Ali Zuweid's Political Programme · Legislative Proposal · Security, Defence and Sovereignty
Security and Intelligence Services Oversight, Accountability and Intelligence Community Coordination Bill
A legislative framework unifying oversight, accountability and coordination rules across Iraq's security and intelligence institutions, placing the National Intelligence Council on a statutory basis and ensuring operational effectiveness without turning secrecy into an oversight vacuum.
Executive Summary
The proposal responds to a direct constitutional requirement: security and intelligence services must operate under civilian leadership, in accordance with the law and human rights principles, and under Council of Representatives oversight. Separate founding laws for each service are insufficient to build a common oversight system or address overlapping functions, information sharing, classified spending and responsibility for failures crossing institutional boundaries.
The proposal neither merges the services into a single agency nor creates a new intelligence service. It instead places the existing National Intelligence Council on a statutory footing as a coordination platform, establishes binding general rules for the intelligence community and creates specialized parliamentary oversight with technical support, while preserving the original jurisdictions of the judiciary, Federal Board of Supreme Audit and Federal Commission of Integrity. It also prohibits surveillance or detention powers being granted by secret orders and establishes common safeguards for data, human sources, foreign cooperation and reporting wrongdoing.
I — Constitutional and Legal Context
The Constitution provides a clear basis for civilian and legislative oversight. Article (9/First/D) defines the National Intelligence Service's functions as gathering information, assessing threats and advising the Government, and subjects it to civilian control, legislative oversight, the law and human rights principles. Article (84) also requires the security services and intelligence service to be regulated by law and subject to Council of Representatives oversight.
Recent years have seen steps to place the services themselves on a statutory footing: the Council of Representatives voted on the Iraqi National Security Service Law on 9 May 2024, and the President of the Republic ratified it on 12 June 2024. The Council of Representatives also voted on the National Intelligence Service Law on 19 January 2025. Meanwhile, the National Intelligence Council continues to meet under the chairmanship of the National Security Adviser, attended by intelligence community leaders. The implementation plan for the “Iraq First” National Security Strategy 2025–2030 links intelligence sector reform to central monitoring and the Council's Secretariat.
II — Legislative Gap and Proposed Policy
| Issue | Problem | Legislative Response |
|---|---|---|
| Multiplicity of services | Potential overlap in files and data and duplication of capabilities | Register of mandates, responsibility matrix and statutory coordination council |
| Parliamentary oversight | Need for specialized, secure access to classified information | Permanent subcommittee, technical support office, closed hearings and annual reports |
| Secrecy | Classification may become a barrier to accountability | The rule that secrecy protects information but does not remove judicial, parliamentary or financial oversight |
| Data and surveillance | Different controls among bodies and the possibility of unchecked expansion | Legality, necessity, proportionality, purpose limitation, audit trails and prohibition of secret surveillance powers |
| Foreign cooperation | Risks of onward sharing of data or circumvention of domestic law | Register of arrangements, risk assessment and prohibition on requesting actions the body cannot lawfully undertake within Iraq |
| Shared failures | Difficulty attributing responsibility when information crosses several institutions | Post-incident review, a duty to share and documentation of decisions and dissenting views |
The proposed policy is a model of multilayered oversight: executive leadership and regulation, internal compliance, specialized parliamentary oversight, judicial oversight of rights and procedures, financial and integrity oversight, and public reporting insofar as security is not harmed. This model is more suitable than creating a new commission with broad powers, because it uses existing constitutional and statutory institutions and adds the tools they lack.
III — Text of the Bill
In the name of the people
Presidency of the Republic
On the basis of approval by the Council of Representatives and ratification by the President of the Republic, and pursuant to the relevant provisions of the Constitution of the Republic of Iraq of 2005, the following Law is issued:
Security and Intelligence Services Oversight, Accountability and Intelligence Community Coordination Law
Chapter One — General Provisions
Article (1) — Definitions
For the purposes of this Law, the following terms shall have the meanings assigned to them: Intelligence Community: federal bodies granted an original mandate by the Constitution or law to collect or analyse security or intelligence information, produce assessments or conduct intelligence activity. Council: the National Intelligence Council. Secretariat: the National Intelligence Council Secretariat within the National Security Advisory. Committee: the Parliamentary Security and Intelligence Oversight Committee established by this Law. Intelligence Information: information collected or processed for national security, defence, counter-espionage, counter-terrorism, organized crime or strategic threats. Special Activity: a collection, surveillance, infiltration or human or technical source operation affecting a person's privacy, communications or data beyond publicly available sources. Serious Incident: a legal, security or financial violation potentially materially affecting a fundamental right, State sovereignty, source safety, institutional integrity or public funds.
Article (2) — Objectives of the Law
This Law aims to establish a unified federal framework ensuring: subjection of security and intelligence services to civilian leadership and legislative, judicial and financial oversight; clear mandates and prevention of unjustified overlap; coordination of national priorities and information sharing; protection of rights and freedoms; confidentiality of lawful sources and operations; prevention of politicization and partisan misuse; and accountability for violations without weakening responsiveness to threats.
