← Global Privacy Laws Research Library

United Kingdom
LawCurrent (amended)· Investigatory Powers Commissioner; Judicial Commissioners

2016 c. 25

UK Investigatory Powers Act 2016

Prepared by Shubhank Suman · Last reviewed

IN FORCE (supplied copy is the Act as enacted)

Legal character
Statute
Region
Europe
Assent
29 November 2016

What it covers

The Act sets out when public authorities may interfere with privacy to obtain communications. Part 1 sets general privacy duties and offences of unlawful interception and unlawful obtaining of communications data. Later Parts regulate targeted interception, communications data acquisition and retention notices, equipment interference, bulk interception, bulk acquisition, bulk equipment interference and bulk personal datasets, with a double-lock of Secretary of State and Judicial Commissioner approval, oversight by the Investigatory Powers Commissioner and duties on telecommunications operators.

Why it matters

It is the UK's central surveillance law and directly affects telecom operators and online services that may receive warrants, retention notices or technical capability notices.

Refer to it when

Use it for UK lawful interception, communications-data requests and retention, technical capability notices, or how surveillance interacts with privacy rights.

AI, privacy and cybersecurity relevance

  • AI: Low
  • Privacy: Very High
  • Cyber: High

AI

LOW RELEVANCE

No AI-specific provisions.

Privacy

VERY HIGH RELEVANCE

Sets the limits of state surveillance of communications.

Cybersecurity

HIGH RELEVANCE

Equipment interference and telecom operator obligations.

Applicability

UK intelligence and law-enforcement bodies, and telecommunications and postal operators subject to warrants and notices.

Current validity

IN FORCE. The supplied copy is the Act as enacted and does not include later amendments, such as those made by the Investigatory Powers (Amendment) Act 2024; check the current revised text. Read the official PDF on this page for the operative text.

Read first

Section 1 (overview) → section 2 (privacy duties) → Part 1 offences → Part 2 interception → Parts 3–4 communications data → Part 8 oversight.

Provisions / sections covered

Section 2 – General duties in relation to privacy

Public authorities must consider whether less intrusive means are available.

Sections 3–10 – Unlawful interception

Offence, definition of interception, lawful authority and monetary penalties.

Section 11 – Unlawful obtaining of communications data

Offence for relevant persons.

Part 2 – Targeted interception warrants

Issue and Judicial Commissioner approval.

Parts 3–4 – Communications data and retention

Authorisations and data retention notices.

Parts 6–7 – Bulk powers and bulk personal datasets

Bulk interception, acquisition, equipment interference and datasets.

Subject-matter tags

  • Government data
  • Retention
  • Enforcement and penalties
  • Surveillance

Subject-matter tags describe what the indexed text discusses. They are not legal conclusions.

Related instruments in this library

Document page in the Knowledge Base - full text or PDF where it is available for this record.

This library locates primary and official sources. It does not interpret the law and it is not legal advice.