Who sees you when you’re sleeping? Who knows when you’re awake?

21 December 2016 by

hacking-1685092_960_720Angela Patrick of Doughty Street Chambers provides an initial reaction on the implications of the decisions in Tele Sverige/Watson for domestic surveillance and the Investigatory Powers Act 2016.

In an early holiday delivery, the Court of Justice of the European Union (“CJEU”) handed down its judgment in the joined cases of Tele Sverige/Watson & Ors (C-203/15/C-698/15), this morning.

Hotly anticipated by surveillance and privacy lawyers, these cases consider the legality of data retention laws in Europe, following the decision in Digital Rights Ireland that the Data Retention Directive was unlawful. Broadly, the CJEU confirms that EU law precludes national legislation that prescribes the general and indiscriminate retention of data.  The Court concludes that the emergency data retention legislation passed in a few days in 2014 – the Data Retention and Investigatory Powers Act 2014 – is unlawful.  That legislation is, of course, due to lapse at the end of December 2016 in any event.

This morning’s decision comes just too late to have influenced the passage into law of the Investigatory Powers Act 2016 (“IPA”) – the new domestic bible on bulk surveillance, interception, communications data retention and acquisition and equipment interference – which received Royal Assent in early December. However, what the CJEU has to say about surveillance and privacy may determine whether the IPA – also known by some as the Snoopers Charter – has a long or a short shelf-life.

The powers in IPA are built on the same model as its predecessor and provides for broad powers of data retention with limited provision for safeguards of the kind that the Court considered crucial.  Significant parts of that newly minted legislation lay open to challenge.

Watson & the Data Retention and Investigatory Powers Act 2014

The Data Retention and Investigatory Powers Act 2014 (“DRIPA”) was passed speedily by Parliament over a handful of days in summer 2014.  It provides for telecommunications providers to retain 12 months data on their users, including information about their communications and traffic-data.  Broadly, access is provided to a range of public bodies for a range of purposes, subject to the requirement that access is “proportionate and necessary”.  Access to this data is not generally subject to prior judicial authorisation, except where the information is sought by local authorities.  For police, security agencies and a host of others, including HMRC and the Food Standards Agency, access is authorised internally by senior officers.

The challenge to the legality of DRIPA was brought swiftly in the domestic courts, with Parliamentarians highlighting the inconsistency between the Act’s provisions and the decision in Digital Rights Ireland during its passage.  The High Court thought the legislation unlawful, the Court of Appeal disagreed and sent the case off to Luxembourg for clarification of the Court’s intent in the earlier case-law.  The case has been supported throughout by Liberty (read their response to today’s judgment here).

The Court’s view is now transparent.  While data retention is not prohibited by EU law, general and indiscriminate retention is incompatible with the requirements of Directive 2002/58 on the confidentiality of electronic communications (the Directive on the Privacy of Electronic Communciations) as interpreted in a manner consistent with the protection for individual privacy and personal information provided by the Charter of Fundamental Rights of the European Union (Articles 7, 8, 11 and 52(1)) (see [81], [92] – [94]).

The Court is clear that one of the purposes of that Directive is to afford individuals “protection against risks to their personal data and privacy that arise from new technology and the increasing capacity for automated storage and processing of data” [83]. The Court expresses real concern that an exception to the protection on storage of data cannot be so broad as to become a rule which would render the protection offered by EU law “largely meaningless” [89].

The breadth of the interference imposed by untargeted retention of communications data is squarely acknowledged by the Court:

“That data taken as a whole is liable to allow very precise conclusions to be drawn concerning the private lives of the persons whose data has been retained, such as everyday habits, permanent or temporary places of residence, daily or other movenments, the activities carried out, the social relationships of those persons and the social environments frequented by them…In particular that data provides the means…of establishing a profile of the individuals concerned, information that is no less sensitive, having regard to the right to privacy, than the actual content of communications” [99]

Where national legislation provides for data retention, any retention must be strictly necessary for the purposes of investigating serious crime and linked to the investigation of serious crime (see [96], [105]).  The Court provides a robust judgment on this basis making clear that the purposes for which data retention might be authorised must be linked to the “exhaustive” list of authorisations in the Directive, which are limited to national security, defence, public security and the investigation, detection and prosecution of criminal offences [90].  The Court goes further and establishes that the legislation in issue falls short because if applies to retain the data of individuals “for whom there is no evidence capable of suggesting that their conduct might have a link, even an indirect or remote one, with serious criminal offences” [105].  It indicates that it is unlawful for data to be retained where that retention is not restricted to retention in relation to data pertaining to a particular time period, or geographical area or a group of persons likely to be involved in serious crime, or persons who could for other reasons contribute through their data being retained to fighting crime [106] – [112].   The Court confirms that only the fight against serious crime can justify access to such retained data [115].  These are findings consistent with earlier case-law from both the CJEU and from Strasbourg, but they are crucial for the provisions in domestic law, which extend powers of retention and access for a broad range of reasons including public health, taxation or other public charges, mitigating injury to physical or mental health (see DRIPA, Section 22).

