Sir John Whittingdale

Although the hon. Gentleman and I had a robust but nevertheless amicable exchange on Report, it was in fact his colleague, the hon. Member for Barnsley South (Stephanie Peacock), who took that Bill through Committee. It was not until Report that the Conservative Government decided to add measures to the Bill—measures that I fully supported, of course, but which nevertheless made the task a little more difficult, as they resulted in a lack of agreement across the Chamber, which had previously pertained throughout the passage of the Bill. It is a pleasure to debate these matters again, and, indeed, to see not just the hon. Gentleman but some of the officials who laboured to take that Bill through Committee with me, and are now tasked with doing it all over again. One point about the Bill that the Secretary of State did not refer to is that a lot of it seeks to improve the working of data protection law in this country and make data more accessible while safeguarding important privacy rights. However, the fact that we are able to make changes to improve our data protection laws is a consequence of Britain no longer being a member of the European Union—otherwise, we were trapped by the GDPR requirements. This is an example of where we can draft legislation to benefit people in this country and not have to accept top-down imposed legislation from Brussels—another reason why I was an enthusiastic supporter of the previous Bill. One issue that featured a lot during the previous debate, and which I am slightly surprised has not been mentioned so far, is whether the changes made in the Bill would in any way jeopardise data adequacy recognition by the EU. [Interruption.] I am sorry; the hon. Member for Harpenden and Berkhamsted (Victoria Collins) did mention it, but the Secretary of State did not. Data adequacy is an important issue, and concern has been expressed outside the House that the Bill might put it at risk. We were very keen to ensure that that was not the case, and we worked closely—as I am sure the Minister continues to do—with the Information Commissioner, John Edwards, who has a lot of experience in this field, having previously overseen the data protection regime in New Zealand, which enjoys data adequacy but is not identical to GDPR. I am sure, given that this Bill is so similar, that there is no risk to data adequacy, which is of importance to many large firms. The Bill covers a lot of other areas that we regarded as important and which have remained largely unchanged, such as the operation of the Information Commissioner’s Office, digital identification, the national underground asset register, the electronic use of the register of births and marriages, the extension of smart data use, automated decision making, and the retention of information where required by coroners after child deaths. All those areas were included in the previous Bill, and I am delighted that they are still there in this one.