GCHQ (Government Communications Headquarters) is one of the UK's three main intelligence and security agencies, alongside MI5 (the Security Service) and MI6 (the Secret Intelligence Service). It reports to the Foreign Secretary and is responsible for signals intelligence (SIGINT) — the interception, collection, and analysis of electronic communications — and for information assurance and cybersecurity functions that protect UK government and critical national infrastructure systems.
GCHQ traces its origins to the Government Code and Cypher School (GC&CS), established in 1919, which during the Second World War operated from Bletchley Park and broke the German Enigma and Lorenz cipher systems. It was renamed GCHQ in 1946 and moved to Cheltenham in the early 1950s, where it occupies the distinctive ring-shaped building known as "the Doughnut," opened in 2003.
Its statutory basis is the Intelligence Services Act 1994, which placed GCHQ on a formal legal footing for the first time. Its interception and bulk data powers are now primarily governed by the Investigatory Powers Act 2016, overseen by the Investigatory Powers Commissioner and the Investigatory Powers Tribunal.
GCHQ is a core member of the Five Eyes intelligence-sharing arrangement with the US National Security Agency (NSA), Australia's ASD, Canada's CSE, and New Zealand's GCSB, a partnership rooted in the post-war UKUSA Agreement.
In 2016 GCHQ established the National Cyber Security Centre (NCSC) as its public-facing cybersecurity arm, providing incident response, threat advisories, and guidance to government, industry, and the public. GCHQ was thrust into international debate in 2013 when documents leaked by former NSA contractor Edward Snowden disclosed programmes such as Tempora, prompting legal challenges and reforms to UK surveillance law.
Example
In 2017, GCHQ's National Cyber Security Centre publicly attributed the WannaCry ransomware attack on the NHS to actors associated with North Korea.
Frequently asked questions
GCHQ reports to the UK Foreign Secretary and is led by a Director, while operating under oversight from the Intelligence and Security Committee of Parliament and the Investigatory Powers Commissioner.
Keep learning