Finally, the Court stressed that all access must be confined to that which is strictly necessary and accompanied by appropriate safeguards for privacy [119].  Importantly, access to retained data must be subject to prior authorisation by a judge or other independent body, following a “reasoned request” “within the framework of procedures for the prevention, detection and prosecution of crime” [120].

The lack of prior judicial authorisation for access to communications data in the UK has long been subject to criticism.  In 2011, JUSTICE highlighted the significant bulk proportion of access requests never subject to oversight each year, and called for reform.  In his review of surveillance, A Question of Trust, David Anderson QC indicated that it would, pending the decision in Watson, be appropriate for some requests to be subject to judicial oversight.  The contemporaneous review conducted by RUSI agreed.  However, the Joint Committee tasked with review of the Draft Investigatory Powers Bill disagreed. A system of internal review governed by an internal “single Point of Contact” separate from an active investigation, trained in surveillance but part of the same force or agency was considered broadly adequate. Whether this model can survive the independence test set by the CJEU is questionable.

What next for the Investigatory Powers Act 2016?

Part 3 of the IPA provides for the retention of communications data on a model broadly mirroring DRIPA.  The range of bodies which can access data and the purposes for which information can be accessed are slightly narrower, but still clearly wider than that envisaged by the CJEU (see Sections 61(7), 70 and Schedule 4).  Section 61(7) still includes functions far wider than serious crime, including public health, taxation and the functioning of financial markets.  Retention of data is similarly unconstrained (Section 87).

There is no provision for prior judicial authorisation of access to data, except by local authorities.  Section 76 replicates the “single Point of Contact” model which sees access decisions authorised internally, subject only to after-the-event scrutiny by the new Investigatory Powers Commissioner, who will not examine all access requests, but may dip-sample or audit on another selective basis.

The decision in Watson clearly leaves the communications data model in the new legislation on shaky legal ground.  However, the decision may have a wider impact on the IPA.  In so far as it confirms the previous case law of the CJEU and the broad approach of the ECtHR to targeting surveillance, strict necessity and safeguards, it may leave a significant part of the Act which avows and provides a statutory basis for “thematic” and bulk surveillance open to challenge.  To give two examples, warrants in the IPA for interception are not restricted to serious crime and they are available by reference to broad “factors” where specific individuals cannot be identified (see Sections 15 – 17); and interception, acquisition of data and equipment interference (or hacking) (albeit targeting “overseas communications”) is authorised in “bulk” (see Sections 136, 158, 176).  Whether these powers might be considered “strictly necessary” in an analogous challenge remains open to question, of course.

But, is it all about Brexit?

The decision affirms the important role which EU law has played historically in safeguarding fundamental rights across the Union.  While the Supreme Court considers the mechanics of the UK’s departure from the Union, the Westminster Parliament has this month been at pains to emphasise the importance of the Government taking stock of the impacts which Brexit will have on the protection of individual rights (see the JCHR and the House of Lords EU Sub-Committee on Justice). The decision draws directly upon the recent surveillance case law of the European Court of Human Rights including in Zakharov v Russia App No 47143/06 [119], making clear that Brexit may not be a get-out-of-jail free card for the IPA.

Of course, the case in Watson was originally labelled Davis & Watson.  The now Secretary of State for Exiting the European Union may have some seriously conflicting views reading the judgment this morning.  A potentially costly defeat for his Government is a personal win in his own campaign to establish that ill-targeted data retention is inconsistent with the protection of our privacy free from unjustifiable surveillance by the State.  In the interests of collective Cabinet responsibility, perhaps he might be thinking about starting his own holiday early.

Angela Patrick is a barrister at Doughty Street Chambers.  Until October 2016, she was Director of Human Rights at JUSTICE, where she led their work on the passage of the Investigatory Powers Bill.

