On 5 June 2025, the UK Home Office adopted the Code of Practice for communications data. The Code provides guidance for relevant public authorities, Telecommunications Operators (TOs), and Postal Operators (POs) regarding functions under Part 3 of the Investigatory Powers Act 2016, as amended by the Investigatory Powers Amendment Act 2024, detailing procedures for the acquisition, disclosure, and retention of Communications Data (CD). It clarifies the legal framework by emphasising the necessity and proportionality of data acquisition and delineates the roles of authorising individuals and judicial commissioners. The Code introduces additional protections for journalists, lawyers, parliamentarians, and other professionals handling sensitive information, alongside special rules for acquiring internet connection records and outlining the use of the request filter to limit collateral intrusion when analysing large datasets. Oversight is maintained by the Investigatory Powers Commissioner, who is responsible for monitoring compliance, auditing, and reporting errors, ensuring adherence to legal and ethical standards.
Original source