The Data Retention and Acquisition Regulations 2018

Valid from 05/02/2019

Grant of authorisations by the Investigatory Powers Commissioner U.K.

5.  After the heading of Part 3 insert—

“Targeted authorisations for obtaining data: the Investigatory Powers Commissioner U.K.

Power of Investigatory Powers Commissioner to grant authorisations

60A.— (1) Subsection (2) applies if the Investigatory Powers Commissioner, on an application made by a relevant public authority, considers—

(a) that it is necessary for the relevant public authority to obtain communications data for a purpose falling within subsection (7),

(b) that it is necessary for the relevant public authority to obtain the data—

(i) for the purposes of a specific investigation or a specific operation, or

(ii) for the purposes of testing, maintaining or developing equipment, systems or other capabilities relating to the availability or obtaining of communications data, and

(c) that the conduct authorised by the authorisation is proportionate to what is sought to be achieved.

(2) The Investigatory Powers Commissioner may authorise the relevant public authority to engage in any conduct which—

(a) is for the purpose of obtaining the data from any person, and

(b) relates to—

(i) a telecommunication system, or

(ii) data derived from a telecommunication system.

(3) Subsections (1) and (2) are subject to—

(a) section 62 (restrictions in relation to internet connection records),

(b) sections 70, 73 and 75 and Schedule 4 (restrictions relating to certain relevant public authorities),

(c) section 76 (requirement to consult a single point of contact), and

(d) section 77 (Commissioner approval for authorisations to identify or confirm journalistic sources).

(4) Authorised conduct may, in particular, consist of the relevant public authority—

(a) obtaining the communications data itself from any person or telecommunication system,

(b) asking any person whom the relevant public authority believes is, or may be, in possession of the communications data or capable of obtaining it—

(i) to obtain the data (if not already in possession of it), and

(ii) to disclose the data (whether already in the person's possession or subsequently obtained by that person) to the relevant public authority, or

(c) requiring by notice a telecommunications operator whom the relevant public authority believes is, or may be, in possession of the communications data or capable of obtaining it—

(i) to obtain the data (if not already in possession of it), and

(ii) to disclose the data (whether already in the operator's possession or subsequently obtained by the operator) to the relevant public authority.

(5) An authorisation—

(a) may relate to data whether or not in existence at the time of the authorisation,

(b) may authorise the obtaining or disclosure of data by a person other than the relevant public authority, or any other conduct by such a person, which enables or facilitates the obtaining of the communications data concerned, and

(c) may, in particular, require a telecommunications operator who controls or provides a telecommunications system to obtain or disclose data relating to the use of a telecommunications service provided by another telecommunications operator in relation to that system.

(6) An authorisation may not authorise any conduct consisting in the interception of communications in the course of their transmission by means of a telecommunication system.

(7) It is necessary to obtain communications data for a purpose falling within this subsection if it is necessary to obtain the data—

(a) in the interests of national security,

(b) for the applicable crime purpose (see subsection (8)),

(c) in the interests of the economic well-being of the United Kingdom so far as those interests are also relevant to the interests of national security,

(d) in the interests of public safety,

(e) for the purpose of preventing death or injury or any damage to a person's physical or mental health, or of mitigating any injury or damage to a person's physical or mental health,

(f) to assist investigations into alleged miscarriages of justice, or

(g) where a person (“P”) has died or is unable to identify themselves because of a physical or mental condition—

(i) to assist in identifying P, or

(ii) to obtain information about P's next of kin or other persons connected with P or about the reasons for P's death or condition.

(8) In subsection (7)(b), “the applicable crime purpose” means—

(a) where the communications data is wholly or partly events data, the purpose of preventing or detecting serious crime;

(b) in any other case, the purpose of preventing or detecting crime or of preventing disorder.

(9) The fact that the communications data which would be obtained in pursuance of an authorisation relates to the activities in the British Islands of a trade union is not, of itself, sufficient to establish that it is necessary to obtain the data for a purpose falling within subsection (7).

(10) See—

(a) sections 70 and 73 for the meaning of “relevant public authority”;

(b) section 84 for the way in which this Part applies to postal operators and postal services;

(c) section 86(2A) for the meaning of “serious crime”.”.