Section 102 Codes and agreements about the retention of communications data
260.Subsection (1) sets out that a voluntary code of practice will be drawn up and issued by the Secretary of State. The code will be applicable to communications providers and will apply to communications data that they have generated or is otherwise in their possession.
261.Subsection (2) explains that the Secretary of State may enter into further agreements with specific communications providers, with the consent of both parties. These will specify in greater detail than the generic code the type of data that is retained, and the conditions of retention and retrieval. The aim of these individual agreements is to provide greater clarity as to each provider’s retention practices for public authorities who are eligible under the Regulation of Investigatory Powers Act 2000 to access communications data.
262.Subsection (3) sets out that the code and any agreements may contain provisions necessary to safeguard national security, or to prevent or detect crime and to prosecute offenders where this is directly or indirectly related to national security. . Data retained in accordance with the code will therefore be held for national security and law enforcement purposes, without prejudice to the communication provider’s own business purposes.
263.Subsection (4) makes it clear that the code is voluntary: there are no penalties for non-compliance.
264.Subsection (5) allows the code or any agreement drawn up under this section to be used in legal proceedings brought against a communications provider by a person whose communications data they hold. Adherence to the terms of the code or agreement may be used as evidence that the retention of data is justified for national security or law enforcement purposes. This provision is intended to prevent a communications provider facing civil liability for retaining data in accordance with the code when they have no further need of it for business purposes.
