The hon. Gentleman is quite right and he, like me, is a member of the Intelligence and Security Committee. We have good reason to believe that there are any number of encryption packages that can be bought quite openly on the internet. It is a matter not just of the communications service providers encrypting communications that take place but of individuals buying packages that enable them to do that themselves, which makes the situation even more difficult.
What more can we do? It is no use pretending that this problem is unique to the UK; it is a very difficult international problem. I know that the Home Secretary, the Foreign Secretary and others are in constant dialogue with their opposite numbers in the United States, but there needs to be a growing understanding between ourselves and the places where CSPs are located that there cannot be this ungoverned space within which criminal activity can take place unchecked on the basis that it is in another jurisdiction from where it is being perpetrated. That issue can only be properly resolved by states, either bilaterally or multilaterally, agreeing protocols and ways of dealing with these issues. Obviously, it is much more easy to do that with friendly states—states with which we share common values—than it is in some other areas where internet providers might decide to locate because there will not be many controls on them. Clearly, that is another matter that needs to be seriously avoided.
We need to have order in this ungoverned space. I am talking about legal compliance and there not being this free space in which crime, terrorism and other activities can illegally take place. It is also important that the CSPs take a more responsible view of what they are being used for. Like the hon. Member for Cities of London and Westminster (Mark Field), I have seen some CSPs washing their hands of such responsibilities, saying,” That is a matter of jurisdiction. We are not in that jurisdiction so we will comply with the laws where we are.” That might be good for their reputations with their customers, but it is a fairly cynical way of operating. I hope that, through the intervention of our own Government and Governments elsewhere, CSPs can be brought to the view that they should behave responsibly and in such a way that upholds the law right across the world—except in cases where the rule of law does not operate.