Lord Katz (Lab)

My Lords, I am once again grateful to the noble Lord, Lord Clement-Jones, for his amendment and for returning to this very important subject. I am also grateful to the noble Baroness, Lady Coffey, the noble Lord, Lord Fuller, and the noble Lord, Lord Cameron of Lochiel, for contributing to this short but vital debate. I thank the noble Lord, Lord Clement-Jones, for taking the time last week to meet with myself and officials to discuss this issue. Cyber security professionals play a crucial role in protecting the UK’s digital systems. I support the intention behind this amendment; we broadly agree on the benefits of introducing a statutory defence. That is why we have been developing a limited defence to the offence of unauthorised access to computer material, provided for in Section 1 of the Computer Misuse Act, that will allow trusted cyber security researchers to spot and report vulnerabilities in a responsible manner. We have made significant progress in shaping a proposal, but some details, including ensuring adequate safeguards, still need refinement. To date, we have briefed over 100 industry and expert stakeholders, including both cyber security firms and system owners, to finalise the approach. Engagement to date has revealed strong support for reform, alongside clear calls to ensure that the defence is workable for a range of cyber security researchers. We will provide a further update once that work is complete. The noble Lord, Lord Fuller, said that the principle of a limited statutory defence risks creating a hacker’s charter. I stress that we are working with the whole industry—including, of course, the system owners—to develop a nuanced approach that is future-proofed and allows for responsible work in this area. I reassure the noble Lord, Lord Clement-Jones, that the Government intend to legislate for a statutory defence against Section 1 of the Computer Misuse Act once this work has been completed and when parliamentary time allows. We are not quite there yet, so this Bill is not the right vehicle, but we are committed to delivering a solution that is proportionate and practical for both researchers and law enforcement. Like his colleague on the Liberal Democrat Front Bench—the noble Baroness, Lady Pidgeon—did earlier, the noble Lord tempts me to somehow forecast what might be in a future King’s Speech. I cannot be that precise. As a possible response, the noble Lord mooted the Cyber Security and Resilience (Network and Information Systems) Bill, which will be a carry-over Motion. I am not going to get into the detail of that tonight, but I am very keen that we stay in communication. The noble Lord has asked some complex questions. He is going to write to me, and I am very happy to respond in kind. In light of the progress we made at the meeting we had last week, and the progress we were making on developing a proposal that has acceptance across the industry and is future-proofed and nuanced—we are, of course, very keen to continue the dialogue—I hope the noble Lord will withdraw his amendment.