Investigatory Powers Act 2016

Part 3U.K.Authorisations for obtaining communications data

[F1Targeted authorisations for obtaining data: the Investigatory Powers CommissionerU.K.

60A.Power of Investigatory Powers Commissioner to grant authorisationsU.K.

(1)Subsection (2) applies if the Investigatory Powers Commissioner, on an application made by a relevant public authority, considers—

(a)that it is necessary for the relevant public authority to obtain communications data for a purpose falling within subsection (7),

(b)that it is necessary for the relevant public authority to obtain the data—

(i)for the purposes of a specific investigation or a specific operation, or

(ii)for the purposes of testing, maintaining or developing equipment, systems or other capabilities relating to the availability or obtaining of communications data, and

(c)that the conduct authorised by the authorisation is proportionate to what is sought to be achieved.

(2)The Investigatory Powers Commissioner may authorise the relevant public authority to engage in any conduct which—

(a)is for the purpose of obtaining the data from any person, and

(b)relates to—

(i)a telecommunication system, or

(ii)data derived from a telecommunication system.

(3)Subsections (1) and (2) are subject to—

(a)section 62 (restrictions in relation to internet connection records),

(b)sections 70, 73 and 75 and Schedule 4 (restrictions relating to certain relevant public authorities),

(c)section 76 (requirement to consult a single point of contact), and

(d)section 77 (Commissioner approval for authorisations to identify or confirm journalistic sources).

(4)Authorised conduct may, in particular, consist of the relevant public authority—

(a)obtaining the communications data itself from any person or telecommunication system,

(b)asking any person whom the relevant public authority believes is, or may be, in possession of the communications data or capable of obtaining it—

(i)to obtain the data (if not already in possession of it), and

(ii)to disclose the data (whether already in the person’s possession or subsequently obtained by that person) to the relevant public authority, or

(c)requiring by notice a telecommunications operator whom the relevant public authority believes is, or may be, in possession of the communications data or capable of obtaining it—

(i)to obtain the data (if not already in possession of it), and

(ii)to disclose the data (whether already in the operator’s possession or subsequently obtained by the operator) to the relevant public authority.

(5)An authorisation—

(a)may relate to data whether or not in existence at the time of the authorisation,

(b)may authorise the obtaining or disclosure of data by a person other than the relevant public authority, or any other conduct by such a person, which enables or facilitates the obtaining of the communications data concerned, and

(c)may, in particular, require a telecommunications operator who controls or provides a telecommunications system to obtain or disclose data relating to the use of a telecommunications service provided by another telecommunications operator in relation to that system.

(6)An authorisation may not authorise any conduct consisting in the interception of communications in the course of their transmission by means of a telecommunication system.

(7)It is necessary to obtain communications data for a purpose falling within this subsection if it is necessary to obtain the data—

(a)in the interests of national security,

(b)for the applicable crime purpose (see subsection (8)),

(c)in the interests of the economic well-being of the United Kingdom so far as those interests are also relevant to the interests of national security,

(d)in the interests of public safety,

(e)for the purpose of preventing death or injury or any damage to a person’s physical or mental health, or of mitigating any injury or damage to a person’s physical or mental health,

(f)to assist investigations into alleged miscarriages of justice, or

(g)where a person (“P”) has died or is unable to identify themselves because of a physical or mental condition—

(i)to assist in identifying P, or

(ii)to obtain information about P’s next of kin or other persons connected with P or about the reasons for P’s death or condition.

(8)In subsection (7)(b), “the applicable crime purpose” means—

(a)where the communications data is wholly or partly events data, the purpose of preventing or detecting serious crime;

(b)in any other case, the purpose of preventing or detecting crime or of preventing disorder.

(9)The fact that the communications data which would be obtained in pursuance of an authorisation relates to the activities in the British Islands of a trade union is not, of itself, sufficient to establish that it is necessary to obtain the data for a purpose falling within subsection (7).

(10)See—

(a)sections 70 and 73 for the meaning of “relevant public authority”;

(b)section 84 for the way in which this Part applies to postal operators and postal services;

(c)section 86(2A) for the meaning of “serious crime”.]

Targeted authorisations for obtaining data [F2: designated senior officers] U.K.

61Power [F3of designated senior officers] to grant authorisationsU.K.

(1)Subsection (2) applies if a designated senior officer of a relevant public authority considers—

(a)that it is necessary to obtain communications data for a purpose falling within subsection (7),

(b)that it is necessary to obtain the data—

(i)for the purposes of a specific investigation or a specific operation, or

(ii)for the purposes of testing, maintaining or developing equipment, systems or other capabilities relating to the availability or obtaining of communications data, and

(c)that the conduct authorised by the authorisation is proportionate to what is sought to be achieved.

(2)The designated senior officer may authorise any officer of the authority to engage in any conduct which—

(a)is for the purpose of obtaining the data from any person, and

(b)relates to—

(i)a telecommunication system, or

(ii)data derived from a telecommunication system.

(3)Subsections (1) and (2) are subject to—

(a)section 62 (restrictions in relation to internet connection records),

(b)section 63 (additional restrictions on grant of authorisations),

(c)sections 70 [F4, 73 and 75] and Schedule 4 (restrictions relating to certain relevant public authorities),

(d)section 76 (requirement to consult a single point of contact), and

(e)section 77 (Commissioner approval for authorisations to identify or confirm journalistic sources).

(4)Authorised conduct may, in particular, consist of an authorised officer—

(a)obtaining the communications data themselves from any person or telecommunication system,

(b)asking any person whom the authorised officer believes is, or may be, in possession of the communications data or capable of obtaining it—

(i)to obtain the data (if not already in possession of it), and

(ii)to disclose the data (whether already in the person's possession or subsequently obtained by that person) to a person identified by, or in accordance with, the authorisation, or

(c)requiring by notice a telecommunications operator whom the authorised officer believes is, or may be, in possession of the communications data or capable of obtaining it—

(i)to obtain the data (if not already in possession of it), and

(ii)to disclose the data (whether already in the operator's possession or subsequently obtained by the operator) to a person identified by, or in accordance with, the authorisation.

(5)An authorisation—

(a)may relate to data whether or not in existence at the time of the authorisation,

(b)may authorise the obtaining or disclosure of data by a person who is not an authorised officer, or any other conduct by such a person, which enables or facilitates the obtaining of the communications data concerned, and

(c)may, in particular, require a telecommunications operator who controls or provides a telecommunication system to obtain or disclose data relating to the use of a telecommunications service provided by another telecommunications operator in relation to that system.

