UK surveillance powers explained

A new law setting out what powers the UK state will have to monitor communications between citizens has been unveiled. What are the key elements of the Investigatory Powers Bill?

The Investigatory Powers Bill aims to completely overhaul the laws governing how the state, police and spies can gather private communications or other forms of data to combat crime, terrorism and other threats to national security and the UK's economic wellbeing.

Both security chiefs and privacy campaigners agree the current rules are completely out of date and last year a massive review of powers by an independent watchdog called for a complete rethink.

There are two basic types of information they collect:

Existing law is complicated, buried in different Acts and ambiguous. Very few people outside of the intelligence agencies properly understand it - and most of it was written in the pre-internet era. For instance, the public did not know until the publication of this bill that MI5 not only has permission to scoop up and analyse "bulk data" from the internet - but that permission comes under legislation passed before the invention of the world wide web.

Communications firms - such as your broadband or mobile phone providers - will be compelled to hold a year's worth of your communications data. This new information will be details of services, websites and data sources you connect to when you go online and is called your "Internet Connection Record". For instance, it could be your visit to the BBC website from a mobile phone at breakfast and then how you used an online chat service at lunch. It does not include the detail of what you then did within each service. There is no comparable legal duty to retain these records in the rest of Europe, the USA, Canada or Australia - this appears to be a world first.

In simple terms, police say they want to be able to get at these records, going back a year, so that if they get a lead on a suspect, they can establish more about their network or conspiracy.

Under existing law, agencies can already ask firms to start collecting this data - but they can't access historic information because companies don't keep it. Police argue that this means many investigations into crime with an online element go cold because they can't link activity to specific people or devices.

Police or other agencies can already access communications data such as historic phone bills - but there is a ban on them asking firms to hold and hand over information detailing which online services have been used.

The bill brings together all other investigatory powers which involve intrusion into communications or private lives, including:

No. The legislation includes an existing power to compel a company in the UK to hand over an encryption key so that scrambled messages can be read - where there is a legal reason for the police or other agencies to access that message. This could include, for example, asking a company to help unscramble chat messages which may reveal where a missing person - or their kidnapper - can be found.

However, this legal duty cannot be imposed on overseas companies, such as Apple, that use a form of encryption which they say they cannot themselves breach.

Ministers are proposing a new "investigatory powers commission" led by senior judges.

If the new commission finds a serious error in how powers have been used, the Investigatory Powers Tribunal, a special semi-secret court, could then rule that the targeted individual has the right to know.

While councils can request some communications data, they will be banned from accessing internet connection records. A new offence of unlawfully accessing internet data will be created - and it will also be a crime for someone who works for a communications firm to reveal data has been sought.

Jargon buster: Click here to see the confusing terminology clarified