Cambridge Analytica — House of Lords, 2018-03-19
Topic: Civil Rights
Thomas Ashton (Conservative, Centre-right): My Lords, with the leave of the House, I will repeat in the form of a Statement the Answer given by my right honourable friend the Secretary of State for Digital, Culture, Media and Sport to an Urgent Question in another place. The Statement is as follows: "Mr Speaker, the revelations this weekend of a serious alleged privacy breach involving Facebook data are clearly very worrying. It is reported that a whistleblower told the Observer newspaper that Cambridge Analytica exploited the Facebook data of over 50 million people globally In our increasingly digital world, it is essential that people can have confidence that their personal data will be protected. The Information Commissioner, as the data regulator, is already investigating as part of a broader investigation into the use of personal data during political campaigns. The investigation is considering how political parties and campaigns, data analytics companies and social media platforms in the UK have used people’s personal information to micro-target voters. As part of the investigation, she is looking at whether Facebook data was acquired and used illegally. The commissioner has already issued 12 information notices to a range of organisations, using powers under the Data Protection Act 1998. It is imperative that when any organisation receives an information notice, it must comply in full. We expect all organisations involved to co-operate with this investigation in whatever way the Information Commissioner sees fit. I am sure the House will understand that there is only so far I can go in discussing specific details of specific cases The appropriate use of data is important for good campaigning. Canvassing someone’s voting intention is as old as democracy itself. Indeed, we do it in this House every day. But it is important that the public are comfortable with how information is gathered, used and shared in modern political campaigns, and it is important that the Information Commissioner has the enforcement powers she needs. The Data Protection Bill, currently in Committee, will strengthen legislation around data protection and give her tougher powers to ensure organisations comply. The Bill gives her the powers to levy significant fines for malpractice of up to 4% of global turnover against organisations that block the ICO’s investigations. It will enhance control, transparency and security of data for people and businesses across the UK Because of the lessons learned in this investigation and the difficulties the Information Commissioner has found in getting appropriate engagement from the organisations involved, she has recently requested yet stronger enforcement powers. The power of compulsory audit is already in the Bill, and she has proposed additional criminal sanctions. She has also made the case that it has become clear that, in order to deal with complex investigations like these, the power to compel testimony from individuals is now needed. We are considering these new proposals, and I have no doubt that the House will consider this as the Bill passes through Data, properly used, has massive value and social media is a good thing, so we must not leap to the wrong conclusions and shut down all access. We need rules to ensure transparency, clarity and fairness, and this is what the Data Protection Bill will provide. After all, strong data protection laws give citizens confidence, and that is good for everyone".