(6)An authorisation—

(a)may not authorise any conduct consisting in the interception of communications in the course of their transmission by means of a telecommunication system, and

(b)may not authorise an authorised officer to ask or require, in the circumstances mentioned in subsection (4)(b) or (c), a person to disclose the data to any person other than—

(i)an authorised officer, or

(ii)an officer of the same relevant public authority as an authorised officer.

(7)It is necessary to obtain communications data for a purpose falling within this subsection if it is necessary to obtain the data—

(a)in the interests of national security,

[F5(b)for the applicable crime purpose (see subsection (7A)), or]

(c)in the interests of the economic well-being of the United Kingdom so far as those interests are also relevant to the interests of national security,

F6(d). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F6(e). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F6(f). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F6(g). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F6(h). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F6(i). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F6(j). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

[F7(7A)In subsection (7)(b), “the applicable crime purpose” means—

(a)where the communications data is wholly or partly events data, the purpose of preventing or detecting serious crime;

(b)in any other case, the purpose of preventing or detecting crime or of preventing disorder.]

(8)The fact that the communications data which would be obtained in pursuance of an authorisation relates to the activities in the British Islands of a trade union is not, of itself, sufficient to establish that it is necessary to obtain the data for a purpose falling within subsection (7).

(9)See—

(a)sections 70 and 73 for the meanings of “designated senior officer” and “relevant public authority”;

(b)section 84 for the way in which this Part applies to postal operators and postal services.

[F8(c)section 86(2A) for the meaning of “serious crime”.]

[F961A.Power of designated senior officers to grant authorisations: urgent casesU.K.

(1)Subsection (2) applies if a designated senior officer of a relevant public authority considers—

(a)that it is necessary to obtain communications data for a purpose falling within subsection (7),

(b)that it is necessary to obtain the data for the purposes of a specific investigation or a specific operation,

(c)that there is an urgent need to obtain the data, and

(d)that the conduct authorised by the authorisation is proportionate to what is sought to be achieved.

(2)The designated senior officer may authorise any officer of the relevant public authority to engage in any conduct which—

(a)is for the purpose of obtaining the data from any person, and

(b)relates to—

(i)a telecommunication system, or

(ii)data derived from a telecommunication system.

(3)Subsections (1) and (2) are subject to—

(a)section 62 (restrictions in relation to internet connection records),

(b)sections 70, 73 and 75 and Schedule 4 (restrictions relating to certain relevant public authorities),

(d)section 76 (requirement to consult a single point of contact), and

(e)section 77 (Commissioner approval for authorisations to identify or confirm journalistic sources).

(4)Authorised conduct may, in particular, consist of an authorised officer—

(a)obtaining the communications data themselves from any person or telecommunication system,

(b)asking any person whom the authorised officer believes is, or may be, in possession of the communications data or capable of obtaining it—

(i)to obtain the data (if not already in possession of it), and

(ii)to disclose the data (whether already in the person’s possession or subsequently obtained by that person) to a person identified by, or in accordance with, the authorisation, or

(c)requiring by notice a telecommunications operator whom the authorised officer believes is, or may be, in possession of the communications data or capable of obtaining it—

(i)to obtain the data (if not already in possession of it), and

(ii)to disclose the data (whether already in the operator’s possession or subsequently obtained by the operator) to a person identified by, or in accordance with, the authorisation.

(5)An authorisation—

(a)may relate to data whether or not in existence at the time of the authorisation,

(b)may authorise the obtaining or disclosure of data by a person who is not an authorised officer, or any other conduct by such a person, which enables or facilitates the obtaining of the communications data concerned, and

(c)may, in particular, require a telecommunications operator who controls or provides a telecommunications system to obtain or disclose data relating to the use of a telecommunications service provided by another telecommunications operator in relation to that system.

(6)An authorisation—

(a)may not authorise any conduct consisting in the interception of communications in the course of their transmission by means of a telecommunication system, and

(b)may not authorise an authorised officer to ask or require, in the circumstances mentioned in subsection (4)(b) or (c), a person to disclose the data to any person other than—

(i)an authorised officer, or

(ii)an officer of the same relevant public authority as an authorised officer.

(7)It is necessary to obtain communications data for a purpose falling within this subsection if it is necessary to obtain the data—

(a)for the applicable crime purpose (see subsection (8)),

(b)in the interests of public safety,

(c)for the purpose of preventing death or injury or any damage to a person’s physical or mental health, or of mitigating any injury or damage to a person’s physical or mental health,

(d)to assist investigations into alleged miscarriages of justice, or

(e)where a person (“P”) has died or is unable to identify themselves because of a physical or mental condition—

(i)to assist in identifying P, or

(ii)to obtain information about P’s next of kin or other persons connected with P or about the reasons for P’s death or condition.

(8)In subsection (7)(a), “the applicable crime purpose” means—

(a)where the communications data is wholly or partly events data, the purpose of preventing or detecting serious crime;

(b)in any other case, the purpose of preventing or detecting crime or of preventing disorder.

(9)The fact that the communications data which would be obtained in pursuance of an authorisation relates to the activities in the British Islands of a trade union is not, of itself, sufficient to establish that it is necessary to obtain the data for a purpose falling within subsection (7).

(10)See—

(a)sections 70 and 73 for the meanings of “designated senior officer” and “relevant public authority”;

(b)section 84 for the way in which this Part applies to postal operators and postal services;

(c)section 86(2A) for the meaning of “serious crime”.]

[F10Further provision about authorisations]U.K.

62Restrictions in relation to internet connection recordsU.K.

[F11(A1)The Investigatory Powers Commissioner may not, on the application of a local authority, grant an authorisation under section 60A for the purpose of obtaining data which is, or can only be obtained by processing, an internet connection record.

(A2)The Investigatory Powers Commissioner may not, on the application of a relevant public authority which is not a local authority, grant an authorisation under section 60A for the purpose of obtaining data which is, or can only be obtained by processing, an internet connection record unless condition A, B or C is met.]

F12(1). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(2)A designated senior officer of a relevant public authority which is not a local authority may not grant an authorisation for the purpose of obtaining data which is, or can only be obtained by processing, an internet connection record unless condition A, B or C is met.

