Lord Russell of Liverpool (CB)

My Lords, I was very happy to add my name to the noble Baroness’s on the majority of these amendments. She has outlined the compelling need to do something in these interrelated areas sooner rather than later. I will not bore your Lordships but rather try and illustrate one or two examples of what is going on in real time. I will start with Copilot, a tool that most of us will be at least faintly familiar with—or will at least have heard of—and which is integrated into the Microsoft package that we use in Parliament. At the time that research was started by a group of organisations, including the 5Rights Foundation founded by the noble Baroness, Microsoft, which owns Copilot, stated publicly that Copilot was intended for users 18 and above, such as all your Lordships. However, in May 2025, the company announced without warning that Copilot would become available to users aged 13 and above. This shift raises important questions, none of which was answered at the time by Microsoft. The user age change proceeded without any published child rights impact assessment—which takes us back to an earlier group that we discussed—or documentation of any child participation in this decision. Using it in this way, without any child-focused safeguards, is unlikely to be in the best interests of the child, but currently there seems to be no satisfactory way to hold Microsoft to account for this. A second example is Vimeo, a popular video channel that some of your Lordships may be aware of. In a particular case where a child used Vimeo and some of its video capability to do his homework, a detailed look at what Vimeo had done with his homework demonstrated that 92 different commercial companies had gained access to this child’s data. Not very satisfactory. A third example is the problem that data protection officers—each school nominates one—as you might imagine, are struggling to try and understand and keep up with this blizzard of new technology and new tools. There are more and more sophisticated ways of, in theory, giving children a good education, underwritten by hideously long and complex terms and conditions, which I suspect even an artificial intelligence tool would have a problem making any sense of. An example would be perhaps one of our best known technology companies, Google. It has a very successful edtech business called Google Classroom. Google, as is its wont, packages different Google products together in the same package. Within Google Classroom, you have Google Maps, which I am sure most of your Lordships are familiar with and will use occasionally. Let us assume you are doing a geography project using Google Classroom and, as part of that, you decide to go into Google Maps to use its capability. The minute the child clicks on Google Maps, he or she loses the data protection provided by Google Classroom, which allows Google Maps to harvest all of their data. That is a real life current example of what is happening in plain sight. Data protection officers are not going to be aware of that, neither are headmasters, students or parents. It seems compelling that the people who should be most aware of that are the Government, the Information Commissioner and the bodies which are there to protect children and guide schools through this extraordinarily difficult complex morass of these competing technologies which, quite rightly to some extent, the Government are encouraging schools to take advantage of. But beware of what you encourage without understanding exactly what it is you are recommending.