Lawful Interception
Definition
Court-authorised real-time capture of the content of communications in transit, such as telephone calls, emails, or instant messages. Requires a higher legal threshold than access to stored data in most jurisdictions because it is prospective and captures private content as it is created.
- Nature
- Real-time capture of communications content
- Authorisation
- Court order or equivalent legal warrant
- Examples
- Phone calls, emails, instant messages in transit
- Legal threshold
- Higher than for stored data requests
Common questions
Why does lawful interception require a higher legal threshold than accessing stored records?+
Interception captures the content of private communications as they happen, which is more intrusive than retrieving records already stored by a provider. Because it is prospective, authorities must justify surveillance in advance rather than pointing to evidence that already exists, which most legal systems treat as a stronger privacy intrusion warranting stricter oversight.
How does lawful interception differ from obtaining stored metadata such as call logs?+
Stored metadata like call logs or subscriber records already exists at a provider and is typically obtainable with a lower evidentiary threshold, such as a subpoena or production order. Interception instead captures the actual content of a communication as it occurs and generally needs a specific judicial warrant tied to a named target and time period.
Related terms
- Mutual Legal Assistance Treaty (MLAT)
- A bilateral or multilateral treaty under which signatory states agree to assist each other in gathering evidence for criminal investigations. MLATs define...
- Chain of Custody
- The documented chronological record of who collected, handled, transferred, and examined a piece of evidence. For digital evidence, chain of custody includes...
- CLOUD Act
- The Clarifying Lawful Overseas Use of Data Act (US, 2018). Clarifies that US service providers must comply with valid US legal process...
- Exculpatory Evidence
- Evidence that tends to clear a suspect of guilt. Investigators have a professional and, in many jurisdictions, a legal duty to document...
- Production Order
- A court order compelling a person or service provider to produce specific documents or data that already exist. Covers subscriber records, account...
- Proportionality
- The legal principle, central to European human rights law and to many constitutional systems, that any interference with a fundamental right must...
- Search Warrant
- A judicial order authorising officers to enter and search a specified place and seize specified items. In most systems it must describe...
- Subscriber Data
- The registration information a service provider holds about an account holder: name, address, email address, phone number, payment details, and account creation...
- Traffic Data (Metadata)
- Data about a communication rather than its content: who communicated with whom, when, for how long, and from what IP address or...
Explained in these topics
- Lawful Access, Interception Law and Privacy Protections
- Legal and Ethical Foundations of Cyber InvestigationsLegally authorised real-time monitoring of communications, typically requiring court approval or a ministerial warrant. Governed by statutes such as the US Ele...