Article (3) — Scope
This Law shall apply to the Iraqi National Intelligence Service, Iraqi National Security Service, intelligence formations of the Ministries of Defence and Interior, the intelligence activities of the Counter-Terrorism Service and Popular Mobilization Authority within their statutory mandates, and any other federal body conducting intelligence activity under a legal provision. Inclusion in the intelligence community shall neither expand a body's substantive mandate nor confer powers of arrest, search or surveillance not expressly granted by law.
Article (4) — Governing principles
Covered bodies shall comply with legality, necessity, proportionality, purpose limitation, minimum intrusion, professionalism, political neutrality, accountability, protection of human dignity and functional separation between intelligence gathering and law enforcement. National security shall not be interpreted to permit restrictions on rights or freedoms beyond constitutional and statutory limits.
Article (5) — Primacy of Common Safeguards
This Law's provisions on oversight, accountability, protection of rights, information sharing and secret expenditure shall constitute common safeguards applicable to all covered bodies and shall be read together with each service's governing law. In case of conflict, the provision more protective of rights and clearer in defining jurisdiction shall apply unless an express subsequent provision establishes a special arrangement consistent with the Constitution.
Article (6) — Prohibition of Secret Mandates
No permanent intelligence service or unit may be established, powers of compulsory collection or covert surveillance granted, or secret operating budget approved outside legal frameworks solely through an administrative order or secret directive. Every permanent mandate affecting rights or creating public authority shall be based on a published law.
Article (7) — Political Neutrality
No covered body may collect information on a person, group, party, candidate, journalist, trade unionist or civil society organization merely for lawful political, media, religious, trade union or peaceful protest activity. State intelligence capabilities shall not be used for the benefit of a party, coalition, candidate or official, or to influence elections or the transfer of power.
Article (8) — Secrecy Is Not Immunity
Classified information shall be protected to the extent necessary for security. Classification shall not conceal illegality, corruption or abuse of authority or avoid institutional embarrassment. It shall not prevent access by legally authorized oversight and judicial bodies under prescribed protective procedures.
Chapter Two — The Intelligence Community and Allocation of Mandates
Article (9) — Federal Intelligence Community
The intelligence community shall operate as an interconnected federal system, not a single service. Each body shall retain its identity, reporting authority, mandate and budget under its own law, while complying with this Law's common coordination and oversight rules.
Article (10) — National Register of Mandates
The Secretariat, in coordination with covered bodies, shall prepare a classified register of mandates and capabilities, recording each body's legal basis, collection and analysis fields, territorial and substantive limits, contact points, types of data administered and potential overlaps. The register shall be reviewed annually and presented to the Prime Minister and Committee in a closed session.
Article (11) — Responsibility Allocation Matrix
Within six months of this Law's entry into force, the Council shall issue a responsibility allocation matrix by threat type and intelligence-cycle stage, without altering statutory mandates. Where mandates overlap, a lead service and supporting bodies shall be designated, with responsibility specified for producing assessments, sharing data and operational response.
Article (12) — Avoiding Institutional Duplication
No new unit shall be established for a task efficiently performed by an existing body without a written assessment of need, alternatives and cost and approval by the competent authority. Similar formations shall be reviewed every two years to assess duplication and gaps and reallocate resources within legal limits.
Article (13) — Separation of Intelligence and Law Enforcement
Intelligence status alone shall confer no power of arrest, detention, search or compulsory questioning. Where intelligence reveals a suspected offence, it shall be duly referred to the competent body and judiciary and converted into evidence admissible in court through a chain of custody and lawful procedures.
Article (14) — Military Jurisdiction
Ministry of Defence intelligence activities shall focus on military and defence threats and the security of forces, facilities and military operations, with coordination on shared matters. Military intelligence shall not investigate lawful civilian activity or enforce general law except under a statutory provision and clear judicial jurisdiction.
Article (15) — Coordination with the Kurdistan Region and Governorates
Information exchange and coordination between federal bodies and competent bodies in the Kurdistan Region shall be governed by institutional memoranda respecting the constitutional allocation of powers and including data protection and rules on sources and use. Joint contact points may be established for threats crossing administrative boundaries without creating a chain of command not constitutionally provided for.
Article (16) — Temporary Entities and Task Forces
The Council may form joint intelligence task forces for a specified subject and period. The establishing decision shall state the lead body, mission, duration, resources and information-sharing and oversight rules. The mission shall expire at the end of its term unless renewed by reasoned decision.
Chapter Three — National Intelligence Council
Article (17) — National Intelligence Council
The existing National Intelligence Council shall be recognized as the supreme federal framework for professional coordination among intelligence community institutions. It shall have no independent powers of arrest, detention or surveillance and shall not replace member bodies' statutory reporting authorities.