(3)Condition A is that [F13the person with power to grant the authorisation] considers that it is necessary, for a purpose falling within [F14section 60A(7), 61(7) or 61A(7) (as applicable)], to obtain the data to identify which person or apparatus is using an internet service where—

(a)the service and time of use are already known, but

(b)the identity of the person or apparatus using the service is not known.

(4)Condition B is that—

(a)the purpose for which the data is to be obtained falls within [F15section 60A(7), 61(7) or 61A(7) (as applicable) but is not the purpose of preventing or detecting serious crime mentioned in section 60A(8)(a), 61(7A)(a) or 61A(8)(a) or the purpose of preventing or detecting crime mentioned in section 60A(8)(b), 61(7A)(b) or 61A(8)(b),] and

(b)[F16the person with power to grant the authorisation] considers that it is necessary to obtain the data to identify—

(i)which internet communications service is being used, and when and how it is being used, by a person or apparatus whose identity is already known,

(ii)where or when a person or apparatus whose identity is already known is obtaining access to, or running, a computer file or computer program which wholly or mainly involves making available, or acquiring, material whose possession is a crime, or

(iii)which internet service is being used, and when and how it is being used, by a person or apparatus whose identity is already known.

(5)Condition C is that—

[F17(a)either—

(i)the purpose for which the data is to be obtained is the purpose of preventing or detecting serious crime mentioned in section 60A(8)(a), 61(7A)(a) or 61A(8)(a), or

(ii)the purpose for which the data is to be obtained is the purpose of preventing or detecting crime mentioned in section 60A(8)(b), 61(7A)(b) or 61A(8)(b) and the crime to be prevented or detected is serious crime, and]

F18(b). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(c)[F19the person with power to grant the authorisation] considers that it is necessary to obtain the data to identify—

(i)which internet communications service is being used, and when and how it is being used, by a person or apparatus whose identity is already known,

(ii)where or when a person or apparatus whose identity is already known is obtaining access to, or running, a computer file or computer program which wholly or mainly involves making available, or acquiring, material whose possession is a crime, or

(iii)which internet service is being used, and when and how it is being used, by a person or apparatus whose identity is already known.

F20(6). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(7)In this Act “internet connection record” means communications data which—

(a)may be used to identify, or assist in identifying, a telecommunications service to which a communication is transmitted by means of a telecommunication system for the purpose of obtaining access to, or running, a computer file or computer program, and

(b)comprises data generated or processed by a telecommunications operator in the process of supplying the telecommunications service to the sender of the communication (whether or not a person).

63Additional restrictions on grant of authorisations [F21under section 61] U.K.

(1)A designated senior officer may not grant an authorisation [F22under section 61] for the purposes of a specific investigation or a specific operation if the officer is working on that investigation or operation.

(2)But, if the designated senior officer considers that there are exceptional circumstances which mean that subsection (1) should not apply in a particular case, that subsection does not apply in that case.

(3)Examples of exceptional circumstances include—

(a)an imminent threat to life or another emergency,

(b)the investigation or operation concerned is one where there is an exceptional need, in the interests of national security, to keep knowledge of it to a minimum, [F23or]

(c)there is an opportunity to obtain information where—

(i)the opportunity is rare,

(ii)the time to act is short, and

(iii)the need to obtain the information is significant and in the interests of national security.

F24(d). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

64Procedure for authorisations and authorised noticesU.K.

(1)An authorisation must specify—

F25(a). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

[F26(aa)whether the authorisation has been granted by the Investigatory Powers Commissioner under section 60A or by a designated senior officer under section 61 or 61A;]

(b)the matters falling within [F27section 60A(7), 61(7) or 61A(7) (as applicable)] by reference to which it is granted,

(c)the conduct that is authorised,

(d)the data or description of data to be obtained, and

(e)the persons or descriptions of persons to whom the data is to be, or may be, disclosed or how to identify such persons.

[F28(1A)An authorisation granted by a designated senior officer under section 61 or 61A must also specify the office, rank or position held by the officer.]

(2)An authorisation which authorises a person to impose requirements by notice on a telecommunications operator must also specify—

(a)the operator concerned, and

(b)the nature of the requirements that are to be imposed,

but need not specify the other contents of the notice.

(3)The notice itself—

(a)must specify—

(i)the office, rank or position held by the person giving it,

(ii)the requirements that are being imposed, and

(iii)the telecommunications operator on whom the requirements are being imposed, and

(b)must be given in writing or (if not in writing) in a manner that produces a record of its having been given.

(4)An authorisation must be applied for, and granted, in writing or (if not in writing) in a manner that produces a record of its having been applied for or granted.

65Duration and cancellation of authorisations and noticesU.K.

(1)An authorisation [F29under section 60A or 61] ceases to have effect at the end of the period of one month beginning with the date on which it is granted.

(2)An authorisation [F30under section 60A or 61] may be renewed at any time before the end of that period by the grant of a further authorisation.

(3)Subsection (1) has effect in relation to a renewed authorisation as if the period of one month mentioned in that subsection did not begin until the end of the period of one month applicable to the authorisation that is current at the time of the renewal.

[F31(3A)An authorisation under section 61A ceases to have effect at the end of the period of 3 days beginning with the date on which it is granted.]

[F32(3B)Where the Investigatory Powers Commissioner has granted an authorisation under section 60A to a relevant public authority—

(a)the Investigatory Powers Commissioner or an officer of the authority may cancel it at any time, and

(b)the Investigatory Powers Commissioner or an officer of the authority must cancel it if the Commissioner or (as the case may be) the officer considers that the requirements of this Part would not be satisfied in relation to granting an equivalent new authorisation.]

(4)A designated senior officer who has granted an authorisation [F33under section 61 or 61A]—

(a)may cancel it at any time, and

(b)must cancel it if the designated senior officer considers that the requirements of this Part would not be satisfied in relation to granting an equivalent new authorisation.

(5)The Secretary of State may by regulations provide for the person by whom any function under subsection (4) is to be exercised where the person who would otherwise have exercised it is no longer available to do so.

(6)Such regulations may, in particular, provide for the person by whom the function is to be exercised to be a person appointed in accordance with the regulations.

(7)A notice given in pursuance of an authorisation (and any requirement imposed by the notice)—

(a)is not affected by the authorisation subsequently ceasing to have effect under subsection (1) [F34or (3A)], but

(b)is cancelled if the authorisation is cancelled under [F35subsection (3B) or (4)].

