Private investigators are legal in the UK, but they do not have police powers. A professional investigator can conduct proportionate surveillance, trace people for legitimate purposes, research lawful public and commercial sources, gather witness and documentary evidence, support civil and family cases, and investigate fraud or misconduct. What they cannot do is hack accounts, intercept communications without lawful authority, impersonate police officers, force access to protected records, trespass simply to obtain evidence, or turn an investigation into harassment or stalking.
At Trojan Investigations, we plan work around a defined question, the client’s legitimate purpose and the least intrusive method capable of answering it. The legal position depends on what information is being collected, how it is obtained, how long activity continues, who is affected and what happens to the evidence afterwards.
Originally published: 5th May 2026 | Updated: 7th September 2026
What can a private investigator legally do in the UK?
They can investigate facts using lawful surveillance, tracing, open-source intelligence, public records, interviews, corporate research and evidence preservation. They can also support solicitors and businesses. They cannot create authority that the client does not have: there is no general power to hack, intercept calls, obtain bank records, access police databases, enter private property or secretly monitor someone without regard to privacy, data protection and harassment law.
Private Investigators Do Not Have Police Powers
A private investigator is a private-sector professional, not a constable, intelligence officer or court official. That distinction matters because many fictional portrayals assume investigators can demand records, compel answers or use covert powers available only to public authorities under statutory regimes.
In ordinary private work, we rely on lawful information gathering and voluntary cooperation. If a document, database or communication is protected, the fact that a client wants it does not create a right to obtain it.
| Activity | General position | Important qualification |
|---|---|---|
| Public-place surveillance | Can be lawful | Purpose, persistence, privacy, data protection and harassment risks still matter |
| Photography/video | Can be lawful | Context and use of identifiable images matter; private spaces require greater caution |
| Tracing people | Can be lawful | There must be a legitimate purpose and address disclosure may be unsafe or inappropriate |
| Public-record research | Can be lawful | Records still need accurate interpretation and proportionate use |
| Corporate due diligence | Can be lawful | Personal-data rules still apply to directors, employees and beneficial owners |
| Hacking private accounts | Not a legitimate PI method | Unauthorised access can be an offence under the Computer Misuse Act 1990 |
| Intercepting communications | No general private power | Unlawful interception can be an offence under the Investigatory Powers Act 2016 |
| Secret vehicle tracking | Fact-sensitive | Ownership, installation, personal data, purpose, harassment and property issues can all matter |
Is the UK Private Investigation Industry Licensed by the SIA?
As of September 2026, private investigation itself is not listed among the Security Industry Authority’s current licensable activities. The SIA’s current licensing guidance covers activities such as security guarding, close protection, door supervision, public-space CCTV, key holding and cash-and-valuables-in-transit work. That means clients should not be misled by a claim that an investigator holds a special SIA “private investigator licence”.
Some investigators may separately hold SIA licences for security work they also perform, but that is different from a statutory licence to conduct private investigations. Professional standards therefore need to be assessed through experience, insurance, data-protection compliance, clear terms, lawful methods, sector standards and credible professional memberships.
Data protection is a central part of legitimate investigation work
The ICO approved the Association of British Investigators UK GDPR Code of Conduct for Investigative and Litigation Support Services in October 2024. The code addresses lawful basis, controller/processor roles, legitimate-interests assessments, DPIAs and tracing-related disclosure. It is an important example of the level of data-protection discipline expected in professional investigative work.
Can Private Investigators Follow Someone?
Targeted surveillance can be lawful where there is a legitimate purpose and the activity is necessary and proportionate. Our surveillance services may document public movements, meetings, routines and events relevant to a defined investigation.
However, “they were in public” is not a complete legal test. Repeated monitoring can still process personal data, intrude into private life or contribute to a course of conduct that becomes harassment or stalking. The safest professional approach is to define the objective before surveillance starts, minimise unrelated third-party information and stop when the question is answered or continued monitoring is no longer justified.
Can Investigators Take Photographs and Video?
