Serious mistakes in exercising investigatory powers – Lawrence McNamara

4 February 2019 by

At the end of January the Investigatory Powers Commissioner published his first annual report  for 2017. Its coverage of errors provides some very welcome transparency. But one matter remains opaque and exposes a legislative and policy challenge: when serious mistakes are made, who finds out? 

In this post I set out what the IPC report says in this regard, explain the legislative framework, and then identify the challenges and choices for both law and policy. The two points I highlight are:

  • There is a policy choice underpinning the IPC report about what information to present, and what not to present. It would be helpful and appropriate for the IPC to provide more clarity about how often people were affected by errors but notinformed of it.
  • There are policy and legislative challenges that remain with regard to whether people will – as it currently seems – neverbe informed that they were affected by a serious error. 

What the IPC report tells us about errors  

The IPC devotes considerable attention to explaining the errors that have been made by agencies (including MI5, MI6 and GCHQ) exercising investigatory powers.  Together, the chapter on errors and breaches and an annex outlining each investigation of a serious error comprise a quarter of the report. 

The report states (at 14.25 and 14.30) that in 2017 there were 926 errors reported to IPCO and (its predecessor) IOCCO, and of those 33 were “considered to be serious and resulted in further investigation”. Of those 33, 24 were deemed to be “serious errors”.

The report also states that during the year “the IPC notified 8 individuals of a serious error” (14.5).

The consequences of errors are evident in the annex and in the report itself (14.34): 

Errors in this context can have grave consequences for the victim of the mistake, together with his or her family and friends. This is particularly evident when homes or offices are searched and the nature of the investigation is revealed to members of the individual’s family, and his or her neighbours or employer. Children are at risk of being taken into care and individuals in notifiable, and other, occupations may be suspended or dismissed. Strict bail conditions can result in a suspect having to leave his or her home.

We should be in no doubt that reporting and notification of errors is important.

What is a “serious error”?        

It seems there are two aspects to the definition and these have different functions.

First, there is the criteria for investigation by IPCO, explained at 14.29, that outlines the circumstances in which an error may be classified as “serious”. These include:

  • Technical errors relating to the CSP secure-disclosure systems which result in a significant number of erroneous disclosures;
  • Errors when a public authority has, as a consequence of relying on the wrong data, 
  • initiated a course of action that has an adverse impact on someone (for example, sharing information with another public authority stating a person is suspected of a crime; when an individual is visited or a search warrant is executed; or there is an arrest).
  • Errors which result in the wrongful disclosure of a large volume of communications data or a particularly sensitive data set.

The report explains (14.30) that, “in cases where an error may have potentially occurred, an in-depth and detailed investigation is conducted to determine the circumstances and impact.”  This was the 33 investigations, of which 9 did not meet the above criteria. The remaining 24 are covered by the annex to the report.

The second – and different – definition of a “serious error” is found in section 231of the Investigatory Powers Act 2016.  Its purpose is also different.

Here, a serious error is one where “the Commissioner considers that the error has caused significant prejudice or harm to the person concerned” (s 231(2)).  

Where that type of error exists then the Commissioner must under s 231(1) notify the affected person that an error was made, but only if the Commissioner considers that

it is in the public interest for the person to be informed of the error (s 231(1)(b)).  

In deciding whether it will be in the public interest, s 231(4) states that the Commissioner must, in particular, consider—

(a) the seriousness of the error and its effect on the person concerned, and

(b) the extent to which disclosing the error would be contrary to the public interest or prejudicial to—

(i) national security,

(ii) the prevention or detection of serious crime,

(iii) the economic well-being of the United Kingdom, or

(iv) the continued discharge of the functions of any of the intelligence services.

The provision of the information about errors is consistent with the requirements of s 231(8): annual reports must state (a) the number of relevant errors of which the Investigatory Powers Commissioner has become aware, (b) the number of relevant errors which the Commissioner decided were serious errors, and (c) the number of persons informed under subsection (1) during that year.

More than this, however, the IPC has made a choice to be very transparent about those investigations.  There is information about the nature of the errors, the investigations and, to some extent, the effects of the errors.

That said, the regime leaves some things unclear.

What can and cannot be inferred from the report?

