Investigatory Powers Act 2016

From Wikipedia, the free encyclopedia

Investigatory Powers Act 2016
Act of Parliament
Parliament of the United Kingdom
Long titleAn Act to make provision about the interception of communications, equipment interference and the acquisition and retention of communications data, bulk personal datasets and other information; to make provision about the treatment of material held as a result of such interception, equipment interference or acquisition or retention; to establish the Investigatory Powers Commissioner and other Judicial Commissioners and make provision about them and other oversight arrangements; to make further provision about investigatory powers and national security; to amend sections 3 and 5 of the Intelligence Services Act 1994; and for connected purposes.
Citation2016 c. 25
Introduced by
Territorial extent England and Wales, Scotland and Northern Ireland
Dates
Royal assent29 November 2016
Commencement29 November 2016
Other legislation
Amends
Status: Current legislation
History of passage through Parliament
Text of statute as originally enacted
Revised text of statute as amended

The Investigatory Powers Act 2016 (c. 25) (nicknamed the Snoopers' Charter)[1] is an Act of the Parliament of the United Kingdom which received royal assent on 29 November 2016.[2][3] Its different parts came into force on various dates from 30 December 2016.[4] The Act comprehensively sets out and in limited respects expands the electronic surveillance powers of the British intelligence agencies and police.[4] It also claims to improve the safeguards on the exercise of those powers.[5]

Drafting and scrutiny[edit]

In 2014 the British government asked David Anderson, the Independent Reviewer of Terrorism Legislation, to review the operation and regulation of investigatory powers available to law enforcement and intelligence agencies, in particular the interception of communications and communications data, and to recommend change. This report[6] was published in June 2015 and recommended a new law to clarify these powers.[7]

The Draft Investigatory Powers Bill was published in November 2015, with a large number of accompanying documents, and a Joint Committee of the House of Commons and House of Lords was established to scrutinise the draft bill.[8] Some parts of the bill referring to bulk personal datasets came into effect in November 2015, before parliamentary scrutiny began.[9] The Joint Committee published its pre-legislative scrutiny report in March 2016. The Government accepted the vast majority of its 198 recommendations,[10] together with the recommendations of two other parliamentary committees that had scrutinised the draft Bill, and the revised bill was introduced in the House of Commons,[11] where it was subject to debate by Members of Parliament.[12][13]

In March 2016 the House of Commons passed the Investigatory Powers Bill on its second reading by 281 votes to 15, moving the bill to the committee stage.[14] The Labour Party and Scottish National Party abstained from the vote, while the Liberal Democrats voted against it.[15][16]

At the committee stage constitutional,[17] technology,[18] and human rights issues were examined. The Labour Chair of the Joint Committee on Human Rights, Harriet Harman, said:

The Bill provides a clear and transparent basis for powers already in use by the security and intelligence services, but there need to be further safeguards. Protection for MP communications from unjustified interference is vital, as it is for confidential communications between lawyers and clients, and for journalists’ sources, the Bill must provide tougher safeguards to ensure that the Government cannot abuse its powers to undermine Parliament’s ability to hold the Government to account.

— Harriet Harman, [19]

At this stage, at the insistence of the Labour Party, the Independent Reviewer of Terrorism Legislation was commissioned to conduct a further review of the operational case for the bulk powers reserved under the Bill to the British intelligence agencies: bulk interception, bulk collection of metadata, bulk equipment interference and the retention and use of bulk datasets. That review was conducted with the help of a small, security-cleared expert team, and together with 60 case studies, was published in August 2016.[20] Like the 2014-15 reports of the PCLOB[21] and National Academy of Sciences[22] in the US, it is a significant information source for the utility of so-called mass surveillance techniques

On 16 November 2016 the House of Lords approved the final version of the Investigatory Powers Bill, leaving only the formality of Royal Assent to be completed before the Bill became law.[23]

