Cyril Smith and the FTT

June 9th, 2014 by Christopher Knight

Although not a decision of any particular legal significance, it is perhaps worth mentioning the judgment last week of the First-tier Tribunal in Corke v Information Commissioner & Crown Prosecution Service (EA/2014/0012), if only because it is one of those relatively rare occasions on which the work of the FTT itself (as opposed to the information it results in) has been the subject of news coverage, ranging from the Daily Mail to the BBC.

The request was for disclosure of information relating to the now fairly notorious decisions made over time not to prosecute Sir Cyril Smith (a Liberal MP who died in 2010) for offences against children. The disputed material consists of two Minutes prepared by a CPS lawyer in 1998 and 1999. The first reviewed case papers considered in1970 and looked at the weight of the evidence, reflected on the changing approach to the investigation and prosecution of such crimes between 1970 and 1998 and considers bars to a prosecution being launched in 1998. The second considered two more allegations. The material contains the names of individuals concerned in the case in particular the youths who made allegations against Sir Cyril.

The CPS withheld information within the scope of the request, citing section 30(1)(c) (information held for the purpose of criminal proceedings), section 42(1) (legal professional privilege), and section 40(2) (third party personal data). The ICO issued a DN which held that the public interest was finely balanced, but upheld the refusal to disclose. Amongst other things, the ICO noted that the CPS had provided some public explanation of its past decisions and made clear that the same approach would be unlikely to be taken now.

The FTT disagreed with the DN and found that the public interest favoured disclosure of almost all of the requested information (with some redactions). It held that the safe space of the CPS would be unlikely to be harmed given the unique nature of the particular case involved, and the professionalism (and professional obligations) of CPS lawyers. It considered that the documents were in themselves significant historical documents which cast light on changes in the law as it has responded to the evolution of understanding of these crimes and changing social attitudes to them, as well as casting light on Sir Cyril himself. The unusual nature of the case also meant that the public interest in disclosing material covered by section 42 also favoured disclosure. Not surprisingly, the death of Sir Cyril Smith was also mentioned. The FTT redacted material which went beyond the names of the complainants, which might conceivably be used to identify them.

Christopher Knight

Data Protection and Child Protection

June 6th, 2014 by Christopher Knight

One of the difficulties users and practitioners have with the Data Protection Act 1998 is that there is so little case law on any of the provisions, it can be very hard to know how a court will react to the complicated structure and often unusual factual scenarios which can throw up potential claims. There are two reasons why there is so little case law. First, most damages claims under the DPA go to the County Court, where unless you were in the case it is hard to know that it happened or get hold of a judgment. Secondly, most damages claims are for small sums, which is it is more cost-effective to settle than fight.

Neither of those problems applied in MXA v Hounslow LBC, West Berkshire Council, Taunton Dean BC & Wokingham BC (QBD, 4 June 2014, not yet reported), in which M had filed claims in the High Court against a series of local authorities alleging that they held inaccurate and damaging information about him (presumably under sections 10 and 14 DPA, although the limited report available does not make clear). The local authorities applied to strike out the claims, and M failed to attend the hearing. M also alleged a breach of Article 8 ECHR in the data handling.

The facts as summarised are regrettably common. Harrow received information alleging that the step-daughter of M, E, was being physically and sexually abused by M. M complained about records of allegations of sexual misbehaviour towards a child in 2007 set out in a police report, which he denied. Harrow passed the information to Wokingham when E moved into that area. Wokingham recorded and reviewed the material and passed it on to West Berkshire when E moved again. Further allegations received by West Berkshire were sufficiently serious to require an investigation. M had signed forms consenting to the sharing and collection of information. Care proceedings were later initiated.

Perhaps not surprisingly, Bean J granted the application to strike out. He held that the local authorities were conducting child protection functions under their statutory duties (see, for example, the Children Act 1989).  In relation to the fifth data protection principle that personal data should not be held for longer than necessary, Harrow had received a recent complaint and had been provided with police records of convictions and other allegations. The duty of the local authorities, as the baton passed to each of them, was to keep those records for as long as necessary to ensure E’s welfare. The welfare investigation was at an early stage and the local authorities would clearly be acting in breach of their duty if they shredded the information. M could not argue that the information was so historic and uncorroborated that it ought to have been wiped and not disseminated. It had not been disseminated to the public, but passed only to local authorities where the family had lived.

