In answer to part of your question, RIPA is the Regulation of Investigatory Powers Act. It applies to the police or other authorised bodies who want to obtain personal information on an individual -- e.g. you can't just phone up a credit card company and say 'i'm pc bloggs, and i want to know where this person has been using his credit card' -- the request has to be made using RIPA paperwork, it has to be authorised by someone sufficiently senior (e.g a police inspector) and 'proportionate' - that is, they can't infringe your personal privacy, unless the investigation is serious enough to warrant it.