendent or the equivalent in the other organisations, but on the say-so of the chief constable or his equivalent, such as a brigadier in the Army.
I assume that no superintendent would be likely to do such a rare and difficult thing as demand access to keys without knowing that he had the support of his chief constable. I do not suppose that many chief constables would let their superintendents go around demanding keys without laying down carefully when it should happen. Welcome though Amendment No. 66 is, it is not a great advance. I am not much reassured by it and I do not think that the companies concerned will be either.
The Home Secretary is asking for exceptional powers, so he should take responsibility for authorising their use. He is answerable to Parliament and to the nation in a way that no chief constable is answerable on operational matters. Like the tapping of telephones, it should be a ministerial responsibility. I beg to move.
13 Jul 2000 : Column 410
Lord McNally: My Lords, as the noble Lord, Lord Cope, has said, a number of arguments will reappear during this evening, particularly on Clause 49, which is a symbolic crunch clause. We want to test the Government's intention that the powers being sought are to be used only in exceptional circumstances by returning the responsibility for exercising them to the Secretary of State.
Almost from the beginning, the Government have tried to disarm their critics by denying that they would ever use the powers that the cold print gives them. By accepting the amendment, the Government would do much to reassure the public and industry that their intentions were limited and specific. We have repeated time and again that we do not want to obstruct the Government in the proper pursuit of wrongdoers of various kinds, but we have emphasised that in giving them those necessary powers, we do not want to allow government agencies to intrude into the private lives of ordinary citizens or to undermine at its inception the e-commerce industry, on whose potential the Prime Minister and other Ministers have put such emphasis.
Lord Bach: And we do not know, my Lords, which is the Rottweiler and which is the spaniel! Perhaps noble Lords will make up their minds after I have made this point.
The noble Lord said that the Bill is flawed and should be taken away because of the criticisms received. If that is so, why did his party vote for its Third Reading in the House of Commons? The party of the noble Lord, Lord Cope, did not do that. It voted
But the party of the noble Lord, Lord McNally, voted in favour of the Bill. Indeed, the speech of his honourable friend, Simon Hughes, praised the Bill, as did the speech of the noble Lord, Lord McNally, on Second Reading. Has the Liberal Democrat Party changed its mind about the Bill? Do his colleagues in the House of Commons know that?
Lord Cope of Berkeley: My Lords, perhaps I may intervene while the noble Lord, Lord McNally, is thinking about the answer to that question. On Third Reading in the House of Commons, my party did not vote against the Bill as a whole but voted for a reasoned amendment.
Lord McNally: My Lords, the noble Lord, Lord Bach, is obviously more used to the confrontational give-and-take of the court room than he is to the parliamentary process. In the House of Commons, yes, my honourable friend Simon Hughes supported the Bill on Third Reading as I did on Second Reading.
However, this has been an amazing process. First, there was a full-page spread in the Observer just before Second Reading. But then there has been a growing rumble of discontent from all sections of the community, the noble Baroness, Lady Thornton, excluded. In the Commons now they would be shouting, "Give her a job", but I would not do that.
Lord McNally: My Lords, I never argue with an LSE professor on these matters. This legislation has a case to answer and it certainly has a case to answer in relation to access to keys. Much of the debate today is about raising the threshold for the agencies and raising the level of justification in respect of this matter. In
moving the amendment, the noble Lord, Lord Cope, made a very strong case for the Government to accept the amendments.
Baroness Thornton: My Lords, I want to comment on the speech of the noble Lord, Lord McNally. On Second Reading and throughout our proceedings on the Bill, I have spoken from the point of view of my experience of working with children's organisations. I am concerned about the opportunities which this industry and the Internet provide in relation to children because I want those children to be safe. My knowledge of this subject is based on my experience over many years of working for NCH Action for Children, which is the leading children's organisation in this field.
I am extremely concerned about the methods which have been employed by the Foundation for Information Policy Research which has been taking a leading part in the activities and comments against the Bill. I have already mentioned one concern which is that it does not feature children's organisations or children's concerns at all among the list of people who support it.
Viscount Goschen: My Lords, it is worth emphasising that we are now at the Report stage of the Bill. The noble Baroness, Lady Thornton, has made
some valid points about the overall discussion of the kind of regime that we should have. The amendment is not concerned with the sanction available. Indeed, from all sides of the House, noble Lords have said that this ultimate sanction should be available should the special circumstances specified by the Minister arise.If those circumstances are as exceptional as the Minister says, the regime should require the highest level of authorisation: that of the Secretary of State. The noble Baroness made some impassioned remarks about a sensible foundation and one that we all support in preventing the terrible criminals who have utilised electronic means to further their ends. However, I doubt that she would object to an amendment that stated that the Secretary of State should authorise this unusual event. I am prepared to give way to the noble Baroness if she wants to contradict me on that.