Photographs and video can be valuable evidence when they objectively record an event visible from a lawful position. But identifiable images are capable of being personal information, and the context of recording matters. A picture of someone entering a publicly visible premises is different from attempting to record activity inside a private home.
Professional reporting should also separate what an image proves from what the client believes it means. A photograph may establish presence, time and company; it may not establish what was discussed or why the meeting occurred.
Can a Private Investigator Trace Someone?
Yes, tracing is a legitimate investigative service when there is an appropriate reason for the search. Examples can include locating a witness, debtor, beneficiary, missing family member, former tenant, litigation party or person connected to a commercial matter.
Locating someone does not always mean disclosing their residential address. In safeguarding, domestic-abuse, stalking or estrangement cases, direct address disclosure may create an unacceptable risk. A professional trace may instead confirm that a person has been located, use an intermediary approach or refer the client to police or legal routes where appropriate.
Can Investigators Carry Out Background Checks?
Lawful background research can draw on Companies House, insolvency information, public professional registers, court or regulatory material that is lawfully accessible, open-source information and other legitimate data sources. In business cases, our business investigations can help test identity, ownership, trading history, conflicts, reputation and connections.
That does not give a private investigator a general right to criminal records, credit files, NHS information, tax records or police intelligence. Some regulated checks, such as DBS disclosures, have their own eligibility and application rules.
Can Investigators Access Private Phone, Email or Social-Media Accounts?
No legitimate investigator should offer unauthorised access to a private account. Section 1 of the Computer Misuse Act 1990 makes unauthorised access to computer material an offence where the statutory elements are met. Stolen passwords, spyware, credential stuffing and bypassing account security are not acceptable investigative shortcuts.
Investigators can, however, analyse genuinely public online material and information lawfully supplied by a client. The key question is not whether information would be useful, but whether it can be obtained and processed lawfully.
Can Private Investigators Intercept Calls or Messages?
Private investigators have no general authority to intercept live communications. The Investigatory Powers Act 2016 contains an offence of unlawful interception where a person intentionally intercepts a communication in transmission without lawful authority.
This is different from reviewing a message that a client lawfully received, preserving a screenshot supplied by a witness, or examining a device where the owner has provided valid authority and the work is otherwise lawful. The provenance of digital evidence matters.
A client’s suspicion does not create investigative powers
A spouse, employer, creditor or business owner may have a strong reason to want answers. That does not allow an investigator to pretend to be someone else to defeat account security, obtain bank data by deception, install spyware, intercept communications or enter private property without authority.
Can a Private Investigator Record Conversations?
There is no single rule that makes every recording lawful or unlawful. The analysis depends on who is recording, whether they are part of the conversation, the purpose, the setting, what is done with the recording and whether interception or data-protection rules are engaged.
For a private investigation agency, the practical rule is simple: we do not assume that covert audio is permissible merely because it would be evidentially useful. Third-party interception, recording in private spaces and recording sensitive discussions can create serious legal and ethical problems.
Can Investigators Use GPS Vehicle Trackers?
GPS tracking is one of the most misunderstood areas of private investigation. There is no safe blanket statement that secretly fitting a tracker to any vehicle is lawful simply because the vehicle is visible in public or because a client has some connection to it.
Location data can be personal data under UK GDPR. Installing and using a device can also raise issues involving ownership and control of the vehicle, property rights, privacy, data protection, harassment or stalking, and the manner in which the device is fitted. Professional investigators should assess those factors before any tracking technology is considered.
Can Private Investigators Gather Evidence for Court?
Yes. Investigators can support solicitors and clients by locating witnesses, preserving public-source evidence, preparing factual surveillance logs, tracing parties, documenting relevant events and producing structured reports. Our legal and litigation support is designed around the evidential question the legal team actually needs answered.
But an investigator cannot promise that evidence will automatically be admitted or given a particular weight. Courts control evidence under the applicable procedural rules. Accuracy, provenance, relevance and lawful acquisition all matter.
Can Investigators Interview Witnesses?
