Mass Surveillance: Legality and Proportionality in the United Kingdom

1. Introduction

Mass surveillance refers to the large-scale interception, collection, retention, examination or analysis of communications and communications data by the State. Unlike traditional targeted surveillance, which focuses on a particular suspect, mass or bulk surveillance allows intelligence agencies to collect communications or data from a much wider population and subsequently use selectors or search criteria to identify material of intelligence value.

In the United Kingdom, mass surveillance must be considered primarily in the context of:

• Article 8 ECHR – right to respect for private and family life and correspondence;
• Article 10 ECHR – freedom of expression, particularly protection of journalists and confidential sources;
• Human Rights Act 1998;
• Investigatory Powers Act 2016 (IPA);
• judicial decisions concerning the former Regulation of Investigatory Powers Act 2000 (RIPA).

The present UK framework principally rests on the Investigatory Powers Act 2016, which provides statutory authority for several forms of bulk surveillance. The IPA provides for bulk interception, bulk acquisition and bulk equipment-interference warrants.

2. Legality of Mass Surveillance

The first requirement is legality.

Surveillance must have a basis in domestic law. However, simply having an Act of Parliament is not sufficient. The law must satisfy the requirement of “quality of law.”

This means that surveillance legislation should be:

(a) Accessible

People should be able to discover the legal rules governing surveillance.

(b) Foreseeable

The legislation should provide sufficient indication of the circumstances in which the State may exercise surveillance powers.

(c) Precise

Government agencies should not have completely unlimited discretion.

(d) Protected by safeguards

The law should contain safeguards against arbitrary or abusive surveillance.

The ECtHR has repeatedly emphasised that secret surveillance presents a particularly serious danger of abuse because the individual normally does not know that surveillance is taking place.

3. The Investigatory Powers Act 2016

The Investigatory Powers Act 2016 is the principal UK legislation governing bulk interception.

Part 6 of the Act provides for different categories of bulk warrants, including:

1. Bulk interception warrants
2. Bulk acquisition warrants
3. Bulk equipment interference warrants

A bulk interception warrant may be issued where the statutory requirements concerning matters such as national security or serious crime are satisfied.

The important constitutional question is therefore not simply:

“Does the Government have statutory authority?”

It is:

“Are the statutory powers sufficiently controlled so that their exercise remains necessary and proportionate?”

4. Proportionality

The principle of proportionality requires a balance between:

National security and public safety

and

Individual privacy and other fundamental rights.

Under Article 8, interference with privacy must be:

Lawful → Legitimate aim → Necessary → Proportionate.

A surveillance measure should therefore be connected to a legitimate objective and should not impose a greater interference with privacy than is reasonably necessary to achieve that objective.

The UK Parliament's analysis of the relevant ECtHR jurisprudence describes necessity as requiring proportionality to the legitimate aim and a pressing social need.

5. Why Bulk Surveillance Raises Special Proportionality Issues

Bulk surveillance is different from targeted surveillance.

Targeted surveillance

The State begins with a particular individual or defined investigation.

Bulk surveillance

The State may first acquire a large volume of communications or data and subsequently search and examine selected material.

Consequently, privacy interference occurs through a chain of activities:

Collection → Filtering → Selection → Examination → Retention → Use → Sharing → Destruction

The ECtHR has therefore adopted an “end-to-end safeguards” approach. It examines whether adequate safeguards exist throughout the entire surveillance process rather than considering only the initial collection of information.

6. Six Important Case Laws

Case 1: Klass and Others v Germany (1978)

Facts

The case concerned German legislation permitting secret surveillance for the protection of national security.

Judgment

The European Court recognised that democratic States may need secret surveillance powers to protect national security and prevent serious crime.

However, surveillance powers cannot be unlimited.

Principle

The State must establish safeguards capable of protecting individuals against arbitrary surveillance.

Importance for the UK

Klass establishes the fundamental proposition that:

Secret surveillance can be legitimate in a democratic society, but it must be accompanied by effective safeguards.

It therefore provides the foundation for later UK mass-surveillance jurisprudence.

Case 2: Weber and Saravia v Germany (2006)

This is one of the most important cases for understanding the legality requirement.

The Court developed what became known as the six Weber safeguards.

Surveillance legislation should contain adequate rules concerning:

1. The nature of offences capable of justifying interception;
2. Categories of persons who may be subject to surveillance;
3. Duration of interception;
4. Examination, use and storage of intercepted material;
5. Communication of information to third parties;
6. Destruction or erasure of intercepted material.

These safeguards are particularly important because surveillance is secret and therefore ordinary democratic and judicial controls are more difficult to apply.

Importance

Weber and Saravia provides the basic legal framework for determining whether secret-surveillance legislation satisfies the “quality of law” requirement.

