The agency that is watching you watching me has been criticised for hiding how it shared data with the USA.
The Investigatory Powers Tribunal (IPT) said that before it changed its rules last December, GCHQ breached human rights law, as embodied in the European Convention of Human Rights.
Last December, GCHQ said that it usually needed a warrant to share information with the US security services.
But before it made this disclosure, the IPT said that the soliciting, storing and transmission by UK authorities of private communications of people here and obtained by the US authorities contravened either articles eight or 10 of the European Convention.
Article 8 relates to privacy while article 10 refers to the right of freedom of expression.
The Home Office said in a statement that the UK government is committed to transparency.