Investigatory Powers Act 2016

Restrictions on use or disclosure of data obtained under warrants etc. U.K.

171 Safeguards relating to the retention and disclosure of data U.K.

(1) The Secretary of State must ensure, in relation to every bulk acquisition warrant, that arrangements are in force for securing—

(a) that the requirements of subsections (2) and (5) are met in relation to the communications data obtained under the warrant, and

(b) that the requirements of section 172 are met in relation to that data.

This is subject to subsection (8).

(2) The requirements of this subsection are met in relation to the communications data obtained under a warrant if each of the following is limited to the minimum that is necessary for the authorised purposes (see subsection (3))—

(a) the number of persons to whom any of the data is disclosed or otherwise made available,

(b) the extent to which any of the data is disclosed or otherwise made available,

(c) the extent to which any of the data is copied,

(d) the number of copies that are made.

(3) For the purposes of subsection (2) something is necessary for the authorised purposes if, and only if—

(a) it is, or is likely to become, necessary in the interests of national security or on any other grounds falling within section 158(2),

(b) it is necessary for facilitating the carrying out of any functions under this Act of the Secretary of State, the Scottish Ministers or the head of the intelligence service to whom the warrant is or was addressed,

(c) it is necessary for facilitating the carrying out of any functions of the Judicial Commissioners or the Investigatory Powers Tribunal under or in relation to this Act,

(d) it is necessary to ensure that a person (“P”) who is conducting a criminal prosecution has the information P needs to determine what is required of P by P's duty to secure the fairness of the prosecution,

(e) it is necessary for use as evidence in legal proceedings, or

(f) it is necessary for the performance of any duty imposed on any person by the Public Records Act 1958 or the Public Records Act (Northern Ireland) 1923.

(4) The arrangements for the time being in force under subsection (1) for securing that the requirements of subsection (2) are met in relation to the communications data obtained under the warrant must include arrangements for securing that every copy made of any of that data is stored, for so long as it is retained, in a secure manner.

(5) The requirements of this subsection are met in relation to the communications data obtained under a warrant if every copy made of any of that data (if not destroyed earlier) is destroyed as soon as there are no longer any relevant grounds for retaining it (see subsection (6)).

(6) For the purposes of subsection (5), there are no longer any relevant grounds for retaining a copy of any data if, and only if—

(a) its retention is not necessary, or not likely to become necessary, in the interests of national security or on any other grounds falling within section 158(2), and

(b) its retention is not necessary for any of the purposes mentioned in paragraphs (b) to (f) of subsection (3) above.

(7) Subsection (8) applies if—

(a) any communications data obtained under the warrant has been handed over to any overseas authorities, or

(b) a copy of any such data has been given to any overseas authorities.

(8) To the extent that the requirements of subsections (2) and (5) and section 172 relate to any of the data mentioned in subsection (7)(a), or to the copy mentioned in subsection (7)(b), the arrangements made for the purposes of subsection (1) are not required to secure that those requirements are met.

(9) But the Secretary of State must instead ensure that arrangements are in force for securing that communications data obtained under a bulk acquisition warrant, or any copy of such data, is handed over or given to an overseas authority only if the Secretary of State considers that requirements corresponding to the requirements of subsections (2) and (5) and section 172 will apply, to such extent (if any) as the Secretary of State considers appropriate, in relation to such data or copy.

(10) In this section—

• “copy”, in relation to communications data obtained under a warrant, means any of the following (whether or not in documentary form)—

  (a)

  any copy, extract or summary of the data which identifies the data as having been obtained under the warrant, and

  (b)

  any record referring to the obtaining of the data which is a record of the identities of the persons to whom the data relates,

  and “copied” is to be read accordingly,

• “overseas authorities” means authorities of a country or territory outside the United Kingdom.

Commencement Information

I1 S. 171 in force at 25.7.2018 by S.I. 2018/873, reg. 2(f)

172 Safeguards relating to examination of data U.K.

(1) For the purposes of section 171 the requirements of this section are met in relation to the communications data obtained under a warrant if—

(a) any selection of the data for examination is carried out only for the specified purposes (see subsection (2)), and

(b) the selection of any of the data for examination is necessary and proportionate in all the circumstances.

(2) The selection of communications data for examination is carried out only for the specified purposes if the data is selected for examination only so far as is necessary for the operational purposes specified in the warrant in accordance with section 161.

(3) In subsection (2) “specified in the warrant” means specified in the warrant at the time of the selection of the data for examination.

Commencement Information

I2 S. 172 in force at 25.7.2018 by S.I. 2018/873, reg. 2(g) (with reg. 7)

Yn ddilys o 22/08/2018

173 Offence of breaching safeguards relating to examination of data U.K.

(1) A person commits an offence if—

(a) the person selects for examination any communications data obtained under a bulk acquisition warrant,

(b) the person knows or believes that the selection of that data for examination does not comply with a requirement imposed by section 172, and

(c) the person deliberately selects that data for examination in breach of that requirement.

(2) A person guilty of an offence under this section is liable—

(a) on summary conviction in England and Wales—

(i) to imprisonment for a term not exceeding 12 months (or 6 months, if the offence was committed before the commencement of section 154(1) of the Criminal Justice Act 2003), or

(ii) to a fine,

or to both;

(b) on summary conviction in Scotland—

(i) to imprisonment for a term not exceeding 12 months, or

(ii) to a fine not exceeding the statutory maximum,

or to both;

(c) on summary conviction in Northern Ireland—

(i) to imprisonment for a term not exceeding 6 months, or

(ii) to a fine not exceeding the statutory maximum,

or to both;

(d) on conviction on indictment, to imprisonment for a term not exceeding 2 years or to a fine, or to both.

(3) No proceedings for any offence which is an offence by virtue of this section may be instituted—

(a) in England and Wales, except by or with the consent of the Director of Public Prosecutions;

(b) in Northern Ireland, except by or with the consent of the Director of Public Prosecutions for Northern Ireland.