Lord Vaux of Harrowden (CB)

My Lords, Amendments 84 and 85 attempt to strengthen important safeguards around the use of information that is gained through an EVM. The Minister has quite rightly said that the scope of the information the banks can provide in response to an EVM is tightly limited. She is right, and that is a very significant improvement to the previous incarnation of the Bill. As currently framed, the only information that can be provided to the Secretary of State by the bank is specified details about the account, such as sort code and account number; specified details about the account holder, such as name and date of birth; and specified details about how the account meets the eligibility indicators. It is also clear in the Bill that transaction data or special category data may not be provided. So far, so good and, as I said, it is a great improvement. But there is another important potential loophole here. Clause 72 gives the Secretary of State the power to require much more intrusive information if the Secretary of State “has reasonable grounds to suspect that a person has committed, is committing or intends to commit a DWP offence”. So, if the existence of an eligibility indicator alone would meet the threshold of “reasonable grounds to suspect”, then the tightly drawn restrictions on the data that banks can provide under an EVM become somewhat meaningless. It will just move on to the next phase almost automatically. We have had a lot of discussion around automation, and I agree with the noble Baroness, Lady Fox, that given the volumes of data that will be provided over time, it seems extremely likely that it will—in fact, it is extremely unlikely that it will not—be processed automatically by the DWP, which will choose which ones to investigate more deeply. We have heard about the human elements and will come on to those in the second amendment in this group. but the code of practice does not cover the transfer from EVM to Clause 72’s more intrusive data searching. Nothing in the code of practice or the Bill would prevent this eligibility indicator being used as reasonable grounds to suspect and, therefore, the Clause 72 provision being triggered with no other safeguard. There may be many reasons why the existence of an eligibility indicator might be entirely innocent. The impact assessment and the noble Baroness have given the example of authorised disregards and genuine error—and genuine error on the part of both the individual and the department. So it seems that, before exercising the robust and intrusive powers under Clause 72, much more should be required, or at least more should be required, than just the existence of an eligibility indicator alone, and I stress “alone”. That is what Amendment 84 tries to achieve, and I think this is probably in line with what the noble Baroness intends, so I hope that this or something like it will be acceptable. The second amendment, Amendment 85, deals with another critically important safeguard. In response to various concerns raised about the use of algorithms, algorithmic processing, the use of AI and so on, the noble Baroness has stated very clearly that information must be reviewed by a human person before action is taken, and a previous group discussed how bias and stereotyping can creep into automated systems—I will not repeat that. But again, the human element—the human review—does not appear anywhere in the Bill. There is a reference to human decision-making in paragraph 4.31 of the draft code of practice: “No data source is perfect or infallible. That is why in fraud and error, a human will make any final decisions that affect benefit entitlement, and any indications of potential fraud or error will be looked at comprehensively”. But this does not set out any level of seniority or qualification, and it covers only final decisions that affect benefit entitlements and not, for example, decisions to affect the intrusive investigative powers that Amendment 84 is looking at. More importantly, the code of conduct can be changed at will by the department; there is no parliamentary oversight or what have you. As I have said before, I do not doubt the noble Baroness’s intentions in this respect, but the Bill will outlast her tenure and indeed her party’s tenure. Future Governments or Ministers may not have vulnerable people’s interests at heart in the same way that she does. Imagine a future Government applying a DOGE-style approach to this. The requirement for any decision to be taken by a suitably qualified and senior human is such an important safeguard that I believe it must be in the Bill and not left to the whim of any future Government who might wish to simply automate the whole process—and they could do that: they just change the code of conduct. The issue is not about decisions that affect benefit entitlement alone; as I say, appropriate human review should cover also the use of the more intrusive powers under Clause 72, and the code of conduct does not cover that at all. I am very happy to discuss the wording, but the principle of suitably qualified and senior human review before decisions are taken is, for me, one of the key safeguards. I hope the noble Baroness will be able to look sympathetically at this amendment, especially as all it does, I think, is to codify what she has consistently said will be the case. I beg to move.