Regulation of intelligence gathering

STOP PRESS: The Investigatory Powers (Amendment) Act 2024 (IP(A)A 2024) received Royal Assent on 25 April 2024. The Act is the first major amendment of the Investigatory Powers Act 2016 since it was enacted and seeks to expand the surveillance powers of the UK’s police, intelligence services and government. The Investigatory Powers (Amendment) Act 2024 (Commencement No 1 and Transitional Provisions) Regulations 2024, SI 2024/1021 brings certain provisions of the IP(A)A 2024 into force on 14 October 2024. This Overview is in the process of being updated to reflect the changes.

Regulation of intelligence gathering

A range of statutory obligations regulate the acquisition, retention, examination and dissemination of private material by public authorities for intelligence purposes. These include:

•
Investigatory Powers Act 2016 (IPA 2016)
•
Regulation of Investigatory Powers Act 2000 (RIPA 2000)
•
Human Rights Act 1998 (HRA 1998)
•
Intelligence Services Act 1994 (ISA 1994)
•
Security Service Act 1989 (SSA 1989)
•
Computer Misuse Act 1990 (CMA 1990)
•
Wireless Telegraphy Act 2006 (WTA 2006)
•
Investigatory

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Information Law News

Information Law weekly highlights—19 December 2024

Welcome to this week’s edition of the Information Law weekly highlights: a hand-picked summary of news analysis, updates and new content related to laws governing the use and dissemination of information and personal data. Each week these highlights focus on developments in key topics such as data protection, ePrivacy, cybersecurity, breach of confidence, misuse of private information, and defamation.

ICO warns against Google's fingerprinting policy change, issues draft guidance

The Information Commissioner's Office (ICO) has responded to Google's announcement permitting fingerprinting techniques from February 2025, warning that businesses must still comply with data protection laws. The ICO has published draft guidance on how data protection law, including PECR, applies to storage and access technologies such as fingerprinting. The ICO emphasises that organisations must provide transparency, obtain consent, and ensure fair processing when using fingerprinting for advertising purposes. The regulator plans to release a comprehensive strategy in the new year to give users meaningful control over personalised advertisement. A consultation on this guidance opens on Friday, 20 December 2024.

MI5 wins case against lawyer accused of being Chinese spy

Law360, London: A solicitor accused of being a Chinese spy has lost her legal challenge against MI5, after a tribunal found 17 December 2024 that the UK security service acted lawfully when it warned parliamentarians that she was trying to interfere with the political process.

OpenAI, X, Google can use legitimate interest for AI models, EDPB says

MLEX: OpenAI, X, Google and Meta will be able to use legitimate interests as a legal basis for processing personal data for developing and deploying AI models provided that adequate mitigation measures are in place, the European Data Protection Board (EDPB) said in an influential opinion today. The EDPB opinion also touched upon how to address unlawful data processing for AI model development, and in what circumstances AI models can be considered anonymised.

View Information Law by content type :

News