There is no need to rehearse the arguments about the dangers to the economy, particularly the e-commerce economy, of this country, which were so ably put by my noble friend Lord Cope in introducing the amendment and by other noble Lords throughout all the stages of this Bill. The Government should understand that noble Lords are trying to assist them in making what was a bad and unacceptable Bill which would not have worked into one which, although there are still reservations in relation to it, could have a greater level of support and confidence from industry. That support will be absolutely vital in making the Bill work.
I can think of no better way of giving that comfort to industry than to acknowledge the seriousness of what the Government are asked for, the power to access encryption keys. Once given, there is no going back. For this high level of disclosure, the approval of the Secretary of State should be given. I can think of no valid reason, if it is as unusual as the noble Lord, Lord Bassam, has repeatedly assured the House, why that should not be the case.
Lord Lucas: My Lords, it is quite clear that this Government's Bach is worse than their Bassam! I do not believe that even the noble Lord, Lord Bach, could accuse me of having become harder on this Bill as time has gone by; indeed, I find myself becoming softer on the Bill as time goes by because the Government have done so much to improve it.
I support completely this amendment in the name of my noble friend Lord Cope of Berkeley. The analogy that he made between the effect of disclosure of a key and the effect of having one's telephone tapped is good. Indeed, the disclosure of a key is potentially much more damaging to a business than is having its telephone tapped. If the Secretary of State's authorisation is required for telephone tapping, the Secretary of State's authorisation should be required for key disclosure.
Lord Phillips of Sudbury: My Lords, if the noble Baroness, Lady Thornton, believes that we are under the control of the foundation to which she referred, she gives little credit to the many noble Lords on this side of the House. That foundation is an extremely public-spirited one. The fact that it receives money from Microsoft does not align it with the devil. Without its assistance many of us on these and other Benches would have been a good deal more befuddled than we already are.
I have two other points to make. First, a leitmotiv has run through the Bill that the powers taken by the state should be proportionate to the dangers against which it legislates. Secondly, in looking at the overall impact of the Bill, one must have regard to the economic well-being of the country. It is ironic that both those issues are at the heart of the clause to which this amendment relates.
I was pleased when eventually a Member of your Lordships' House mentioned the issue that we are debating. We have had a lot of high-flown language about the Government and their attitude to industry; whether we have got it right or wrong; and whether we understand how intrusive and vicious the powers are. However, the debate is about the level of authorisation
My noble friend Lord Bach was quite right to bring us back down to earth with a blast of reality. As he rightly said, the Liberal Democrats supported this Bill in another place. The noble Lord, Lord McNally, welcomed the Bill at Second Reading. Many other noble Lords indicated in our debates that they welcomed the Bill. They understand that in large measure it updates an out-dated piece of legislation and provides many more safeguards than existed in the Interception of Communications Act 1985. It strengthens the position of the public and guarantees liberties and freedoms which we are latterly being accused of attempting to undermine and destroy.
I want to focus on the subject in front of us: levels of authorisation for encryption. That is what we are talking about. In a sense the Government and the Opposition Front Bench are fishing in the same pool. We both realise that there has to be confidence in the level at which authorisation is sought.
It is our view that, on balance, we have got the level right in our amendments. I am puzzled as to why the noble Lord, Lord Cope of Berkeley, has such a poor view of the rank of chief constable, which is the level at which we suggest authorisation should be granted. To require a chief constable's personal authority is an impressive safeguard and I do not follow the argument that important operational decisions must be made by someone who is accountable to Parliament. The decisions to arrest a suspect, to bring charges or to deploy resources in a public order situation are not made by Ministers. They are quite rightly the operational decisions which finally rest at chief constable level. Yet the noble Lord, Lord Cope, suggests that somehow that level of authorisation is wrong and inappropriate for this piece of legislation.
We recognised and understood that superintendent was perhaps not the right level. For that reason we raised the threshold. That is a significant move on our part. Having listened to everything that has been said during the course of this debate, I continue to be perplexed at the cynicism or scepticism at the bona fides of our levels of authorisation process. We have worked hard throughout this Bill to try to get it right. We listened to the many representations. We continue to listen to them. We must focus on the practicalities of the situation.
