My Lords, I also submit that Schedule 11 should not stand part of the Bill. I note the amendments from the noble Baroness, Lady Sherlock, which seek to temper the impact of these powers, but they do not go far enough. To have these clauses in a Bill labelled “data protection” contradicts its very title. I thank the noble Baroness, Lady Chakrabarti, and the noble Lords, Lord Clement-Jones and Lord Kamall, for their support. The noble Lord, Lord Anderson, is detained elsewhere but he asked that I raise a number of his concerns. I am grateful for his experience, as I am for the legal opinion provided by Dan Squires KC and Aidan Wills of Matrix Chambers.
The provisions create new powers for the DWP to obtain information about the bank accounts of people who receive benefit payments by requiring financial institutions to monitor customers’ accounts, to identify cases that merit further consideration and to establish whether the relevant benefits are being, or have been, paid in accordance with the law. Paragraph 2(1) of proposed new Schedule 3B makes it clear that the information that can be requested is very wide indeed, although it is not specified.
Schedule 11 also sets out provisions that would allow the DWP to issue account information notices; those AINs would apply to any account into which benefits will be, are being or have been paid within the past year, as well as to any account linked to such an account. The account holder may be a person who is entitled to the benefit or a person who receives the payment on their behalf, such as a parent, partner or carer. It may also include a joint account holder or, where housing benefit is paid direct, a landlord and all their related accounts.
All benefits, both those that are means tested and those that are not—child tax credit, the state pension, personal independence payments, the disability living allowance, working tax credit, universal credit and the employment and support allowance—are in scope. Counsel’s advice is that it is
“reasonable to assume that AINs will be issued on a rolling basis to most financial institutions which provide banking services and, in order to comply, financial institutions would need to subject most, if not all, of their account holders to algorithmic surveillance”.
Counsel also found that an AIN being issued to a particular financial institution would almost certainly be secret, to avoid tipping off account holders, and that the criteria triggering a search would also be kept confidential.
The Social Security Administration Act 1992 already contains powers for the Secretary of State to compel banks and others to provide information in order to ascertain whether a benefit is being paid correctly, as well as to prevent, detect and secure evidence of benefit fraud—that is to say, the DWP already has these powers if it has reasonable grounds to suspect that fraud is taking place. What is proposed is that the DWP no longer has to have a suspicion of wrongdoing
but can survey vast swathes of the UK population without their knowledge in order proactively to surface cases that may or may not merit further consideration.
The legal opinion is also pretty damning on whether the powers contravene Article 8 on the possibility of extremely private information—such as on political allegiance and sexuality—being accessed, and it is equally damning on both the practicalities and the lack of oversight. If the noble Lord, Lord Anderson, had been with us, he would have made the following points. First, this is a power to collect highly sensitive personal information in bulk. Such powers exist under the Investigatory Powers Act but are attended by an array of statutory safeguards, ranging from authorisation of the original warrant, which must be approved by an independent judicial commissioner, and checks on the level of material requested to other issues such as record keeping, retention, dissemination and destruction, error reporting and a right to reply to the Investigatory Powers Tribunal. Few, if any, of these safeguards exist in the Schedule 11 power.
Secondly, the full extent and significance of the power will be apparent only once there is a code of practice. However, there is no draft code of practice and no commitment to produce one; there is merely a discretion. This is in sharp contrast to the Investigatory Powers Act, where key excerpts were made available in advance of Committee in both Houses. The impact of Schedule 11 on privacy is arguably much greater, yet we have seen no draft code of practice—indeed, we cannot be sure that a code of practice will be issued at all.
Finally, Schedule 11 contrasts with HMRC’s much more limited power to access information and documents for the purpose of checking a taxpayer’s tax position or collecting a tax debt. Under paragraph 4A of Schedule 36 to the Finance Act 2008, HMRC has been able to authorise a financial information notice on an individual, but not on a bulk basis. An FIN, unlike an AIN, must name the taxpayer to whom it relates. The most recent corporate report records that only 647 FINs were issued in the year to March 2023—an insignificant number in relation to the proposals in front of us. I hope that, when he responds, the Minister will be able to explain why investigating tax fraud is so carefully and narrowly constructed, whereas the DWP measures that will impact many more millions of people, a significant proportion of whom do not even receive benefits, are so broad.
On the day I tabled my amendments, I received an email from a woman who cares for her adult son with complex needs. She has a bank account to receive his benefits, from which she pays for his care. Under the terms of the Government’s proposal, all her bank accounts would be connected to his payments and therefore open to monitoring. Caring for an adult child is a heavy burden for a parent. Many parents do it with a love-filled grace that is humbling to witness, but it is a task that is out of season with the life that most of us live and all of us expect, in which children grow up, leave home and, as our strength wanes, come to our aid. It is also a service that the Government—and, by extension, all the rest of us—rely on.
