Part 4: Intelligence services processing Chapter 1: Scope and definitions Sections 82 to 84: Processing to which this Part applies and definitions
Section 82 applies the provisions in Part 4 of the Act to personal data controlled by an intelligence service (the Security Service, Secret Intelligence Service and Government Communications Headquarters).
	The intelligence services process data in accordance with their functions, which are set out in the Security Service Act 1989 and the Intelligence Services Act 1994. Those functions are:
	The Security Service:
	Ø the protection of national security and, in particular, its protection against threats from espionage, terrorism and sabotage, from the activities of agents of foreign powers and from actions intended to overthrow or undermine parliamentary democracy by political, industrial or violent means;
	Ø safeguarding the economic well-being of the United Kingdom against threats posed by the actions or intentions of persons outside the British Islands; and
	Ø acting in support of the activities of police forces, the National Crime Agency and other law enforcement agencies in the prevention and detection of serious crime.
	The Secret Intelligence Service:
	Ø to obtain and provide information relating to the actions or intentions of persons outside the British Islands; and
	Ø to perform other tasks relating to the actions or intentions of such persons.
	These functions are exercisable only-
	Ø in the interests of national security, with particular reference to the defence and foreign policies of Her Majesty's Government in the United Kingdom; or
	Ø in the interests of the economic well-being of the United Kingdom; or
	Ø in support of the prevention or detection of serious crime.
	Government Communications Headquarters:
	a) to monitor, make use of or interfere with electromagnetic, acoustic and other emissions and any equipment producing such emissions and to obtain and provide information derived from or related to such emissions or equipment and from encrypted material; and
	b) to provide advice and assistance about-
	i. languages, including terminology used for technical matters, and
	ii. cryptography and other matters relating to the protection of information and other material,
	to the armed forces of the Crown, to Her Majesty's Government in the United Kingdom or to a Northern Ireland Department or, in such cases as it considers appropriate, to other organisations or persons, or to the general public, in the United Kingdom or elsewhere.
	The functions referred to in paragraph (a) are exercisable only-
	Ø in the interests of national security, with particular reference to the defence and foreign policies of Her Majesty's Government in the United Kingdom; or
	Ø in the interests of the economic well-being of the United Kingdom in relation to the actions or intentions of persons outside the British Islands; or
	Ø in support of the prevention or detection of serious crime.
	Section 83 defines "processor" and "controller" for the purposes of intelligence service processing under Part 4.
	An intelligence service is a controller when, alone or jointly with others, it determines the purposes and means of processing of personal data. A processor is any person who processes personal data on behalf of the controller.
	When personal data is processed only for purposes required by legislation, and by means stipulated by that legislation, the person who has the obligation to process the data is the controller.
	If a controller outsources processing functions to another person or organisation then that other person or organisation will be a processor. The processor acts on behalf of the controller, and follows their direction. Employees of the controller are not considered processors because they are part of the single legal entity that is the controller.
	The provisions of this Part are technology neutral, covering the processing of personal data by computer systems or paper based structured filing systems (see definition in section 3(7)). A structured filing system is one containing records relating to data subjects held in a sufficiently systematic, structured way as to allow ready access to specific information about those subjects. Files which are not structured according to specific criteria do not fall within the scope of this Part.
	Section 84 defines other expressions used in this Part.