As we all understand, particularly noble Lords opposite who have had ministerial experience, a Secretary of State is an important and busy person. Is it right that he should be confronted with this extra and more onerous task of applying these authorisations? That is an important question. Is it right that a Secretary of State should have his time potentially crowded by this extra level of consideration when, quite properly, a chief constable could undertake that work? Changing referral from superintendent to chief constable level indicates that
13 Jul 2000 : Column 416 we fully understood and took on board the seriousness of the representations made to us about levels of authorisation.
I accept that businesses have a real and legitimate concern--and we have sought to address it. But this does not apply only to businesses. We are also concerned about the individual in possession of an encrypted hard drive who refuses to hand over plain text. As many have argued in another context, there may well be cases when an individual considers it to be in his best interests not to hand over plain text or indeed to hand over plain text which is different from that which is truly covered by the encryption in question. In that regard I am thinking of paedophiles who may be hiding data on their hard drives or others with data they want to protect for similarly scurrilous purposes. It would be a significant burden for the police to cross, that they should have to go to their chief constable every time they wished to demand that someone suspected of such activity should hand over an encryption key. But that is what our amendment provides. We tried to balance the concerns of industry with the concerns of all Members of this House who wish to stamp out the kind of criminal activity that can now be perpetrated on computers.
It is for that reason that I believe that the sentiments in Amendments Nos. 64, 67 and 68, while I appreciate their origins, go too far. To remove all those decisions to the Secretary of State, particularly those cases where individuals in possession of data themselves are refusing to hand over keys, would be both unnecessary in terms of the need to protect privacy, and could act as a considerable impediment to normal law enforcement operations. I urge Members of your Lordships' House to bear that firmly in the forefront of their mind in considering these amendments.
We are concerned to assuage the worries of business. We shall continue to do that. I undertake to intensify our efforts in that regard. But we are also concerned to ensure that law enforcement has a credible deterrent in respect of some of the more vile crimes that can be perpetrated through computers. We feel that our amendments strike the right balance and that amendments tabled by noble Lords opposite go too far. They would seriously undermine the capability of law enforcement. In short, we are all concerned to protect business but we must not forget that this power is aimed at individuals who conceal their illegal activities through the use of encryption. Powers truly are needed in this regard and will be more so as easily accessible encryption spreads, as all Members of your Lordships' House who have contributed to this and other debates fully recognise.
Finally, I ask noble Lords to consider just how far we have increased the level of authorisation in the government amendments in this group. But I want to offer one further element of flexibility that the Government have and which I would be more than happy to bring back as an amendment at Third Reading. We are prepared, in so far as it will offer extra reassurance both to civil libertarians and the industry, to require chief constables or their equivalents to notify the Surveillance Commissioner of
13 Jul 2000 : Column 417 circumstances in which they have used their power to demand a key rather than make an ordinary disclosure requirement. That would place a duty on them to bring specifically to the commissioner's attention the fact that they had used the power. What he wished to do in terms of oversight would obviously be up to the commissioner. But that would be an extra and significant safeguard in that it would bring the matter specifically to the attention of the commissioner in his role of providing judicial oversight. If that were not the case, whether he took an interest in particular authorisations under his compass would be left to the discretion of the commissioner.
I believe that adds an extra significant safeguard, while recognising the fact that in a small number of years the police are likely to be faced with strong, unbreakable encryption on all home computers which can be used to conceal crimes of all varieties. It is for that reason that I believe that moving to Secretary of State authorisation is a step too far. However, I am prepared to move one further step at Third Reading and I hope that Members of your Lordships' House understand why I made that undertaking. We have to be practical. We have to be pragmatic in addressing these authorisation levels. These matters must be carefully borne in mind. We need something that works, that is effective and with which the police can work so that we can stamp out and crack down on some of the most unpleasant and heinous crimes. I urge your Lordships to reject Amendment No. 64.
Lord Cope of Berkeley: My Lords, during some parts of that short debate I began to think, as the Minister evidently did, that we had wandered back into Second Reading; or that we could look forward to Third Reading and Bill do now pass in discussing the general issues behind the Bill. I do not want to go back into that.
Amendment No. 64, as the Minister said, concerns levels of authorisation. Should the Secretary of State authorise the provision of keys or the insistence on keys as he does the tapping of telephones, or should chief constables do so under Amendment No. 66? It is not that I have a poor view of chief constables; on the contrary, I respect them highly. However, I also have a high view of the seriousness of requiring a key compulsorily by law from commercial and other organisations, or from individuals.
On Question, Whether the said amendment (No. 64) shall be agreed to?