On 21 December 2016, the European Court of Justice (ECJ) declared that the generalised retention of certain types of personal data is unlawful, although little is known as to how this will affect the Investigatory Powers Act at this stage.[24] As of 29 January 2017, many sources have since reported on the Investigatory Powers Act as if it is currently in action.[25][26][27][28] Draft codes of practice laid out by the Home Office in February 2017 did not provide insight on the Government's communications data code of practise, as it was for the Court of Appeal to decide how to apply the December ruling of the ECJ on data retention in member states.[29] It was then reported in late February 2017 that the aspects of the Bill forcing communications service providers to retain data had been "mothballed" due to the ECJ ruling on the "general and indiscriminate" retention of communications data being illegal.[30]

Provisions of the Act[edit]

The Act:[31][32][33]

  • introduced new powers, and restated existing ones, for British intelligence agencies and law enforcement to carry out targeted interception of communications, bulk collection of communications data, and bulk interception of communications;[34][35][36][37]
  • created an Investigatory Powers Commission (IPC) to oversee the use of all investigatory powers, alongside the oversight provided by the Intelligence and Security Committee of Parliament and the Investigatory Powers Tribunal. The IPC consists of a number of serving or former senior judges. It combined and replaced the powers of the Interception of Communications Commissioner, Intelligence Services Commissioner, and Chief Surveillance Commissioner;[38][39]
  • established a requirement for a judge serving on the IPC to review warrants for accessing the content of communications and equipment interference authorised by a Secretary of State before they come into force;[40]
  • required communication service providers (CSPs) to retain British internet users' "Internet connection records" – which websites were visited but not the particular pages and not the full browsing history – for one year;[41]
  • allowed police, intelligence officers and other government department managers (listed below) to see the Internet connection records, as part of a targeted and filtered investigation, without a warrant;[42]
  • permitted the police and intelligence agencies to carry out targeted equipment interference, that is, hacking into computers or devices to access their data,[43] and bulk equipment interference for national security matters related to foreign investigations;[44]
  • placed a legal obligation on CSPs to assist with targeted interception of data, and communications and equipment interference in relation to an investigation; foreign companies are not required to engage in bulk collection of data or communications;[31]
  • maintained an existing requirement on CSPs in the UK to have the ability to remove encryption applied by the CSP; foreign companies are not required to remove encryption;[31]
  • put the Wilson Doctrine on a statutory footing for the first time as well as safeguards for other sensitive professions such as journalists, lawyers and doctors;[31]
  • provided local government with some investigatory powers, for example to investigate someone fraudulently claiming benefits, but not access to Internet connection records;[31]
  • created a new criminal offence for unlawfully accessing internet data;[31]
  • created a new criminal offence for a CSP or someone who works for a CSP to reveal that data has been requested.[31]

Investigatory Powers Commissioner[edit]

The Act created the role of Investigatory Powers Commissioner to provide independent oversight of the use of investigatory powers by intelligence agencies, police forces and other public authorities. In March 2017 Lord Justice Sir Adrian Fulford, a Court of Appeal judge, was appointed as first Commissioner for a three-year term. His office (IPCO)[45] will have fifteen senior judges as judicial commissioners, a technical advisory panel of scientific experts, and around 50 staff.[46][47] The Act gives the prime minister the power to appoint the Investigatory Powers Commissioner and other Judicial Commissioners.[48]

In January 2019 the Home Office blocked the appointment of Eric King as head of investigations at IPCO, citing national security grounds. King had previously been director of the Don't Spy On Us coalition, and deputy director of Privacy International for five years. King commented "The problem, at its heart, is that there’s a conflict as to whether my previous work and views are a positive or negative thing. They are both the reason I was hired and the reason my clearance was refused by the Home Office vetting team."[49]

Investigatory Powers Commissioners have been:

Authorities allowed to access Internet connection records[edit]

List of authorities allowed to access Internet connection records without a warrant:[50][51][52]

Public debate[edit]

Does the UK really want the dubious honor of introducing powers deemed too intrusive by all other major democracies, joining the likes of China and Russia in collecting everyone's browsing habits?[53]

