I will not argue with the noble Baroness if she wants to make that judgment of things. The Government have to make decisions for themselves on these issues and they do so in the knowledge of the facts, as the noble Lord, Lord Butler, explained to the House. The Government make judgments at the time as to what is necessary, and in this case they have made the right judgment.
We have had a side-show. I now turn to the substance of the amendment in the name of the noble and learned Lord, Lord Hope. I share his wish to ensure that the new regime for data retention that we are putting in place through the Bill is fully compatible with the European Court of Justice, and that is what we are doing. As I explained at Second Reading, while the EU data retention directive was struck down by the European Court of Justice, the ECJ judgment was about the EU data retention directive. The court did not rule on any member state’s legislation and did not take into account the many safeguards which I explained we have in our domestic regime. Many of the ECJ’s concerns are already addressed by the UK’s domestic legislation. Crucially, the judgment explicitly recognised the importance of data retention in preventing and detecting crime.
Nevertheless, although the UK’s existing data retention regime is already a very strong one, with stringent safeguards and oversight, in order to respond to elements of the judgment, we are extending the existing safeguards in a number of ways. Details of those safeguards are contained in our factsheet on that issue, which is available from the Printed Paper Office. However, I will elaborate on them here.
The regulations made under the Bill will replace the 2009 data retention regulations. They maintain the status quo, while also adding additional safeguards in response to the ECJ judgment. In particular, the regulations set out what must be specified in a data retention notice and factors to be taken into account before giving a notice; place a requirement on the Secretary of State to keep such notices under review; set out the security requirements which apply to data retained under a notice; require providers permanently to delete data when they are no longer under an obligation to retain them; require providers to ensure that data are not disclosed except in accordance with the access procedures in RIPA or a court order; and provide for the Information Commissioner to audit compliance with the requirements of the regulations. A provisional draft of those regulations is also available from the Printed Paper Office.
I am satisfied that with those extra safeguards we are on even stronger ground in asserting that the UK’s data retention regime fully meets the requirements laid down by the ECJ. That judgment does not require us to adopt every single bit of wording in the judgment. On the specific details of this amendment, the test currently in the Bill allows the Home Secretary to consider not just whether it is necessary to require a communication service provider to retain data, but also whether the interference that retention involves is proportionate to that legitimate aim. We believe that that is in accordance with the judgment, which also makes it clear that it is necessary to verify the proportionality of any interference with a person’s rights when requiring the retention of data. The test of necessity and proportionality is a well established legal principle, as the noble and learned Lord well knows, which is already a notable feature of elements of the existing RIPA regime.
I am, as ever, grateful to the noble and learned Lord for sharing his considerable experience and expertise with the House, but I hope he is satisfied that the clause simply seeks to build on those long-standing principles, providing an extended safeguard and appropriately reassuring the public. We have a strong test here, which is fully in the spirit of the court’s judgment. Accordingly, I do not believe that the amendment is necessary, and I invite the noble and learned Lord to withdraw it.
12.45 pm