It is clear that: 

  • there were 24 serious errors in terms of the IPC classification, and
  • there were 8 notifications under s 231.

But among the things we do not know how many of the 24 serious errors were also serious errors in section 231 terms – errors that “caused significant prejudice or harm” – but which were not notified. We should not infer that 8 of the 24 were errors of that kind because, for instance, one error may have affected more than one individual (see, eg, 14.33).

It is possible, though, to speculate by mapping the individual investigations in the Annex against the report’s text at 14.33. It perhaps gives an indication of how the Commissioner is undertaking the evaluation required by s 231(4)(a). Among the consequences of the 24 errors, 19 people either had their premises searched under warrant or were arrested on suspicion of offences, including arrest on suspicion of murder in one case and numerous others related to sexualised contact with children on social media or indecent images of children (14.33, Annex B). If we presume that notifications will only occur in the most serious of cases, and noting that two ongoing investigations relate to errors affecting 10 people (so it is likely no notification has yet occurred), then the notifications probably all related to errors in that group of 19, rather than other categories identified at 14.33 of police visiting homes or delays to welfare checks). One possible inference is that anyone who is arrested will be notified, and anyone subject to search warrant will probably be notified, but it is difficult to say this or more with any certainty.

It seems impossible to say anything at all about whether or how there has the public interest balancing required by s 231(4)(b). We know that at least one person who was either arrested or had their premises searched was not notified, but we do not know why there was no notification.

It is troubling that individuals may have suffered significant prejudice or harm at the hands of the state and the regime for reporting obfuscates this. 

However, the substantive implications of the law and the reporting process are still more worrying. While there may be genuine national security reasons not to notify a person that they have been affected by an error, the current framework does not provide for notification at a later point where, for example, notification would no longer pose a risk to national security (eg, the security-sensitive dimension of information has subsequently been disclosed elsewhere).   

The legislative and policy choices      

There are two major choices that arise.

The first is a policy choice.  The Act sets out what the IPC must report on, but the IPC has control over how it presents that information and, to some extent (as the annex makes clear) how much information it provides.

It would be very helpful for the IPC to indicate how many serious errors met the s 231 criteria and how many notifications were not made on public interest grounds.  It may be that there are genuine security reasons that prevent comprehensive details being provided, but at least some information would be valuable and appropriate.

The second is a legislative choice and it relates to whether, if a notification has been denied, it might be made later.  

These problems were identified when the Investigatory Powers Bill was being considered by Parliament.  The Report of the Draft Bill Committeecited (para 614) the evidence of the Bingham Centre for the Rule of Law (and I was a co-author of that evidence) and our view that the approach to error reporting and notification was a matter of “profound concern”, quoting our evidence: 

 We accept fully that there will be circumstances where a person has suffered significant prejudice or harm but that there will be good reasons (eg, national security) why they should not be notified, and it is right that the legislation provides for that. However, it is entirely inappropriate that the legislative presumption is against notification and that the legislation does not provide for notification at a future point when there are no longer reasons for secrecy. The rule of law requires access to justice, and this means that a person who is wronged should have an effective right to a remedy. This is especially so when that wrong has been at the hands of the state, and when the wrong has resulted in significant prejudice or harm.

Our recommendation was that where a person has not been notified on the basis of public interest requirements then the non-notification should be reviewed every five years and if the public interest in non-notification is no longer satisfied then the person is to be notified of the relevant error, with the provision of relevant particulars.

That is a far more challenging matter and really remains a matter for the legislature.  Although the statute could arguably be read as not precluding notification some time after the error and its effect, it is probably not something the IPC can or should take upon itself because it expressly fell for legislative consideration and was not taken up. However, it would not be out of place for the IPC to address the issue and identify it as a matter for the legislature.

Conclusions and future reports

The IPC report is welcome.  The degree of transparency about errors is warranted and wise, and illustrates clearly that substantial information can be provided with absolutely no risk to national security.

There are unquestionably many challenges for the IPC. Those above are only two, but it is to be hoped that they are met in future reports, with, at least,

  • identification and acknowledgement of how often and why there were not notifications of s 231 serious errors, and
  • a consideration of the possibility of later notification.  

It is to be hoped the legislature will also consider those matters and take action.

