I know you thoroughly enjoyed the debate on the previous group of amendments, Mr Sheridan, so it is great to see you in the Chair in this debate. I thank the Minister for her apology on the impact assessment. We had a committee meeting during the Division and have decided to accept her apology, even if the impact assessment arrived in the Vote Office at 1.53 pm—we understand that that is the official time recorded.
Amendments 107, 116, 117, 119 and 120 address the concerns of trade unions, the Political and Constitutional Reform Committee, lawyers, trade unionists and organisations such as Liberty, which believe that clause 37 could result in the improper use of sensitive material and accidental disclosure. It also raises questions, as my hon. Friend the Member for Wansbeck (Ian Lavery) mentioned in his contribution on the previous group of amendments, about international law, specifically articles 8 and 11 of the European convention on human rights.
Amendments 107 and 119 place a legal duty and obligation to provide total confidentiality and an express statutory duty of that confidentiality for the assurer, in addition to the oblique references already in proposed section 24ZF. The assurer should therefore have a statutory duty of confidentiality to the union and, more importantly, the union’s membership. The amendments also ensure that the assurer agrees not to engage in conduct likely to lead to a breach of a union’s obligations under the Data Protection Act 1998.
It should be noted that union membership is in the significant category of sensitive personal data. It is not known how far the Department for Business, Innovation and Skills has consulted the Information Commissioner’s office on the Bill. There is a significant risk that the union might be held accountable for breaches by the assurer. Will the Minister address what discussions she has had with the Information Commissioner’s office on the new assurer position, and what its thoughts were on the ability of trade unions to both comply with the Data Protection Act 1998 and be responsible as the data holder to an assurer who, by nature of the definition of the Bill, is independent from that data controller in terms of the trade union? The 1998 Act is clear and it may be worth considering this issue in detail, Mr Sheridan. When one overlays the Data Protection Act with the Trade Union and Labour Relations (Consolidation) Act 1992, we can see how unnecessary the proposed changes are.