66Duties of telecommunications operators in relation to authorisationsU.K.

(1)It is the duty of a telecommunications operator on whom a requirement is imposed by notice given in pursuance of an authorisation to comply with that requirement.

(2)It is the duty of a telecommunications operator who is obtaining or disclosing communications data, in response to a request or requirement for the data in pursuance of an authorisation, to obtain or disclose the data in a way that minimises the amount of data that needs to be processed for the purpose concerned.

(3)A person who is under a duty by virtue of subsection (1) or (2) is not required to take any steps in pursuance of that duty which it is not reasonably practicable for that person to take.

(4)For the purposes of subsection (3), where obligations have been imposed on a telecommunications operator (“P”) under section 253 (maintenance of technical capability), the steps which it is reasonably practicable for P to take include every step which it would have been reasonably practicable for P to take if P had complied with all of those obligations.

(5)The duty imposed by subsection (1) or (2) is enforceable by civil proceedings by the Secretary of State for an injunction, or for specific performance of a statutory duty under section 45 of the Court of Session Act 1988, or for any other appropriate relief.

Filtering arrangements for obtaining dataU.K.

67Filtering arrangements for obtaining dataU.K.

(1)The Secretary of State may establish, maintain and operate arrangements for the purposes of—

(a)assisting [F36a person, who is] considering whether to grant an authorisation, to determine whether the requirements of this Part in relation to granting the authorisation are satisfied, or

(b)facilitating the lawful, efficient and effective obtaining of communications data from any person by relevant public authorities in pursuance of an authorisation.

(2)Arrangements under subsection (1) (“filtering arrangements”) may, in particular, involve the obtaining of communications data in pursuance of an authorisation (“the target data”) by means of—

(a)a request to the Secretary of State to obtain the target data on behalf of an authorised officer, and

(b)the Secretary of State—

(i)obtaining the target data or data from which the target data may be derived,

(ii)processing the target data or the data from which it may be derived (and retaining data temporarily for that purpose), and

(iii)disclosing the target data to the person identified for this purpose by, or in accordance with, the authorisation.

(3)Filtering arrangements may, in particular, involve the generation or use by the Secretary of State of information—

(a)for the purpose mentioned in subsection (1)(a), or

(b)for the purposes of—

(i)the support, maintenance, oversight, operation or administration of the arrangements, or

(ii)the functions of the Investigatory Powers Commissioner mentioned in subsection (4) or (5).

(4)Filtering arrangements must involve the generation and retention of such information or documents as the Investigatory Powers Commissioner considers appropriate for the purposes of the functions of the Commissioner under section 229(1) of keeping under review the exercise by public authorities of functions under this Part.

(5)The Secretary of State must consult the Investigatory Powers Commissioner about the principles on the basis of which the Secretary of State intends to establish, maintain or operate any arrangements for the purpose mentioned in subsection (1)(a).

68Use of filtering arrangements in pursuance of an authorisationU.K.

(1)This section applies in relation to the use of the filtering arrangements in pursuance of an authorisation.

(2)The filtering arrangements may be used—

(a)to obtain and disclose communications data in pursuance of an authorisation, only if the authorisation specifically authorises the use of the arrangements to obtain and disclose the data,

(b)to process data in pursuance of an authorisation (and to retain the data temporarily for that purpose), only if the authorisation specifically authorises processing data of that description under the arrangements (and their temporary retention for that purpose).

(3)An authorisation must record [F37the decision of the person granting the authorisation] as to—

(a)whether the communications data to be obtained and disclosed in pursuance of the authorisation may be obtained and disclosed by use of the filtering arrangements,

(b)whether the processing of data under the filtering arrangements (and its temporary retention for that purpose) is authorised,

(c)if the processing of data under the filtering arrangements is authorised, the description of data that may be processed.

(4)[F38A person] must not grant an authorisation which authorises—

(a)use of the filtering arrangements, or

(b)processing under the filtering arrangements,

unless the condition in subsection (5) is met.

(5)The condition is that [F39the person] (as well as considering that the other requirements of this Part in relation to granting the authorisation are satisfied) considers that what is authorised in relation to the filtering arrangements is proportionate to what is sought to be achieved.

69Duties in connection with operation of filtering arrangementsU.K.

(1)The Secretary of State must secure—

(a)that no authorisation data is obtained or processed under the filtering arrangements except for the purposes of an authorisation,

(b)that data which—

(i)has been obtained or processed under the filtering arrangements, and

(ii)is to be disclosed in pursuance of an authorisation or for the purpose mentioned in section 67(1)(a),

is disclosed only to the person to whom the data is to be disclosed in pursuance of the authorisation or (as the case may be) [F40to the person considering whether to grant the authorisation],

(c)that any authorisation data which is obtained under the filtering arrangements in pursuance of an authorisation is immediately destroyed—

(i)when the purposes of the authorisation have been met, or

(ii)if at any time it ceases to be necessary to retain the data for the purposes or purpose concerned.

(2)The Secretary of State must secure that data (other than authorisation data) which is retained under the filtering arrangements is disclosed only—

(a)for the purpose mentioned in section 67(1)(a),

(b)for the purposes of support, maintenance, oversight, operation or administration of the arrangements,

(c)to the Investigatory Powers Commissioner for the purposes of the functions of the Commissioner mentioned in section 67(4) or (5), or

(d)otherwise as authorised by law.

(3)The Secretary of State must secure that—

(a)only the Secretary of State and designated individuals are permitted to read, obtain or otherwise process data for the purposes of support, maintenance, oversight, operation or administration of the filtering arrangements, and

(b)no other persons are permitted to access or use the filtering arrangements except in pursuance of an authorisation or for the purpose mentioned in section 67(1)(a).

(4)In subsection (3)(a) “designated” means designated by the Secretary of State; and the Secretary of State may designate an individual only if the Secretary of State thinks that it is necessary for the individual to be able to act as mentioned in subsection (3)(a).

(5)The Secretary of State must—

(a)put in place and maintain an adequate security system to govern access to, and use of, the filtering arrangements and to protect against any abuse of the power of access, and

(b)impose measures to protect against unauthorised or unlawful data retention, processing, access or disclosure.

