(1)This section applies where—
(a)an intelligence service obtains a set of information otherwise than in the exercise of a power conferred by a warrant or other authorisation issued or given under this Act, and
(b)the head of the intelligence service believes that—
(i)the set includes, or may include, personal data relating to a number of individuals, and
(ii)the nature of the set is, or may be, such that the majority of the individuals are not, and are unlikely to become, of interest to the intelligence service in the exercise of its functions.
(2)The head of the intelligence service must take the following steps before the end of the permitted period.
Step 1 Carry out an initial examination of the set for the purpose of deciding whether, if the intelligence service were to retain it after that initial examination and hold it electronically for analysis for the purposes of the exercise of its functions, the intelligence service would be retaining a bulk personal dataset (see section 199).
Step 2 If the intelligence service would be retaining a bulk personal dataset as mentioned in step 1, decide whether to retain the set and hold it electronically for analysis for the purposes of the exercise of the functions of the intelligence service.
Step 3 If the head of the intelligence service decides to retain the set and hold it electronically for analysis as mentioned in step 2, apply for a specific BPD warrant as soon as reasonably practicable after making that decision (unless the retention of the dataset is authorised by a class BPD warrant).
(3)The permitted period begins when the head of the intelligence service first forms the beliefs mentioned in subsection (1)(b).
(4)The permitted period ends—
(a)where the set of information was created in the United Kingdom, 3 months after the day on which it begins;
(b)where the set of information was created outside the United Kingdom, 6 months after the day on which it begins.
(5)If the head of the intelligence service applies for a specific BPD warrant in accordance with step 3 (set out in subsection (2))—
(a)the intelligence service is not to be regarded as in breach of section 200(1) by virtue of retaining the bulk personal dataset during the period between the taking of the decision mentioned in step 2 and the determination of the application for the specific BPD warrant, and
(b)the intelligence service is not to be regarded as in breach of section 200(2) by virtue of examining the bulk personal dataset during that period if the examination is necessary for the purposes of the making of the application for the warrant.
Commencement Information
I1S. 220 in force at 22.8.2018 by S.I. 2018/873, reg. 3(c) (with reg. 9)