—Anne Jellema, head of the World Wide Web Foundation

The draft Bill generated significant public debate about balancing intrusive powers and mass surveillance with the needs of the police and intelligence agencies to gain targeted access to information as part of their investigations.[54][55] Although the Home Office said the Bill will be compatible with the European Convention on Human Rights,[56] the content of the draft Bill has raised concerns about the impact on privacy.[57][58]

Privacy campaigners say the bill clearly lays out the mass surveillance powers that would be at the disposal of the security services, and want it amended so that the surveillance is targeted and based on suspicion and argue that the powers are so sweeping, and the bill's language so general, that not just the security services but also government bodies will be able to analyse the records of millions of people even if they are not under suspicion.[59]

In January 2016 a report published by the Intelligence and Security Committee of Parliament recommended that the bill should focus on the right to privacy. Committee chairman, Conservative MP Dominic Grieve, said: "We have therefore recommended that the new legislation contains an entirely new part dedicated to overarching privacy protections, which should form the backbone of the draft legislation around which the exceptional powers are then built. This will ensure that privacy is an integral part of the legislation rather than an add-on." The committee also recommended that Class bulk personal dataset warrants are removed from the legislation.[60] Dominic Grieve later clarified the extent of these freedoms, "the principle of the right to privacy against the state is maintained except if there is a good and sufficient reason why that should not happen."[61]

Gavin E. L. Hall, a doctoral researcher at the University of Birmingham, argues that public fear of the bill is not justified, writing that there are benefits to formally codifying in law what state security services can and cannot do and that "While it may technically be possible under the bill to impugn individual freedom, John Bull has little to fear."[62]

The Register argued the Act enshrines parallel construction in law and allows the state to lie about the origins of evidence in court, treating it as infallible, and prohibit the defendant from questioning it.[63]

Article 19, a freedom of expression campaign group, criticized the Act as one of the most draconian pieces of surveillance legislation passed worldwide, warning that it "offers a template for authoritarian regimes and seriously undermining the rights of its citizens to privacy and freedom of expression".[64] The Chinese government cited the Snooper's Charter (officially the Draft Communications Data Bill) when defending its own intrusive anti-terrorism legislation.[53]

Recent Wikileaks articles suggest that phone and digital device tracking both direct and indirect (e.g. FM radio blipping via Android exploit) also mentioned in Register posts by "Anonymous Coward" to covertly follow subjects have been used in the past but for operational reasons it is not clear if they are still used. The original poster has since decided to cooperate with the authorities and not comment further publicly on this subject, though the technique was independently rediscovered before the article in question was released.

Legal challenge and ruling[edit]

In November 2016, a petition demanding the law be repealed gained 100,000 signatures.[65] In December 2016, pornographic media site xHamster redirected UK traffic to the petition.[66] In March 2017, Liberty, a human rights organisation, raised £50,000 via crowd funding towards legal actions against the bill. Silkie Carlo, policy officer at Liberty, said:

The powers we're fighting undermine everything that's core to our freedom and democracy — our right to protest, to express ourselves freely and to a fair trial, our free press, privacy and cybersecurity. But with so much public support behind us, we're hopeful we will be able to persuade our courts to restrain the more authoritarian tendencies of this Government.

— Silkie Carlo, policy officer at Liberty[67]

In April 2018 the High Court of Justice ruled that the Investigatory Powers Act violates EU law.[5][68] The government had until 1 November 2018 to amend the legislation.[69] On 31 October 2018 The Data Retention and Acquisition Regulations 2018[70] came into force to address this ruling. These regulations increased the threshold for accessing communications data only for the purposes of serious crime (defined as offences which are capable of being sentenced to imprisonment for a term of 12 months or more) and requires that authorities consult an independent Investigatory Powers Commissioner before requesting data. The regulations also included a loophole where rapid approval can be made internally without independent approval but with a three-day expiry and with subsequent review by the independent body. Most debates about the regulations have been about the definition of "serious crime" with many arguing that the threshold should be at three years.[71]

Implementation[edit]

It was revealed in 2021 that two British ISPs were collaborating on a government initiative for the collection of Internet Connection Records.[72][73]