Article (18) — Chairmanship of the Council
The National Security Adviser shall chair the Council. The Prime Minister may chair its meetings whenever necessary. The Council's work shall be subject to the general directives of the Council of Ministers and Commander-in-Chief of the Armed Forces within constitutional and legal limits.
Article (19) — Council Membership
The Council shall comprise heads of federal bodies with an original intelligence mandate or their lawful representatives. Its rules of procedure shall specify permanent membership and observers. No body shall be added as a permanent member merely because it possesses data or performs supporting security functions.
Article (20) — Council Secretariat
The National Intelligence Council Secretariat within the National Security Advisory shall prepare meetings, follow up decisions, maintain the mandates register, formulate national priorities, compile joint assessments and manage coordination indicators. It shall not independently conduct covert collection unless authorized by a special law.
Article (21) — Powers of the Council
The Council shall approve national intelligence priorities; adopt common intelligence requirements; resolve mandate conflicts; approve information-sharing standards; review strategic threats; coordinate intelligence responses to crises; approve joint capability-building plans; and monitor compliance with its decisions without interfering with judicial independence or parliamentary oversight.
Article (22) — Decision-Making Rules
Council decisions shall be taken by consensus wherever possible and otherwise by majority, with dissenting views recorded in the minutes. Disputes involving a statutory mandate or constitutional effect shall be referred to the Prime Minister and competent legal body, and shall not be resolved by a coordination decision contrary to law.
Article (23) — Council Meetings
The Council shall hold an ordinary meeting at least once every two months and may be convened exceptionally in the event of a serious threat or crisis. Decisions shall be documented in a classified register identifying responsibility, deadline and implementation indicator, without recording source details unnecessary for follow-up.
Article (24) — Annual Intelligence Community Assessment
The Council shall annually adopt an institutional assessment of overlap, gaps, analysis quality, coordination, speed of information exchange, legal compliance and data protection. A classified summary shall be sent to the Prime Minister and Committee. A public summary revealing no capabilities or sources may be published.
Article (25) — Post-Crisis and Failure Review
Following a serious intelligence failure or strategic security incident, the Council shall commission a joint review team to identify institutional causes without substituting for the judiciary in determining criminal responsibility. Any suspected offence or corruption shall be referred to the competent body, and institutional findings presented to the Committee.
Chapter Four — Priorities, Analysis and Information Sharing
Article (26) — National Intelligence Priorities
The Council shall prepare draft national intelligence priorities annually based on the national security strategy, defence policy and current threats, for approval by the Prime Minister. Priorities shall identify outcomes to be understood, not names of individuals or political opponents, and shall be reviewed when the security environment changes.
Article (27) — National Threat Assessment
With contributions from all bodies, the Secretariat shall issue a periodic national threat assessment distinguishing facts, assessments, confidence levels and scenarios. Material dissenting analytical views shall be included. Professional differences shall not be removed to manufacture consensus.
Article (28) — Independence of Analysis
Directing an analyst towards a predetermined political conclusion or altering an assessment to satisfy an authority or entity shall be prohibited. Every analyst or unit shall have the right to record a professional objection through a secure institutional channel. Good-faith analytical disagreement shall not constitute a disciplinary violation.
Article (29) — Right and Duty to Share
The “need to know” principle shall protect sources while being paired with a duty to share information necessary to prevent a serious threat or perform a lawful task. Shared information shall not be withheld for institutional rivalry or functional monopoly.
Article (30) — Secure Exchange Platform
The Government shall adopt a secure federal platform or interoperability gateways for intelligence data exchange, with graduated access permissions, automated logging of every access, copy, modification or transmission, and controls preventing unauthorized bulk extraction.
Article (31) — Data Quality
A body creating personal information shall, wherever possible, identify its source, reliability, date and use restrictions. Proven errors shall be corrected, and corrections communicated to recipient bodies where the error could affect a decision concerning a person.
Article (32) — Data Minimization
No more personal data shall be collected or retained than necessary for a specified lawful purpose. Retention schedules shall reflect data type and verification level. Unconfirmed data shall be periodically reviewed and shall not be retained indefinitely merely because storage is easy.
Article (33) — Early Warning
The Council shall organize an early-warning mechanism for strategic threats connecting relevant military, security, cyber, economic and border assessments. Each warning shall have a confidence level, responsible follow-up officer and decision-escalation path, without turning the mechanism into a new collection service.
Article (34) — Information Continuity in Crises
Plans shall ensure continuity of communications, data preservation and inter-institutional exchange during war, emergencies or cyberattacks, with operational alternatives and periodic tests. Exceptional circumstances shall not suspend documentation and accountability rules beyond what the law permits.
Chapter Five — Legality, Rights and Special Methods
Article (35) — Legal Basis for Special Activity
No body may use special collection or surveillance methods affecting the inviolability of homes or confidentiality of communications, data or location without an express statutory mandate and judicial authorization where required by the Constitution or law. This Law shall not itself create any new surveillance power.
