Data Retention and Investigatory Powers Act 2014 explained

Short Title:Data Retention and Investigatory Powers Act 2014
Parliament:Parliament of the United Kingdom
Year:2014
Statute Book Chapter:2014 c. 27
Introduced By:Theresa May 14 July 2014
Territorial Extent:United Kingdom
Royal Assent:17 July 2014[1]
Commencement:17 July 2014[2]
Repeal Date:31 December 2016
Status:Repealed
Legislation History:https://services.parliament.uk/bills/2014-15/dataretentionandinvestigatorypowers/stages.html
Original Text:https://www.legislation.gov.uk/ukpga/2014/27/enacted
Revised Text:https://www.legislation.gov.uk/ukpga/2014/27

The Data Retention and Investigatory Powers Act 2014 (also known as DRIP or DRIPA) was an Act of the Parliament of the United Kingdom, repealed in 2016. It received Royal Assent on 17 July 2014, after being introduced on 14 July 2014.[3] The purpose of the legislation was to allow security services to continue to have access to phone and internet records of individuals following a previous repeal of these rights by the Court of Justice of the European Union.[4] The act was criticised by some Members of Parliament for the speed at which the act was passed through parliament, by some groups (such as the Open Rights Group and Liberty) as being an infringement of privacy.[5]

Following legal action, in July 2015, the High Court of Justice issued an order that sections 1 and 2 of the Act were unlawful, and to be disapplied, suspended until 31 March 2016, thereby giving the government a deadline to come up with alternative legislation which would be compatible with EU law.[6] [7] [8]

an investigatory powers parliamentary bill was being drafted providing new surveillance powers, requiring records to be kept by Internet Service Providers tracking use of the internet from the UK, accessible by the police and security services without judicial oversight.[9]

The Data Retention and Investigatory Powers Act 2014 was repealed on 31 December 2016 and replaced by the Investigatory Powers Act 2016.

Revocation

On 1 August 2014, the Data Retention Regulations 2014 came into force, completing the framework introduced by the DRIP. They provide that a communications service provider can be required to retain data only when target of a notice of the Secretary of State. In December 2014, in R (on the application of David Davis MP and Tom Watson MP) v Secretary of State for the Home Department, Mr Justice Lewis (High Court) granted the Claimants permission to proceed to a substantive hearing, thus agreeing that the DRIP can be challenged by judicial review. As a reaction, the Government proposed using the Counter-Terrorism and Security Bill (CTSB) to extend their remit to cover data generated as a result of internet communications.

On 4 June 2015 a legal challenge against the law was brought to the High Court by two MPs, Labour's Tom Watson and the Conservative David Davis represented by the civil liberties organisation Liberty. They claimed that the act was rushed through parliament and was incompatible with the Human Rights Act and the European Union Charter of Fundamental Rights.[10]

On 17 July 2015 the High Court upheld the challenge, finding sections 1 and 2 of the Act to be unlawful.[11] [12] The court found that the section 1 of the Act was contrary to EU law as a result of breaches of the Charter of Fundamental Rights of the EU by virtue of the rights under Article 7 to a "private and family life, home and communications" and under article 8 which provides rights of the data held on an individual. The court found that these rights were breached based on the conclusions reached in Digital Rights Ireland Ltd v Minister for Communications, Marine and Natural Resources and others and the conjoined case of Kärntner Landesregierung. The court issued an order that sections 1 and 2 be disapplied, suspended until 31 March 2016, thereby giving the government a deadline to come up with alternative legislation which is compatible with EU law.[6]

In October 2015, the Court of Appeal began hearing the Home Secretary's appeal against the ruling.[13] The Court of Appeal accepted, on a provisional basis, the arguments put forward by the Home Secretary and decided to refer certain aspects of the judgement to the Court of Justice of the European Union for a preliminary ruling. In particular, the Court of Appeal found that the Digital Rights Ireland case did not result in mandatory requirements applicable to all Member States' data retention regimes.[14] The Court of Appeal referred questions to the Court of Justice of the European Union as to whether the Digital Rights Ireland case should law down mandatory requirements for the national legislation of member states and whether this resulted in an expansion of the effects of Articles 7 and 8 of the EU Charter beyond the effect of Article 8 of the European Convention on Human Rights.[15]

On 21 December 2016 the European Court of Justice (ECJ) ruled in joined cases that the Data Retention and Investigatory Powers Act 2014 was unlawful. The court found on the first question referred by the Court of Appeal that the Charter of Fundamental Rights of the European Union does preclude legislation which provides for access to retained traffic and location data by certain national authorities where this is not restricted to fighting serious crime or where the right to access is not subject to a prior court review. The ECJ found that the second question referred by the Court of Appeal was inadmissible.[16]

The Data Retention and Investigatory Powers Act 2014 (DRIPA) was repealed on 31 December 2016 and replaced by the Investigatory Powers Act 2016.