See also[edit]

References[edit]

  1. ^ Griffin, Andrew (1 March 2016). "UK spying laws: Government introduces law requiring WhatsApp and iMessage to break their own security". The Independent. Independent Print Limited. Retrieved 12 March 2016.
  2. ^ 'Extreme surveillance' becomes UK law with barely a whimper Published by The Guardian, 19 November 2016, accessed on the same day
  3. ^ editor, Alan Travis Home affairs (29 November 2016). "'Snooper's charter' bill becomes law, extending UK state surveillance". The Guardian. Retrieved 29 November 2016. {{cite web}}: |last1= has generic name (help)
  4. ^ a b Investigatory Powers Act goes into force, putting UK citizens under intense new spying regime Published by The Independent, 31 December 2016
  5. ^ a b Cobain, Ian (27 April 2018). "UK has six months to rewrite snooper's charter, high court rules". The Guardian. Retrieved 19 June 2018.
  6. ^ David Anderson (11 June 2015). "A Question of Trust - Report of the Investigatory Powers Review (June 2015)". David Anderson QC Lawyer London UK. Retrieved 6 July 2017.
  7. ^ "Surveillance powers: New law needed, says terror watchdog". BBC. 11 June 2015. Retrieved 8 June 2016.
  8. ^ "Draft Bills 2015-16". Parliament. Retrieved 8 June 2016.
  9. ^ "Oral evidence: Draft Investigatory Powers Bill: Technology Issues HC573, Q.26 and Q.76" (PDF). Parliament. Retrieved 19 December 2015.
  10. ^ "Government publishes Investigatory Powers Bill". Parliament of the United Kingdom. 2 March 2016. Retrieved 19 November 2016.
  11. ^ "Investigatory Powers Bill 2015-16 to 2016-17". UK Parliament. Retrieved 8 June 2016.
  12. ^ "Investigatory Powers Bill: Remaining Stages". UK Parliament. 7 June 2016. Retrieved 8 June 2016.
  13. ^ "Investigatory Powers Bill: Committee Stage Report". House of Commons Library (Commons Briefing papers CBP-7578). 2 June 2016. Retrieved 8 June 2016.
  14. ^ Ryan Gallagher, U.K. Parliament Debates 'Snoopers' Charter, The Intercept (March 15, 2016).
  15. ^ Kelly Fiveash, MPs vote in favour of Investigatory Powers Bill after Labour, SNP abstain [Updated], Ars Technica (15 March 2016).
  16. ^ Rowena Mason, Anushka Asthana & Alan Travis, 'Snooper's charter': Theresa May faces calls to improve bill to protect privacy, The Guardian (15 March 2016).
  17. ^ "Investigatory Powers Bill constitutional implications assessed by Committee". UK Parliament. 11 July 2016. Retrieved 19 November 2016.
  18. ^ "Investigatory Powers Bill: technology issues inquiry". Science and Technology Committee (House of Commons).
  19. ^ "Investigatory Powers Bill: direction of travel welcome, but improvements proposed". UK Parliament. 2 June 2016. Retrieved 19 November 2016.
  20. ^ David Anderson (16 August 2016). "Report of Bulk Powers Review, August 2016". David Anderson QC Lawyer London UK. Retrieved 6 July 2017.
  21. ^ https://pclob.gov/library/215-Report_on_the_Telephone_Records_Program.pdf (s215); https://pclob.gov/library/702-Report-2.pdf (s702).
  22. ^ Council, National Research (15 January 2015). Bulk Collection of Signals Intelligence: Technical Options. doi:10.17226/19414. ISBN 9780309325202.
  23. ^ "Investigatory Powers Act imminent as peers clear path for UK super-snoop law". Ars Technica. Retrieved 16 November 2016.
  24. ^ Bowcott, Owen (21 December 2016). "EU's highest court delivers blow to UK snooper's charter". The Guardian. ISSN 0261-3077. Retrieved 21 December 2016.
  25. ^ "Challenges of complying with the Investigatory Powers Act". ComputerWeekly. Retrieved 29 January 2017.
