Lord Hanson of Flint:

Moved by Lord Hanson of Flint

32: Schedule 3, page 248, leave out lines 27 to 30Member’s explanatory statementThis Amendment removes provision that is no longer needed because of the general data protection override in section 183A of the Data Protection Act 2018, which was inserted by section 106(2) of the Data (Use and Access) Act 2025 and came into force on 20 August 2025.

My Lords, the amendments in this group are technical amendments that affect provisions in the Bill containing data-sharing provisions. Within the relevant clauses and schedule, there are general provisions that bar the disclosure of data if such disclosures would contravene data-protection legislation. These protections against data-protection overrides are now no longer needed within the Bill, as a general provision to the same effect is now made by Section 183A of the Data Protection Act 2018, which was inserted by Section 106(2) of the Data (Use and Access) Act 2025. That Act came into effect on 20 August and, now that the general provision is in force, the amendments remove the redundant duplicative provisions from the Bill. I beg to move.

My Lords, I welcome the Minister’s confirmation that the amendments are matters of purely technical housekeeping, because they remove provisions that are no longer needed, and that this is caused by the insertion of Section 183A into the Data Protection Act 2018 by Section 106(2) of the Data (Use and Access) Act 2025. I must confess, having spent time in the salt mines of the then Data (Use and Access) Bill, that this did not come to my attention at the time, but I am sure it is a valuable piece of legislation.

This creates an overarching safeguard, ensuring that new enactments such as this Bill do not automatically override core data protection requirements. However, I must say that the fact that the Government’s intentions are technically sound in this respect does not remove the need for clarification and specific statutory safeguards in certain highly sensitive policy areas, which we will be debating in due course. I thought I would put the Minister on notice that we will be calling for the adoption of additional safeguards ensuring that new powers in the Bill are fair and proportionate: for instance, the DVLA access and facial recognition provisions in Clause 138, which grant powers for regulations concerning police access to DVLA driver licensing information. We remain deeply concerned that the power granted by Clause 138 could be used to create a vast police facial recognition database, and we will be looking for additional safeguards.

On Clauses 192 to 194, concerning international law enforcement information-sharing agreements, the cross-border transfer of data inherent in such agreements presents significant civil liberties concerns, so we will be calling for mandatory privacy impact assessments. That is just a taster.

In conclusion, while the Government’s amendments are technical in nature, we will in due course be using the opportunity to embed specific, robust statutory safeguards for a number of new powers in the Bill.

My Lords, it is all too often the case that, when the Government say they are bringing minor and technical amendments to a Bill, those amendments are neither minor nor technical in nature. However, with these amendments, that is genuinely the case. There is, therefore, little for me to say in response to this group of amendments. The Data (Use and Access) Act 2025 was passed by this House earlier this year and, as far as I am aware, the data protection override in Section 106 of that Act was not queried or opposed by noble Lords during its passage, and no Amendment was proposed to that Clause. I therefore have no issue with these amendments.

I am grateful and all I say in response is that the sooner we get to Clauses 132 and 192, the better.

Amendment 32 agreed.