In 2023, the University of Sheffield and Carers UK estimated that unpaid care, largely from family members, saved UK plc a whopping £162 billion a year, dwarfing the £120 million the Government expect to retrieve by these measures. It is nothing less than cruel to make a claimant or carer anxious, let alone homeless. But, if I cannot appeal to the Government’s compassion, I hope they will consider this: some who have contacted me suggested that they would no longer be prepared to continue to hold accounts on behalf of others; others suggested that their landlords would not be prepared to let them rent; and one said that their mental health had already suffered at the prospect. How many families need to put caring responsibilities back on the state, how many landlords need to make people on benefits homeless and how many people need to seek support from mental health services before the advertised gains are eroded?
For the life of me, I cannot work out whether these measures are intended to hurt or whether a focus on the shiny prospect of AI to sort out the DWP’s problems led incrementally to this place. Whichever it is, the measures are cruel to a degree that should worry us all. In a later group of amendments, we will discuss the capacity for technological systems to malfunction. Horizon might be top of mind, but Nationwide, McDonald’s, Tesco, Sainsbury’s, Greggs, 999, air traffic control and public bodies, including the NHS and DWP, have all experienced technology failures where service provision suffered.
I am not against technology—we live in a world organised by technological systems—but introducing a system that may impact the finances of up to 40% of the UK’s population, including the most vulnerable, the poorest and the oldest, without checks and balances and, indeed, while downgrading the protections on automated decision-making, is dangerous.
Can the Minister can tell the Committee what plans the DWP has for when things go wrong, when people have benefits stopped and their children go hungry because the computer says no? Can he tell us how it will prevent a repeat of the hounding of so-called fraudulent payments, as is currently being reported in relation to the carer’s allowance, until people lose homes, jobs and mental health as a result of overpayments? In many cases, they were the department’s own fault and, in one case, involved as little as 30p a week. What has the department learned from a similar Australian scheme that, over 12 months, resulted in 1 million additional welfare payments being stopped, often without warning and notified by text with no human to complain to? That scheme dissipated as it became unworkable.
5.15 pm
It is reported that the department anticipates 74,000 prosecutions and 2,500 custodial sentences over the course of 10 years. This is a dangerous move from a Government who have refused an AI regulator and are yet to absorb fully the costs and learnings of the Horizon scandal.
Lastly, it is disproportionate. I am supportive of tackling fraud—whether tax, money laundering, Covid, electoral or benefit—but the DWP already has the
powers to tackle suspected fraud. This point was echoed by the Information Commissioner, who, in December 2023, said that he had
“not yet seen sufficient evidence that the measure is proportionate”
and that he is
“unable, at this point, to provide my assurance to Parliament that this is a proportionate approach”.
Last month, he again confirmed that the Bill, as currently drafted, remains disproportionate.
It will be of interest to many noble Lords to understand that receiving the state pension, which is calculated by the Government and given without means testing to most recipients, means that their own bank accounts will be subject to the provisions. Meanwhile, I have submissions from 42 organisations representing the diverse concerns of tens of millions of UK citizens, including those providing end-of-life care. The Equality and Human Rights Commission has advised the Government that the clause should be removed. Bank lobbyists have highlighted the huge drain on resources that would be better placed fighting serious fraud and organised criminal gangs. Criticisms have been widely reported by local, national and specialist media, including Computer Weekly, while concerned parents are speaking out on Mumsnet, which any Government take on at their peril.
Nesta will shortly publish a report showing that one in four households with children that are eligible for universal credit do not claim it—roughly 183,000 households—meaning that £8.4 billion is left unclaimed each year. I ask the Minister to say how much investment will be allocated to the measures in front of us and how much will be reserved to ensure that children in the UK who are entitled to benefits do not grow up in poverty unnecessarily.
This measure is cruel, dangerous, disproportionate and unwanted. I hope the Minister will not try to suggest that any of these organisations or signatories to the amendments are unconcerned about fraud. Fraud is something that we all pay for in the price of goods, our taxes and the undermining of public services. However, what is being proposed is nothing less than a giant fishing expedition focused on the vulnerable, the poor and the old. The DWP is grasping at surveillance to tackle a crisis in management and staffing; the fact that these measures are restricted only to benefit fraud, not to the many more billions that could be clawed back from Covid loans and tax fraud, reveals that, as currently formulated, this measure is ideological, not practical. I beg to move.