  26. ^ "You just became subject to some of the most intense spying laws ever". The Independent. 31 December 2016. Retrieved 29 January 2017.
  27. ^ Bentley, Oscar (29 January 2017). "Nothing to hide, plenty to fear from prying PM". Nouse. Retrieved 29 January 2017.
  28. ^ K; Braamskamp, L. Gates-Christine; Gilchrist, rew W.; Millward, James G. (23 January 2017). "Investigatory Powers Act 2016: How to Prepare For A Digital Age | Lexology". Retrieved 29 January 2017.
  29. ^ "Investigatory Powers Act 2016: codes of practice - GOV.UK". www.gov.uk.
  30. ^ "UK forced to derail Snoopers' Charter blanket data slurp after EU ruling". 24 February 2017.
  31. ^ a b c d e f g "UK surveillance powers explained". BBC. 5 November 2015. Retrieved 9 November 2015; "Details of UK website visits 'to be stored for year'". BBC. 4 November 2015. Retrieved 10 November 2015.
  32. ^ "UK unveils powers to spy on web use, raising privacy fears". Reuters. 5 November 2015. Retrieved 10 November 2015.
  33. ^ "Investigatory powers bill: the key points". The Guardian. 4 November 2015. Retrieved 10 November 2015; "Surveillance Q&A: what web data is affected – and how to foil the snoopers". The Guardian. 4 November 2015. Retrieved 15 November 2015.
  34. ^ "Factsheet – Targeted Interception" (PDF). Home Office. 4 November 2015. Retrieved 15 November 2015.
  35. ^ "Factsheet – Bulk Communications Data" (PDF). Home Office. 4 November 2015. Retrieved 15 November 2015.
  36. ^ "Factsheet – Bulk Interception" (PDF). Home Office. 4 November 2015. Retrieved 15 November 2015.
  37. ^ "Factsheet – Communications Data" (PDF). Home Office. 4 November 2015. Retrieved 15 November 2015; "Factsheet – Bulk Personal Datasets" (PDF). Home Office. 4 November 2015. Retrieved 15 November 2015; "Factsheet – Bill Definitions" (PDF). Home Office. 4 November 2015. Retrieved 15 November 2015.
  38. ^ "Factsheet – Oversight" (PDF). Home Office. 4 November 2015. Retrieved 15 November 2015.
  39. ^ "Factsheet – Investigatory Powers Commission" (PDF). Home Office. 4 November 2015. Retrieved 15 November 2015.
  40. ^ "Factsheet – Authorisation" (PDF). Home Office. 4 November 2015. Retrieved 15 November 2015.
  41. ^ "Factsheet – Internet Connection Records" (PDF). Home Office. 4 November 2015. Retrieved 15 November 2015.
  42. ^ "Factsheet – Request filter" (PDF). Home Office. 4 November 2015. Retrieved 15 November 2015.
  43. ^ "Factsheet – Targeted Equipment Interference" (PDF). Home Office. 4 November 2015. Retrieved 15 November 2015.
  44. ^ "Factsheet – Bulk Equipment Interference" (PDF). Home Office. 4 November 2015. Retrieved 15 November 2015.
  45. ^ a b "Investigatory Powers Commissioner's Office". Investigatory Powers Commissioner's Office. Retrieved 26 January 2019.
  46. ^ "Who is the Investigatory Powers Commissioner and what does the role involve?". ITV News. 16 June 2018. Retrieved 26 January 2019.
  47. ^ "Investigatory Powers Commissioner appointed: Lord Justice Fulford". gov.uk. 3 March 2017. Retrieved 26 January 2019.
  48. ^ "Investigatory Powers Act 2016 section 227(1)". GOV.UK. Retrieved 25 October 2020.
  49. ^ Townsend, Mark (19 January 2019). "Home Office under fire for blocking new spy watchdog". The Guardian. Retrieved 26 January 2019.
  50. ^ "Investigatory Powers Bill — Schedule 4 — Relevant public authorities and designated senior officers" (PDF). www.parliament.uk. Parliament. p. 212.
