> Under [the new Investigatory Powers Act], the state now also has access to every person’s internet use – every website visited or app used – which service providers must generate and store for 12 months.

"App used"? How? I understand that "website visited" is clearly 'public' even if not recorded by ISPs for the state, but I don't understand how, technically, "app used" is known - unless it means "web application visited", which is of course exactly the same as "website visited".

I saw a very interesting hearing when the Bill was still at committee stage, discussing concerns raised by small and community-run ISPs that although they of course have every intention of complying with the law, it's so non-technical and under-specified that it's not at all clear to them what they need to actually do: precisely what to record, how to store it, what guarantees they need to be able to make (e.g. are they liable if data is corrupted? If they're hacked?) etc.