Data Retention and Investigatory Powers Act 2014

On 1 August 2014, the Data Retention Regulations 2014 came into force, completing the framework introduced by the DRIP. They provide that a communications service provider can be required to retain data only when target of a notice of the Secretary of State. In December 2014, in R (on the application of David Davis MP and Tom Watson MP) v Secretary of State for the Home Department, Mr Justice Lewis (High Court) granted the Claimants permission to proceed to a substantive hearing, thus agreeing that the DRIP can be challenged by judicial review. As a reaction, the Government proposed using the Counter-Terrorism and Security Bill (CTSB) to extend their remit to cover data generated as a result of internet communications.

On 4 June 2015 a legal challenge against the law was brought to the High Court by two MPs, Labour's Tom Watson and the Conservative David Davis represented by the civil liberties organisation Liberty. They claimed that the act was rushed through parliament and was incompatible with the Human Rights Act and the European Union Charter of Fundamental Rights.{{cite news |url=https://www.bbc.co.uk/news/uk-politics-33000160 |title=Emergency surveillance law faces legal challenge from 2 MPs |work=BBC News |date=4 June 2015 }}

On 17 July 2015 the High Court upheld the challenge, finding sections 1 and 2 of the Act to be unlawful.{{cite web|url=https://www.theregister.co.uk/2015/07/17/high_court_dripa_unlawful/|title=High Court smacks down 'emergency' UK spy bill as UNLAWFUL|date=17 July 2015|author= Alexander J Martin|work=The Register}}{{cite web|url=https://www.theguardian.com/commentisfree/2015/jul/17/high-court-brake-snooping-european-law|title=Finally, the high court puts a brake on snooping on ordinary Britons |author=Carly Nyst|date=17 July 2015|work=The Guardian}} The court found that the section 1 of the Act was contrary to EU law as a result of breaches of the Charter of Fundamental Rights of the EU by virtue of the rights under Article 7 to a "private and family life, home and communications" and under article 8 which provides rights of the data held on an individual. The court found that these rights were breached based on the conclusions reached in [https://www.bailii.org/eu/cases/EUECJ/2014/C29312.html Digital Rights Ireland Ltd v Minister for Communications, Marine and Natural Resources and others] and the conjoined case of Kärntner Landesregierung. The court issued an order that sections 1 and 2 be disapplied, suspended until 31 March 2016, thereby giving the government a deadline to come up with alternative legislation which is compatible with EU law.

In October 2015, the Court of Appeal began hearing the Home Secretary's appeal against the ruling.{{cite news|title=Court of Appeal hears government surveillance law case|url=https://www.bbc.co.uk/news/uk-34607978|access-date=8 November 2015|work=BBC News|date=22 October 2015}} The Court of Appeal accepted, on a provisional basis, the arguments put forward by the Home Secretary and decided to refer certain aspects of the judgement to the Court of Justice of the European Union for a preliminary ruling. In particular, the Court of Appeal found that the Digital Rights Ireland case did not result in mandatory requirements applicable to all Member States' data retention regimes.{{cite web |url=https://www.monckton.com/r-v-secretary-of-state-for-the-home-department-ex-p-david-davis-mp-tom-watson-mp-peter-brice-and-geoffrey-lewis-2015-ewca-civ-1185/ |title=R v Secretary of State for the Home Department ex p David Davis MP, Tom Watson MP, Peter Brice and Geoffrey Lewis [2015] EWCA Civ 1185 |date=17 December 2015 |first=Imogen |last=Proud |publisher=Mockton Chambers}} The Court of Appeal referred questions to the Court of Justice of the European Union as to whether the Digital Rights Ireland case should law down mandatory requirements for the national legislation of member states and whether this resulted in an expansion of the effects of Articles 7 and 8 of the EU Charter beyond the effect of Article 8 of the European Convention on Human Rights.{{cite web |url=https://www.bailii.org/ew/cases/EWCA/Civ/2015/1185.html |title=Secretary of State for the Home Department v Davis MP & Ors [2015] EWCA Civ 1185 (20 November 2015)}}

On 21 December 2016 the European Court of Justice (ECJ) ruled in joined cases that the Data Retention and Investigatory Powers Act 2014 was unlawful. The court found on the first question referred by the Court of Appeal that the Charter of Fundamental Rights of the European Union does preclude legislation which provides for access to retained traffic and location data by certain national authorities where this is not restricted to fighting serious crime or where the right to access is not subject to a prior court review. The ECJ found that the second question referred by the Court of Appeal was inadmissible.{{cite web |url=http://curia.europa.eu/juris/document/document.jsf?text=&docid=186492&pageIndex=0&doclang=EN&mode=lst&dir=&occ=first&part=1&cid=1949500 |title=Judgement of the Court (Grand Chamber) |date=21 December 2016 |website=The Court of Justice of the European Union}}

The Data Retention and Investigatory Powers Act 2014 (DRIPA) was repealed on 31 December 2016 and replaced by the Investigatory Powers Act 2016.

Following the EU judgement (and after the repeal of the act) the matters was again referred to the Court of Appeal. In this judgement the Court of Appeal granted declaratory relief in respect of the areas in which it was found that the Data Retention and Investigatory Powers Act 2014 was incompatible with EU law. The relief was limited to the context that making use of data collected under the act in prosecuting crimes was only admissible where it had been restricted to fighting serious crime or access had been subject to court review.{{cite web |url=https://www.bailii.org/ew/cases/EWCA/Civ/2018/70.html |title=Secretary of State for the Home Department v Watson MP & Ors [2018] EWCA Civ 70 (30 January 2018)}}

The main provisions of the act were:[https://www.gov.uk/government/collections/data-retention-and-investigatory-powers-act-2014 gov.uk: "Collection: Data Retention and Investigatory Powers Act 2014"], 25 Jul 2014

• To allow the security services through the Secretary of State to retain the powers to require a public telecommunications operator to retain communications data in line with the purposes of the Regulation of Investigatory Powers Act 2000.Data Retention and Investigatory Powers Act 2014 - Section 1
• The creation of a new privacy and civil liberties board to act as an independent watchdog overseeing the security services' use of these powers.{{cite web|url=https://www.theguardian.com/world/2014/jul/10/surveillance-legislation-commons-support-critics-stitch-up |work=The Guardian |title= Surveillance law wins cross-party support but critics claim stitch-up |access-date=24 August 2014}}
• To enforce the annual publication of a report of the amount of data intercepted under the regulations
• To restrict the length of time such data can be held to 12 months
• To ensure that the relevance of the Regulation of Investigatory Powers Act 2000 is reviewed biennially
• To reduce the number of public bodies that can access the data collected under the legislation
• To limit the data which can be accessed under the regulations to only data that is relevant
• To provide for fresh legislation to supersede this legislation in 2016
• To ensure that such data can no longer be gathered solely for the interest of the UK economic wellbeing
• To appoint a diplomat to negotiate data transfers of such information with the United States.

• Human Rights Act 1998
• Mass surveillance in the United Kingdom

{{reflist|30em}}

{{UK legislation}}

Category:United Kingdom Acts of Parliament 2014

Category:United Kingdom privacy law

Category:Data laws of the United Kingdom