The UK Home Office published the draft Communications Data Bill, which would have required providers to collect and retain data about a much wider range of online communications. Critics quickly dubbed it the snooper’s charter.
What happened
- The bill would have extended data retention to web browsing activity, social media messages, webmail, internet voice calls, and online gaming.
- It would have captured communications data, such as time, sender, recipient, and location, but not message content.
- A parliamentary joint committee reported in December 2012 that its scope should be significantly narrowed.
- Deputy Prime Minister Nick Clegg said in April 2013 that the bill was not going to happen, and it was dropped.
Why it mattered
The proposals triggered a major UK debate about bulk surveillance, privacy, and the cost to providers. Many of its ideas later returned in the Investigatory Powers Act 2016.
Lessons for organisations
Organisations that process communications data should understand their legal obligations for retention and disclosure, and document how they handle lawful requests from authorities. Retained data must be secured, since large stores of communications data are an attractive target for attackers.
Sources: House of Commons Library, Open Rights Group
Part of our Top stories archive of headline-making events in information security, privacy, and AI. If you would like help applying the lessons to your organisation, contact us.