Data controllers recorded a variety of information including allegations and mere suspicions due to the nature of the investigation. The suggestion that the information should not have been recorded unless the data controller was satisfied of its truth to a civil standard was unsustainable, as to which Bean J cited Johnson v Medical Defence Union [2007] EWCA Civ 262; [2011] 1 Info LR 110. Any claim based on the fourth data protection principle that information should be accurate and up to date was met by para 7 of Part II of Schedule 1 as the purpose for which the data was obtained was child protection. Reasonable steps had been taken to ensure its accuracy and the record indicated those matters which M had said were inaccurate. M had twice signed forms consenting to the retrieval of medical and criminal records.

Moreover, M’s section 10 claim to prevent processing likely to cause damage or distress was excluded by section 10(2) and para 3 of Schedule 2, as the processing was necessary to enable the local authorities to comply with their statutory obligations. They were doing no more than performing a proper statutory function.

Bean J also struck out claims of negligence, held that Articles 3 and 6 ECHR were irrelevant, and that there was an interference with M’s Article 8 rights but that it was plainly proportionate in order to protect E.

All of which goes to show that the DPA does not stop public authorities carrying out their important duties, even where underlying facts or allegations are disputed, and that on the occasions where the DPA makes it to court the judges can be trusted to understand both the context in which the authority must operate and that the DPA is intended to recognise that context. Perhaps DPA users have nothing to fear but fear itself after all.

11KBW’s Timothy Pitt-Payne QC acted for West Berkshire Council.

Christopher Knight

Google Spain – article in The Lawyer by Anya Proops

May 24th, 2014 by Rachel Kamm

Ahklaq Choudhury posted this week about the Google Spain judgment. For more 11KBW commentary on the topic, see the article in The Lawyer by Anya Proops: “Privacy but at what price?“. Anya’s article concludes:

Of course, it may well be that these issues will be resolved in the context of the new Data Protection Regulation which is still being debated in Europe. However, in the meantime, the judgment in Google Spain means we may well find ourselves exposed to a degree of data impoverishment which augurs ill for the development of our information society.”

Rachel Kamm, 11KBW

The Common Law and the Spirit of Kennedy

May 20th, 2014 by Christopher Knight

Following the Supreme Court’s lengthy, slightly unexpected, and difficult to grasp judgment in Kennedy v Charity Commission [2014] UKSC 20 (on which I have been quiet because of my involvement, but see Tom Cross’s blogpost here) there has been room for quite a large amount of debate as to how far it goes. Was the majority only suggesting access to the Charity Commission’s information under the common law principle of open justice applied because of the particular statutory regime and/or the nature of the statutory inquiry involved? Or was the principle rather more wide-ranging?

An answer has perhaps begun to emerge, as there was some discussion of this in the judgment of Green J in R (Privacy International) v HMRC [2014] EWHC 1475 (Admin). The judgment is, again, a long one, but the case was a judicial review of a decision of the HMRC that they had no power or duty to disclose information about their export control functions and in particular any investigations into the export by United Kingdom companies of software used for covert surveillance of political activists by repressive foreign regimes. Green J held that section 18 of the Commissioners for Customs and Revenue Act 2005 did provide such a power, and the HMRC had construed it too narrowly, when the power existed but was fact and context-dependent: see too R (Ingenious Media Holdings Plc) v HMRC [2013] EWHC 3258 (Admin), [2014] S.T.C. 673.

The judgment in Kennedy came out shortly after the oral hearing in Privacy International and it obviously sparked something of a debate. Green J accepted that the type of legal process involved was different to that in Kennedy, but he was of the view that Kennedy was authority for a more general proposition, or at least approach: at [62]:

I do not consider that the judgments in Kennedy lack all relevance. The Supreme Court was at pains to point out that the common law treated openness as very important and, with all the ecessary provisos and caveats, that message can in some measure carry through into section 18(2) CRCA 2005. In Kennedy Lord Mance, who gave the leading judgment for the majority, introduced his judgment with the following message which goes well beyond the narrow confines of the Charity Commission:

“1. Information is the key to sound decision-making, to accountability and development; it underpins democracy and assists in combatting poverty, oppression, corruption, prejudice and inefficiency. Administrators, judges, arbitrators, and persons conducting inquiries and investigations depend upon it; likewise the press, NGOs and individuals concerned to report on issues of public interest. Unwillingness to disclose information may arise through habits of secrecy or reasons of self-protection. But information can be genuinely private, confidential or sensitive, and these interests merit respect in their own right and, in the case of those who depend on information to fulfil their functions, because this may not otherwise be forthcoming. These competing considerations, and the balance between them, lie behind the issues on this appeal”.

