Can the Information Commissioner assess relevance, retention and unlawful processing at GCHQ?
1 July 2015
No Comments
Whilst awaiting the arrival of another enthralling, multi-megabyte, download about the General Data Protection Regulation, I started reading the judgement (Case Number IPT 14/85/CH), delivered by the Investigatory Powers Tribunal last February. This is one of the cases between Privacy International and Government Communications Headquarters (GCHQ) which identified some unlawful processing of personal data by the latter (see references). Paragraph 109 of this Tribunal’s judgment refers to the National Security Certificates established by Section 28 of the DPA; it states:
