Lord in Waiting/Government Whip (Lord Katz) (Lab)

My Lords, it is a pleasure to kick off what I very much hope will be the last day in Committee—not to jinx it. I am grateful to the noble Lord, Lord Clement-Jones, for setting out the case for these amendments, which relate to the provisions in Clauses 192 to 194. International law enforcement information-sharing agreements are a vital tool that provide law enforcement officers with access to new intelligence to fight crime, increase public protection and reduce the threat of societal harm posed by international criminality. To clarify, these measures provide the appropriate national authority with the power to make regulations to implement both new and existing legally binding international law enforcement information-sharing agreements. Such regulations may, for example, make provision for the technical and, where appropriate, operational detail to facilitate the information sharing provided for in a particular agreement. The UK is recognised globally for having one of the most robust data protection regimes, anchored in the Data Protection Act and UK GDPR, which ensure that privacy is protected even in the most complex areas of law enforcement and international co-operation. This Government are committed to maintaining these high standards and ways of working to ensure that data protection and privacy are not compromised as we strengthen cross-border security. UK law already requires data controllers to conduct a data protection impact assessment for any activity that is likely to result in a high risk to individuals’ rights and freedoms. Public bodies and law enforcement authorities are bound by the Human Rights Act, the European Convention on Human Rights and the Equality Act, and they must duly assess activities accordingly. Existing data protection principles and statutory requirements, particularly data protection impact assessments, already cover the concerns raised by the noble Lord’s amendments, making new duties duplicative and unnecessary. As is required under Article 36(4) of the UK GDPR, regulations made under this power as they relate to the processing of personal data will require consultation with the Information Commissioner’s Office. The international law enforcement information-sharing agreements preceding the making of regulations under Clause 192 are subject to the usual treaty ratification procedures, including the provisions regarding parliamentary scrutiny provided for in Part 2 of the Constitutional Reform and Governance Act 2010. Any such agreement will be laid before Parliament with an Explanatory Memorandum, which would include the background to why the Government are entering into the agreement, its implementation and a note of any existing domestic legislation and human rights considerations. Additionally, an overseas security and justice assistance assessment will be required. Introducing additional scrutiny requirements would risk duplication and provide no additional substantive information to Parliament beyond what is currently available. We must also consider the operational sensitivity of such processing. Law enforcement data sharing involves sensitive systems and procedures. Publication of such assessments may inadvertently expose vulnerabilities or methods that criminals or adversarial parties may seek to exploit. Ministers regularly update Parliament on international law enforcement co-operation, including data sharing. I have a long list of examples before me—I will not detain your Lordships with too many of them. The Cabinet Office issued the Government’s response to the EAC report Unfinished Business: Resetting the UK-EU Relationship on 23 January this year and published it shortly thereafter. A couple of days before, on 21 January, my noble friend Lord Hanson appeared before the EAC to discuss the UK-EU reset, which focused on the LEJC, migration and the border partnership. You do not have to go far back for another example: on September 8, the Foreign Affairs Committee questioned the Cabinet Office and FCDO Ministers on post-summit implementation, co-ordination and future UK-EU co-operation frameworks. That is just the tip of the iceberg when it comes to parliamentary oversight of these matters. Law enforcement authorities and government departments work closely together to assess international law enforcement capabilities and their effectiveness. Such assessments, by their very nature, are operationally sensitive and would not be suitable for publication. Specifically singling out international law enforcement data sharing also risks presenting a skewed picture of wider domestic operational activity, given that law enforcement outcomes are often the result of multiple capabilities and instruments being used. Owing to the breadth of law enforcement authorities that may be engaged in such information-sharing activity, and the likely multiple data systems, sourcing and collating operational data that would be suitable for inclusion in a published annual report would create significant demand and risk diverting resource from other critical law enforcement priorities. We must also consider the implications for the international parties to such agreements, who may have concerns about the publication of such data and assessment, particularly where it may relate to operationally sensitive matters. That, in turn, may affect and limit the negotiability of future agreements. Such reports could potentially expose operational practices that it may not be appropriate to place in the public domain. We must be mindful that agreements will vary in scope with international partners; to publish detail on the volumes of data exchanged may inadvertently cause concern from international partners on differing operating scopes. Finally, as to whether regulations made under Clause 192 should be subject to the draft affirmative procedure, I simply point the noble Lord to the report on the Bill by the Delegated Powers and Regulatory Reform Committee, which made no such recommendation. We are usually held to the high standards of that committee and admonished when it finds us wanting. In this case, we were not found wanting, which I think is a very good tick that I pray in aid. I understand the concerns of the noble Lord, Lord Clement-Jones, about these clauses, but I hope that I have reassured him that data protection remains at the heart of our approach. With that in mind, I ask him to withdraw his amendment.