(6)The Secretary of State must—

(a)put in place and maintain procedures (including the regular testing of relevant software and hardware) to ensure that the filtering arrangements are functioning properly, and

(b)report, as soon as possible after the end of each calendar year, to the Investigatory Powers Commissioner about the functioning of the filtering arrangements during that year.

(7)A report under subsection (6)(b) must, in particular, contain information about the destruction of authorisation data during the calendar year concerned.

(8)If the Secretary of State believes that significant processing errors have occurred giving rise to a contravention of any of the requirements of this Part which relate to the filtering arrangements, the Secretary of State must report that fact immediately to the Investigatory Powers Commissioner.

(9)In this section “authorisation data”, in relation to an authorisation, means communications data that is, or is to be, obtained in pursuance of the authorisation or any data from which that data is, or may be, derived.

Relevant public authorities other than local authoritiesU.K.

70Relevant public authorities and designated senior officers etc.U.K.

(1)Schedule 4 (relevant public authorities and designated senior officers etc.) has effect.

(2)A public authority listed in column 1 of the table in the Schedule is a relevant public authority for the purposes of this Part.

[F41(2A)An authorisation under section 60A may be granted on the application of a relevant public authority listed in column 1 of the table only if section 60A(1)(a) is met in relation to a purpose within one of the paragraphs of section 60A(7) specified in the corresponding entry in column 2 of the table.]

(3)In this Part “designated senior officer”, in relation to a relevant public authority listed in column 1 of the table, means an individual who holds with the authority—

(a)an office, rank or position specified in relation to the authority in [F42column 3] of the table, or

(b)an office, rank or position higher than that specified in relation to the authority in [F43column 3] of the table (subject to subsections (4) and (5)).

(4)Subsection (5) applies where an office, rank or position specified in relation to a relevant public authority in [F44column 3] of the table is specified by reference to—

(a)a particular branch, agency or other part of the authority, or

(b)responsibility for functions of a particular description.

(5)A person is a designated senior officer by virtue of subsection (3)(b) only if the person—

(a)holds an office, rank or position in that branch, agency or part, or

(b)has responsibility for functions of that description.

[F45(5A)A person who is a designated senior officer of a relevant public authority by virtue of subsection (3) and an entry in column 3 of the table may grant an authorisation under section 61—

(a)only for obtaining communications data of the kind specified in the corresponding entry in column 4 of the table,

(b)only if one or more paragraphs of section 61(7) is specified in the corresponding entry in column 5 of the table, and

(c)only if section 61(1)(a) is met in relation to a purpose within the specified paragraph or, if more than one paragraph is specified, a purpose within one of them.]

(6)A person who is a designated senior officer of a relevant public authority by virtue of subsection (3) and an entry in [F46column 3] of the table may grant an authorisation [F47under section 61A]—

(a)only for obtaining communications data of the kind specified in the corresponding entry in [F48column 4] of the table, F49...

[F50(b)only if one or more paragraphs of section 61A(7) is specified in the corresponding entry in column 6 of the table, and

(c)only if section 61A(1)(a) is met in relation to a purpose within the specified paragraph or, if more than one paragraph is specified, a purpose within one of them.]

(7)Where there is more than one entry in relation to a relevant public authority in [F51column 3] of the table, and a person is a designated senior officer of the authority by virtue of subsection (3) as it applies to more than one of those entries, [F52subsections (5A) and (6) apply] in relation to each entry.

71Power to modify section 70 and Schedule 4U.K.

(1)The Secretary of State may by regulations modify section 70 or Schedule 4.

(2)Regulations under subsection (1) may in particular—

(a)add a public authority to, or remove a public authority from, the list in column 1 of the table,

(b)modify an entry in column 2 of the table,

(c)impose or remove restrictions on the authorisations that may be granted F53...,

(d)impose or remove restrictions on the circumstances in which or purposes for which [F54the authorisations may be granted].

[F55(2A)Regulations adding a public authority to, or removing a public authority from, the list in column 1 of the table may do so in relation to all or any of the following—

(a)authorisations under section 60A by the Investigatory Powers Commissioner;

(b)authorisations by a designated senior officer under section 61;

(c)authorisations by a designated senior officer under section 61A.]

(3)The power to make regulations under subsection (1) includes power to make such modifications in any enactment (including this Act) as the Secretary of State considers appropriate in consequence of a person becoming, or ceasing to be, a relevant public authority [F56(in relation to one or more of the authorisations mentioned in subsection (2A))] because of regulations under that subsection.

72Certain regulations under section 71: supplementaryU.K.

(1)This section applies to regulations under section 71 other than regulations which do only one or both of the following—

(a)remove a public authority from the list in column 1 of the table in Schedule 4 [F57(in relation to one or more of the authorisations mentioned in section 71(2A)] and make consequential modifications,

(b)modify [F58column 3] of the table in a way that does not involve replacing an office, rank or position specified in that column in relation to a particular public authority with a lower office, rank or position in relation to the same authority.

(2)Before making regulations to which this section applies, the Secretary of State must consult—

(a)the Investigatory Powers Commissioner, and

(b)the public authority to which the modifications relate.

(3)A statutory instrument containing regulations to which this section applies may not be made except in accordance with the enhanced affirmative procedure.

Local authoritiesU.K.

73Local authorities as relevant public authoritiesU.K.

(1)A local authority is a relevant public authority for the purposes of this Part [F59but only so far as relating to authorisations under section 60A].

F60(2). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(3)An authorisation may not be granted under section 60A on the application of a local authority unless—

(a)section 60A(1)(a) is met in relation to a purpose within section 60A(7)(b),

(b)the local authority is a party to a collaboration agreement (whether as a supplying authority or a subscribing authority or both), and

(c)that collaboration agreement is certified by the Secretary of State (having regard to guidance given by virtue of section 79(6) and (7)) as being appropriate for the local authority.

[F61(3A)In subsection (3)—

• “collaboration agreement” means an agreement under section 78 that falls within subsection (1)(b)(iii) of that section,

• “subscribing authority” has the same meaning as in section 78,

• “supplying authority” has the same meaning as in section 78.]

F62(4). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F62(5). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F62(6). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F62(7). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F6374Requirement to be party to collaboration agreementU.K.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F6475Judicial approval for local authority authorisationsU.K.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Additional protectionsU.K.

76Use of a single point of contactU.K.

[F65(A1)Before making an application for an authorisation under section 60A, the officer making the application must consult a person who is acting as a single point of contact in relation to the making of applications.]

(1)Before granting an authorisation [F66under section 61 or 61A], the designated senior officer must consult a person who is acting as a single point of contact in relation to the granting of authorisations.

(2)But, if the [F67officer or (as the case may be)] designated senior officer considers that there are exceptional circumstances which mean that [F68subsection (A1) or (as the case may be) (1)] should not apply in a particular case, that subsection does not apply in that case.

(3)Examples of exceptional circumstances include—

(a)an imminent threat to life or another emergency, or

(b)the interests of national security.

(4)A person is acting as a single point of contact if that person—

(a)is an officer of a relevant public authority, and

(b)is responsible for advising—

(i)officers of the relevant public authority about applying for authorisations [F69(whether under section 60A, 61 or 61A)], or

(ii)designated senior officers of the relevant public authority about granting authorisations.

(5)A person acting as a single point of contact may, in particular, advise an officer of a relevant public authority who is considering whether to apply for an authorisation about—

(a)the most appropriate methods for obtaining data where the data concerned is processed by more than one telecommunications operator,

(b)the cost, and resource implications, for—

(i)the relevant public authority concerned of obtaining the data, and

(ii)the telecommunications operator concerned of disclosing the data,

(c)any unintended consequences of the proposed authorisation, and

(d)any issues as to the lawfulness of the proposed authorisation.

(6)A person acting as a single point of contact may, in particular, advise a designated senior officer who is considering whether to grant an authorisation about—

(a)whether it is reasonably practical to obtain the data sought in pursuance of the proposed authorisation,

(b)the cost, and resource implications, for—

(i)the relevant public authority concerned of obtaining the data, and

(ii)the telecommunications operator concerned of disclosing the data,

(c)any unintended consequences of the proposed authorisation, and

(d)any issues as to the lawfulness of the proposed authorisation.

(7)A person acting as a single point of contact may also provide advice about—

(a)whether requirements imposed by virtue of an authorisation have been met,

(b)the use in support of operations or investigations of communications data obtained in pursuance of an authorisation, and

(c)any other effects of an authorisation.

(8)Nothing in this section prevents a person acting as a single point of contact from also applying for, or being granted, an authorisation or, in the case of a designated senior officer, granting an authorisation.

77Commissioner approval for authorisations to identify or confirm journalistic sourcesU.K.

(1)Subsection (2) applies if—

(a)a designated senior officer has granted an authorisation [F70under section 61 or 61A] in relation to the obtaining by a relevant public authority of communications data for the purpose of identifying or confirming a source of journalistic information, and

(b)the authorisation is not necessary because of an imminent threat to life.

[F71(1A)Subsection (2) also applies if—

(a)a person to whom functions under section 60A have been delegated under section 238(5) has granted an authorisation under that section in relation to the obtaining by a relevant public authority of communications data for the purpose of identifying or confirming a source of journalistic information, and

(b)the authorisation is not necessary because of an imminent threat to life.]

(2)The authorisation is not to take effect until such time (if any) as a Judicial Commissioner has approved it.

(3)The relevant public authority for which the authorisation has been granted may apply to a Judicial Commissioner for approval of the authorisation.

(4)The applicant is not required to give notice of the application to—

(a)any person to whom the authorisation relates, or

(b)that person's legal representatives.

(5)A Judicial Commissioner may approve the authorisation if, and only if, the Judicial Commissioner considers that—

(a)at the time of the grant, there were reasonable grounds for considering that the requirements of this Part were satisfied in relation to the authorisation, and

(b)at the time when the Judicial Commissioner is considering the matter, there are reasonable grounds for considering that the requirements of this Part would be satisfied if an equivalent new authorisation were granted at that time.

(6)In considering whether the position is as mentioned in subsection (5)(a) and (b), the Judicial Commissioner must, in particular, have regard to—

(a)the public interest in protecting a source of journalistic information, and

(b)the need for there to be another overriding public interest before a relevant public authority seeks to identify or confirm a source of journalistic information.

(7)Where, on an application under this section, the Judicial Commissioner refuses to approve the grant of the authorisation, the Judicial Commissioner may quash the authorisation.

Collaboration agreementsU.K.

78Collaboration agreementsU.K.

(1)A collaboration agreement is an agreement (other than a police collaboration agreement) under which—

(a)a relevant public authority (“the supplying authority”) puts the services of F72...[F73designated senior officers of that authority or other] officers of that authority at the disposal of another relevant public authority (“the subscribing authority”) for the purposes of the subscribing authority's functions under this Part, and

[F74(b)either—

(i)a designated senior officer of the supplying authority is permitted to grant authorisations under section 61 or 61A to officers of the subscribing authority,

(ii)officers of the supplying authority are permitted to be granted authorisations under section 61 or 61A by a designated senior officer of the subscribing authority, or

(iii)officers of the supplying authority act as single points of contact for officers of the subscribing authority.]

[F75(2)The persons by whom, or to whom, authorisations may be granted (or who may act as single points of contact) under a collaboration agreement are additional to those persons by whom, or to whom, authorisations would otherwise be granted under this Part (or who could otherwise act as single points of contact).]

[F76(3)In a case falling within subsection (1)(b)(i)—

(a)section 61 has effect as if—

(i)in subsection (2) the reference to an officer of the authority were a reference to an officer of the subscribing authority, and

(ii)in subsection (6)(b)(ii) the reference to an officer of the same relevant public authority as an authorised officer included a reference to an officer of the supplying authority,

(b)section 61A has effect as if—

(i)in subsection (2) the reference to an officer of the relevant public authority were a reference to an officer of the subscribing authority, and

(ii)in subsection (6)(b)(ii) the reference to an officer of the same relevant public authority as an authorised officer included a reference to an officer of the supplying authority, and

(c)this Part has effect as if the designated senior officer of the supplying authority had the power to grant an authorisation under section 61 or 61A to officers of the subscribing authority, and had other functions in relation to the authorisation, which were the same as (and subject to no greater or lesser restrictions than) the power and other functions which the designated senior officer of the subscribing authority who would otherwise have dealt with the authorisation would have had.

