Report of the Interception of Communications Commissioner - 2016

I am responsible under section 57(1)(d) for reviewing the adequacy of the arrangements
as a whole under section 15 and 16. During inspections of GCHQ, my inspectors carry
out random audit checks of the justifications for selection. In addition, GCHQ’s Internal
Compliance and IT Security Teams conduct audits to identify and further investigate any
possible unauthorised use. The results of these retrospective audits are provided to my
office during inspections. In addition, any breaches of the section 15 / 16 safeguards are
reported to IOCCO as part of the errors process. These retrospective audits are a strong
safeguard and also serve to act as a deterrent against malign use.
There are a number of other security and administrative safeguards in place within GCHQ.
These include the security policy framework (including vetting), the training of staff in the
proper operation of RIPA with particular emphasis on the Human Rights Act, and the
development and operation of computerised systems for checking and searching for
potentially non-compliant use of GCHQ’s systems and premises. All staff are required
to take mandatory training every two years, and to pass a test to demonstrate their
continuing understanding of these requirements.

Statistics for Interception Warrants
IOCCO has worked with the interception agencies and warrant-granting departments in
order to be able to provide some statistical information about how the powers under
Chapter 1 of Part 1 of RIPA are being used.
Figure 11 shows the number of new interception warrants issued in each of the years
2014-2016 for the nine interception agencies.
3500
3000
2500

3057

3007

2015

2016

2795

2000
1500
1000
500
0

38

2014

@iocco_oversight

Select target paragraph3