Article (36) — Necessity and Proportionality
Special activity shall require a specific lawful security purpose and documentable factual grounds. The method must be appropriate, with no less intrusive means reasonably capable of achieving the purpose, and its duration and scope shall be no greater than necessary.
Article (37) — Applications and Authorizations
An application for a special measure shall specify the requesting body, legal basis, purpose, targeted person or facility insofar as possible, method, duration, data sought and measures to minimize collection of non-targets' data. Applications and authorizations shall be retained in an auditable register.
Article (38) — Urgent Cases
Where a law in force permits urgent action before judicial authorization is completed, the exception shall be confined to imminent danger that cannot await delay. Urgency shall be documented and the measure submitted to the competent judicial body within the period specified by that law. It shall cease immediately if ratification is refused.
Article (39) — Protected Categories and Relationships
Protection shall be afforded to professional correspondence, journalistic sources, lawyer-client relationships and medical data. These may be targeted only on a specific legal basis concerning a serious offence or threat and under express judicial authorization stating why overriding protection is necessary, with procedures minimizing access to irrelevant material.
Article (40) — Prohibition of Secret Detention and Coercion
No intelligence body may establish an undisclosed detention facility, detain anyone outside official records, or use torture, coercion, cruel treatment or enforced disappearance. A lawfully arrested person shall be transferred to the competent body and place, and trial and criminal procedure safeguards shall apply.
Article (41) — Human Sources
Each service shall regulate the handling of human sources through approved classified instructions covering registration, risk assessment, source protection, payment controls, prevention of incitement to crime and multilayered supervision. Being a source shall not exempt a person from accountability for an offence except as provided by law.
Article (42) — Covert Operations
No covert operation involving physical entry, impersonation of a public official, financial dealings or technical intrusion shall be conducted except within a statutory mandate and an approved plan specifying purpose, duration, risks and limits of permitted conduct. Operations involving acts that would constitute offences without authorization shall require an express statutory provision and special authorization procedures.
Article (43) — Aggregated Data and Automated Analysis
Large databases or automated analytical tools shall not be used to produce decisions affecting liberty or rights solely on the basis of an unexplainable prediction. Model quality, data sources, bias and security shall be tested, and decisions with substantial effects shall remain under reviewable human responsibility.
Article (44) — Foreign Information
A coercive measure against a person shall not rest solely on foreign information of unknown origin or incapable of evaluation. The receiving body shall assess reliability and use restrictions and seek independent verification before making it the basis of judicial action.
Article (45) — Prohibition of Circumventing the Law
An Iraqi body shall not request a foreign partner to collect information about a person or take an action that would be unlawful if performed by the Iraqi body. Nor may it use information obtained through torture or prohibited treatment where it knows this or has serious grounds to believe it.
Chapter Six — Internal Oversight and Compliance
Article (46) — Internal Compliance System
Each service shall establish or designate within its structure a legal and compliance unit functionally independent of collection and operations units and reporting directly to the head of the body. It shall review the legality of policies, authorizations and high-risk activities and have access to necessary records without disrupting operational work.
Article (47) — Responsibility of the Head of the Body
Each head shall be responsible for written standing orders, segregation of powers, prevention of conflicts of interest, training, administrative investigation of violations and reporting of serious incidents. Oral orders shall not exempt anyone from subsequent documentation or responsibility.
Article (48) — Reporting Serious Incidents
The compliance unit shall immediately notify the head of any serious incident. Where it involves a suspected offence or serious violation of a constitutional right, it shall be referred without delay to the Public Prosecution or competent judiciary. The Prime Minister and Committee shall receive a classified summary protecting the investigation and sources.
Article (49) — Protected Disclosure of Wrongdoing
Personnel who believe in good faith that a serious violation has occurred may report through the internal chain, compliance unit, judiciary, Federal Commission of Integrity, Federal Board of Supreme Audit or Committee, according to jurisdiction. Retaliation for lawful disclosure shall be prohibited. Protection shall not extend to unauthorized public disclosure of classified information.
Article (50) — Register of Sensitive Decisions
Each body shall maintain a protected register of decisions authorizing special activity, foreign operational cooperation, exceptional secret expenditure or extensive data sharing. It shall record the legal basis, decision-maker, duration and outcome of subsequent review, separating material as necessary to protect sources.
Article (51) — Periodic Internal Review
The compliance unit shall conduct periodic sample audits of collection, surveillance, data-sharing, human-source and secret-expenditure files and issue recommendations with implementation deadlines. The head shall submit an annual follow-up report to the competent executive authority and Committee, including a classified section.
Article (52) — Code of Conduct
The Council shall adopt a common professional code for the intelligence community covering political neutrality, integrity, conflicts of interest, handling of sources, data protection, media relations, gifts and outside interests, and the duty to refuse unlawful orders. Each service's own rules shall supplement it according to its nature.