(4)In a case falling within subsection (1)(b)(ii)—

(a)section 61 has effect as if—

(i)in subsection (2) the reference to an officer of the authority were a reference to an officer of the supplying authority, and

(ii)in subsection (6)(b)(ii) the reference to an officer of the same relevant public authority as an authorised officer included a reference to an officer of the subscribing authority, and

(b)section 61A has effect as if—

(i)in subsection (2) the reference to an officer of the relevant public authority were a reference to an officer of the supplying authority, and

(ii)in subsection (6)(b)(ii) the reference to an officer of the same relevant public authority as an authorised officer included a reference to an officer of the subscribing authority.]

F77(3). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F77(4). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(5)[F78In a case falling within subsection (1)(b)(iii),] section 76(4)(b) has effect as if the references to the relevant public authority were references to the subscribing authority.

(6)In this section—

• “force collaboration provision” has the meaning given by paragraph (a) of section 22A(2) of the Police Act 1996 but as if the reference in that paragraph to a police force included the National Crime Agency,

• “police collaboration agreement” means a collaboration agreement under section 22A of the Police Act 1996 which contains force collaboration provision.

79Collaboration agreements: supplementaryU.K.

(1)A collaboration agreement may provide for payments to be made between parties to the agreement.

(2)A collaboration agreement—

(a)must be in writing,

(b)may be varied by a subsequent collaboration agreement, and

(c)may be brought to an end by agreement between the parties to it.

(3)A person who makes a collaboration agreement must—

(a)publish the agreement, or

(b)publish the fact that the agreement has been made and such other details about it as the person considers appropriate.

(4)A relevant public authority may enter into a collaboration agreement as a supplying authority, a subscribing authority or both (whether or not it would have power to do so apart from this section).

(5)The Secretary of State may, after consulting a relevant public authority, direct it to enter into a collaboration agreement if the Secretary of State considers that entering into the agreement would assist the effective exercise by the authority, or another relevant public authority, of its functions under this Part.

(6)A code of practice under Schedule 7 must include guidance to relevant public authorities about collaboration agreements.

(7)The guidance must include guidance about the criteria the Secretary of State will use in considering whether a collaboration agreement is appropriate for a relevant public authority.

80Police collaboration agreementsU.K.

(1)This section applies if—

(a)the chief officer of police of an England and Wales police force (“force 1”) has entered into a police collaboration agreement for the purposes of a collaborating police force's functions under this Part, and

[F79(b)under the terms of the agreement—

(i)a designated senior officer of force 1 is permitted to grant authorisations under section 61 or 61A to officers of the collaborating police force,

(ii)officers of force 1 are permitted to be granted authorisations under section 61 or 61A by a designated senior officer of the collaborating police force, or

(iii)officers of force 1 act as single points of contact for officers of the collaborating police force.]

[F80(2)The persons by whom, or to whom, authorisations may be granted (or who may act as single points of contact) under a police collaboration agreement are additional to those persons by whom, or to whom, authorisations would otherwise be granted under this Part (or who could otherwise act as single points of contact).]

[F81(3)In a case falling within subsection (1)(b)(i)—

(a)section 61 has effect as if—

(i)in subsection (2) the reference to an officer of the authority were a reference to an officer of the collaborating police force, and

(ii)in subsection (6)(b)(ii) the reference to an officer of the same relevant public authority as an authorised officer included a reference to an officer of force 1,

(b)section 61A has effect as if—

(i)in subsection (2) the reference to an officer of the relevant public authority were a reference to an officer of the collaborating police force, and

(ii)in subsection (6)(b)(ii) the reference to an officer of the same relevant public authority as an authorised officer included a reference to an officer of force 1, and

(c)this Part has effect as if the designated senior officer of force 1 had the power to grant an authorisation under section 61 or 61A to officers of the collaborating police force, and had other functions in relation to the authorisation, which were the same as (and subject to no greater or lesser restrictions than) the power and other functions which the designated senior officer of the collaborating police force who would otherwise have dealt with the authorisation would have had.

(4)In a case falling within subsection (1)(b)(ii)—

(a)section 61 has effect as if—

(i)in subsection (2) the reference to an officer of the authority were a reference to an officer of force 1, and

(ii)in subsection (6)(b)(ii) the reference to an officer of the same relevant public authority as an authorised officer included a reference to an officer of the collaborating police force, and

(b)section 61A has effect as if—

(i)in subsection (2) the reference to an officer of the relevant public authority were a reference to an officer of force 1, and

(ii)in subsection (6)(b)(ii) the reference to an officer of the same relevant public authority as an authorised officer included a reference to an officer of the collaborating police force.]

F82(3). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F82(4). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(5)[F83In a case falling within subsection (1)(b)(iii),] section 76(4)(b) has effect as if the references to the relevant public authority were references to the collaborating police force.

(6)In this section—

• “collaborating police force”, in relation to a police collaboration agreement, means a police force (other than force 1) whose chief officer of police is a party to the agreement,

• “England and Wales police force” means—

  (a)

  any police force maintained under section 2 of the Police Act 1996 (police forces in England and Wales outside London),

  (b)

  the metropolitan police force, or

  (c)

  the City of London police force,

• “police collaboration agreement” has the same meaning as in section 78 (see subsection (6) of that section),

and references in this section to an England and Wales police force or a police force include the National Crime Agency (and references to the chief officer of police include the Director General of the National Crime Agency).

Further and supplementary provisionU.K.

81Lawfulness of conduct authorised by this PartU.K.

(1)Conduct is lawful for all purposes if—

(a)it is conduct in which any person is authorised to engage by an authorisation or required to undertake by virtue of a notice given in pursuance of an authorisation, and

(b)the conduct is in accordance with, or in pursuance of, the authorisation or notice.

(2)A person (whether or not the person so authorised or required) is not to be subject to any civil liability in respect of conduct that—

(a)is incidental to, or is reasonably undertaken in connection with, conduct that is lawful by virtue of subsection (1), and

(b)is not itself conduct for which an authorisation or warrant—

(i)is capable of being granted under any of the enactments mentioned in subsection (3), and

(ii)might reasonably have been expected to have been sought in the case in question.

(3)The enactments referred to in subsection (2)(b)(i) are—

(a)an enactment contained in this Act,

(b)an enactment contained in the Regulation of Investigatory Powers Act 2000,

(c)an enactment contained in Part 3 of the Police Act 1997 (powers of the police and of customs officers), or

(d)section 5 of the Intelligence Services Act 1994 (warrants for the intelligence services).