@Angela__Patrick

3 comments


  1. […] Themselves. The IPA uses a “single point of contact” model. This means that when a government body want to access this database of private data, […]

  2. […] LORNA WOODS delves into the CJEU data retention decision, and so does ANGELA PATRICK. […]

  3. truthaholics says:

    Reblogged this on | truthaholics and commented:
    “But, is it all about Brexit?

    The decision affirms the important role which EU law has played historically in safeguarding fundamental rights across the Union. While the Supreme Court considers the mechanics of the UK’s departure from the Union, the Westminster Parliament has this month been at pains to emphasise the importance of the Government taking stock of the impacts which Brexit will have on the protection of individual rights (see the JCHR and the House of Lords EU Sub-Committee on Justice). The decision draws directly upon the recent surveillance case law of the European Court of Human Rights including in Zakharov v Russia App No 47143/06 [119], making clear that Brexit may not be a get-out-of-jail free card for the IPA.

    Of course, the case in Watson was originally labelled Davis & Watson. The now Secretary of State for Exiting the European Union may have some seriously conflicting views reading the judgment this morning. A potentially costly defeat for his Government is a personal win in his own campaign to establish that ill-targeted data retention is inconsistent with the protection of our privacy free from unjustifiable surveillance by the State. In the interests of collective Cabinet responsibility, perhaps he might be thinking about starting his own holiday early.”

Comments are closed.

Welcome to the UKHRB


This blog is run by 1 Crown Office Row barristers' chambers. Subscribe for free updates here. The blog's editorial team is:
Commissioning Editor: Jonathan Metzer
Editorial Team: Rosalind English
Angus McCullough QC David Hart QC
Martin Downs
Jim Duffy

Free email updates


Enter your email address to subscribe to this blog for free and receive weekly notifications of new posts by email.