Chapter Seven — Parliamentary Oversight
Article (53) — Specialized Parliamentary Oversight
Within the Security and Defence Committee, the Council of Representatives shall establish a permanent subcommittee called the “Security and Intelligence Oversight Committee”. It shall exercise specialized oversight of covered bodies' policy, administration, expenditure and legal compliance under the Council's rules of procedure and this Law.
Article (54) — Composition of the Committee
The subcommittee shall have a limited membership ensuring proportional representation of parliamentary blocs without domination by any single entity. No member shall hold executive office. Members shall elect a chair and deputy and undertake a special commitment to protect classified information in accordance with the law.
Article (55) — Powers of the Parliamentary Committee
The Committee may examine laws, policies, strategies, budgets, structures and appointments requiring Council of Representatives approval under the Constitution, and review compliance, expenditure, coordination and serious failures. It shall not direct an ongoing operation, select an intelligence target or handle a source.
Article (56) — Right to Obtain Information
Bodies shall provide the Committee with information and documents necessary for its work. Classification alone shall not justify refusal. A source's identity, technical method or details of an ongoing operation may be protected by narrowing access or presenting them in a more restricted session, provided oversight is not deprived of substance.
Article (57) — Facilities and Oversight Visits
Under prior security arrangements that do not compromise an ongoing operation, the Committee may visit headquarters, facilities, data storage and training centres; inspect non-operational records and compliance and detention files where detention falls within a lawful mandate; and interview responsible officials.
Article (58) — Closed Hearings
The Committee shall hold closed hearings with service heads and compliance and finance officials as needed. Classified minutes shall be kept in a secure system within the Council of Representatives. Copies shall not be provided to outside bodies except in accordance with the law.
Article (59) — Technical Support Office
A small technical office shall be established in the Council of Representatives' Secretariat-General to support intelligence oversight, with legal, financial, technical and analytical expertise. Staff shall undergo impartial personnel-security procedures that give no body under oversight a political veto over appointments.
Article (60) — Annual Report to Parliament
The Committee shall submit an annual public report to the Council of Representatives covering general trends, oversight performance and recommendations without revealing operational secrets. A classified annex may be attached for persons authorized under the rules of procedure. Affected bodies shall have an opportunity to identify security risks before publication but no right to remove legitimate criticism.
Article (61) — Follow-Up of Recommendations
Covered bodies shall respond in writing to Committee recommendations within ninety days, stating acceptance and an implementation plan or reasons for rejection. The Committee shall monitor implementation in its next report. Its recommendations shall not substitute for judicial or executive powers.
Article (62) — Protection of Oversight Work
No intelligence file may be opened on a Committee member or office staff member because of lawful oversight work. No retaliatory action may be taken against a witness or member of personnel cooperating lawfully with the Committee. Genuine security suspicions shall remain subject to ordinary legal procedures with safeguards against conflicts of interest.
Chapter Eight — Judicial, Financial and Integrity Oversight
Article (63) — Judicial Oversight
Courts and the Public Prosecution shall exercise their full jurisdiction over covered bodies. Secrecy shall not prevent investigation of an alleged offence or violation. Courts may make arrangements to protect classified information and sensitive identities without compromising defence rights or a fair trial.
Article (64) — Review of Surveillance Measures
Judicial authorizations for surveillance, searches and collection of private data shall be subject to applicable procedural rules. The implementing body shall maintain records enabling the court to verify execution limits, duration, incidentally collected material and lawful destruction or retention.
Article (65) — Complaints and Remedies
Anyone alleging an unlawful measure by a covered body may seek recourse to the judiciary and competent national complaints and human rights bodies. A complaint shall not be rejected merely because its subject is classified. Confidential procedural arrangements shall allow examination without publication of information harmful to security.
Article (66) — Compensation and Liability
This Law shall not prejudice an injured person's right to compensation under general rules or an employee's criminal, disciplinary or civil liability where a violation is established. Executing a manifestly unlawful order shall not exempt a person from responsibility.
Article (67) — Financial Oversight
Intelligence expenditure, including classified spending, shall be subject to Federal Board of Supreme Audit oversight under special security arrangements. Establishment of accounts, funds or operational resources outside the budget or accounting systems permitted by law shall be prohibited.
Article (68) — Classified Budget
Classified appropriations shall be included in the general budget under headings permitting oversight by the Council of Representatives and Federal Board of Supreme Audit without publishing operational details. Classified schedules shall be provided to the Committee and Finance Committee showing main trends, capital expenditure and long-term commitments.
Article (69) — Integrity and Conflicts of Interest
Bribery, embezzlement, illicit enrichment and conflicts of interest within covered bodies shall fall under the Federal Commission of Integrity and judiciary's jurisdiction under the law. Special procedures shall protect operational identities without withholding financial records necessary for investigation.