Following the EU judgement (and after the repeal of the act) the matters was again referred to the Court of Appeal. In this judgement the Court of Appeal granted declaratory relief in respect of the areas in which it was found that the Data Retention and Investigatory Powers Act 2014 was incompatible with EU law. The relief was limited to the context that making use of data collected under the act in prosecuting crimes was only admissible where it had been restricted to fighting serious crime or access had been subject to court review.[17]

Overview

The main provisions of the act were:[18]

See also

Notes and References

  1. Web site: Bill stages — Data Retention and Investigatory Powers Act 2014 . . 24 August 2014.
  2. Web site: Data Retention and Investigatory Powers Act 2014 - Commencement . . 24 August 2014.
  3. Web site: Data Retention and Investigatory Powers Act 2014 - Legislation PDF . . 24 August 2014.
  4. Web site: Commons passes emergency data laws despite criticism . . 24 August 2014.
  5. Web site: Emergency phone and internet data laws to be passed . . 24 August 2014.
  6. Web site: David Davis and others -v- Secretary of State for the Home Department. 17 July 2015. judiciary.gov.uk.
  7. News: MPs win surveillance powers legal challenge. 8 November 2015. BBC. 17 July 2015.
  8. Davis & Ors, R (on the application of) v Secretary of State for the Home Department & Ors . EWHC . Admin . 2015 . 2092 . 17 July 2015 . auto.
  9. https://www.theguardian.com/world/2015/nov/04/theresa-may-surveillance-measures-edward-snowden The Guardian newspaper: Theresa May unveils surveillance measures in wake of Snowden claims, 4 November 2015
  10. News: Emergency surveillance law faces legal challenge from 2 MPs . BBC News . 4 June 2015 .
  11. Web site: High Court smacks down 'emergency' UK spy bill as UNLAWFUL. 17 July 2015. Alexander J Martin. The Register.
  12. Web site: Finally, the high court puts a brake on snooping on ordinary Britons . Carly Nyst. 17 July 2015. The Guardian.
  13. News: Court of Appeal hears government surveillance law case. 8 November 2015. BBC News. 22 October 2015.
  14. Web site: R v Secretary of State for the Home Department ex p David Davis MP, Tom Watson MP, Peter Brice and Geoffrey Lewis [2015] EWCA Civ 1185 ]. 17 December 2015 . Imogen . Proud . Mockton Chambers.
  15. Web site: Secretary of State for the Home Department v Davis MP & Ors [2015] EWCA Civ 1185 (20 November 2015)].
  16. Web site: C203/15 and C698/15 JUDGMENT OF THE COURT (Grand Chamber) 21 December 2016 (*) (Reference for a preliminary ruling — Electronic communications — Processing of personal data — Confidentiality of electronic communications — Protection — Directive 2002/58/EC — Articles 5, 6 and 9 and Article 15(1) — Charter of Fundamental Rights of the European Union — Articles 7, 8 and 11 and Article 52(1) — National legislation — Providers of electronic communications services — Obligation relating to the general and indiscriminate retention of traffic and location data — National authorities — Access to data — No prior review by a court or independent administrative authority — Compatibility with EU law.
  17. Web site: Secretary of State for the Home Department v Watson MP & Ors [2018] EWCA Civ 70 (30 January 2018)].
  18. https://www.gov.uk/government/collections/data-retention-and-investigatory-powers-act-2014 gov.uk: "Collection: Data Retention and Investigatory Powers Act 2014"
  19. Data Retention and Investigatory Powers Act 2014 - Section 1
  20. Web site: Surveillance law wins cross-party support but critics claim stitch-up . . 24 August 2014.