Postscript (6 Feb 2018)

I am grateful to Sam Smith (@smithsam) and Joshua Rozenberg (@JoshuaRozenberg) for picking up something I missed in Annex B, which is that error investigations 1 and 8 are reported using exactly the same words. That raises a question about whether these are two separate errors but reported in the same terms, or whether they are an indvertent duplicate and so they represent only one error investigation.

If they are duplicates then that reduces the total error investigations to 23, and it would seem likely that all individuals subjected either to arrest or execution of a search warrant were notified. That would obviously be a good thing. However, that conclusion is still obviously speculative as regards the evaluation of what makes an error serious enough to wrrant notification, and it still does not reveal anything about the anything about whether and how any public interest balancing is done.

In any event, it is to be hoped that IPCO will resolve any doubt about whether investigations 1 and 8 are duplicates or represent two investigations.

Lawrence McNamara is a Senior Research Fellow at the Bingham Centre for the Rule of Law and a Reader in Law at the University of York.

Welcome to the UKHRB

This blog is run by 1 Crown Office Row barristers' chambers. Subscribe for free updates here. The blog's editorial team is:
Commissioning Editor: Jonathan Metzer
Editorial Team: Rosalind English
Angus McCullough QC David Hart QC
Martin Downs
Jim Duffy

Free email updates

Enter your email address to subscribe to this blog for free and receive weekly notifications of new posts by email.