Yes, where a witness is approached lawfully and participation is voluntary. An investigator can ask questions, record an account and help establish a chronology. They cannot compel a private individual to answer questions simply because the client wants a statement.
In sensitive or litigated cases, witness contact should be coordinated with the instructing solicitor so that evidence is handled consistently with the case strategy.
What About Workplace and Employee Investigations?
Businesses can investigate suspected theft, fraud, misconduct, conflicts, false sickness claims, data theft or supplier collusion. However, the employer remains responsible for employment-law and data-protection decisions. Covert worker monitoring is not something to use routinely.
The ICO’s worker-monitoring guidance expects monitoring to be necessary, proportionate, transparent where appropriate and supported by a lawful basis. Covert monitoring is exceptional and should be narrowly targeted and time-limited.
What Private Investigators Cannot Lawfully Promise
Red flags when choosing an investigator
- “We can access anyone’s bank account.”
- “We can hack WhatsApp, email or social media.”
- “We can obtain police or NHS records through contacts.”
- “We can track any vehicle anywhere with no legal issue.”
- “We can impersonate officials to force information.”
- “We can guarantee the evidence will win your court case.”
- “UK GDPR does not apply because we are investigators.”
How We Decide Whether an Investigation Is Lawful and Proportionate
1. Verify the client and purpose
We establish who is instructing us, what they want to know and why the information is needed.
2. Identify the information required
We separate necessary evidence from material that would merely be interesting or speculative.
3. Choose the least intrusive effective method
Public-source research, tracing, interviews or targeted surveillance are considered according to the objective.
4. Record legal and data-protection considerations
Where personal information is processed, we consider lawful basis, necessity, balancing, retention, security and disclosure.
5. Stop when the objective is met
Professional investigation has defined limits. More data is not automatically better evidence.
Publicly Available Does Not Mean “Use It for Anything”
A recurring mistake in private investigation is to assume that information stops being protected once it appears online or in a public register. Public availability can make information lawfully accessible, but the investigator still needs to consider why it is being collected, whether it is accurate, how much is necessary and what will be done with it. A public Companies House record, social-media post or professional-register entry can be a legitimate lead without justifying an unlimited profile of the individual’s private life.
This matters particularly when information is combined. Several ordinary public facts can create a much more intrusive picture when they are linked together into a chronology of relationships, addresses, travel or finances. Professional investigators should be able to explain the purpose of that correlation and remove irrelevant material rather than retaining it simply because it was technically obtainable.
Criminal-Offence Information Needs Extra Care
Allegations, convictions and other criminal-offence information are not ordinary background-check data. UK data-protection law places additional controls around processing criminal-offence data. A private investigator should therefore avoid presenting unverified allegations as fact, scraping indiscriminate “criminal history” claims from the internet or implying access to official records that are not lawfully available.
Where a case genuinely requires criminal-history information, the correct route may involve a regulated disclosure process, a solicitor, the police or another authority rather than a private database search.
Professional investigation is about lawful access, not secret powers
The strongest investigator is not the person claiming they can obtain anything. It is the professional who can explain what is lawfully obtainable, what is not, why a method is proportionate and how the resulting evidence can be verified.
Need to know what can lawfully be investigated?
We can assess the objective, explain realistic options and identify the safest evidence-led route. Book a confidential consultation.
Sources and References
- Security Industry Authority / GOV.UK — Find out if you need an SIA licence, updated 29 January 2026.
- Security Industry Authority / GOV.UK — Current SIA licensable activities and Get Licensed guidance, 2026.
- Information Commissioner’s Office — Legitimate interests guidance, updated 23 March 2026.
- Information Commissioner’s Office — Association of British Investigators UK GDPR Code of Conduct for Investigative & Litigation Support Services.
- Information Commissioner’s Office — Data protection and monitoring workers.
- Computer Misuse Act 1990.
- Investigatory Powers Act 2016, including section 3 on unlawful interception.
- Protection from Harassment Act 1997.
- UK GDPR and Data Protection Act 2018.