Statutory provisions concerning communications data are set out in the Regulation of Investigatory Powers Act 2000, the Data Retention and Investigatory Powers Act 2014 and associated codes of practice. Oversight of how these powers are used is a matter for the independent Interception of Communications Commissioner.