The UK's Investigatory Powers Commissioner, Sir Brian Leveson, has warned of significant regulatory gaps in the Investigatory Powers Act 2016 that remain unaddressed by recent amendments, potentially undermining oversight of intelligence activities, according to The Register.
In his annual report, Leveson highlighted a loophole where privileged information shared by foreign partners, such as from Five Eyes allies to GCHQ, is not subject to judicial commissioner authorization as domestic acquisitions would be, despite GCHQ voluntarily disclosing such receipts. He also flagged an exemption allowing UK intelligence agencies (MI5, MI6, GCHQ) to avoid reporting serious personal data breaches to the Information Commissioner's Office if they occur during IPA-related activities, creating a potential "gap which could be contrary to the public interest."
The IPC further criticized the "complex patchwork of legislation" as ill-suited for technological advancements, noting persistent ambiguity around definitions of communications data, particularly electronic financial transaction information, which frustrates law enforcement.
In his annual report, Leveson highlighted a loophole where privileged information shared by foreign partners, such as from Five Eyes allies to GCHQ, is not subject to judicial commissioner authorization as domestic acquisitions would be, despite GCHQ voluntarily disclosing such receipts. He also flagged an exemption allowing UK intelligence agencies (MI5, MI6, GCHQ) to avoid reporting serious personal data breaches to the Information Commissioner's Office if they occur during IPA-related activities, creating a potential "gap which could be contrary to the public interest."
The IPC further criticized the "complex patchwork of legislation" as ill-suited for technological advancements, noting persistent ambiguity around definitions of communications data, particularly electronic financial transaction information, which frustrates law enforcement.
