In the uk, communication service providers ust retain data under a european union data retention directive and, under the UK regulation of investigatory powers act (RIPA), to ensure such data can be disclosed in a timely manner to UK law enforcement agencies, the security services and a number of prescribed public authorities. certain agencies can also seek a warrant from the secretary of state to intercept communications.
The two main objectives of RIPA are to regulate the investigatory powers of the state and to set the legitimate expectations to privacy of citizens. as RIPA is subject to oversight by the surveillance commissioner and the interception commissioner, citizens can seek redress for all alleged unlawful access to their data or communications, and service provider operating in UK can raise concerns about the validity of requests. RIPA permits service providers to recover the costs of complying with requests.