I thank the noble Baroness for her introduction and I am very glad that the number of amendments does not reflect the level of controversy of the Bill. To address her first point, I say that the Bill does not preclude a judge from being able to require that notice be given to anyone affected by an order pursuant to court rules. Court rules will provide the judge with the ability to require that notice be served on anyone affected by the order, which is the case at the moment under court rules dealing with domestic production orders. This means that a data controller or a data subject may be given notice of an application, but while in principle any person affected by an order should be given notice, there will be cases where it is not appropriate because the giving of a notice to a particular person could prejudice the investigation to which the order pertains: for example, where a notice to a data subject might tip off a suspect where law enforcement agencies are seeking data for the prosecution or investigation of a serious crime.
I thank the noble Baroness for giving me the opportunity to set this out in greater detail. However, given that court rules provide a judge with the power to consider notice being given, I suggest that the amendment is unnecessary. She knew that I was going to say that.
With respect to Amendment 2, the court already has the applicant, who has a duty to assist the court, so it is an established principle that an applicant seeking an order without giving prior notice to the person on whom the order is to be served or to whom it relates is obliged to provide full and frank disclosure to the court. This includes disclosure of relevant legal principles and facts, even if they are not in the applicant’s favour. The principle therefore already ensures that the information put before the court must be balanced.
I stress that the Bill reflects the existing position in relation to production orders that can be served on a company based in the UK, and the court will be dealing with the same considerations where an existing
production order is sought. Such domestic orders apply the same legal considerations without the need for an independent adviser, and I do not see why we should deviate from that existing practice simply because an order can be served on an entity based elsewhere.
The third amendment aims to define the terms “data controller” and “data subject” referenced in the amendments to Clause 1. Given that we do not believe that the Bill should be amended in the way suggested by the noble Baroness, it follows that there is no need to include definitions of data controller and data subject in Clause 17. I hope that in the light of those clarifications, the noble Baroness will feel free to withdraw her amendment.