My Lords, the question that we are debating at the moment as we approach the enactment of the Bill is whether any extra words in
any of these amendments are needed to provide more safeguards and greater public trust and confidence. The bit of law which is paramount but which has not been mentioned so far is the Human Rights Act. This Act, in Section 3, requires that all legislation, including this Bill, must be read and given effect to, if it is possible to do so, compatibly with the convention rights. One convention right, in Article 8, is the right to personal privacy. The Human Rights Act also provides that if any public authority, which includes the Secretary of State and any body performing functions of a public nature, were to breach the right to privacy, it would be liable to obligations, damages and other remedies under the Act. We do not have a written constitution which guarantees privacy; instead, we have the data protection legislation, which is broad-ranging, and the Human Rights Act.
The right to privacy requires three things. One is reasonable legal certainty where there is to be any invasion of privacy—one must know what it is for. The second is a legitimate aim—it must be done for a proper purpose. The third thing is that any invasion must satisfy the principle of proportionality—it must not be excessive. There is a lot of case law on this. Indeed, I was involved in one of the cases years ago in the Court of Appeal—called, I think, Source Informatics —which dealt with the lawfulness of supplying anonymised patient data.
I do not think it is sensible to add further language or further mechanisms over and above those that the Minister has described this afternoon. The more specific we become and the more we go on adding, the more ambiguities we create over what the additional words mean and how they might be interpreted. My view is that it is much better to use the Human Rights Act, the data protection legislation and the specific safeguards that the Minister has adumbrated very clearly today. In my view, they completely satisfy the right to patients’ personal privacy and I cannot think that adding these other words will add to public confidence. It seems to me that public confidence depends more on leadership and public information based upon the framework that we have.
Therefore, I hope that we do not divide the House on this. I hope that we are all able to agree that confidentiality and privacy are vital, as is public confidence, but that we should not overlegislate and overprescribe. In particular, we should not do so when we are considering Commons amendments at the 11th and a half hour before midnight, and we may later come to regret anything that we now add which creates further problems and further ambiguities.