UK law provides for warranted equipment interference to obtain communications, equipment data and other information. Official guidance describes physical and remote techniques, including accessing devices and exploiting software vulnerabilities. IPCO’s report for 2024, published in December 2025, records 3,028 targeted-equipment-interference authorisations. This establishes a real power and its reported use, while public totals reveal neither every operation nor who was affected.
Privacy discussions often focus on intercepting a message as it moves across a network. Equipment interference addresses the device itself, where information may already be stored. The published code describes a range from direct access to more complex remote exploitation. These are examples of what the legal framework can authorise, rather than admissions that every technique is used in every case. Separate rules apply when an operation also intercepts live communications, and the distinction affects which warrant is needed.
IPCO’s 2024 annual report records 3,028 targeted-equipment-interference authorisations, including 565 urgent authorisations. Those figures make the power’s use inspectable at an aggregate level, but one authorisation is not necessarily one person, one device or one successful intrusion. The code and oversight reports are valuable because they expose procedures, safeguards and limits that popular surveillance stories often omit. They support scrutiny of necessity, proportionality and compliance; they cannot identify an unexplained problem on someone’s own phone as a government operation.
The established record.
- 01
The published code covers both physical and remote equipment interference.
- 02
IPCO reports 3,028 targeted-equipment-interference authorisations for 2024.
- 03
The authorisation count is not a count of unique people or compromised devices.
How the story unfolded.
- 2016
The statutory framework
The Investigatory Powers Act sets out targeted and bulk equipment-interference powers.
- 2024
Use recorded by oversight
The reporting year includes 3,028 targeted authorisations.
- 16 December 2025
The report becomes public
IPCO publishes its 2024 annual report and aggregate authorisation figures.
Where the evidence stops.
Statutory capability and aggregate authorisations do not prove unlawful targeting, universal surveillance or compromise of a particular device. Code examples are illustrative; live interception may require separate authorisation.
What would move this forward?
- Compare reported authorisations with oversight findings, refusals and error reporting.
- Examine whether a specific documented operation used the correct warrants and safeguards.
- Require forensic and corroborating operational evidence before attributing any particular device compromise.
Read the original sources.
The source may establish a narrower point than the headline. Follow the specific finding, its date and its limitations.
How much can public oversight reveal about a power whose individual operations remain secret?