The UK government is breaking the law by indiscriminately collecting citizens' internet activity and phone records and giving hundreds of public bodies access to these personal details with no suspicion of serious crime and no independent oversight. Judges at the EU Court of Justice yesterday backed a challenge to the Data Retention and Investigatory Powers Act (DRIPA). Although DRIPA will expire on December 31, the government has since passed a new surveillance law. Today’s ruling means major parts of that new act are in effect unlawful – and the government will need to urgently amend it.