Article (70) — Sensitive Procurement
Sensitive intelligence procurement shall follow procedures ensuring competition or justifying exceptions, separate requisition, approval, receipt and payment, and retain a complete audit file. Classifying a contract as secret shall not exempt it from financial oversight or integrity rules.
Chapter Nine — International Cooperation, Classification and Archiving
Article (71) — International Cooperation
Intelligence cooperation with States and organizations shall comply with Iraqi foreign policy, the law, reciprocity and national security interests. Cooperation agreements shall specify data types, purposes, limits on onward sharing, source-protection procedures and individuals' rights.
Article (72) — Register of Cooperation Arrangements
Each body shall maintain an updated register of foreign intelligence cooperation memoranda and arrangements. The Committee shall be informed of their general nature and resulting obligations in a classified session, without requiring disclosure of human-source identities or technical details unnecessary for oversight.
Article (73) — Risk Assessment for External Sharing
Before sharing personal data or information that could lead to detention, transfer or targeting, the body shall assess risks of misuse, torture, persecution or unlawful transfer and document necessary restrictions and reservations. Disclosure shall be prohibited where a clear risk of serious violation cannot be mitigated.
Article (74) — Onward Sharing
Information received from another service or foreign partner shall not be shared onward contrary to source restrictions. Where urgent necessity requires sharing to save a life, the decision shall be documented and the information owner notified as soon as possible under cooperation arrangements.
Article (75) — Classification and Reassessment
The Council shall adopt common information-classification levels and criteria identifying the originating body, review period and copying and transfer rights. Continued classification shall be periodically reviewed and removed or downgraded when the grounds for protection cease, subject to relevant laws.
Article (76) — Archiving and Institutional Memory
Intelligence records shall be archived to preserve what is necessary for accountability, institutional history and evidence without retaining personal data purposelessly. Selective destruction intended to prevent oversight or investigation or conceal a violation shall be prohibited.
Chapter Ten — Reporting, Implementation and Final Provisions
Article (77) — Public Reports
The Council shall publish an annual public report on the intelligence community covering threats at an unclassified level, reform priorities and coordination, training and compliance indicators, without revealing the scale of capabilities, source identities or operational details. Each body shall publish, according to its nature, an appropriate summary of its mission, safeguards and public complaints.
Article (78) — Compliance Indicators
Compliance indicators shall include at least: implementation of oversight recommendations; serious legal incidents; warning-sharing times; quality of data-access logs; retention reviews; rights and privacy training; financial audit findings; and complaint numbers and handling. Figures shall be presented in aggregate form protecting security and privacy.
Article (79) — Joint Training
The Council shall organize common curricula for leaders, analysts and liaison officers in constitutional law, human rights, analysis, source assessment, data protection, cybersecurity and inter-institutional coordination. Common curricula shall not replace each service's specialist training.
Article (80) — Common Technical Standards
Federal standards shall be adopted for information security, identity and access management, encryption, backup records, event logging and protection of inter-service communications. Systems shall be tested periodically against intrusion and data leakage, with incident-response and reporting plans.
Article (81) — Legislative Harmonization
Within one year of this Law's entry into force, the Government shall review laws, orders and regulations governing covered bodies and propose amendments necessary to remove conflicts and expressly define powers of surveillance, arrest, detention and international cooperation. This shall not suspend the applicable safeguards in this Law.
Article (82) — Transitional Provisions
Within ninety days, the Government shall identify all federal bodies and units conducting intelligence activity and deposit a classified list with the Committee. Within one hundred and eighty days, the Council shall adopt the mandates register and standards for exchange, classification and incident reporting. Bodies shall adapt their internal systems accordingly.
Article (83) — Regulations and Instructions
The Council of Ministers shall issue regulations necessary to implement this Law on the proposal of competent bodies. The Council shall issue common technical standards within legal limits. No regulation or instruction shall create an intrusive power, offence or penalty not prescribed by law.
Article (84) — Repeal and Entry into Force
Any provision of a regulation, instruction or administrative order conflicting with this Law shall be repealed. Special laws governing services shall remain in force insofar as consistent with it. This Law shall enter into force ninety days after publication in the Official Gazette.
IV — Statement of Reasons
To implement constitutional provisions subjecting security services and the intelligence service to civilian leadership, Council of Representatives oversight, the law and human rights principles; regulate coordination among federal intelligence bodies and prevent overlap and duplication; ensure secure information sharing; establish effective parliamentary, judicial and financial oversight of classified activities and expenditure; protect services' neutrality from politicization; and regulate international cooperation and protection of data and sources, this Law has been enacted.
V — Explanatory Memorandum
1. Why a Separate Framework Law?
A service's founding law defines its composition, head and duties but cannot alone regulate the shared spaces among all services. The greatest institutional risks arise at interfaces: who leads a shared case? Who holds the authoritative version of information? Who is responsible for failing to share? How does Parliament review spending distributed among multiple bodies? How is a service prevented from requesting information from a foreign partner in a manner circumventing Iraqi legal safeguards? The proposal therefore addresses the “system”, not the “service”.
