Investigatory Powers Act 2016

171 Safeguards relating to the retention and disclosure of data

(1) The Secretary of State must ensure, in relation to every bulk acquisition warrant, that arrangements are in force for securing—

(a) that the requirements of subsections (2) and (5) are met in relation to the communications data obtained under the warrant, and

(b) that the requirements of section 172 are met in relation to that data.

This is subject to subsection (8).

(2) The requirements of this subsection are met in relation to the communications data obtained under a warrant if each of the following is limited to the minimum that is necessary for the authorised purposes (see subsection (3))—

(a) the number of persons to whom any of the data is disclosed or otherwise made available,

(b) the extent to which any of the data is disclosed or otherwise made available,

(c) the extent to which any of the data is copied,

(d) the number of copies that are made.

(3) For the purposes of subsection (2) something is necessary for the authorised purposes if, and only if—

(a) it is, or is likely to become, necessary in the interests of national security or on any other grounds falling within section 158(2),

(b) it is necessary for facilitating the carrying out of any functions under this Act of the Secretary of State, the Scottish Ministers or the head of the intelligence service to whom the warrant is or was addressed,

(c) it is necessary for facilitating the carrying out of any functions of the Judicial Commissioners or the Investigatory Powers Tribunal under or in relation to this Act,

(d) it is necessary to ensure that a person (“P”) who is conducting a criminal prosecution has the information P needs to determine what is required of P by P’s duty to secure the fairness of the prosecution,

(e) it is necessary for use as evidence in legal proceedings, or

(f) it is necessary for the performance of any duty imposed on any person by the Public Records Act 1958 or the Public Records Act (Northern Ireland) 1923.

(4) The arrangements for the time being in force under subsection (1) for securing that the requirements of subsection (2) are met in relation to the communications data obtained under the warrant must include arrangements for securing that every copy made of any of that data is stored, for so long as it is retained, in a secure manner.

(5) The requirements of this subsection are met in relation to the communications data obtained under a warrant if every copy made of any of that data (if not destroyed earlier) is destroyed as soon as there are no longer any relevant grounds for retaining it (see subsection (6)).

(6) For the purposes of subsection (5), there are no longer any relevant grounds for retaining a copy of any data if, and only if—

(a) its retention is not necessary, or not likely to become necessary, in the interests of national security or on any other grounds falling within section 158(2), and

(b) its retention is not necessary for any of the purposes mentioned in paragraphs (b) to (f) of subsection (3) above.

(7) Subsection (8) applies if—

(a) any communications data obtained under the warrant has been handed over to any overseas authorities, or

(b) a copy of any such data has been given to any overseas authorities.

(8) To the extent that the requirements of subsections (2) and (5) and section 172 relate to any of the data mentioned in subsection (7)(a), or to the copy mentioned in subsection (7)(b), the arrangements made for the purposes of subsection (1) are not required to secure that those requirements are met.

(9) But the Secretary of State must instead ensure that arrangements are in force for securing that communications data obtained under a bulk acquisition warrant, or any copy of such data, is handed over or given to an overseas authority only if the Secretary of State considers that requirements corresponding to the requirements of subsections (2) and (5) and section 172 will apply, to such extent (if any) as the Secretary of State considers appropriate, in relation to such data or copy.

(10) In this section—

• “copy”, in relation to communications data obtained under a warrant, means any of the following (whether or not in documentary form)—

  (a)

  any copy, extract or summary of the data which identifies the data as having been obtained under the warrant, and

  (b)

  any record referring to the obtaining of the data which is a record of the identities of the persons to whom the data relates,

  and “copied” is to be read accordingly,

• “overseas authorities” means authorities of a country or territory outside the United Kingdom.