Case 3: Liberty and Others v United Kingdom (2008)

Facts

The case concerned the interception of external communications under the UK's former surveillance framework.

The applicants argued that the surveillance regime failed to provide adequate safeguards.

Judgment

The ECtHR found a violation of Article 8, particularly because the legal framework did not provide sufficient information concerning the procedures for selection and examination of intercepted communications.

Principle

A surveillance system cannot be considered sufficiently lawful merely because the government has statutory authority.

The rules governing:

• interception;
• selection;
• examination;
• use; and
• handling of information

must be sufficiently clear.

Importance

This case is particularly significant for the UK because it demonstrated that deficiencies in the domestic surveillance framework itself could violate Article 8.

Case 4: Kennedy v United Kingdom (2010)

Facts

The applicant challenged the UK's interception regime under RIPA.

Judgment

The ECtHR examined whether the UK surveillance framework provided sufficient safeguards against arbitrary interference with Article 8 rights.

The Court ultimately found the regime sufficiently foreseeable and compliant in the circumstances of that case.

Principle

The Convention does not require surveillance legislation to explain every operational detail publicly.

Because intelligence operations necessarily require secrecy, the law may contain some degree of flexibility.

However, sufficient safeguards must exist to prevent arbitrary governmental discretion.

Importance

Kennedy illustrates the balance between:

Operational secrecy

and

Legal foreseeability and accountability.

It also demonstrates that the ECtHR does not regard every surveillance power as automatically disproportionate.

Case 5: Big Brother Watch and Others v United Kingdom (2021)

The most important modern UK mass-surveillance case

The Grand Chamber judgment of 25 May 2021 concerned the UK's former RIPA regime and, among other matters, bulk interception of communications and intelligence sharing.

Issues

The case examined:

• bulk interception;
• selection and examination of communications;
• communications data;
• intelligence received from foreign intelligence services;
• protection of journalists and confidential sources.

Article 8

The Court did not decide that bulk interception is inherently incompatible with the Convention.

Instead, it held that bulk interception could be an important national-security capability, but the system required adequate safeguards.

The Court identified three major deficiencies in the UK's former regime:

1. No independent authorisation of bulk interception warrants;
2. Failure to include categories of search terms/selectors in the warrant application;
3. Insufficient safeguards where selectors linked to an individual were used.

These deficiencies meant that the interference with privacy was not adequately confined to what was necessary in a democratic society. The Court therefore found a violation of Article 8.

Article 10

The Court also found insufficient protection for confidential journalistic material and journalistic sources.

This is important because surveillance capable of identifying journalists' sources can undermine investigative journalism and freedom of the press.

Importance

The case established the end-to-end safeguards approach.

The legality and proportionality of bulk surveillance must be examined across the whole process:

Collection → Filtering → Selection → Examination → Retention → Sharing → Destruction.

Case 6: Centrum för Rättvisa v Sweden (2021)

Although this was a Swedish case rather than a UK case, it is highly important for understanding the European legal principles applied to UK mass surveillance.

The case concerned bulk interception of electronic communications for foreign-intelligence purposes.

Principle

The ECtHR recognised that bulk interception is not automatically unlawful under Article 8.

However, the State must provide effective safeguards against abuse.

The Court's approach emphasises:

• independent supervision;
• clear legal rules;
• controls over selection;
• controls over examination;
• retention limits;
• safeguards concerning sharing;
• destruction requirements;
• effective remedies.

Importance for the UK

Together with Big Brother Watch, this case forms the modern ECtHR framework for assessing bulk interception.

7. The Six Cases at a Glance

8. Independent Authorisation

One of the most important proportionality safeguards is independent authorisation.

Under the former RIPA system, the ECtHR found the absence of independent authorisation to be one of the significant defects in the UK's bulk-interception regime.

The subsequent Investigatory Powers Act 2016 introduced a stronger system involving the “double lock”: a Secretary of State issues the warrant and a Judicial Commissioner reviews and approves it before it takes effect, subject to statutory exceptions and procedures.

This creates an additional institutional check on executive surveillance power.

9. Selection and Search Terms

Bulk interception does not mean that intelligence officers necessarily examine every communication manually.

Large quantities of information may be filtered using:

• selectors;
• search terms;
• identifiers;
• technical criteria.

This creates a significant proportionality issue.

For example, there is an important distinction between:

collecting data for a legitimate intelligence purpose

and

deliberately searching for information about a particular person.

The Big Brother Watch judgment therefore placed particular importance on safeguards concerning selectors connected to identifiable individuals.

10. Data Retention

Proportionality also concerns what happens after collection.

The State should have rules controlling:

• how long information can be retained;
• who may access it;
• when it can be examined;
• when it must be destroyed.