2. Placing an Existing Council on a Statutory Basis Rather than Creating a New Institution
Current Iraqi practice already includes the National Intelligence Council and its Secretariat within the National Security Advisory. The proposal gives this framework a clear legal basis while preventing it from becoming a parallel collection service or operational command. Its functions are priority-setting, coordination, conflict resolution and joint assessment.
3. Parliamentary Oversight, Not Operational Management
Effective oversight requires access to classified information, but does not mean that Parliament selects targets or handles sources. The proposal therefore distinguishes executive tasking from legislative oversight: the Committee reviews law, policy, spending, compliance and failures, while operational management remains with the executive and services within their mandates.
4. Secrecy and Rights
Intelligence work requires genuine secrecy, but legality requires a reviewable audit trail. The proposal therefore establishes records of authorizations, sensitive decisions and data access, protects sources, prohibits secret detention, torture and partisan surveillance, and ties intrusions into privacy to a statutory mandate and judicial authorization where required by law.
5. Independence of Analysis
Politicized analysis and manufactured consensus are among the most dangerous forms of intelligence failure. The proposal therefore recognizes the right to record dissenting professional views and distinguishes facts, assessments and confidence levels, enabling political decisions to rest on a more truthful picture even amid uncertainty.
VI — Alignment with Existing Legislation and Institutions
| Reference / Institution | Relationship to the Bill |
|---|---|
| Constitution of the Republic of Iraq, 2005 | The constitutional source for civilian leadership, legislative oversight and operation of the intelligence service under the law and human rights principles. |
| Iraqi National Security Service Law | Remains the Service's founding law; POL-26 adds cross-cutting rules on oversight, coordination, data and shared expenditure. |
| National Intelligence Service Law | Remains the Service's founding law; the proposal does not alter its constitutional mission but defines its relationship to the oversight and coordination system. |
| Laws Governing the Ministries of Defence and Interior, Counter-Terrorism Service and Popular Mobilization Authority | Their original mandates remain in force; their intelligence activities are subject to this Law's common safeguards. |
| National Intelligence Council / National Security Advisory | Places the existing coordination arrangement on a statutory basis, defines its limits and prevents it from becoming an independent arrest or covert collection service. |
| Council of Representatives | Creates a specialized oversight channel within it to fulfil Article (84) while protecting classified information. |
| Supreme Judicial Council and Public Prosecution | Keeps judicial oversight, criminal investigations and authorizations within existing judicial institutions. |
| Federal Board of Supreme Audit and Federal Commission of Integrity | Creates no substitute for either institution, but affirms their access to classified spending and financial investigations under confidentiality safeguards. |
VII — Transitional Provisions and Implementation Requirements
First Three Months: Identify all federal bodies and units conducting intelligence activity, designate contact points and establish a classified file with the parliamentary committee.
Within Six Months: Adopt the mandates register, responsibility allocation matrix, classification and exchange standards, incident-reporting template and secure exchange platform controls.
Within One Year: Review founding legislation and instructions, activate the parliamentary technical support office and audit trails, and complete alignment of foreign cooperation and classified expenditure.
Phased implementation is preferable because the law's main value lies in procedural discipline, record quality and inter-institutional trust, rather than immediate large-scale restructuring that could create a security vacuum.
VIII — Financial and Implementation Impact
Expected financial impact is limited to moderate because the proposal relies on existing institutions and creates no new security service. Main costs are the Council of Representatives' technical support office, development of access and audit logs, secure inter-institutional connectivity, joint training and strengthened compliance units.
Insufficient public data exist to calculate precise costs for connectivity platforms, numbers of cleared users or each service's current infrastructure. The proposal therefore requires a technical and financial inventory before allocation, prioritizing reuse of existing infrastructure and consolidation of duplicate systems.
IX — Relevant International Comparison
| Model | Element Useful to Iraq | What Is Not Copied Verbatim |
|---|---|---|
| Canada — NSIRA | Integrated review of security and intelligence activities across several institutions rather than fragmented oversight within each service. | Creation of an entirely new federal agency; the Iraqi proposal uses existing institutions to reduce cost and overlap. |
| United Kingdom — Intelligence and Security Committee | A small parliamentary committee dealing with policy, administration, expenditure and some operational matters under strict confidentiality. | The British appointment system; the proposal preserves Iraq's parliamentary character and proportional representation. |
| North Macedonia — Law on Coordination of the Security and Intelligence Community | A separate law devoted to coordination and role definition among multiple services. | That system's specific executive structure; Iraq already has an existing National Intelligence Council. |
| DCAF / Venice Commission | Multilayered oversight, lawful information access, proportionality and the principle that secrecy is no substitute for accountability. | No single model suits every country; Iraqi drafting is based on the Constitution and national institutions. |
X — Compliance and Oversight Indicators
The law's effectiveness is measured through institutional indicators, not the number of covert operations. Key indicators are: completeness of the mandates register; reduction in cases with disputed leadership; transmission time for joint warnings; proportion of access logs audited; handling of serious incidents within deadlines; implementation of parliamentary and audit-board recommendations; review of data retention periods; complaints closed through a lawful process; and the proportion of recommendations from failure reviews actually implemented.