Subscribe

Categories


Tags


7/7 Bombings 9/11 A1P1 Aarhus Abortion Abu Qatada Abuse Access to justice adoption AI air pollution air travel ALBA Allergy Al Qaeda Amnesty International animal rights Animals anonymity Article 1 Protocol 1 Article 2 article 3 Article 4 article 5 Article 6 Article 8 Article 9 article 10 Article 11 article 13 Article 14 article 263 TFEU Artificial Intelligence Asbestos Assange assisted suicide asylum asylum seekers Australia autism badgers benefits Bill of Rights biotechnology birds directive blogging Bloody Sunday brexit Bribery British Waterways Board Catholic Church Catholicism Chagos Islanders Charter of Fundamental Rights child protection Children children's rights China christianity circumcision citizenship civil liberties campaigners civil partnerships climate change clinical negligence closed material procedure Coercion Cologne Commission on a Bill of Rights common buzzard common law communications competition confidentiality confiscation order conscientious objection consent conservation constitution contact order contempt of court Control orders Copyright coronavirus costs costs budgets Court of Protection crime criminal law Criminal Legal Aid criminal records Cybersecurity Damages data protection death penalty declaration of incompatibility defamation deficit DEFRA Democracy village Dennis Gill dentist's registration fees deportation deprivation of liberty derogations Detention devolution Dignitas dignity Dignity in Dying diplomacy director of public prosecutions disability Disability-related harassment disabled claimants disciplinary hearing disclosure Discrimination Discrimination law disease divorce DNA doctors does it matter? domestic violence Dominic Grieve don't ask don't ask don't tell don't tell Doogan and Wood double conviction DPP guidelines drones duty of care ECHR economic and social rights economic loss ECtHR Education election Employment Environment environmental information Equality Act Equality Act 2010 ethics Ethiopia EU EU Charter of Fundamental Rights EU costs EU law European Convention on Human Rights European Court of Human Rights European Court of Justice european disability forum European Sanctions Blog Eurozone euthanasia evidence Exclusion extra-jurisdictional reach of ECHR extra-territoriality extradition extradition act extradition procedures extradition review extraordinary rendition Facebook Facebook contempt facial recognition fair procedures Fair Trial faith courts fake news Family family courts family law family legal aid Family life fatal accidents act Fertility fertility treatment FGM fisheries fishing rights foreign criminals foreign office foreign policy France freedom of assembly Freedom of Association Freedom of Expression freedom of information Freedom of Information Act 2000 freedom of movement freedom of speech free speech game birds gangbo gang injunctions Garry Mann gary dobson Gary McFarlane gay discrimination Gay marriage gay rights gay soldiers Gaza Gaza conflict Gender General Dental Council General Election General Medical Council genetic discrimination genetic engineering genetic information genetics genetic testing Google government Grenfell grooming Gun Control gwyneth paltrow gypsies habitats habitats protection Halsbury's Law Exchange hammerton v uk happy new year harassment Hardeep Singh Haringey Council Harkins and Edwards Health healthcare health insurance Heathrow heist heightened scrutiny Henry VII Henry VIII herd immunity hereditary disorder High Court of Justiciary Hirst v UK HIV HJ Iran HM (Iraq) v The Secretary of state for the home department [2010] EWCA Civ 1322 Holder holkham beach holocaust homelessness Home Office Home Office v Tariq homeopathy hooding Hounslow v Powell House of Commons Housing housing benefits Howard League for Penal Reform how judges decide cases hra damages claim Hrant Dink HRLA HS2 hs2 challenge hts http://ukhumanrightsblog.com/2011/04/11/us-state-department-reports-on-uk-human-rights/ Human Fertilisation and Embryology Act Human Fertilisation and Embryology Authority human genome human rights Human Rights Act Human Rights Act 1998 human rights advocacy Human rights and the UK constitution human rights commission human rights conventions human rights damages Human Rights Day human rights decisions Human Rights Information Project human rights news Human Rights Watch human right to education human trafficking hunting Huntington's Disease HXA hyper injunctions Igor Sutyagin illegality defence immigration Immigration/Extradition Immigration Act 2014 immigration appeals immigration detention immigration judge immigration rules immunity increase of sanction India Indonesia Infrastructure Planning Committee inherent jurisdiction inherited disease Inhuman and degrading treatment injunction Inquest Inquests insult insurance insurmountable obstacles intelligence services act intercept evidence interception interests of the child interim remedies international international conflict international criminal court international humanitarian law international human rights international human rights law international law international treaty obligations internet internet service providers internment internship inuit investigation investigative duty in vitro fertilisation Iran iranian bank sanctions Iranian nuclear program Iraq Iraqi asylum seeker Iraq War Ireland irrationality islam Israel Italy iTunes IVF ivory ban jackson reforms Janowiec and Others v Russia ( Japan Jason Smith Jeet Singh Jefferies Jeremy Corbyn jeremy hunt job Jogee John Hemming John Terry joint enterprise joint tenancy Jon Guant Joseph v Spiller journalism judaism judges Judges and Juries judging Judicial activism judicial brevity judicial deference judicial review Judicial Review reform judiciary Julian Assange jurisdiction jury trial JUSTICE Justice and Security Act Justice and Security Bill Justice and Security Green Paper Justice Human Rights Awards JUSTICE Human Rights Awards 2010 justification just satisfaction Katyn Massacre Kay v Lambeth Kay v UK Ken Clarke Ken Pease Kerry McCarthy Kettling Kings College Klimas koran burning Labour Lady Hale lansley NHS reforms LASPO Law Commission Law Pod UK Law Society