- Latest available (Revised)
- Point in Time (01/05/2022)
- Original (As enacted)
Point in time view as at 01/05/2022. This version of this cross heading contains provisions that are prospective.
The term provision is used to describe a definable element in a piece of legislation that has legislative effect – such as a Part, Chapter or section. A version of a provision is prospective either:
Commencement Orders listed in the ‘Changes to Legislation’ box as not yet applied may bring this prospective version into force.
Investigatory Powers Act 2016, Cross Heading: Safeguards is up to date with all changes known to be in force on or before 31 August 2024. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations.
Changes and effects yet to be applied by the editorial team are only applicable when viewing the latest version or prospective version of legislation. They are therefore not accessible when viewing legislation as at a specific point in time. To view the ‘Changes to Legislation’ information for this provision return to the latest version view using the options provided in the ‘What Version’ box above.
(1)Before giving a retention notice [F1, including in relation to one or more of the purposes mentioned in sub-paragraphs (i) to (vi) of section 87(1)(a) (purposes for which retention of communications data may be required)], the Secretary of State must, among other matters, take into account—
(a)the likely benefits of the notice,
[F2(aa)the telecommunications services to which the retention notice relates,
(ab)the appropriateness of limiting the data to be retained by reference to—
(i)location, or
(ii)descriptions of persons to whom telecommunications services are provided,]
(b)the likely number of users (if known) of any telecommunications service to which the notice relates,
(c)the technical feasibility of complying with the notice,
(d)the likely cost of complying with the notice, and
(e)any other effect of the notice on the telecommunications operator (or description of operators) to whom it relates.
(2)Before giving such a notice, the Secretary of State must take reasonable steps to consult any operator to whom it relates.
Textual Amendments
F1Words in s. 88(1)(a) inserted (1.11.2018) by The Data Retention and Acquisition Regulations 2018 (S.I. 2018/1123), regs. 1(3)(c), 9(a)
F2S. 88(1)(aa)(ab) inserted (1.11.2018) by The Data Retention and Acquisition Regulations 2018 (S.I. 2018/1123), regs. 1(3)(c), 9(b)
Commencement Information
I1S. 88 in force at 30.12.2016 by S.I. 2016/1233, reg. 2(d)
Prospective
(1)In deciding whether to approve a decision to give a retention notice, a Judicial Commissioner must review the Secretary of State's conclusions as to whether the requirement to be imposed by the notice to retain relevant communications data is necessary and proportionate for one or more of the purposes falling within [F3sub-paragraphs (i) to (vi) of section 87(1)(a)].
(2)In doing so, the Judicial Commissioner must—
(a)apply the same principles as would be applied by a court on an application for judicial review, and
(b)consider the matters referred to in subsection (1) with a sufficient degree of care as to ensure that the Judicial Commissioner complies with the duties imposed by section 2 (general duties in relation to privacy).
(3)Where a Judicial Commissioner refuses to approve a decision to give a retention notice, the Judicial Commissioner must give the Secretary of State written reasons for the refusal.
(4)Where a Judicial Commissioner, other than the Investigatory Powers Commissioner, refuses to approve a decision to give a retention notice, the Secretary of State may ask the Investigatory Powers Commissioner to decide whether to approve the decision to give the notice.
Textual Amendments
F3Words in s. 89(1) substituted (1.11.2018) by The Data Retention and Acquisition Regulations 2018 (S.I. 2018/1123), reg. 1(3)(f), Sch. 1 para. 22(a)
(1)A telecommunications operator to whom a retention notice is given may, within such period or circumstances as may be provided for by regulations made by the Secretary of State, refer the notice back to the Secretary of State.
(2)Such a reference may be in relation to the whole of a notice or any aspect of it.
(3)In the case of a notice given to a description of operators—
(a)each operator falling within that description may make a reference under subsection (1), but
(b)each such reference may only be in relation to the notice, or aspect of the notice, so far as it applies to that operator.
(4)There is no requirement for an operator who has referred a retention notice under subsection (1) to comply with the notice, so far as referred, until the Secretary of State has reviewed the notice in accordance with subsection (5).
(5)The Secretary of State must review any notice so far as referred to the Secretary of State under subsection (1).
(6)Before deciding the review, the Secretary of State must consult—
(a)the Technical Advisory Board, and
(b)a Judicial Commissioner.
(7)The Board must consider the technical requirements and the financial consequences, for the operator who has made the reference, of the notice so far as referred.
(8)The Commissioner must consider whether the notice so far as referred is proportionate.
(9)The Board and the Commissioner must—
(a)give the operator concerned and the Secretary of State the opportunity to provide evidence, or make representations, to them before reaching their conclusions, and
(b)report their conclusions to—
(i)the operator, and
(ii)the Secretary of State.
(10)The Secretary of State may, after considering the conclusions of the Board and the Commissioner—
(a)vary or revoke the retention notice under section 94, or
(b)give a notice under this section to the operator concerned confirming its effect.
(11)But the Secretary of State may vary the notice, or give a notice under subsection (10)(b) confirming its effect, only if the Secretary of State's decision to do so has been approved by the Investigatory Powers Commissioner.
(12)A report or notice under this section is given to an operator by giving or publishing it in such manner as the Secretary of State considers appropriate for bringing it to the attention of the operator.
(13)The Secretary of State must keep a retention notice under review (whether or not referred under subsection (1)).
Commencement Information
I2S. 90(1)-(12) in force at 1.11.2018 by S.I. 2018/873, reg. 4(a)
I3S. 90(13) in force at 30.12.2016 by S.I. 2016/1233, reg. 2(e)
(1)In deciding whether to approve a decision to vary a retention notice as mentioned in section 90(10)(a), or to give a notice under section 90(10)(b) confirming the effect of a retention notice, the Investigatory Powers Commissioner must review the Secretary of State's conclusions as to whether the requirement to be imposed by the notice as varied or confirmed to retain relevant communications data is necessary and proportionate for one or more of the purposes falling within [F4sub-paragraphs (i) to (vi) of section 87(1)(a)].
(2)In doing so, the Investigatory Powers Commissioner must—
(a)apply the same principles as would be applied by a court on an application for judicial review, and
(b)consider the matters referred to in subsection (1) with a sufficient degree of care as to ensure that the Investigatory Powers Commissioner complies with the duties imposed by section 2 (general duties in relation to privacy).
(3)Where the Investigatory Powers Commissioner refuses to approve a decision to vary a retention notice as mentioned in section 90(10)(a), or to give a notice under section 90(10)(b) confirming the effect of a retention notice, the Investigatory Powers Commissioner must give the Secretary of State written reasons for the refusal.
Textual Amendments
F4Words in s. 91(1) substituted (1.11.2018) by The Data Retention and Acquisition Regulations 2018 (S.I. 2018/1123), reg. 1(3)(f), Sch. 1 para. 22(b)
Commencement Information
I4S. 91 in force at 1.11.2018 by S.I. 2018/873, reg. 4(a)
(1)A telecommunications operator who retains relevant communications data by virtue of this Part must—
(a)secure that the data is of the same integrity, and subject to at least the same security and protection, as the data on any system from which it is derived,
(b)secure, by appropriate technical and organisational measures, that the data can be accessed only by specially authorised personnel, and
(c)protect, by appropriate technical and organisational measures, the data against accidental or unlawful destruction, accidental loss or alteration, or unauthorised or unlawful retention, processing, access or disclosure.
(2)A telecommunications operator who retains relevant communications data by virtue of this Part must destroy the data if the retention of the data ceases to be authorised by virtue of this Part and is not otherwise authorised by law.
(3)The destruction of the data may take place at such monthly or shorter intervals as appear to the operator to be practicable.
Commencement Information
I5S. 92 in force at 30.12.2016 by S.I. 2016/1233, reg. 2(f)
A telecommunications operator must put in place adequate security systems (including technical and organisational measures) governing access to relevant communications data retained by virtue of this Part in order to protect against any unlawful disclosure.
Commencement Information
I6S. 93 in force at 30.12.2016 by S.I. 2016/1233, reg. 2(g)
The Whole Act you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
The Whole Act you have selected contains over 200 provisions and might take some time to download.
Would you like to continue?
The Whole Act without Schedules you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
The Whole Act without Schedules you have selected contains over 200 provisions and might take some time to download.
Would you like to continue?
The Whole Act you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
The Whole Act without Schedules you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
The Schedules you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
Latest Available (revised):The latest available updated version of the legislation incorporating changes made by subsequent legislation and applied by our editorial team. Changes we have not yet applied to the text, can be found in the ‘Changes to Legislation’ area.
Original (As Enacted or Made): The original version of the legislation as it stood when it was enacted or made. No changes have been applied to the text.
Point in Time: This becomes available after navigating to view revised legislation as it stood at a certain point in time via Advanced Features > Show Timeline of Changes or via a point in time advanced search.
Geographical Extent: Indicates the geographical area that this provision applies to. For further information see ‘Frequently Asked Questions’.
Show Timeline of Changes: See how this legislation has or could change over time. Turning this feature on will show extra navigation options to go to these specific points in time. Return to the latest available version by using the controls above in the What Version box.
Text created by the government department responsible for the subject matter of the Act to explain what the Act sets out to achieve and to make the Act accessible to readers who are not legally qualified. Explanatory Notes were introduced in 1999 and accompany all Public Acts except Appropriation, Consolidated Fund, Finance and Consolidation Acts.
Access essential accompanying documents and information for this legislation item from this tab. Dependent on the legislation item being viewed this may include:
Impact Assessments generally accompany all UK Government interventions of a regulatory nature that affect the private sector, civil society organisations and public services. They apply regardless of whether the regulation originates from a domestic or international source and can accompany primary (Acts etc) and secondary legislation (SIs). An Impact Assessment allows those with an interest in the policy area to understand:
This timeline shows the different points in time where a change occurred. The dates will coincide with the earliest date on which the change (e.g an insertion, a repeal or a substitution) that was applied came into force. The first date in the timeline will usually be the earliest date when the provision came into force. In some cases the first date is 01/02/1991 (or for Northern Ireland legislation 01/01/2006). This date is our basedate. No versions before this date are available. For further information see the Editorial Practice Guide and Glossary under Help.
Use this menu to access essential accompanying documents and information for this legislation item. Dependent on the legislation item being viewed this may include:
Click 'View More' or select 'More Resources' tab for additional information including: