My Lords, I, too, thank the Minister for repeating the Statement made by the Home Secretary in the other place. Clearly, we would like to be reassured by the Home Secretary’s claim that the draft Bill is not a return to the draft Communications Data Bill 2012, which the Liberal Democrats in the coalition Government quite rightly blocked, and from which this Government now appear to want to distance themselves.
There are some clear and very welcome changes proposed, including judicial authorisation of interception warrants and a promise not to interfere with encryption, but we must look very carefully at the detail of what is being proposed, particularly in relation to what the Home Secretary calls, “internet connection records”. Clearly, there has been a great deal of concern about communications service providers storing everyone’s web browsing history and handing over this information to the police and the security services. While the Home Secretary says that the proposed Bill would not allow that, I will probe very gently whether that is the case, so as to dispel concerns that this is just smoke and mirrors.
Intuitively, the Home Secretary must be right that if the police can use mobile phone data to find an abducted child, they should be able to do so if criminals are now using social media or communication apps instead of cellular data. Our concerns are: first, whether this is technically feasible; secondly, whether it is technically feasible without prohibitive costs to communications service providers; and, thirdly, whether it is possible without the risk of disproportionate intrusion into innocent people’s privacy, whether by the forces of good or by hackers such as those who breached TalkTalk’s security, as the noble Lord, Lord Rosser, mentioned.
Talking to experts, I was told that communications service providers would be unable to tell the police or the security services whether someone had used the internet to communicate, as opposed to just browsing, without storing content. This requires billions of pounds of hardware investment, and even then it may not be possible to tell the difference between browsing and communication. Determined suppliers of applications that enable people to communicate covertly could disguise internet communication as passive browsing, for example. Will the Minister say whether the Government know that it is technically possible for internet service providers to provide a record of the communications services a person has used without a record of every page they have accessed? What would be the cost to communications providers? Has a risk assessment been undertaken of the possibility that, having stored sensitive personal information, that information might be accessed unlawfully?
Finally, in 2005 the police, backed by the then Labour Government, asked for a power to detain terror suspects without charge for up to 90 days—a power that the security services did not ask for and that Parliament, quite rightly, rejected. Will the Minister also confirm whether the requirement to store internet communication records has come from the police alone or from the police and the security services?