I will come on to the issues relating to the assurer. I would like to deal with data protection sensitivity and turn to the issue of blacklisting before I come back to the specifics about the assurer, if the hon. Gentleman will bear with me.
The hon. Member for Edinburgh South was asked by the hon. Member for Birmingham, Selly Oak (Steve McCabe) about penalties if there is a breach of data protection or confidentiality issues. Various protections are in place. The assurer would have to comply with the Data Protection Act. If they did not do so, they would be in breach of their contracts, so as well as being removed, the union could sue them. However, the assurer would also be a data controller, so the Information Commissioner could take action. The Information Commissioner has significant powers under the Data Protection Act, which include serving an enforcement notice setting out action that the data controller must take and—where required to address a serious contravention of the duty—imposing a fine of up to £500,000. Failing to comply with an enforcement notice by the Information Commissioner is also an offence, so there are significant protections in place.
The hon. Member for Hayes and Harlington (John McDonnell) and others raised the important issue of blacklisting. Let me reiterate on the record—my right hon. Friend the Secretary of State and I have said this on various occasions in the House—that the blacklisting of trade union members is unacceptable and illegal. Following an investigation, of which the Committee will be aware, that uncovered the Consulting Association’s blacklist, the law was strengthened at the end of the previous Parliament by the Employment Relations Act 1999 (Blacklists) Regulations 2010. That was also when the maximum fine for a breach of data protection rules was increased to £500,000.
The Committee will also be aware that the Select Committee on Scottish Affairs has been conducting an inquiry into this issue. In July, the Committee contacted the Secretary of State to say that it had new information that blacklisting continues. We have always encouraged anyone with evidence of blacklisting to come forward so that we can investigate. The Scottish Affairs Committee is the first to get in touch formally to say that it possesses new information. We are grateful to the Committee for passing that information to the Department. We have referred it to the Information Commissioner’s Office, as the appropriate body to investigate any breaches of the Data Protection Act. I understand that the office is requesting more information from the Committee, so that it can examine it and investigate. My right hon. Friend and I will of course continue to take a close interest in this matter. If any evidence of blacklisting is found, the perpetrators must feel the full force of the law.
Let me turn to the amendments in this group. Amendment 107 would make the assurer owe a duty of confidentiality to the union and its members—this deals with the concerns raised about data protection. I hope that the protections I have outlined will reassure hon. Members about compliance with the existing legislation, even though it is not explicitly mentioned in part 3—the convention is to keep legislation concise and not to repeat existing legal requirements. I am happy to reassure the Committee and put it firmly on the record that compliance with the Data Protection Act will be necessary by anyone who handles sensitive data.
Amendment 108 would require the Secretary of State to set out eligibility criteria for the assurer—this goes to the point about the future career ambitions of the hon. Member for Wansbeck—along with what qualifications, status and experience assurers must have. Our approach
will be the same as for independent scrutineers of trade union ballots and elections. It is important that the assurer has widespread credibility with unions, their members and the public. The order will say which organisations are eligible or list the criteria that must be met. We imagine that assurers will probably be recognised professionals, such as solicitors, auditors or independent scrutineers. The responses to our targeted consultation over the summer supported that approach. I am not sure whether the hon. Gentleman falls into any of those categories, but he might be interested to know that we will need to consult on the content of the order, and I give the Committee an assurance that we will do so. There will therefore be an opportunity—this is important—for unions, their members and the public, as well as the hon. Gentleman, to comment.