Part 7

Bulk personal dataset warrants

Further and supplementary provision

Application of Part to bulk personal datasets obtained under this Act
225
1
Subject to subsection (2), this section applies where a bulk personal dataset has been obtained by an intelligence service under a warrant or other authorisation issued or given under this Act (and, accordingly, section 200(1) and (2) do not apply by virtue of section 201(1)).
2
This section does not apply where the bulk personal dataset was obtained by the intelligence service under a bulk acquisition warrant issued under Chapter 2 of Part 6.
3
Where this section applies, the Secretary of State may, on the application of the head of the intelligence service , or a person acting on their behalf, give a direction that—
a
the intelligence service may retain, or retain and examine, the bulk personal dataset by virtue of the direction,
b
any other power of the intelligence service to retain or examine the bulk personal dataset, and any associated regulatory provision, ceases to apply in relation to the bulk personal dataset (subject to subsection (5)), and
c
section 201(1) also ceases to apply in relation to the bulk personal dataset.
4
Accordingly, where a direction is given under subsection (3), the intelligence service may exercise its power by virtue of the direction to retain, or to retain and examine, the bulk personal dataset only if authorised to do so
a
by a class BPD warrant or a specific BPD warrant under this Part , or
b
by an individual authorisation under Part 7A (low or no reasonable expectation of privacy).
5
A direction under subsection (3) may provide for any associated regulatory provision specified in the direction to continue to apply in relation to the bulk personal dataset, with or without modifications specified in the direction.
6
The power conferred by subsection (5) must be exercised to ensure that—
a
where section 56 and Schedule 3 applied in relation to the bulk personal dataset immediately before the giving of the direction, they continue to apply in relation to it (without modification);
b
where sections 57 to 59 applied in relation to the bulk personal dataset immediately before the giving of the direction, they continue to apply in relation to it with the modification that the reference in section 58(7)(a) to the provisions of Part 2 is to be read as including a reference to the provisions of this Part.
7
The Secretary of State may only give a direction under subsection (3) with the approval of a Judicial Commissioner.
8
In deciding whether to give approval for the purposes of subsection (7), the Judicial Commissioner must apply the same principles as would be applied by a court on an application for judicial review.
9
Where a Judicial Commissioner refuses to approve a decision by the Secretary of State to give a direction under subsection (3), the Judicial Commissioner must give the Secretary of State written reasons for the decision.
10
Where a Judicial Commissioner, other than the Investigatory Powers Commissioner, refuses to approve such a decision, the Secretary of State may ask the Investigatory Powers Commissioner to decide whether to approve the decision.
11
A direction under subsection (3)—
a
may not be revoked;
b
may be varied but only for the purpose of altering or removing any provision included in the direction under subsection (5).
12
Subsections (7) to (10) apply in relation to the variation of a direction under subsection (3) as they apply in relation to the giving of a direction under that subsection.
13
The head of an intelligence service , or a person acting on their behalf, may, at the same time as applying for a direction under subsection (3),
a
apply for a specific BPD warrant under section 205 (and the Secretary of State may issue such a warrant at the same time as giving the direction) , or
b
decide to grant an individual authorisation under Part
7A
.
14
In this section, “associated regulatory provision”, in relation to a power of an intelligence service to retain or examine a bulk personal dataset, means any provision which—
a
is made by or for the purposes of this Act (other than this Part), and
b
applied in relation to the retention, examination, disclosure or other use of the bulk personal dataset immediately before the giving of a direction under subsection (3).
15
For the purposes of subsections (3) and (13), only a person holding office under the Crown may act on behalf of the head of an intelligence service.
Words in s. 225(3) inserted (14.10.2024) by Investigatory Powers (Amendment) Act 2024 (c. 9), ss. 4(6)(a), 32(2); S.I. 2024/1021, reg. 2(d)
S. 225 in force at 25.7.2018 for specified purposes by S.I. 2018/873, reg. 2(u)
Words in s. 225(4) renumbered as s. 225(4)(a) (14.10.2024) by Investigatory Powers (Amendment) Act 2024 (c. 9), ss. 1(8)(a)(i), 32(2); S.I. 2024/1021, reg. 2(a)
Words in s. 225(13) inserted (14.10.2024) by Investigatory Powers (Amendment) Act 2024 (c. 9), ss. 4(6)(b), 32(2); S.I. 2024/1021, reg. 2(d)
S. 225 in force at 22.8.2018 in so far as not already in force by S.I. 2018/873, reg. 3(c) (with reg. 9)
S. 225(13)(b) and word inserted (14.10.2024) by Investigatory Powers (Amendment) Act 2024 (c. 9), ss. 1(8)(b)(ii), 32(2); S.I. 2024/1021, reg. 2(a)
S. 225(4)(b) and word inserted (14.10.2024) by Investigatory Powers (Amendment) Act 2024 (c. 9), ss. 1(8)(a)(ii), 32(2); S.I. 2024/1021, reg. 2(a)
S. 225(15) inserted (14.10.2024) by Investigatory Powers (Amendment) Act 2024 (c. 9), ss. 4(6)(c), 32(2); S.I. 2024/1021, reg. 2(d)
Words in s. 225(13) renumbered as s. 225(13)(a) (14.10.2024) by Investigatory Powers (Amendment) Act 2024 (c. 9), ss. 1(8)(b)(i), 32(2); S.I. 2024/1021, reg. 2(a)