Investigatory Powers (Amendment) Act 2024

Key Points

• Stronger oversight and transparency: the Investigatory Powers Commissioner’s powers are expanded, with new duties to review third‑party bulk personal datasets and to notify individuals of serious data breaches; Parliament’s Intelligence and Security Committee will receive periodic reports on category authorisations.
• Privacy safeguards and clarifications: amendments clarify who can approve warrants, require notification to affected individuals of breaches, and ensure relevant operators and notices are defined consistently; some provisions aim to limit or clarify the use of communications data.
• Scope and cross‑border reach: the Act allows amendments to be extended to the Isle of Man and British overseas territories, widening the regime beyond the UK itself; there are also changes to how certain cases are treated in inquiries in Scotland and Northern Ireland.
• Parliamentary process and debates: several Conservative peer amendments strengthened oversight and operational clarity, while Labour opposition pressed for broader privacy protections and reporting obligations that were largely not adopted; some motions to broaden protections were defeated.
• Key policy themes: how surveillance powers are administered (who decides, how changes are reviewed), how breaches are handled and communicated, and how the regime fits with data protection norms and international relationships.

Progress

The bill completed its parliamentary passage and received Royal Assent on 25 April 2024, becoming law.

Voting

In the final Lords stage, the bill passed with strong cross‑party support (Aye 257, No 38). Earlier votes and amendments showed opposition from Labour and other parties, with government‑backed changes aimed at increasing oversight and clarity ultimately approved in the Lords and Commons.