On 8 October 2024, the UK Home Office initiated a consultation on a Code of Practice for Intelligence services' retention and use of bulk personal datasets (BPDs) until 6 January 2025. The purpose of the Code is to provide guidelines on how intelligence agencies collect, store, and analyse large datasets containing personal information. The Code also mandates that all retention and examination of BPDs require authorisation via class or specific BPD warrants issued by the Secretary of State, with the Judicial Commissioner's approval for oversight. The Code includes special protections for journalists, legal professionals, and members of sensitive professions, and it sets strict rules for record-keeping, auditing, and error reporting, requiring the Investigatory Powers Commissioner to monitor compliance. Finally, it outlines procedures for urgent authorisations, sharing data with international partners, and the secure deletion of datasets when no longer necessary.
Original source