← Global Privacy Laws Research Library
2016 c. 25
UK Investigatory Powers Act 2016
Prepared by Shubhank Suman · Last reviewed
IN FORCE (supplied copy is the Act as enacted)
- Legal character
- Statute
- Region
- Europe
- Assent
- 29 November 2016
What it covers
The Act sets out when public authorities may interfere with privacy to obtain communications. Part 1 sets general privacy duties and offences of unlawful interception and unlawful obtaining of communications data. Later Parts regulate targeted interception, communications data acquisition and retention notices, equipment interference, bulk interception, bulk acquisition, bulk equipment interference and bulk personal datasets, with a double-lock of Secretary of State and Judicial Commissioner approval, oversight by the Investigatory Powers Commissioner and duties on telecommunications operators.
Why it matters
It is the UK's central surveillance law and directly affects telecom operators and online services that may receive warrants, retention notices or technical capability notices.
Refer to it when
Use it for UK lawful interception, communications-data requests and retention, technical capability notices, or how surveillance interacts with privacy rights.
AI, privacy and cybersecurity relevance
- AI: Low
- Privacy: Very High
- Cyber: High
AI
LOW RELEVANCE
No AI-specific provisions.
Privacy
VERY HIGH RELEVANCE
Sets the limits of state surveillance of communications.
Cybersecurity
HIGH RELEVANCE
Equipment interference and telecom operator obligations.
Applicability
UK intelligence and law-enforcement bodies, and telecommunications and postal operators subject to warrants and notices.
Current validity
IN FORCE. The supplied copy is the Act as enacted and does not include later amendments, such as those made by the Investigatory Powers (Amendment) Act 2024; check the current revised text. Read the official PDF on this page for the operative text.
Read first
Section 1 (overview) → section 2 (privacy duties) → Part 1 offences → Part 2 interception → Parts 3–4 communications data → Part 8 oversight.
Provisions / sections covered
Section 2 – General duties in relation to privacy
Public authorities must consider whether less intrusive means are available.
Sections 3–10 – Unlawful interception
Offence, definition of interception, lawful authority and monetary penalties.
Section 11 – Unlawful obtaining of communications data
Offence for relevant persons.
Part 2 – Targeted interception warrants
Issue and Judicial Commissioner approval.
Parts 3–4 – Communications data and retention
Authorisations and data retention notices.
Parts 6–7 – Bulk powers and bulk personal datasets
Bulk interception, acquisition, equipment interference and datasets.
Subject-matter tags
- Government data
- Retention
- Enforcement and penalties
- Surveillance
Subject-matter tags describe what the indexed text discusses. They are not legal conclusions.
Related instruments in this library
- UK GDPR + Data Protection Act 2018: United KingdomFramework · Current (amended)Same jurisdiction; assess applicability separately.
- UK Computer Misuse Act 1990Law · Current (amended)Same jurisdiction; assess applicability separately.
- Product Security and Telecommunications Infrastructure Act 2022Law · CurrentSame jurisdiction; assess applicability separately.
- Online Safety Act 2023Law · Current (phased commencement)Same jurisdiction; assess applicability separately.
Document page in the Knowledge Base - full text or PDF where it is available for this record.
This library locates primary and official sources. It does not interpret the law and it is not legal advice.