Resolved in the negative, and amendment disagreed to accordingly.
Lord Lucas moved Amendment No 65:
6.30 p.m.
Page 55, line 50, leave out ("the key itself") and insert ("an actual key").
The noble Lord said: My Lords, this amendment also addresses a grammatical oddity in the Bill as it is currently drafted. Clause 48(3) now requires the disclosure of any key of a "noticee's" choice; hence the words "the key itself" are no longer appropriate and should be replaced by the words in the amendment. I beg to move.
Viscount Astor: My Lords, I support my noble friend's amendment. The wording that he suggests appears to be sensible when one considers the detail of the Bill.
Lord Bassam of Brighton: My Lords, yesterday the noble Lord, Lord Lucas, achieved what I believe he said was a first ever drafting point over parliamentary counsel. I am afraid that on this occasion we do not feel able to accept the noble Lord's suggestion, precise though it may be.
I hope that the policy behind Clause 48(1) is clear. It is perhaps worth spelling it out. A section 47 notice may not specify that only the key to the relevant protected information, as opposed to the plaintext, is sufficient unless one of the persons listed in paragraphs (a) and (b) has given a direction that only the key itself will do. The question the amendment poses is whether the reference should be to "the key itself" or to "an actual key". We are happy to provide reassurance that subsections (5) and (6) apply in every situation to which it refers: a person may choose any key, or combination of keys, where that key, or combination of keys, is sufficient to access the information and render it intelligible. Therefore, the reference to "the key" has to be read with those provisions firmly in mind.
Amendment, by leave, withdrawn.
("(1A) A direction for the purposes of subsection (1) by the police, the customs and excise or a member of Her Majesty's forces shall not be given--
(a) in the case of a direction by the police, except by or with the permission of a chief officer of police;
(b) in the case of a direction by the customs and excise, except by or with the permission of the Commissioners of Customs and Excise; or
(c) in the case of a direction by a member of Her Majesty's forces, except by or with the permission of a person of or above the rank of brigadier or its equivalent.
On Question, amendment agreed to.
[Amendments Nos. 67 and 68 not moved.]
Viscount Astor moved Amendment No. 69:
Lord Bassam of Brighton: My Lords, I am grateful to the noble Viscount, Lord Astor, for not making a speech. I shall try not to make much of a speech.
Government Amendment No. 70 fulfils an undertaking we made in Committee to consider suggestions put forward by the noble Earls, Lord Liverpool and Lord Northesk, as to whether we could spell out in one particular instance what the question of proportionality would mean in relation to cases where keys are demanded rather than a disclosure requirement.
Lord Bassam of Brighton: My Lords, perhaps I was being too helpful in the sense that I was trying to be brief. Amendment No. 69 seeks to add to the conditions which must be met before the key can be demanded rather than plaintext. Not only are the conditions at Clause 49(2) to be met, but noble Lords opposite would seek to ensure that the person who authorises the demanding of a key should believe that the conditions are met "on reasonable grounds". I believe that this condition is already implicit in the test as it already exists. I believe that what the noble Viscount seeks is already present. That is the spirit in which our amendment has been tabled. All statutory powers must, of course, be exercised reasonably. That
is a fundamental principle of public law. It does not need to be stated in this Bill, or any Bill. It is a principle which operates across the whole field of public law. I trust that with that extra reassurance the noble Lord will feel confident in withdrawing his amendment.
Viscount Astor: My Lords, I thank the Minister for those comments. I beg leave to withdraw the amendment.
Amendment, by leave, withdrawn.
("( ) The matters to be taken into account in considering whether the requirement of subsection (2)(b) is satisfied in the case of any direction shall include the extent and nature of any protected information, in addition to the protected information in respect of which the disclosure requirement is imposed, to which the key is also a key.").
Lord McNally had given notice of his intention to move Amendment No. 71:
The noble Lord said: My Lords, I and my noble friend Lord Phillips had intended to have a full stand part debate at this point and to divide the House. However, as the Government clearly have overwhelming numbers to take part in Divisions, I shall not move the amendment.
[Amendment No. 71 not moved.]
Clause 51 [Failure to comply with a notice]:
Lord Bassam of Brighton moved Amendment No. 72:
The noble Lord, Lord Cope, proposed an amendment in Committee to add an element of intent to the offence of non-compliance with a disclosure notice. This is now covered in Clause 51. The noble Lord, Lord Phillips, asked me to look again at the issue of intent. I undertook to give this more detailed thought and government Amendment No. 72 appears before your Lordships as a result.