XI — Sources and References
- Iraqi Constitution — Iraqi Council of Representatives — https://iq.parliament.iq/%D8%A7%D9%84%D8%AF%D8%B3%D8%AA%D9%88%D8%B1-%D8%A7%D9%84%D8%B9%D8%B1%D8%A7%D9%82%D9%8A/
Articles 9 and 84 affirm civilian leadership, legislative oversight and operation of services under the law and human rights principles, and define the National Intelligence Service's constitutional function. - Council of Representatives Laws Database — National Security Service Law and National Intelligence Service Law — https://iq.parliament.iq/law/%D8%A7%D9%84%D8%A8%D8%AD%D8%AB-%D8%B9%D9%86-%D9%82%D8%A7%D9%86%D9%88%D9%86/
The database documents the Council's votes on the National Security Service Law on 9 May 2024 and the National Intelligence Service Law on 19 January 2025, showing the need for a common oversight and coordination framework beyond each service's founding law. - Iraqi National Intelligence Service — Official Profile — https://www.inis.gov.iq/National-Intelligence-Service.html
Describes the Service's remit, national security protection mandate and the principles of rights and freedoms underlying its establishment. - Council of Representatives — Decisions of the Session of 6 July 2026 — https://iq.parliament.iq/blog/%D9%82%D8%B1%D8%A7%D8%B1%D8%A7%D8%AA-%D9%88-%D8%AA%D9%88%D8%B5%D9%8A%D8%A7%D8%AA-%D8%A7%D9%84%D8%AC%D9%84%D8%B3%D8%A9-1-%D8%A7%D9%84%D8%A5%D8%AB%D9%86%D9%8A%D9%86-%D8%AB%D9%86%D9%8A%D9%86-6-%D8%AA/
Documents the sixth parliamentary term's continued consideration of the National Security Service and intelligence service within shared legislative and security work. - Implementation Plan for Iraq's “Iraq First” National Security Strategy 2025–2030 — Published Copy Bearing the National Security Advisory Letterhead — https://law.uodiyala.edu.iq/wp-content/uploads/2025/10/%D8%A7%D9%84%D8%AE%D8%B7%D8%A9-%D8%A7%D9%84%D8%AA%D9%86%D9%81%D9%8A%D8%B0%D9%8A%D8%A9-%D9%84%D9%84%D8%A7%D8%B3%D8%AA%D8%B1%D8%A7%D8%AA%D9%8A%D8%AC%D9%8A%D8%A9-12-5-2025.pdf
Includes intelligence sector reform and central monitoring, and names the National Intelligence Council Secretariat, intelligence service, National Security Service and supporting bodies. - National Intelligence Council — Session of 1 March 2026 — https://ninanews.com/website/News/Details?key=1283420
Documents the Council's continued operation as a functioning framework bringing together intelligence community leaders under the National Security Adviser's chairmanship. - DCAF — Overseeing Intelligence Services: A Toolkit — https://www.dcaf.ch/overseeing-intelligence-services-toolkit
A comparative reference for designing parliamentary, expert, judicial and financial oversight of intelligence services while preserving effectiveness and confidentiality. - DCAF — The Role of Parliaments in Overseeing Intelligence Tasking — https://www.dcaf.ch/role-parliaments-overseeing-intelligence-tasking
Distinguishes intelligence priority-setting as an executive responsibility from Parliament's oversight of the process, resources and compliance. - Venice Commission — Democratic Oversight of Security and Intelligence Services — https://www.venice.coe.int/webforms/documents/?pdf=CDL-AD%282015%29006-e
An international reference for legality, multiple levels of oversight and protection of rights in covert activities. - Canada — National Security and Intelligence Review Agency — https://nsira-ossnr.gc.ca/en/about-nsira/what-we-do/
A model for integrated review across multiple bodies rather than confining oversight to one service. - United Kingdom — Justice and Security Act 2013 — https://www.legislation.gov.uk/ukpga/2013/18/contents
A model of a specialized parliamentary committee reviewing expenditure, administration, policy and some operational matters under confidentiality arrangements. - DCAF — Law on Coordination of the Security and Intelligence Community in North Macedonia — https://www.dcaf.ch/implementation-law-nsa-and-law-coordination-security-and-intelligence-community-republic-north
A comparative example of a separate law coordinating a multi-institutional intelligence community, illustrating the need for precise allocation of mandates.
POL-26 · Ali Zuweid's Political Programme · Security, Defence and Sovereignty