Explanatory Notes

Regulation of Investigatory Powers Act 2000

2000 CHAPTER 23

28 July 2000

Other Authorisations

Part Iii:  Investigation of Electronic Data Protected by Encryption Etc

Section 49:  Notices requiring disclosure

255.This section introduces a power to enable properly authorised persons (such as members of the law enforcement, security and intelligence agencies) to serve notices on individuals or bodies requiring the disclosure of protected (e.g. encrypted) information which they lawfully hold, or are likely to, in an intelligible form.

Intelligible is defined in section 56(3)

256.Subsection (1) limits the information to which this power to serve notices applies. It does so by defining the various means by which the protected information in question has been, or is likely to be, lawfully obtained. By way of illustration, this could be material:

257.Subsection (2) states that persons with the “appropriate permission” (see Schedule 2) may serve a notice imposing a disclosure requirement in respect of the protected information in question if there are reasonable grounds for believing:

key is defined in section 56(1)

possession of a key is defined in section 56(2)

258.Subsection (4) explains the format which notices must take.

259.The effect of subsections (5) and (6) is that, where applicable, notices must be served on a senior officer within a corporate body or firm.

Senior officer is defined in section 49(10)

260.Subsection (7) states that the requirement in subsections (5) and (6) does not apply where there are special circumstances to the case which mean that the purposes for which a notice is given would be defeated if it was served on a senior officer in an organisation (e.g. where that senior officer is a suspect in a criminal investigation).

261.Subsection (8) specifies the persons to whom a disclosure may be made by the recipient of a notice.

262.Subsection (9) ensures that a key which has been used solely for the purpose of generating electronic signatures does not have to be disclosed in response to a notice.

263.The effect of Schedule 2, which is introduced by subsection (11), is to set authorisation levels (described in Schedule 2) for permission to serve a notice under section 49. The level of authority required will vary depending on the power under which the protected information was, or is likely to be, lawfully obtained.