Published by Harwick Intelligence. How to use our guidance.
Scope: England and Wales, with UK-wide data protection principles
Sources and related wording checked: .
On this page
No powers, no licence, same law as everyone else
Private investigation is not listed among the activities currently licensed by the SIA. Separate work, such as close protection or some security activities, can require a licence. Check the SIA’s current list against the service offered. Calling someone an investigator gives them no special power to demand records, enter property, or compel a witness to speak.
A competent investigator brings a documented method: identifying suitable sources, checking identity and reliability, recording observations accurately, and explaining uncertainty. The value lies in a justified enquiry and an accountable record, not a promise that a court will accept every finding.
What an investigator can lawfully do
Assess and conduct justified observation. Public observation may be possible, but being on a public road does not remove privacy, data protection, or harassment concerns. Establish the purpose, lawful basis, necessity, and proportionate limits before any covert surveillance. Private firms do not acquire state surveillance powers.
Search appropriate sources. Company and property records, public registers, press archives, and public online material can provide leads. Access conditions, completeness, and costs vary. Record an appropriate lawful basis for processing personal data, assess sensitive information separately, and check that the source supports the conclusion.
Make appropriate enquiries. A willing witness may provide information, but confidentiality, safeguarding, and data protection still apply. Explain the enquiry honestly and avoid pressure. In a reunion trace, a discreet intermediary approach can allow the person to decide whether to respond.
Serve documents, take statements, and give evidence. Personal service of court papers, witness statements in the form the court requires, and attending to be cross-examined on what the investigator saw are core parts of the work.
Verify what you have been told. Checking that a company exists, that a person holds the qualification they claim, that a property is owned by the person selling it, or that a CV matches the public record, all from sources open to anyone.
Methods that create legal risk
Some proposed methods create serious criminal or civil risks. The precise offence and any defence depend on the facts; a client’s curiosity or suspicion does not itself authorise intrusive access.
- Obtaining personal data without authority. Knowingly or recklessly obtaining or procuring disclosure without the controller’s consent can engage section 170 of the Data Protection Act 2018, subject to statutory exceptions and defences. Impersonating a customer to extract private records is a serious warning sign.
- Accessing accounts or devices without authority. Knowingly accessing private email, messages, or other computer data without authority can be an offence under the Computer Misuse Act 1990, whoever owns the device and whatever the relationship. Our guide on phone records and messages covers this in detail.
- Intercepting communications without lawful authority. The Investigatory Powers Act 2016 restricts interception. Recording a conversation in which someone participates raises different questions from intercepting other people’s communications; neither should be reduced to a blanket promise of legality.
- Intrusive tracking. Vehicle ownership is not the only consideration. Tracking someone can engage privacy, data protection, stalking, harassment, and coercive-control law depending on the circumstances. A client’s request is not sufficient authority.
- Entering private property without authority. Trespass can create civil liability and, in some circumstances, criminal liability. It can also affect proceedings. Do not assume that obtaining useful information excuses the entry.
- Bribing a public official or an insider for information from a protected database such as police, DVLA, HMRC, or benefits records.
Private records require proper authority
An investigator has no special entitlement to private bank, telephone, medical, tax, or police records. Lawful routes can include records supplied by their owner, a properly authorised request, statutory access, or a court process. For example, DVLA considers keeper-information requests where reasonable cause is shown; this is a restricted application, not general access to its database. Require a clear explanation of the authority for any private information offered.
How a court sees it
Courts control evidence and can exclude otherwise admissible material. Relevance, reliability, fairness, disclosure, and compliance with directions all matter. A contemporaneous log and documented handling help a court assess evidence, but do not guarantee admission or weight. Improper collection can also create separate criminal, civil, or costs consequences. See Civil Procedure Rules Part 32 and Family Procedure Rules Part 22.
Telling a lawful firm from an unlawful one
The reliable signs are in what a firm is prepared to promise. Our guide to choosing an investigator goes into detail, but the short version is this:
- A lawful firm asks why you want the information before it asks for the fee, and turns some work away.
- It tells you what it cannot get, without hedging.
- It puts the scope, the lawful basis, and the fee mechanism in writing in an engagement letter.
- It explains the authority for any private records and refuses unauthorised access, rather than selling access to an account as a shortcut.
- It expects to give evidence about its own work and keeps records that would survive that.
Treat guaranteed outcomes, unexplained sources, and claims of privileged access as reasons to ask further questions or decline the service. A payment method alone does not prove illegality. A credible firm explains its scope, fees, sources, limits, and complaints process.
When an investigator is not the answer
If you are in danger, contact police or an appropriate support service. If the question depends on legal disclosure or a court order, consult a solicitor before commissioning enquiries. Where investigation is unlikely to resolve the decision you face, we will say so and discuss more suitable routes.
Sources and further guidance
- Security Industry Authority: activities requiring an SIA licence
- DVLA: requesting vehicle or registered keeper information
- ICO: getting copies of your personal information
- Civil Procedure Rules Part 32: evidence
- Family Procedure Rules Part 22: evidence
- Crown Prosecution Service: Computer Misuse Act and data-protection offences
Read the original guidance for its full scope and any later changes. Links do not imply endorsement of Harwick.
This is general guidance within the scope identified above. It is not legal advice and does not take account of your circumstances. Before a legal, employment, or court-related decision, seek advice from a solicitor in the relevant jurisdiction. Harwick provides investigative services; legal advice is a separate professional service.