Why the government should rethink the UK’s surveillance laws

Suspicionless surveillance

It hasn’t – far from it. The court’s ruling makes clear that the government’s continuing approach of subjecting all of us to suspicionless surveillance with entirely inadequate privacy safeguards is incompatible with a free, rights-respecting democracy.

This judgment is the first time the European Court of Human Rights has tested the system and principles of such extensive mass surveillance against human rights law. While it dealt with an old law, it sets the standards that apply to the current one.

The Investigatory Powers Act was passed in 2016, three years after Snowden’s revelations. It replicated and vastly expanded the powers of the previous surveillance regime – creating the most intrusive mass surveillance regime ever introduced in a democracy.

It lets government agencies store and search our web history, location data and records of who we call, email and text –information that paints an incredibly detailed picture of who we are, who we talk to, where we go and what we think.

It reveals our health problems, our political views, our religious beliefs, our sexual preferences, our daily habits, our every movement.

The Snoopers’ Charter allows bulk interception of our communications “to safeguard the economic wellbeing of the UK”. The European Court judgment makes clear this broad discretionary power is totally illegitimate, and can only be justified in the interests of national security.

The ruling also has severe implications for the Investigatory Powers Act’s lack of clarity and oversight. To comply with the ruling, the act needs to create more robust oversight, which must look at how “bearers” (communications channels used for data collection) are chosen and how collected data is filtered for examination.

Same safeguards

Crucially, the judgment recognises that the current practice of collecting communications data – the who, what, when and where of our communications – is as intrusive as collecting the content, and requires the same safeguards around when it is searched and examined. Those safeguards don’t exist under the Investigatory Powers Act.

Judges expressed concern about the old regime’s lack of safeguards for journalistic material and source confidentiality. Those protections are still inadequate in the new law.

On top of all this, the Investigatory Powers Act gives agencies eye-wateringly intrusive and dangerous new powers, from hacking our devices en masse to building and linking massive, population-level databases containing sensitive information on all of us – creating a data honeypot for criminals and foreign spies.

Liberty’s comprehensive challenge to the Investigatory Powers Act is well under way. In April, the High Court ruled in our favour on the first stage of the challenge, finding that the government’s practice of accessing our communications data held by companies and service providers was unlawful – and giving it until 1 November to change the law.

As that challenge continues, this judgment has dealt the government yet another blow and given us yet more evidence that protections for our rights remain entirely inadequate.

Industrial-scale surveillance of citizens can never be lawful in a free, rights-respecting democracy. How many more shattering legal defeats does the government intend to suffer before it accepts that it can – and must – give us a targeted system that protects our safety, our data security and our fundamental rights?