7/7 Bombings 9/11 A1P1 Aarhus Abortion Abu Qatada Abuse Access to justice adoption AI air pollution air travel ALBA Allergy Al Qaeda Amnesty International animal rights Animals anonymity Article 1 Protocol 1 Article 2 article 3 Article 4 article 5 Article 6 Article 8 Article 9 article 10 Article 11 article 13 Article 14 article 263 TFEU Artificial Intelligence Asbestos Assange assisted suicide asylum asylum seekers Australia autism badgers benefits Bill of Rights biotechnology birds directive blogging Bloody Sunday brexit Bribery British Waterways Board Catholic Church Catholicism Chagos Islanders Charter of Fundamental Rights child protection Children children's rights China christianity circumcision citizenship civil liberties campaigners civil partnerships climate change clinical negligence closed material procedure Coercion Cologne Commission on a Bill of Rights common buzzard common law communications competition confidentiality confiscation order conscientious objection consent conservation constitution contact order contempt of court Control orders Copyright coronavirus costs costs budgets Court of Protection crime criminal law Criminal Legal Aid criminal records Cybersecurity Damages data protection death penalty declaration of incompatibility defamation deficit DEFRA Democracy village Dennis Gill dentist's registration fees deportation deprivation of liberty derogations Detention devolution Dignitas dignity Dignity in Dying diplomacy director of public prosecutions disability Disability-related harassment disabled claimants disciplinary hearing disclosure Discrimination Discrimination law disease divorce DNA doctors does it matter? domestic violence Dominic Grieve don't ask don't ask don't tell don't tell Doogan and Wood double conviction DPP guidelines drones duty of care ECHR economic and social rights economic loss ECtHR Education election Employment Environment environmental information Equality Act Equality Act 2010 ethics Ethiopia EU EU Charter of Fundamental Rights EU costs EU law European Convention on Human Rights European Court of Human Rights European Court of Justice european disability forum European Sanctions Blog Eurozone euthanasia evidence Exclusion extra-jurisdictional reach of ECHR extra-territoriality extradition extradition act extradition procedures extradition review extraordinary rendition Facebook Facebook contempt facial recognition fair procedures Fair Trial faith courts fake news Family family courts family law family legal aid Family life fatal accidents act Fertility fertility treatment FGM fisheries fishing rights foreign criminals foreign office foreign policy France freedom of assembly Freedom of Association Freedom of Expression freedom of information Freedom of Information Act 2000 freedom of movement freedom of speech free speech game birds gangbo gang injunctions Garry Mann gary dobson Gary McFarlane gay discrimination Gay marriage gay rights gay soldiers Gaza Gaza conflict Gender General Dental Council General Election General Medical Council genetic discrimination genetic engineering genetic information genetics genetic testing Google government Grenfell grooming Gun Control gwyneth paltrow gypsies habitats habitats protection Halsbury's Law Exchange hammerton v uk happy new year harassment Hardeep Singh Haringey Council Harkins and Edwards Health healthcare health insurance Heathrow heist heightened scrutiny Henry VII Henry VIII herd immunity hereditary disorder High Court of Justiciary Hirst v UK HIV HJ Iran HM (Iraq) v The Secretary of state for the home department [2010] EWCA Civ 1322 Holder holkham beach holocaust homelessness Home Office Home Office v Tariq homeopathy hooding Hounslow v Powell House of Commons Housing housing benefits Howard League for Penal Reform how judges decide cases hra damages claim Hrant Dink HRLA HS2 hs2 challenge hts Human Fertilisation and Embryology Act Human Fertilisation and Embryology Authority human genome human rights Human Rights Act Human Rights Act 1998 human rights advocacy Human rights and the UK constitution human rights commission human rights conventions human rights damages Human Rights Day human rights decisions Human Rights Information Project human rights news Human Rights Watch human right to education human trafficking hunting Huntington's Disease HXA hyper injunctions Igor Sutyagin illegality defence immigration Immigration/Extradition Immigration Act 2014 immigration appeals immigration detention immigration judge immigration rules immunity increase of sanction India Indonesia Infrastructure Planning Committee inherent jurisdiction inherited disease Inhuman and degrading treatment injunction Inquest Inquests insult insurance insurmountable obstacles intelligence services act intercept evidence interception interests of the child interim remedies international international conflict international criminal court international humanitarian law international human rights international human rights law international law international treaty obligations internet internet service providers internment internship inuit investigation investigative duty in vitro fertilisation Iran iranian bank sanctions Iranian nuclear program Iraq Iraqi asylum seeker Iraq War Ireland irrationality islam Israel Italy iTunes IVF ivory ban jackson reforms Janowiec and Others v Russia ( Japan Jason Smith Jeet Singh Jefferies Jeremy Corbyn jeremy hunt job Jogee John Hemming John Terry joint enterprise joint tenancy Jon Guant Joseph v Spiller journalism judaism judges Judges and Juries judging Judicial activism judicial brevity judicial deference judicial review Judicial Review reform judiciary Julian Assange jurisdiction jury trial JUSTICE Justice and Security Act Justice and Security Bill Justice and Security Green Paper Justice Human Rights Awards JUSTICE Human Rights Awards 2010 justification just satisfaction Katyn Massacre Kay v Lambeth Kay v UK Ken Clarke Ken Pease Kerry McCarthy Kettling Kings College Klimas koran burning Labour Lady Hale lansley NHS reforms LASPO Law Commission Law Pod UK Law Society Law Society of Scotland leave to enter leave to