The longer sensitive information is retained, the greater the possibility of:

• misuse;
• unauthorised access;
• profiling;
• function creep;
• privacy violations.

Consequently, retention and destruction rules are an important component of lawful surveillance.

11. Intelligence Sharing

Modern surveillance frequently involves intelligence cooperation between States.

The UK may receive intelligence from foreign intelligence agencies.

The question is whether the State can avoid its human-rights obligations by obtaining information indirectly.

The ECtHR examined this issue in Big Brother Watch and concluded that the UK's regime for receiving intelligence from foreign intelligence partners had sufficient safeguards in the circumstances considered by the Court.

This demonstrates that intelligence sharing must also be surrounded by safeguards relating to:

• examination;
• use;
• retention;
• onward disclosure;
• destruction.

12. Protection of Journalists

Mass surveillance creates a particularly serious problem where journalists are involved.

Journalists often rely upon confidential sources to investigate:

• government misconduct;
• corruption;
• crime;
• national-security matters.

If surveillance can identify confidential sources, individuals may become afraid to communicate with journalists.

This produces a chilling effect on freedom of expression.

In Big Brother Watch, the ECtHR found that the former UK framework did not provide adequate protection for confidential journalistic material and sources.

The UK subsequently strengthened safeguards relating to confidential journalistic material under the IPA framework. Later amendments required additional safeguards concerning the selection and retention of such material.

13. Necessity versus Proportionality

These concepts are related but distinct.

Necessity

The State must demonstrate that surveillance is genuinely required for a legitimate objective.

Proportionality

Even if surveillance is necessary, the interference must not be excessive compared with the objective pursued.

For example:

National-security objective

↓

Bulk interception

↓

Is bulk interception genuinely required?

↓

Could a less intrusive method achieve the same result?

↓

Are adequate safeguards available?

↓

Is the overall interference proportionate?

This is the central proportionality analysis.

14. UK Constitutional Balance

Mass surveillance demonstrates a constitutional tension between:

Executive power

The Government and intelligence agencies need effective tools to combat:

• terrorism;
• espionage;
• serious organised crime;
• hostile-state activity.

Individual liberty

Citizens have rights to:

• privacy;
• correspondence;
• freedom of expression;
• confidential communication.

The law therefore attempts to create a balance rather than giving either side absolute priority.

15. Effect of the Big Brother Watch Judgment on UK Law

The important point is that Big Brother Watch primarily concerned the historic RIPA regime, rather than simply declaring the current IPA regime unlawful.

The Investigatory Powers Act 2016 had already replaced significant parts of RIPA and introduced a different statutory framework.

Following the ECtHR judgment, further amendments were made to strengthen protections, particularly concerning journalistic material. The Council of Europe's supervision of the relevant execution process was subsequently closed after considering the UK's measures.

Therefore, when discussing the present UK position, it is important to distinguish:

Old RIPA regime → ECtHR found deficiencies

from

Current IPA framework → stronger statutory and judicial safeguards.

16. Overall Legal Test for UK Mass Surveillance

A good examination answer can use the following framework:

Step 1 — Legal basis

Is there statutory authority for the surveillance?

Step 2 — Quality of law

Is the legislation accessible and sufficiently foreseeable?

Step 3 — Legitimate aim

Is surveillance being used for a legitimate purpose such as national security or prevention of serious crime?

Step 4 — Necessity

Is the surveillance genuinely necessary?

Step 5 — Proportionality

Is the interference proportionate to the objective?

Step 6 — Independent authorisation

Is there adequate independent oversight?

Step 7 — Selection safeguards

Are search terms and selectors properly controlled?

Step 8 — Data safeguards

Are examination, retention, use and destruction regulated?

Step 9 — Intelligence sharing

Are safeguards applied when information is shared with or received from foreign agencies?

Step 10 — Remedies

Can individuals obtain effective legal or institutional remedies?

Conclusion

In the United Kingdom, mass surveillance is not prohibited simply because it is “mass” or “bulk” surveillance. The modern legal position is that bulk interception may serve legitimate national-security purposes, but it must operate within a carefully controlled legal framework.

The decisive issue is therefore legality + necessity + proportionality + safeguards.

The most important case is Big Brother Watch and Others v United Kingdom (2021). It established that the legality of bulk surveillance must be assessed through end-to-end safeguards, covering the entire process from initial interception through selection, examination, retention, sharing and destruction.

The six cases collectively show the development of the law:

Klass → Weber and Saravia → Liberty → Kennedy → Big Brother Watch → Centrum för Rättvisa

The central constitutional principle is:

The State may use extensive surveillance to protect national security, but it cannot exercise that power arbitrarily. The greater the intrusion into privacy, the stronger the legal safeguards, independent supervision and proportionality requirements must be.