Before I address this group, may I make a brief correction? I confused my information notices earlier: it is 10 days to comply, with no right of appeal, but we are happy to have conversations with those who, for whatever reason, are unable to provide the information that we require, and to work with them to ensure that they can.
I will speak to clause 74 and schedule 3, and then colleagues can speak to the various amendments. Clause 74 inserts proposed new section 121DB and proposed new schedule 3B, which is outlined in schedule 3 to the Bill, into the Social Security Administration Act 1992. The proposed new clause and schedule contain provision for the eligibility verification measure, and they must stand part of the Bill so the Secretary of State can issue a bank or other financial institution with an eligibility verification notice, which will help the DWP to identify incorrect payments in the social security system.
Ensuring that a person is eligible for the benefit they are receiving will help to prevent fraud and genuine errors so that people do not accidentally build up large debts, with all the worry and distress that causes. The measures before us are tough on fraud, but they are also about: fairness to those who play by the rules and rely on the social security system; fairness to those who make errors, by helping to identify potential errors sooner; and fairness to taxpayers, by ensuring that every pound is spent wisely, responsibly and effectively on those who need it and are legally entitled.
Fraud and error in the welfare system were responsible for the overpayment of almost £10 billion in 2023-24. Since the pandemic, £35 billion of taxpayers’ money has been incorrectly paid to those not entitled to that money. These measures alone will save £940 million over the next five years, up to 2029-30—a figure that has been certified by the independent Office for Budget Responsibility.
An eligibility verification notice issued under schedule 3B will require a bank or other financial institution to look within its own datasets and to provide data to help the DWP identify where someone might not meet the eligibility criteria for a particular benefit. To do that, the notice will contain defined criteria that the bank or other financial institution must use to detect accounts that might not meet the eligibility rules for a certain benefit—for instance, accounts that receive universal credit but have over £16,000 in capital, which is above the normal limit to remain eligible.
Only then, if there is an indication that an individual may not be eligible for the benefit they are receiving, will the bank or other financial institution share limited information about the account to allow the DWP to undertake further inquiries, as necessary. We know that a customer might hold money in more than one account, and not necessarily in the one that receives the benefit payment. For that reason, schedule 3B requires a bank or other financial institution to look at all the accounts it provides to the individual, and to compare them with the criteria set out in the notice.
The measures also contain important safeguards to protect benefit recipients and associated individuals, to protect their data, and to ensure that it is not unduly onerous for a bank or other financial institution to comply with an eligibility verification notice. Those safeguards, which are extensive, include clearly restricting who the DWP can collect information on, and for what purpose; clearly restricting how the DWP can use the information gathered under these powers; tightly limiting the accounts in scope, including the sharing of data on UK accounts; limiting the type of information that can and cannot be requested, with clear provisions that certain data, such as information on transactions, cannot be shared; and showing that a human will always be involved in decisions that affect benefit entitlement. A code of practice must be produced, providing guidance for financial institutions on their obligations under this legislation.
To protect the privacy of our customers and associated individuals, such as appointees, we must take steps to ensure that limited information is shared with the DWP—the minimum to enable further inquiries, where necessary. That is why part 2 of proposed new schedule 3B outlines provision for a comprehensive penalties regime to prohibit banks or other financial institutions from sharing information that is not permitted to be shared under the measure, as outlined in paragraphs 1(4) and (5). This can include information about individual transactions and special category data, such as data about an individual’s health, ethnic origin or political opinions.
If a financial institution wishes to dispute a notice, it has recourse under proposed new schedule 3B. Specifically, it will have access both to a process to ask the DWP to review the decision to issue a notice, as set out in part 3 of proposed new schedule 3B, and to an appeals process to formally dispute the requirements of a notice, as set out in part 4. Part 5 will mean that the Secretary of State must publish a code of practice to govern the use and operation of the measure, including data received under it.
I said I would spend a moment on codes of practice where appropriate, so I will now speak to this in more detail. The code of practice for EVM will provide further guidance for banks and other financial institutions on complying with notices, and information for those who may be affected by the measure. It will include detail on the eligibility of verification notice and its purpose, including how it will be sent, who should comply with it, and further details on the accounts in scope, such as linked accounts and appointees. It will specify further the type of information that the DWP will request from financial institutions, and the type of information that is prohibited, such as transaction and special category data. It will also set out how the DWP will use the data received in response to a notice, beyond what is in the Bill.
The code will also set out more detail on the safeguards to ensure that the measure is exercised in a proportionate and measured manner, along with the mechanisms embedded to ensure accountability. This includes safeguards for individuals, financial institutions and the data itself, as well as the independent oversight of the measure. It will explain how data must be handled and treated once received, along with the confidentiality and security requirements and compliance with rules and provisions set out in the Data Protection Act 2018 and the UK general data protection regulation. It will also set out clear avenues for compliance concerns to be raised.
The eligibility verification measure is projected to save £940 million over the next five years, and it is a vital part of a package of measures that will save up to £1.5 billion over the next five years.