Last reviewed: Next review due:
Schedule 7: what you need to know
Schedule 7 of the Terrorism Act 2000 gives border officials powers that have no equivalent in ordinary policing: they can stop anyone at a UK port or airport without any suspicion of wrongdoing. They can question you for up to six hours, take your biometrics, copy or seize your devices, and require you to provide passwords. Journalists — including high-profile reporters at major UK outlets — have been stopped under Schedule 7.
There are legal protections for journalistic material under PACE s.9 and the Crime and Disorder Act, and officers are supposed to consider these before accessing devices. In practice, awareness of these protections varies significantly among border staff. The safest approach, if you are covering beats that raise Schedule 7 risk, is a clean device.
When a clean device strategy applies
- 1You are travelling to or from countries with adversarial intelligence services.
- 2You are covering stories involving terrorism, national security, intelligence agencies, or organised crime.
- 3Your phone or laptop contains source contact details or unpublished investigation materials.
- 4You have been stopped under Schedule 7 before, or your newsroom has been served with a production order.
- 5You are about to make initial contact with a sensitive source and want your device clean in advance.
Clean device strategy: how to implement it
- 1
Before travel: back up your primary phone/laptop to an encrypted drive at home. Do not take the backup with you.
- 2
Use a minimal secondary device — either a cheap secondary phone or a travel laptop reset to factory settings. Install only what you need for the trip.
- 3
Do not pre-load source contacts, investigation notes, or Signal conversations onto the travel device.
- 4
After crossing the border: connect via VPN, then access what you need through secure cloud services or OnionShare.
- 5
On return: leave the travel device clean for the crossing home. Restore your primary device from your encrypted backup after you are safely through.
Red flags
- Travelling with your primary device containing all source contacts and investigation notes.
- Biometrics enabled on your phone — a border officer can press your finger to the sensor.
- Device in sleep mode rather than powered off — encryption may not be fully engaged.
- Sensitive data stored in cloud services accessible from any device — a seized device could be used to access cloud data.
- Not knowing the NUJ legal helpline number before travelling.
Pre-travel security checklist
- I have assessed my threat model for this trip and decided whether a clean device is warranted.
- If using a clean device: it is factory reset or minimal, and contains no source information.
- My primary device is powered off (not sleeping) when I cross the border.
- Biometrics are disabled on my travel device if I am in a high-risk situation.
- I have the NUJ legal helpline number saved somewhere accessible (not only on my phone).
- I have notified my editor that I may be stopped at the border, and they know to contact the NUJ if I am.
- Any sensitive cloud storage is logged out on my travel device.
Source protection tools
Review your source protection posture before any high-risk trip.
Source Protection ChecklistCommon mistakes
- Assuming Schedule 7 only applies to suspects — it applies to anyone at a UK port or airport.
- Travelling with a primary device that contains source information because "I won't be stopped."
- Not having a plan for what to do if stopped — decide in advance, not under stress at the border.
- Forgetting that cloud data can be accessed from a seized device if you remain logged in.
- Not briefing sources that you are travelling and that your device may be examined.
Related guides
Primary sources
Frequently asked questions
What is Schedule 7 of the Terrorism Act 2000?
Can I refuse to unlock my phone if stopped under Schedule 7?
What is a "clean device" and should I use one?
What should I do if my device is seized at the border?
Related guides
Primary sources
- Terrorism Act 2000, Schedule 7— legislation.gov.uk
- Schedule 7 Code of Practice— Home Office / gov.uk
- Investigatory Powers Act 2016— legislation.gov.uk
- Defending Privacy at the Border— Electronic Frontier Foundation
- Journalist Security Guide— Committee to Protect Journalists
- Journalist Safety Resources— Reporters Without Borders
- Tails OS — Amnesic Live System for Travel— Tails Project