Online Safety Bill

Third Reading

My Lords, I will make a brief statement on the devolution status of the Bill. I am pleased to inform your Lordships’ House that both the Scottish Parliament and Senedd Cymru have voted to grant consent for all the relevant provisions. For Scotland, these provisions are the power to amend the list of exempt educational institutions, the power to amend the list of child sexual exploitation and abuse offences and the new offence of encouraging or assisting serious self-harm. For Wales, the provisions are the power to amend the list of exempt educational institutions, the false communications offence, the threatening communications offence, the flashing images offences and the offence of encouraging or assisting serious self-harm.

As noble Lords will be aware, because the Northern Ireland Assembly is adjourned the usual process for seeking legislative consent in relation to Northern Ireland has not been possible. In the absence of legislative consent from the Northern Ireland Assembly, officials from the relevant UK and Northern Ireland departments have worked together to ensure that the Bill considers and reflects the relevant aspects of devolved legislation so that we may extend the following provisions to Northern Ireland: the power to amend the list of exempt educational institutions, the false communications offence, the threatening communications offence and the offence of encouraging or assisting serious self-harm. His Majesty’s Government have received confirmation in writing from the relevant Permanent Secretaries in Northern Ireland that they are content that nothing has been identified which would cause any practical difficulty in terms of the existing policy and legislative landscape. Historically, this area of legislation in Northern Ireland has mirrored that in Great Britain, and we believe that legislating without the consent of the Northern Ireland Assembly is justified in these exceptional circumstances and mitigates the risk of leaving Northern Ireland without the benefit of the Bill’s important reforms and legislative parity.

We remain committed to ensuring sustained engagement on the Bill with all three devolved Administrations as it progresses through Parliament. I beg to move that the Bill be read a third time.

Clause 44: Secretary of State’s powers of direction

Amendment 1

1: Clause 44, page 45, line 30, leave out from “must” to end of line 31 and insert “, as soon as reasonably practicable, be published and laid before Parliament.” Member’s explanatory statement This amendment provides that, in addition to publishing a direction under this Clause, the Secretary of State must also lay it before Parliament. Additionally the Secretary of State is required to do these things as soon as reasonably practicable. There is an exemption in certain circumstances (as to which see the next amendment to this Clause in my name).

My Lords, His Majesty’s Government have listened carefully to the views expressed in Committee and on Report and have tabled amendments to the Bill to address concerns raised by noble Lords. Let me first again express my gratitude to my noble friend Lady Stowell of Beeston for her constructive engagement on the Secretary of State’s powers of direction. As I said during our previous debate on this topic, I am happy to support her Amendments139 and 140 from Report. The Government are therefore bringing forward two amendments to that effect today.

Noble Lords will recall that, whenever directing Ofcom about a code, the Secretary of State must publish that direction. Amendment 1 means that, alongside this, in most cases a direction will now need to be laid before Parliament. There may be some cases where it is appropriate for the Secretary of State to withhold information from a laid direction: for example, if she thinks that publishing it would be against the interests of national security. In these cases, Amendment 2 will instead require the Secretary of State to lay a statement before Parliament setting out that a direction has been given, the kind of code to which the direction relates and the reasons for not publishing it. Taken together, these amendments will ensure that your Lordships and Members of another place are always made aware as soon as a direction has been made and, wherever possible, understand the contents of that direction. I hope noble Lords will agree that, after the series of debates we have had, we have reached a sensible and proportionate position on these clauses and one which satisfies your Lordships’ House.

I am also grateful to the noble Baroness, Lady Kennedy of The Shaws, for her determined and collaborative work on the issue of threatening communications. Following the commitment I made to her on Report, I have tabled an amendment to make it explicit that the threatening communications offence captures threats where the recipient fears that someone other than the person sending the message will carry out the threat. I want to make it clear that the threatening communications offence, like other existing offences related to threats, already captures threats that could be carried out by third parties. This amendment does not change the scope of the offence, but the Government understand the desire of the noble Baroness and others to make this explicit in the Bill, and I am grateful to her for her collaboration.

Under the Clause 101 information-gathering power before it was amended, Ofcom would clearly have been able to require providers to carry out such tests and then submit the requested information to it. However, it was not explicit that Ofcom could observe tests itself, which in many cases would be significantly more efficient. I am pleased to announce that, to ensure that the drafting meets the Government’s policy intention, and in recognition of these concerns, the Government have tabled amendments to change Ofcom’s power of “remote access” to a power to “view information remotely”. This clarifies that Ofcom cannot use the power to require companies to give access to its systems, addressing concerns which noble Lords raised that the power was too broad and could be used in a way that might create security risks.

Furthermore, we have tabled amendments which would limit the scope of this power so that, rather than being able to use it to view remotely any information necessary to carry out its online safety functions, Ofcom may view remotely only specific types of information in relation to the operation of systems, processes or features, including algorithms, or to observe tests or demonstrations remotely. We have also listened to the calls for additional safeguards and have tabled amendments which would ensure that the power to view information remotely could be exercised only by persons authorised by Ofcom. Moreover, Ofcom will be required to issue a seven-day notice before exercising this power.

These further protections and limitations are in addition to the existing safeguards in the Bill, which include Ofcom’s legal duty to exercise this power in a way that is proportionate, ensuring that undue burdens are not placed on businesses. The proportionality safeguard would extend to issues of security and privacy, as well as the duration of any tests. In observing algorithmic assessments, Ofcom would generally expect to require a service to use a test data set. There may be circumstances where Ofcom asks a service to execute a test using data it holds—for example, in testing how content moderation systems respond to certain types of content on a service as part of an assessment of the systems and processes. In this scenario, Ofcom may need to use a provider’s own test data set containing content which has previously violated its own terms of service. However, Ofcom can process users’ personal data only in a way compatible with UK data protection law and must take into account a platform’s own obligations under relevant data protection legislation. I hope that these amendments address the concerns noble Lords raised during our previous debate, while ensuring that Ofcom has the information-gathering powers it needs to regulate effectively—in particular, to hold providers to account for their use of algorithms.

