themselves as the product of an equipment interference operation. The restrictions must
be implemented by recording the making, distribution and destruction of any such
copies, extracts and summaries that identify themselves as the product of an equipment
interference operation.
Storage
6.9
Information obtained by equipment interference, and all copies, extracts and summaries
of it, must be handled and stored securely, so as to minimise the risk of loss or theft. It
must be held so as to be inaccessible to persons without the required level of security
clearance. This requirement to store such information securely applies to all those who
are responsible for the handling of the information.
Destruction
6.10 Communications content, communications data and other information obtained by
equipment interference, and all copies, extracts and summaries thereof, must be marked
for deletion and securely destroyed as soon as they are no longer needed for the
functions or purposes set out in paragraph 6.5. If such information is retained, it should
be reviewed at appropriate intervals to confirm that the justification for its retention is
still valid.
Personnel security
6.11 In accordance with the need-to-know principle, each of the Intelligence Services must
ensure that information obtained by equipment interference is only disclosed to persons
as necessary for the proper performance of the Intelligence Services’ statutory
functions. Persons viewing such product will usually require the relevant level of
security clearance. Where it is necessary for an officer to disclose information outside
the service, it is that officer's responsibility to ensure that the recipient has the necessary
level of clearance.