GCHQ now exempt from hacking laws
Privacy International claims UK government has pushed through legislation meaning GCHQ isn't subject to same rules


Privacy International has revealed the GCHQ cannot get in trouble for hacking after the government pushed through legislation that makes it exempt from surveillance laws.
The organisation said it heard from the government ahead of a court case relating to the GCHQ's operations which, it claims, includes hacking in the Investigatory Powers Tribunal.
The government notified the claimants in the trial that the Computer Misuse Act was amended on 3 March 2015 to exempt the GCHQ intelligence service from rules set out in the act relating to hacking.
Privacy International, along with a group of other privacy and human right organisations filed complaints to the Investigatory Powers Tribunal, claiming the actions of the organisation were classed as hacking under the Computer Misuse Act and were therefore illegal.
The changes mean the GCHQ is able to continue carrying out its work by whatever means possible. Privacy International said it appears "no regulators, commissioners responsible for overseeing the intelligence agencies, the Information Commissioner's Office, industry, NGOs or the public were notified or consulted about the proposed legislative changes."
In February, a draft code was released giving UK spy agencies like the GCHQ powers to hack targets, including theose that don't have any link to crime or are a risk to national security, Privacy International said. However, very few details about the code have been released.
Eric King, deputy director of Privacy International, said: "The underhand and undemocratic manner in which the Government is seeking to make lawful GCHQ's hacking operations is disgraceful. Hacking is one of the most intrusive surveillance capabilities available to any intelligence agency, and its use and safeguards surrounding it should be the subject of proper debate.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"Instead, the government is continuing to neither confirm nor deny the existence of a capability it is clear they have, while changing the law under the radar, without proper parliamentary debate."

Clare is the founder of Blue Cactus Digital, a digital marketing company that helps ethical and sustainability-focused businesses grow their customer base.
Prior to becoming a marketer, Clare was a journalist, working at a range of mobile device-focused outlets including Know Your Mobile before moving into freelance life.
As a freelance writer, she drew on her expertise in mobility to write features and guides for ITPro, as well as regularly writing news stories on a wide range of topics.
-
Westcon-Comstor and Vectra AI launch brace of new channel initiatives
News Westcon-Comstor and Vectra AI have announced the launch of two new channel growth initiatives focused on the managed security service provider (MSSP) space and AWS Marketplace.
By Daniel Todd Published
-
Third time lucky? Microsoft finally begins roll-out of controversial Recall feature
News The Windows Recall feature has been plagued by setbacks and backlash from security professionals
By Emma Woollacott Published
-
Former GCHQ intern risked national security after taking home top secret data
News A former GCHQ intern has pleaded guilty to transferring data from a top-secret computer onto his work phone.
By Bobby Hellard Published
-
Businesses must get better at sharing cyber information, urges former GCHQ chief
Jeremy Fleming, the former head of GCHQ, has warned businesses face increasingly sophisticated cyber attacks on critical national infrastructure (CNI).
By Rory Bathgate Published
-
UK and US pledge to punish cyber criminals at annual meeting
News Intelligence and defence officials met at the annual forum to discuss approaches to cyber security for the years ahead
By Connor Jones Published
-
GCHQ opens up about concealing cyber threats from global community
News In a series of publications from GCHQ and the NCSC, security directors explain why and how it keeps security threats a secret
By Connor Jones Published
-
GCHQ has "over-achieved" at developing state hacking tools
News The organisation has developed double the offensive cyber attacks than that of criminals
By Clare Hopping Published
-
Canada's spy agency releases its own anti-malware tool to the public
News The CSE says its scalability makes it an ideal fit for enterprise applications
By Dale Walker Published
-
The Queen formally opens National Cyber Security Centre
News UK cyber chief talks tough in the face of hacker threats
By Adam Shepherd Published
-
UK hit 'by almost 200 Russian cyber attacks' in three months
News Cybersecurity chief: Britain could soon be hit by a "category one" attack
By Adam Shepherd Published