remain legal aid legal aid cuts Legal Aid desert Legal Aid Reforms legal blogs Legal Certainty legal naughty step Legal Ombudsman legal representation legitimate expectation let as a dwelling Leveson Inquiry Levi Bellfield lewisham hospital closure lgbtq liability Libel libel reform Liberal Democrat Conference Liberty libraries closure library closures Libya licence conditions licence to shoot life insurance life sentence life support limestone pavements limitation lisbon treaty Lithuania Litigation litvinenko live exports local authorities locked in syndrome london borough of merton London Legal Walk London Probation Trust Lord Bingham Lord Bingham of Cornhill Lord Blair Lord Goldsmith lord irvine Lord Judge speech Lord Kerr Lord Lester Lord Neuberger Lord Phillips Lord Rodger Lord Sumption Lord Taylor LSC tender luftur rahman machine learning MAGA Magna Carta mail on sunday Majority Verdict Malcolm Kennedy malice Margaret Thatcher Margin of Appreciation margin of discretion Maria Gallastegui marriage material support maternity pay Matthew Woods Mattu v The University Hospitals of Coventry and Warwickshire NHS Trust [2011] EWHC 2068 (QB) Maya the Cat Mba v London Borough Of Merton McKenzie friend Media and Censorship Medical medical liability medical negligence medical qualifications medical records medicine mental capacity Mental Capacity Act Mental Capacity Act 2005 Mental Health mental health act mental health advocacy mental health awareness Mental Health Courts Mental illness merits review MGN v UK michael gove Midwives migrant crisis Milly Dowler Ministerial Code Ministry of Justice Ministry of Justice cuts misfeasance in public office modern slavery morality morocco mortuaries motherhood Motor Neurone disease Moulton Mousa MP expenses Mr Gul Mr Justice Eady MS (Palestinian Territories) (FC) (Appellant) v Secretary of State for the Home Department murder murder reform Musician's Union Muslim NADA v. SWITZERLAND - 10593/08 - HEJUD [2012] ECHR 1691 naked rambler Naomi Campbell nationality National Pro Bono Week national security Natural England nature conservation naturism Nazi negligence Neuberger neuroscience Newcastle university news News of the World new Supreme Court President NHS NHS Risk Register Nick Clegg Nicklinson Niqaab Noise Regulations 2005 Northern Ireland nuclear challenges nuisance nursing nursing home Obituary Occupy London offensive jokes Offensive Speech offensive t shirt oil spill olympics open justice oppress OPQ v BJM orchestra Osama Bin Laden Oxford University paramountcy principle parental rights parenthood parking spaces parliamentary expenses parliamentary expenses scandal Parliamentary sovereignty Parliament square parole board passive smoking pastor Terry Jones patents Pathway Students Patrick Quinn murder Pensions persecution personal data Personal Injury personality rights perversity Peter and Hazelmary Bull PF and EF v UK Phil Woolas phone hacking phone taps physical and mental disabilities physician assisted death Pinnock Piracy Plagiarism planning planning human rights planning system plebgate POCA podcast points Poland Police police investigations police liability police misconduct police powers police surveillance Policy Exchange report political judges Politics Politics/Public Order poor reporting Pope Pope's visit Pope Benedict portal possession proceedings power of attorney PoW letters to ministers pre-nup pre-nuptial Pre-trial detention predator control pregnancy press press briefing press freedom Prince Charles prince of wales princess caroline of monaco principle of subsidiarity prior restraint prison Prisoners prisoners rights prisoners voting prisoner vote prisoner votes prisoner voting prison numbers Prisons prison vote privacy privacy injunction privacy law through the front door Private life private nuisance private use proceeds of crime Professional Discipline Property proportionality prosecution Protection of Freedoms Act Protection of Freedoms Bill Protest protest camp protest rights Protocol 15 psychiatric hospitals Public/Private public access publication public authorities Public Bodies Bill public inquiries public interest public interest environmental litigation public interest immunity Public Order Public Sector Equality Duty putting the past behind quango quantum quarantine Queen's Speech queer in the 21st century R (on the application of) v Secretary of State for the Home Department & Ors [2011] EWCA Civ 895 R (on the application of) v The General Medical Council [2013] EWHC 2839 (Admin) R (on the application of EH) v Secretary of State for the Home Department [2012] EWHC 2569 (Admin) R (on the application of G) v The Governors of X School Rabone and another v Pennine Care NHS Foundation Trust [2012] UKSC 2 race relations Rachel Corrie Radmacher Raed Salah Mahajna Raed Saleh Ramsgate raptors rehabilitation Reith Lectures Religion resuscitation RightsInfo right to die right to family life right to life Right to Privacy right to swim riots Roma Romania Round Up Royals Russia saudi arabia Scotland secrecy secret justice Secret trials security services sexual offence Sikhism Smoking social media social workers South Africa south african constitution Spain special advocates spending cuts Standing starvation statelessness stem cells stop and search Strasbourg super injunctions Supreme Court Supreme Court of Canada surrogacy surveillance swine flu Syria Tax Taxi technology Terrorism terrorism act tort Torture travel treason treaty accession trial by jury TTIP Turkey Twitter UK Ukraine unfair consultation universal jurisdiction unlawful detention USA US Supreme Court vaccination vicarious liability Wales War Crimes Wars Welfare Western Sahara Whistleblowing Wikileaks wildlife wind farms WomenInLaw Worboys wrongful birth YearInReview Zimbabwe


This blog is maintained for information purposes only. It is not intended to be a source of legal advice and must not be relied upon as such. Blog posts reflect the views and opinions of their individual authors, not of chambers as a whole.

Our privacy policy can be found on our ‘subscribe’ page or by clicking here.

%d bloggers like this: