I will just reiterate that we are dealing with clause 17, and we are very mindful that we want to ensure that web logs are not included under this clause. My focus is on getting clarity on that from the Minister. What might happen in the long term is perhaps a debate for another time. I am concerned that we get the drafting of this clause as accurate as we can.
I was talking about making sure the public are confident about what we are trying to do through clause 17, and what is included and what is not included. The data at the heart of clause 17 appear to be what is commonly referred to as “IP resolution data”, but this term does not appear in the text of the explanatory notes, and I hope the Minister will be able to explain whether they do refer to the same thing, as there is some confusion here.
As I explained, clause 17 is meant to plug a gap within the current framework for data retention, but when we compare the language of the Bill with the text of the current regulations, the gap is not immediately obvious. Clause 17 refers to data which
“relates to an internet access service or an internet communications service”
and
“may be used to identify, or assist in identifying, which internet protocol address…belongs to the sender or recipient of a communication”.
However, part 3, paragraph 11 of the schedule to the existing regulations refers to the subscriber information
“to whom an Internet Protocol (IP) address, user ID or telephone number was allocated at the time of the communication.”
I ask the Minister to look at this and see whether he cannot amend the language to make clear on the face of the Bill the exact data category that will be provided for in the regulations.
I am also concerned about the degree to which clause 17 relies on definitions provided from the Regulation of Investigatory Powers Act 2000. I am sure the Minister is aware of the findings of the Joint Committee on the Draft Communications Data Bill that the definitions used in RIPA were out of date and needed to be replaced. Given this, it is surprising to see both the definition of “communication” and section (3)(c) of the clause rely so heavily on RIPA definitions.
I would also like the Minister look again at the definition of “identifier.” According to clause 17
“‘identifier’ means an identifier used to facilitate the transmission of a communication”.
This is at least partly circular, and again adds to the confusion around this clause. Finally, in subsection (2)(b) will the Minister confirm that he does indeed mean “paragraph (a)” rather than subsection (a)?
In addition to the five questions above regarding the drafting, I have 10 questions about the implementation that I hope the Minister will be able to address in his comments. First, will he tell the House whether he expects to introduce new retention regulations under DRIPA section 1, or will the Government be seeking to amend the Data Retention Regulations 2014? Secondly, and on a similar note, will he update the House on when he expects to publish these draft regulations and when he hopes they will be in force? Thirdly, when the data covered under clause 17 is traffic data, while the relevant authority wants to reveal the subscriber information behind this, will this be covered under a single request under RIPA, or could clause 17 data simply lead to a disclosure which requires a further RIPA request to be made? Fourthly—this is particularly relevant to amendment 5—will he assure the House that the retention by the Crown Prosecution Service of this relevant internet data can be done in such a way that does not require deep package inspections of the type that would be considered intrusive surveillance? Fifthly—and again relating to amendment 5—will the Minister explain in practice how the regulations will separate out communications going to a device, which could be a web log, such as access to an app, which would be considered a website, and communications going to a device which enables a communication, such as an app which facilitates web e-mail storage?
Sixthly, will the Minister confirm that the extra reporting requirements imposed on the interception of communications commissioner by the DRIP Act will extend to the data retained and subsequently requested under clause 17? Will the Minister be providing additional resources to the commissioner to meet those additional requirements?
2.30 pm
Seventhly, will the Minister tell the House how roaming services are dealt with, both international SIM cards temporarily hosted on UK networks and UK-based SIMs use data roaming abroad?
Eighthly, will the Minister tell the House what he would expect the costs to be on a relevant authority making a request for data provided for under clause 17?
Ninthly, can the Minister tell the House what discussions have been undertaken with industry? In particular, can he respond to the comment from the secretary-general of the Internet Services Providers Association that he was “disappointed” that the Home Office had not consulted with industry before announcing these proposals? How did the Minister reach the £98 million estimate of compensation required by the industry if he has not consulted with it?
Finally, will the Minister assure the House that the Government have obtained independent legal advice to ensure that this measure is compatible with the decision of the European Court of Justice to quash the data retention directive? In that judgment, the ECJ suggested that any form of blanket retention was disproportionate, and also called for additional safeguards on when the data can be disclosed. Is the Minister still confident that the measures contained within DRIP are sufficient to meet those demands?