Last week, as discussed in a post by Marko Milanovic, the UK Investigatory Powers Tribunal (IPT) ruled that it lacked jurisdiction under the European Convention of Human Rights (ECHR) to adjudicate Article 8 and 10 claims brought by persons “situated outside” of the UK (para. 60). The IPT is a specialised judicial body that hears complaints about surveillance by public bodies, including British security and intelligence agencies. IPT decisions are not subject to direct appeal in the UK. We are therefore likely to see this ruling quickly challenged before the European Court of Human Rights (ECtHR).
The backdrop to this litigation is convoluted. I sketch out the context in this post as I believe it will enrich discussion of the jurisdictional issues which are at the heart of this dispute. In 2013, following the Snowden disclosures, Privacy International, together with nine other NGOs, filed a case before the IPT challenging two aspects of the UK’s surveillance regime. First, the claimants challenged UK access to the communications of persons located within the UK collected by the US National Security Agency (NSA) under PRISM and Upstream. Under PRISM, the NSA collected data from US companies including Yahoo and Google. Under Upstream, the NSA intercepted data in bulk from hundreds of undersea fibre optic cables. Second, the claimants challenged Tempora, the British counterpart to Upstream, under which the Government Communications Headquarters (GCHQ) intercepted data in bulk from over 200 cables landing in the UK.
In February 2015, the IPT found that US-UK intelligence sharing – pursuant to PRISM and Upstream – was unlawful prior to 5 December 2014 because the legal framework governing it was hidden from the public (according to the IPT, that framework was sufficiently disclosed over the course of the proceedings so as to render the sharing of intelligence legal from that point forward). Read the rest of this entry…