My Lords, Amendment 203A is in my name and that of my noble friend Lady Hamwee. I shall also speak to Amendments 204A, 204B, 210ZE and 210ZF, which are in this group.
Our Amendment 203A seeks to put into the Bill that a bulk acquisition warrant will not include obtaining third-party data not already in the possession of the operator. We have debated a similar point before and the Minister addressed third-party data in his letter to the noble Lord, Lord Rosser, on 27 July this year. However, can the Minister elaborate on the position of third-party data in relation to bulk acquisition?
Amendment 204A seeks to get it on the record that Clause 146(7), by allowing the warrant to cover,
“data whether or not in existence at the time of the issuing of the warrant”,
does not allow for speculative surveillance without suspicion.
Amendment 204B would put into the Bill that,
“A bulk acquisition warrant may not require data which relates to or includes internet connection records”.
This was touched on in our opening debate this afternoon on the Anderson review. In footnote 85 on page 33 of his report, Anderson states:
“A ‘Bulk Communications Data’ factsheet published with the draft Bill on 4 November 2015 stated ‘The data does not include internet connection records …’. I am told however that this is no more than a statement of present practice and intention: neither the Bill nor the draft Code of Practice rules out the future use of the bulk acquisition power in relation to ICRs”.
The Committee will recall that we on these Benches oppose the storage of the internet connection records of every man, woman and child in the UK for 12 months, whether suspected of an offence or not, by internet service providers as required by the previous provisions of the Bill. We believe this to be a disproportionate intrusion into privacy, for the reasons that I have already explained at length to the Committee. Law enforcement agencies would, however, be able to access such internet connection records only if someone was suspected of an offence. The Government have introduced additional safeguards in the Bill to specify what sorts of offences would warrant such intrusion, but without this amendment it is open to the Government in the future to allow law enforcement agencies to store and have access to internet connection records. We believe that this is two steps too far.
As far as Amendment 210ZE is concerned, Clause 157 refers to the “Duty of operators to assist with implementation” of bulk acquisition warrants. This amendment seeks to clarify that the person to whom the warrant is issued—the implementing authority—cannot be held liable for a breach of the warrant because of the actions of the operator.
Amendment 210ZF seeks to ensure that, under Clause 158, “Safeguards relating to the retention and disclosure of data”, if internet connection records
were subsequently stored, no such record could be disclosed unless the individual concerned was suspected of having committed an offence. I beg to move.