IPCO Annual Report 2017
8. Targeted
Communications Data
Definition and process
8.1
Communications data is conveniently described as ‘the who, where, when, and how’ of a
communication but critically it does not include the ‘content’. It identifies, therefore, how,
when and where people or machines communicate with each other, but excludes what
is said during a communication, or any data within the body of the communication, such
as text, or audio and video files.
8.2
RIPA defines communications data as being traffic data, service use data or subscriber
information (see s.21 (4)).
8.3
Traffic data is data that is (or was) contained in, or attached to, a communication for the
purpose of transmitting the communication. This can include, for instance, (i) incoming
call records; (ii) information identifying the location of a device used to make or receive a
communication, or the sender or recipient of a communication; (iii) information about the
server, domain or website a device has accessed; and (iv) any information on the outside
of a postal item or online tracking of communications including postal items.
8.4
Service use information is material about the services provided to customers of postal or
telecommunications service providers. It is routinely supplied to subscribers of the service.
It includes (i) itemised telephone call records; (ii) records of connections to internet services;
(iii) information about the amount of internet data downloaded or uploaded; and (iv)
registered or recorded postal delivery and collection information.
8.5
Subscriber information is information the CSPs hold concerning the people who use their
communication services. This may include (i) details about the person who subscribes to
a telephone number or email account; (ii) the payment method and details of payments;
and (iii) details of the device an account holder uses, such as serial numbers.
Who can use the power
8.6
Over 500 public authorities, including 52 police forces and other law enforcement agencies,
the intelligence agencies, 429 local authorities and other public bodies (including fire and
ambulance services and regulators such as the CMA and ICO) are authorised to acquire
communications data under the powers set out in Chapter 2 of Part I RIPA.
8.7
Each of these public authorities is able to acquire communications data for one or more
statutory purposes. These purposes include (i) the interests of national security; (ii)
preventing or detecting crime, or preventing disorder; (iii) public safety; (iv) public health;
(v) collecting tax; (vi) in emergencies, preventing death or injury; (vii) investigating
miscarriages of justices; (viii) regulating financial markets; and (ix) identifying dead
or vulnerable people, and their next of kin.
49