Law Society of Scotland leave to enter leave to remain legal aid legal aid cuts Legal Aid desert Legal Aid Reforms legal blogs Legal Certainty legal naughty step Legal Ombudsman legal representation legitimate expectation let as a dwelling Leveson Inquiry Levi Bellfield lewisham hospital closure lgbtq liability Libel libel reform Liberal Democrat Conference Liberty libraries closure library closures Libya licence conditions licence to shoot life insurance life sentence life support limestone pavements limitation lisbon treaty Lithuania Litigation litvinenko live exports local authorities locked in syndrome london borough of merton London Legal Walk London Probation Trust Lord Bingham Lord Bingham of Cornhill Lord Blair Lord Goldsmith lord irvine Lord Judge speech Lord Kerr Lord Lester Lord Neuberger Lord Phillips Lord Rodger Lord Sumption Lord Taylor LSC tender luftur rahman machine learning MAGA Magna Carta mail on sunday Majority Verdict Malcolm Kennedy malice Margaret Thatcher Margin of Appreciation margin of discretion Maria Gallastegui marriage material support maternity pay Matthew Woods Mattu v The University Hospitals of Coventry and Warwickshire NHS Trust [2011] EWHC 2068 (QB) Maya the Cat Mba v London Borough Of Merton McKenzie friend Media and Censorship Medical medical liability medical negligence medical qualifications medical records medicine mental capacity Mental Capacity Act Mental Capacity Act 2005 Mental Health mental health act mental health advocacy mental health awareness Mental Health Courts Mental illness merits review MGN v UK michael gove Midwives migrant crisis Milly Dowler Ministerial Code Ministry of Justice Ministry of Justice cuts misfeasance in public office modern slavery morality morocco mortuaries motherhood Motor Neurone disease Moulton Mousa MP expenses Mr Gul Mr Justice Eady MS (Palestinian Territories) (FC) (Appellant) v Secretary of State for the Home Department murder murder reform Musician's Union Muslim NADA v. SWITZERLAND - 10593/08 - HEJUD [2012] ECHR 1691 naked rambler Naomi Campbell nationality National Pro Bono Week national security Natural England nature conservation naturism Nazi negligence Neuberger neuroscience Newcastle university news News of the World new Supreme Court President NHS NHS Risk Register Nick Clegg Nicklinson Niqaab Noise Regulations 2005 Northern Ireland nuclear challenges nuisance nursing nursing home Obituary Occupy London offensive jokes Offensive Speech offensive t shirt oil spill olympics open justice oppress OPQ v BJM orchestra Osama Bin Laden Oxford University paramountcy principle parental rights parenthood parking spaces parliamentary expenses parliamentary expenses scandal Parliamentary sovereignty Parliament square parole board passive smoking pastor Terry Jones patents Pathway Students Patrick Quinn murder Pensions persecution personal data Personal Injury personality rights perversity Peter and Hazelmary Bull PF and EF v UK Phil Woolas phone hacking phone taps physical and mental disabilities physician assisted death Pinnock Piracy Plagiarism planning planning human rights planning system plebgate POCA podcast points Poland Police police investigations police liability police misconduct police powers police surveillance Policy Exchange report political judges Politics Politics/Public Order poor reporting Pope Pope's visit Pope Benedict portal possession proceedings power of attorney PoW letters to ministers pre-nup pre-nuptial Pre-trial detention predator control pregnancy press press briefing press freedom Prince Charles prince of wales princess caroline of monaco principle of subsidiarity prior restraint prison Prisoners prisoners rights prisoners voting prisoner vote prisoner votes prisoner voting prison numbers Prisons prison vote privacy privacy injunction privacy law through the front door Private life private nuisance private use proceeds of crime Professional Discipline Property proportionality prosecution Protection of Freedoms Act Protection of Freedoms Bill Protest protest camp protest rights Protocol 15 psychiatric hospitals Public/Private public access publication public authorities Public Bodies Bill public inquiries public interest public interest environmental litigation public interest immunity Public Order Public Sector Equality Duty putting the past behind quango quantum quarantine Queen's Speech queer in the 21st century R (on the application of) v Secretary of State for the Home Department & Ors [2011] EWCA Civ 895 R (on the application of) v The General Medical Council [2013] EWHC 2839 (Admin) R (on the application of EH) v Secretary of State for the Home Department [2012] EWHC 2569 (Admin) R (on the application of G) v The Governors of X School Rabone and another v Pennine Care NHS Foundation Trust [2012] UKSC 2 race relations Rachel Corrie Radmacher Raed Salah Mahajna Raed Saleh Ramsgate raptors rehabilitation Reith Lectures Religion resuscitation RightsInfo right to die right to family life right to life Right to Privacy right to swim riots Roma Romania Round Up Royals Russia saudi arabia Scotland secrecy secret justice Secret trials security services sexual offence Sikhism Smoking social media social workers South Africa south african constitution Spain special advocates spending cuts Standing starvation statelessness stem cells stop and search Strasbourg super injunctions Supreme Court Supreme Court of Canada surrogacy surveillance swine flu Syria Tax Taxi technology Terrorism terrorism act tort Torture travel treason treaty accession trial by jury TTIP Turkey Twitter UK Ukraine unfair consultation universal jurisdiction unlawful detention USA US Supreme Court vaccination vicarious liability Wales War Crimes Wars Welfare Western Sahara Whistleblowing Wikileaks wildlife wind farms WomenInLaw Worboys wrongful birth YearInReview Zimbabwe

Disclaimer


This blog is maintained for information purposes only. It is not intended to be a source of legal advice and must not be relied upon as such. Blog posts reflect the views and opinions of their individual authors, not of chambers as a whole.

Our privacy policy can be found on our ‘subscribe’ page or by clicking here.

%d bloggers like this: