Europe’s highest court dealt a significant blow to British government surveillance powers in 2016 C.E., ruling that the U.K.’s bulk collection of citizens’ communications data violates fundamental rights. The decision put two major surveillance laws in the dock — and found both wanting.
What the ruling found
- U.K. mass surveillance: The European Court of Justice ruled that indiscriminate retention of all citizens’ web history, location data, and app usage “cannot be considered to be justified within a democratic society.”
- Investigatory Powers Act: Because its bulk collection powers matched or exceeded those of the law already struck down, the court found the newly passed Act illegal under the same reasoning.
- Access controls: The ruling specified that police and public bodies cannot authorize their own access to retained data — prior approval by a court or independent authority is required.
What the laws actually required
The U.K.’s Data Retention and Investigatory Powers Act — known as DRIPA — was a temporary emergency law passed to authorize state surveillance until a permanent replacement could take its place. That replacement, the Investigatory Powers Act, cleared the House of Lords in late 2016 C.E. and was set to take effect December 30.
Under these laws, every internet service provider in the U.K. was required to collect and store the complete web history of all customers for 12 months. That data — covering websites visited, apps used, and location — could then be shared with 48 separate public bodies. That list ran from GCHQ, the government spy agency, all the way to the Food Standards Agency and ambulance services.
The breadth of that access was precisely what the court found indefensible.
How the challenge happened
The case was brought by David Davis, at the time a backbench MP and later Brexit secretary, and Tom Watson, then Labour’s deputy leader. Their legal challenge targeted DRIPA specifically — but the ECJ’s reasoning applied equally to the Investigatory Powers Act that replaced it.
Fifteen judges agreed: blanket data retention with self-authorized access, no requirement to notify affected individuals, and no obligation to keep data within the E.U. added up to an unlawful surveillance regime.
“The retained data, taken as a whole, is liable to allow very precise conclusions to be drawn concerning the private lives of the persons whose data has been retained,” the court wrote.
Civil liberties group Liberty welcomed the ruling. Director Martha Spurrier noted: “The U.K. may have voted to leave the E.U. — but we didn’t vote to abandon our rights and freedoms.”
Why this mattered beyond one ruling
The ECJ decision joined a growing body of international human rights law on digital privacy, reinforcing that mass surveillance programs face a high legal bar in democratic societies. The ruling aligned with concerns raised by the U.N. Special Rapporteur on Privacy, who had argued that bulk data collection undermines the right to private life regardless of whether the data is ever actively reviewed.
There were also significant economic stakes. The tech sector represents a major share of the U.K. economy, and future data-sharing agreements with the E.U. — crucial for post-Brexit trade — would almost certainly need to comply with E.U. law. That made the Investigatory Powers Act not just a civil liberties problem but a potential trade barrier.
The ruling also added momentum to global advocacy around surveillance reform, coming just three years after Edward Snowden’s disclosures had already put bulk intelligence collection under intense public scrutiny.
Lasting impact
The ECJ ruling became part of a broader legal architecture constraining government surveillance powers across Europe and beyond. It reinforced the principle that security agencies must demonstrate necessity and proportionality — not just point to a general threat — before collecting citizens’ data at scale.
In the years following, the European Data Protection Board and national courts across E.U. member states cited similar reasoning in evaluating surveillance laws. The ruling also shaped the political debate around the U.K.’s post-Brexit data adequacy agreement with the E.U., which required British data protection standards to remain broadly equivalent to European ones.
For digital rights organizations, the decision was a reminder that legal challenges — even slow, expensive ones — can move the needle on policies that affect hundreds of millions of people.
Blindspots and limits
The ruling’s immediate practical effect was limited. The Home Office announced it would appeal, and the Investigatory Powers Act came into force as scheduled on December 30, 2016 C.E., regardless of the court’s finding. Following Brexit, the U.K. government gained the legal room to diverge from E.U. human rights standards, and Parliament had already demonstrated a willingness to pass the surveillance law with minimal resistance. The court’s moral authority was real — its enforcement power in a post-Brexit U.K. was not.
It is also worth noting that targeted surveillance of genuine criminal suspects remains legal and widely practiced across democratic governments. The ruling drew a line at indiscriminate bulk collection — not at surveillance itself. That distinction matters but can get lost in the broader debate.
Governments and intelligence agencies have consistently argued that bulk data collection prevents serious crime and terrorism in ways targeted interception cannot. Those arguments were not resolved by the ruling — they were sidestepped by it.
Read more
For more on this story, see: Forbes
For more from Good News for Humankind, see:
- U.K. cancer death rates fall to their lowest level on record
- Indigenous land rights: 160 million hectares protected at COP30
- The Good News for Humankind archive on human rights
About this article
- 🤖 This article is AI-generated, based on a framework created by Peter Schulte.
- 🌍 It aims to be inspirational but clear-eyed, accurate, and evidence-based, and grounded in care for the Earth, peace and belonging for all, and human evolution.
- 💬 Leave your notes and suggestions in the comments below — I will do my best to review and implement where appropriate.
- ✉️ One verified piece of good news, one insight from Antihero Project, every weekday morning. Subscribe free.
More Good News
-
Doctors hail first breakthrough in asthma and COPD treatment in 50 years
Benralizumab, a single injection given during an asthma or COPD attack, cut treatment failures fourfold over 90 days compared to the steroid pills doctors have relied on since the 1970s. In a trial of 158 patients arriving at UK emergency departments, the shot eased coughing, wheezing, and breathlessness more effectively than steroids — and could eventually be given at home or in a GP’s office. Because it targets the specific inflammation behind roughly half of asthma attacks, it could spare millions of people from the diabetes and bone-loss risks that come with repeated steroid use. After a 50-year wait for…
-
Mexico launches universal healthcare for all 133 million citizens
Mexico universal healthcare is now officially a reality, with the country launching a system designed to cover all 133 million citizens through the restructured IMSS-Bienestar network. Before this reform, an estimated 50 million Mexicans had no formal health insurance, with rural and Indigenous communities bearing the heaviest burden of untreated illness and medical debt. The new system severs the long-standing tie between employment and healthcare access, providing free consultations, medicines, and hospital services regardless of income. If implemented effectively, Mexico’s move could serve as a powerful model for other middle-income nations still navigating fragmented, inequitable health systems.
-
Ghana declares its first marine protected area to rescue depleted fish stocks
Ghana’s marine protected area — the country’s first ever — marks a historic turning point for a nation gripped by a quiet fisheries crisis. Established near Cape Three Points in the Western Region, the protected zone restricts or bans fishing activity to allow severely depleted fish populations to recover. Ghana’s coastal stocks have fallen by an estimated 80 percent from historic levels, threatening food security and the livelihoods of millions of small-scale fishers. The declaration also carries regional significance, potentially inspiring neighboring Gulf of Guinea nations to establish coordinated protections of their own.
