United Kingdom: Code of practice for communications data entered into force

On 6 June 2025, the Code of Practice for communications data entered into force. The Code provides guidance for relevant public authorities, telecommunications operators (TOs), and postal operators (POs), on functions under Part 3 of the Investigatory Powers Act 2016, as amended by the Investigatory Powers Amendment Act 2024, detailing procedures for the acquisition, disclosure, and retention of Communications Data (CD). It clarifies the legal framework by emphasising the necessity and proportionality of data acquisition and delineates the roles of authorising individuals and judicial commissioners. The Code introduces additional protections for journalists, lawyers, parliamentarians, and other professionals handling sensitive information. It also includes special rules for acquiring internet connection records and outlining the use of the request filter to limit collateral intrusion when analysing large datasets. Oversight is maintained by the Investigatory Powers Commissioner, who is responsible for monitoring compliance, auditing, and reporting errors, ensuring adherence to legal and ethical standards.