The changes made to the non-compliance offence in Committee have been broadly welcomed. Amendment No. 72 will, I believe, offer some further comfort. The amendment means that Clause 51 would say that a person is only guilty of an offence if he knowingly fails to comply with a disclosure requirement imposed upon him. So some kind of inadvertent failure to comply would not be penalised. That was the point of the earlier debate and appears to be the issue behind the amendment of the noble Lord, Lord Cope.
We believe that "knowingly" is the right addition here rather than "wilfully". We have imported the concept from the offence of failing to comply with a
13 Jul 2000 : Column 423 duty to give effect to an interception warrant under Clause 11(7) of Part I of the Bill. So it is familiar territory. In Part III, a person can be convicted of an offence only if he has been given a disclosure notice and failed to comply with it. It is a simple offence. But we are happy to make clear that unwitting failure should not be--and will not be--penalised.
In short, there has been a general welcome for the new construction of the non-compliance offence, which we have arrived at following our consideration in Committee. I believe that the addition offers some further reassurance. In moving Amendment No. 72, I trust that the noble Viscount will feel able to withdraw Amendment No. 73. I beg to move.
Viscount Astor: My Lords, I am nearly tempted to debate with the Minister the semantics of "knowingly" and "wilfully". However, your Lordships will be relieved to hear that, as the Minister has made clear in his explanation of his amendment that unwitting failure--I think those were his words--will not be penalised, I am happy to accept the noble Lord's amendment and not to move mine.
On Question, amendment agreed to.
Lord Bassam of Brighton: My Lords, I certainly understand the intention behind the amendments; they seek to tie down yet further the circumstances under which someone who has been in prior possession of a key may yet be prosecuted for failing to comply with a disclosure requirement. As I recall, this was the subject of considerable amendment to the Bill at Committee stage. Noble Lords will note that we introduced merely an evidential burden in respect of people who are shown to have had prior knowledge and possession of a key. I was able to clarify for the noble Lord, Lord Phillips, in Committee that this evidential burden is less even than the standard of the balance of probabilities--another one of those wonderful legal terms. The defendant merely has to raise an issue, which then has to be disproved by the prosecution. In that case, the prosecution has to prove the contrary beyond a reasonable doubt.
These are significant hurdles for the prosecution to overcome. As I said at Committee stage, I thought the offence would be difficult to prove even as drafted at that time. Now that we have introduced the amendments that we have, the offence will be even more difficult to prove. I accept that the reasons for doing it are a good ones; that is why the Government
Specifically, the amendment seeks to insert a qualification that the person must be shown to have been in recent possession of a key. What is intended by this qualification is spelt out in detail in Amendment No. 76. I do not think that the qualification helps overmuch. Particularly, the investigation or events which gave rise to the issue of a notice could well have been happening for some considerable time, or may well not have been happening for a long time; in either event, it would be difficult to show how long the investigations had been taking place. Further, it does not seem to be relevant to the prosecution of a particular offence as to how long an investigation has been going on. In other words, people who may be in possession of a key should not be penalised simply because they were in possession of a key which was relevant to a long, ongoing investigation. The length of the investigation is no concern of theirs, and their vulnerability to criminal prosecution should not depend upon it.
I sympathise with the intent behind the amendments but the Government have moved significantly on the question of this offence, particularly as it applies to prior possession of a key. I hope that, with that thought in mind, the noble Lord will reflect on the matter and withdraw the amendment.
Lord McNally: My Lords, I thank the Minister for that reply. I beg leave to withdraw the amendment.
Amendment, by leave, withdrawn.
Lord Cope of Berkeley moved Amendment No. 75:
The noble Lord said: My Lords, we return here to the question of legal privilege. We discussed this issue yesterday in relation to a different part of the Bill. Amendment No. 75 and Amendment No. 93, which defines a lawyer--if that is not too grand a phrase to describe the effect of it--seek to preserve legal privilege in the way we discussed yesterday.
I have a lot of sympathy for the position adopted that, if possible, these matters should be left to the common law on both sides of the Border because that allows for a flexibility in the interpretation from time to time as to what exactly is the legal privilege granted. There are difficult issues--for example, where people seek informal advice, or where they communicate after instructions have been declined--but the position seems to me to have become more complicated than was indicated last night.
("or that to make a disclosure of the key would result in a professional legal adviser producing or giving access to items subject to legal privilege").
"if the data consist of information in respect of which a claim to legal professional privilege (or, in Scotland, to confidentiality as between client and professional legal adviser) could be maintained in legal proceedings".