82Offence of making unauthorised disclosureU.K.

(1)It is an offence for a telecommunications operator, or any person employed or engaged for the purposes of the business of a telecommunications operator, to disclose, without reasonable excuse, to any person the existence of—

(a)any requirement imposed on the operator by virtue of this Part to disclose communications data relating to that person, or

(b)any request made in pursuance of an authorisation for the operator to disclose such data.

(2)For the purposes of subsection (1), it is, in particular, a reasonable excuse if the disclosure is made with the permission of the relevant public authority which is seeking to obtain the data from the operator (whether the permission is contained in any notice requiring the operator to disclose the data or otherwise).

(3)A person guilty of an offence under this section is liable—

(a)on summary conviction in England and Wales—

(i)to imprisonment for a term not exceeding 12 months (or 6 months, if the offence was committed before [F842 May 2022]), or

(ii)to a fine,

or to both;

(b)on summary conviction in Scotland—

(i)to imprisonment for a term not exceeding 12 months, or

(ii)to a fine not exceeding the statutory maximum,

or to both;

(c)on summary conviction in Northern Ireland—

(i)to imprisonment for a term not exceeding 6 months, or

(ii)to a fine not exceeding the statutory maximum,

or to both;

(d)on conviction on indictment, to imprisonment for a term not exceeding 2 years or to a fine, or to both.

83Certain transfer and agency arrangements with public authoritiesU.K.

(1)The Secretary of State may by regulations provide for—

(a)any function under sections 67 to 69 which is exercisable by the Secretary of State to be exercisable instead by another public authority, or

(b)any function under sections 67 to 69 which is exercisable by a public authority by virtue of paragraph (a) to be exercisable instead by the Secretary of State.

(2)The Secretary of State may by regulations modify any enactment about a public authority for the purpose of enabling or otherwise facilitating any function exercisable by the Secretary of State under this Part to be exercisable on behalf of the Secretary of State by the authority concerned.

(3)Regulations under subsection (2) do not affect the Secretary of State's responsibility for the exercise of the functions concerned.

(4)Subsection (2) does not apply in relation to any function of the Secretary of State of making regulations.

(5)Schedule 5 (which contains further safeguards and provisions supplementing this section) has effect.

84Application of Part 3 to postal operators and postal servicesU.K.

(1)This Part applies to postal operators and postal services as it applies to telecommunications operators and telecommunications services.

(2)In its application by virtue of subsection (1), this Part has effect as if—

(a)any reference to a telecommunications operator were a reference to a postal operator,

(b)any reference to a telecommunications service were a reference to a postal service,

(c)any reference to a telecommunication system were a reference to a postal service,

(d)sections 61(3)(a) and 62 were omitted, F85...

[F86(da)the reference in sections 60A(8)(a), 61(7A)(a) and 61A(8)(a) to events data were a reference to anything within paragraph (a) or (b) of the definition of “communications data” in section 262(3), and]

(e)in Part 2 of Schedule 4, for “which is entity data” there were substituted “ within paragraph (c) of the definition of “communications data” in section 262(3) ”.

85Extra-territorial application of Part 3U.K.

(1)An authorisation may relate to conduct outside the United Kingdom and persons outside the United Kingdom.

(2)A notice given in pursuance of an authorisation may relate to conduct outside the United Kingdom and persons outside the United Kingdom.

(3)Where such a notice is to be given to a person outside the United Kingdom, the notice may be given to the person in any of the following ways (as well as by electronic or other means of service)—

(a)by delivering it to the person's principal office within the United Kingdom or, if the person has no such office in the United Kingdom, to any place in the United Kingdom where the person carries on business or conducts activities,

(b)if the person has specified an address in the United Kingdom as one at which the person, or someone on the person's behalf, will accept documents of the same description as a notice, by delivering it to that address,

(c)by notifying the person by such other means as the authorised officer considers appropriate (which may include notifying the person orally).

(4)In determining for the purposes of subsection (3) of section 66 whether it is reasonably practicable for a telecommunications operator outside the United Kingdom to take any steps in a country or territory outside the United Kingdom for the purpose of complying with a duty imposed by virtue of subsection (1) or (2) of that section, the matters to be taken into account include the following—

(a)any requirements or restrictions under the law of that country or territory that are relevant to the taking of those steps, and

(b)the extent to which it is reasonably practicable to comply with the duty in a way that does not breach any of those requirements or restrictions.

(5)Nothing in the definition of “telecommunications operator” limits the type of communications data in relation to which an authorisation, or a request or requirement of a kind which gives rise to a duty under section 66(1) or (2), may apply.

86Part 3: interpretationU.K.

(1)In this Part—

• “authorisation” means an authorisation [F87under section 60A, 61 or 61A] [F88(including sections 61 and 61A as modified by sections 78 and 80)],

• “designated senior officer”—

  (a)

  F89...

  (b)

  in relation to any F90... relevant public authority, has the meaning given by section 70(3),

• “filtering arrangements” means any arrangements under section 67(1),

• “officer”, in relation to a relevant public authority, means a person holding an office, rank or position with that authority,

• “relevant public authority” means a public authority which is a relevant public authority for the purposes of this Part by virtue of section 70(2) or 73(1).

(2)In this Part “local authority” means—

(a)a district or county council in England,

(b)a London borough council,

(c)the Common Council of the City of London in its capacity as a local authority,

(d)the Council of the Isles of Scilly,

(e)a county council or county borough council in Wales,

(f)a council constituted under section 2 of the Local Government etc. (Scotland) Act 1994, and

(g)a district council in Northern Ireland.

[F91(2A)In this Part, “serious crime” means, in addition to crime which falls within paragraph (a) or (b) of the definition of “serious crime” in section 263(1), crime where the offence, or one of the offences, which is or would be constituted by the conduct concerned is—

(a)an offence for which an individual who has reached the age of 18 (or, in relation to Scotland or Northern Ireland, 21) is capable of being sentenced to imprisonment for a term of 12 months or more (disregarding any enactment prohibiting or restricting the imprisonment of individuals who have no previous convictions), or

(b)an offence—

(i)by a person who is not an individual, or

(ii)which involves, as an integral part of it, the sending of a communication or a breach of a person’s privacy.]

(3)See also—

• section 261 (telecommunications definitions),

• section 262 (postal definitions),

• section 263 (general definitions),

• section 265 (index of defined expressions).