  51. ^ Burgess, Matt. "Snooper's Charter is set to become law: how the Investigatory Powers Bill will affect you". WIRED UK. Retrieved 27 November 2016.
  52. ^ "The list of organisations that will be allowed to view your entire internet history". The Independent. 24 November 2016. Retrieved 27 November 2016.
  53. ^ a b Schweizer, Kristen (11 February 2016). "'Snooper's Charter' Would Make Brits Most Spied-Upon People". Bloomberg. Retrieved 11 February 2016.
  54. ^ "May wrong to say surveillance bill creates judicial authorisation for interception, says Liberty – live". The Guardian. 4 November 2015. Retrieved 11 November 2015.
  55. ^ "Will Europe call the shots?". Independent Reviewer of Terrorism Legislation. 7 November 2015. Retrieved 11 November 2015.
  56. ^ "Investigatory Powers Bill – European Convention on Human Rights Memorandum" (PDF). Home Office. Retrieved 15 November 2015.
  57. ^ "The Guardian view on the draft investigatory powers bill: snooper's charter 3.0". The Guardian. 2 November 2015. Retrieved 10 November 2015.
  58. ^ "Investigatory Powers Bill - Privacy Impact Assessment" (PDF). Home Office. 4 November 2015. Retrieved 15 November 2015.
  59. ^ Viña, Gonzalo (8 August 2016). "Surveillance: Taking liberties?". Financial Times. Retrieved 2 January 2017.
  60. ^ "Internet monitoring bill 'must do more to protect privacy'". BBC News. 9 February 2016. Retrieved 9 February 2016.
  61. ^ Third Reading of the Investigatory Powers Bill, Hansard, 6 June 2016.
  62. ^ Gavin E. L. Hall (10 March 2016). "Is the Snooper's Charter as Bad as You Think?". Fair Observer. Retrieved 11 March 2016.
  63. ^ at 09:00, Gareth Corfield 6 Dec 2016. "The UK's Investigatory Powers Act allows the State to tell lies in court". www.theregister.co.uk.{{cite web}}: CS1 maint: numeric names: authors list (link)
  64. ^ "Global press freedom plunges to worst level this century". the Guardian. 30 November 2017. Retrieved 1 December 2022.
  65. ^ Titcomb, James (30 November 2016). "Petition to repeal new surveillance powers reaches 100,000 signatures". The Telegraph. Retrieved 9 March 2017.
  66. ^ McGoogan, Cara (9 December 2016). "Porn website xHamster sends UK visitors to online petition against Snoopers' Charter". Telegraph. Retrieved 9 March 2017.
  67. ^ Hopping, Clare (2 March 2017). "Liberty launches legal challenge against Investigatory Powers Act". IT Pro. Retrieved 9 March 2017.
  68. ^ The National Council for Civil Liberties (Liberty), R (On the Application Of) v Secretary of State for the Home Department & Anor [2018] EWHC 975 (27 April 2018)
  69. ^ Carey, Scott (27 April 2018). "The Snoopers' Charter: Everything you need to know about the Investigatory Powers Act". Computerworld UK. IDG UK. Retrieved 25 August 2018.
  70. ^ "The Data Retention and Acquisition Regulations 2018". www.legislation.gov.uk. Retrieved 10 January 2019.
  71. ^ "Data Retention and Acquisition Regulations 2018 - Motion to Approve: 30 Oct 2018: House of Lords debates". TheyWorkForYou. Retrieved 10 January 2019.
  72. ^ Burgess, Matt (11 March 2021). "The UK is secretly testing a controversial web snooping tool". Wired UK. ISSN 1357-0978. Retrieved 11 March 2021.
  73. ^ Jackson, Mark (11 March 2021). "Two UK Broadband ISPs Trial New Internet Snooping System". ISPreview UK. Retrieved 12 March 2021.

External links[edit]

Retrieved from "https://en.wikipedia.org/w/index.php?title=Investigatory_Powers_Act_2016&oldid=1168479579#Investigatory_Powers_Commissioner"