The Government have also tabled a number of minor and technical amendments to improve the drafting of the Bill. These include an amendment to Clause 52(3), which is about Ofcom’s duties to produce guidance. This amendment updates a cross-reference in this clause. We are also making technical amendments to include the relevant information powers and offences in Clause 121, which is about the admissibility of statements in criminal proceedings, and we are making an amendment to Clause 162 which defines age assurance as

“age verification or age estimation”.

I beg to move.

I am very surprised that the Minister’s speech did not accede to the recommendations from the Delegated Powers and Regulatory Reform Committee, published last week, in the report we made after we were forced to meet during the Recess because of the Government’s failure with this Bill. From his private office, we want answers to what is set out in paragraphs 6 and 7:

“We urge the Minister to take the opportunity during the remaining stages of the Bill”—

which is today—

“to explain to the House”—

I will not read out the rest because it is quite clear. There are two issues—Henry VIII powers and skeleton legislation—and we require the Minister to accede to this report from a committee of the House.

I think that every member of the committee was present at the meeting on 29 August, the day after the bank holiday. We were forced to do that because the Government published amendments to Clauses 216 and 217 on 5 July, but they did not provide a delegated powers memorandum until 17 July, the date they were debated in this House. That prevented a committee of the House being able to report to the House on the issue of delegated powers. We are not interested in policy; all we are looking at is the delegated powers. We agreed that one of us would be here—as it is not a policy issue—to seek that the Minister responds to the recommendations of this committee of the House. I am very surprised that he has not done that.

My Lords, I am very concerned to hear the contribution from the noble Lord, Lord Rooker. I certainly look forward to hearing what the Minister says in reply. I confess that I was not aware of the Delegated Powers and Regulatory Powers Committee’s report to which he referred, and I wish to make myself familiar with it. I hope that he gets a suitable response from the Minister when he comes to wind up.

I am very grateful to the Minister for the amendments he tabled to Clause 44—Amendments 1 and 2. As he said, they ensure that there is transparency in the way that the Secretary of State exercises her power to issue a direction to Ofcom over its codes of practice. I remind the House—I will not detain your Lordships for very long—that the Communications and Digital Select Committee, which I have the privilege to chair, was concerned with the original Clause 39 for three main reasons: first, as it stood, the Bill handed the Secretary of State unprecedented powers to direct the regulator on pretty much anything; secondly, those directions could be made without Parliament knowing; and, thirdly, the process of direction could involve a form of ping-pong between government and regulator that could go on indefinitely.

However, over the course of the Bill’s passage, and as a result of our debates, I am pleased to say that, taken as a package, the various amendments tabled by the Government—not just today but at earlier stages, including on Report—mean that our concerns have been met. The areas where the Secretary of State can issue a direction now follow the precedent set by the Communications Act 2003, and the test for issuing them is much higher. As of today, via these amendments, the directions must be published and laid before Parliament. That is critical and is what we asked for on Report. Also, via these amendments, if the Secretary of State has good reason not to publish—namely, if it could present a risk to national security—she will still be required to inform Parliament that the direction has been made and of the reasons for not publishing. Once the code is finalised and laid before Parliament for approval, Ofcom must publish what has changed as a result of the directions. I would have liked to have seen a further amendment limiting the number of exchanges, so that there is no danger of infinite ping-pong between government and regulator, but I am satisfied that, taken together, these amendments make the likelihood of that much lower, and the transparency we have achieved means that Parliament can intervene.

My Lords, I, too, thank the Minister for his engagement and for the amendments he has tabled at various stages throughout the passage of the Bill.

Amendment 15 provides a definition:

““age assurance” means age verification or age estimation”.

When the Minister winds up, could he provide details of the framework or timetable for its implementation? While we all respect that implementation must be delivered quickly, age verification provisions will be worthless unless there is swift enforcement action against those who transgress the Bill’s provisions. Will the Minister comment on enforcement and an implementation framework with direct reference to Amendment 15?

My Lords, as this is a new stage of the Bill, I need to refer again to my entry in the register of interests. I have no current financial interest in any of the regulated companies for which I used to work, in one of which I held a senior role for a decade.

I welcome Amendment 7 and those following from it which change the remote access provision. The change from “remote access” to “view remotely” is quite significant. I appreciate the Minister’s willingness to consider it and particularly the Bill team’s creativity in coming up with this new phrasing. It is much simpler and clearer than the phrasing we had before. We all understand what “view remotely” means. “Access” could have been argued over endlessly. I congratulate the Minister and the team for simplifying the Bill. It again demonstrates the value of some of the scrutiny we carried out on Report.

It is certainly rational to enable some form of viewing in some circumstances, not least where the operations of the regulated entities are outside the United Kingdom and where Ofcom has a legitimate interest in observing tests that are being carried out. The remote access, or the remote viewing facility as it now is, will mean it can do this without necessarily sending teams overseas. This is more efficient, as the Minister said. As this entire regime is going to be paid for by the regulated entities, they have an interest in finding cheaper and more efficient methods of carrying out the supervision than teams going from London to potentially lots of overseas destinations. Agreement between the provider and Ofcom that this form of remote viewing is the most efficient will be welcomed by everybody. It is certainly better than the other option of taking data off-site. I am glad to see that, through the provisions we have in place, we will minimise the instances where Ofcom feels it needs data from providers to be taken off-site to some other facility, which is where a lot of the privacy risks come from.