15. By s.19(6) any disclosure under s.19 “does not breach –
(a) any obligation of confidence owed by the person making the disclosure, or
(b) any other restriction on the disclosure of information (however imposed).”
16. Furthermore:
(a) s.19 does not affect the duties imposed by the information gateway
provisions (s.19(7) and s.20(1) of the CTA).
(b) by s.20(2) of the CTA, nothing in s.19 “authorises a disclosure that(a) contravenes the Data Protection Act 1998 (c.29), or
(b) is prohibited by Part 1 of the Regulations of Investigatory Powers Act
2000 (c.23).”
17. Thus, specific statutory limits are imposed on the information that the
Intelligence Services can obtain, and on the information that it can disclose
under the CTA.
Other statutory bases for obtaining information
18. Information contained in a Bulk Personal Dataset may be obtained by other
means, including pursuant to:
(a) Warrants issued under section 5 of the ISA in respect of property and
equipment interference;
(b) Authorisations issued under section 7 of the ISA in respect of property and
equipment interference;
(c) Intrusive surveillance warrants issued under section 43 of the Regulation of
Investigatory Powers Act 2000 (“RIPA”);
(d) Directed surveillance authorisations issued under section 28 of RIPA;
(e) Covert human intelligence authorisations issued under section 29 of RIPA;
and
(f) Warrants for the interception of communications issued under section 5 of
RIPA
19. It is important to note that these other statutory means of obtaining
information are themselves subject to their own statutory requirements, in
addition to any further requirements derived from the Handling Arrangements
set out below.
57