The claimant conceded in the light of the Supreme Court decision that Article 10 ECHR did not give it a right of access to information, but argued that Article 10 did prevent one state body from stopping another state body imparting information which it wished to impart. Green J felt it unnecessary to decide the point because it added nothing to the common law: at [176], [179].

For various reasons on the facts of the case, and the particular context of HMRC’s approach to section 18, the decision was quashed. But it is a useful indication of how the courts have begun to think about the impact of Kennedy and other information access provisions.

Christopher Knight

Google Spain and the CJEU judgment it would probably like to forget.

May 19th, 2014 by Akhlaq Choudhury

In the landmark judgment in Google Spain SL and Google Inc., v Agencia Espanola de Proteccion de Datos, Gonzales (13th May 2014), the CJEU found that Google is a data controller and is engaged in processing personal data within the meaning of Directive 95/46 whenever an internet search about an individual results in the presentation of information about that individual with links to third party websites.  The judgment contains several findings which fundamentally affect the approach to data protection in the context of internet searches, and which may have far-reaching implications for search engine operators as well as other websites which collate and present data about individuals.

The case was brought Mr Costeja Gonzales, who was unhappy that two newspaper reports of a 16-year old repossession order against him for the recovery of social security debts would come up whenever a Google search was performed against his name. He requested both the newspaper and Google Spain or Google Inc. to remove or conceal the link to the reports on the basis that the matter had long since been resolved and was now entirely irrelevant. The Spanish Data Protection Agency rejected his complaint against the newspaper on the basis that publication was legally justified. However, his complaint against Google was upheld. Google took the matter to court, which made a reference to the CJEU.

The first question for the CJEU was whether Google was a data controller for the purposes of Directive 95/46. Going against the opinion of the Advocate General (see earlier post), the Court held that the collation, retrieval, storage, organisation and disclosure of data undertaken by a search engine when a search is performed amounted to “processing” within the meaning of the Directive; and that as Google determined the purpose and means of that processing, it was indeed the controller. This is so regardless of the fact that such data is already published on the internet and is not altered by Google in any way.

 The Court went on to find that the activity of search engines makes it easy for any internet user to obtain a structured overview of the information available about an individual thereby enabling them to establish a detailed profile of that person involving a vast number of aspects of his private life.  This entails a significant interference with rights to privacy and to data protection, which could not be justified by the economic interests of the search engine operator.  In a further remark that will send shockwaves through many commercial operators providing search services, it was said that as a “general rule” the data subject’s rights in this regard will override “not only the economic interest of the operator of the search engine but also the interest of the general public in finding that information upon a search relating to the data subject’s name” (at paras 81 and 97). Exceptions would exist, e.g. for those in public life where the “the interference with…fundamental rights is justified by the preponderant interest of the general public in having…access to the information in question”.

However, the Court did not stop there with a mere declaration about interference. Given the serious nature of the interference with privacy and data protection rights, the Court said that search engines like Google could be required by a data subject to remove links to websites containing information about that person, even without requiring simultaneous deletion from those websites.

Furthermore, the CJEU lent support to the “right to be forgotten” by holding that the operator of a search engine could be required to delete links to websites containing a person’s information. The reports about Mr Costejas Gonzales’s financial difficulties in 1998 were no longer relevant having regard to his right to private life and the time that had elapsed, and he had therefore established the right to require Google to remove links to the relevant reports from the list of search results against his name. In so doing, he did not even have to establish that the publication caused him any particular prejudice.

The decision clearly has huge implications, not just for search engine operators like Google, but also other operators providing web-based personal data search services. Expect further posts in coming days considering some of the issues arising from the judgment.

Akhlaq Choudhury

11KBW at PDP’s FOI Conference

May 9th, 2014 by Robin Hopkins

PDP Conferences is hosting its 10th annual Freedom of Information Conference in London on 15 and 16 May, with 11KBW hosting the wine and canapés reception.

The conference will be chaired by Robin Hopkins.

The Deputy Information Commissioner, Graham Smith, is the keynote speaker, with Timothy Pitt-Payne QC also among the speakers on day 1 of the conference.

On day 2, 11KBW’s Ben Hooper will host one of the workshops.

The full programme can be found here.

Open Justice in the Supreme Court

May 8th, 2014 by Christopher Knight

The principle of open justice has been reaffirmed today by the Supreme Court in A v BBC [2014] UKSC 25, as have its limits. In A, a foreign national had been given notice of deportation following conviction for a sexual offence against a child. In the subsequent tribunal appeals (dating back to 2001), A was anonymised because of the Article 2 and 3 ECHR concerns he had over his treatment if deported. That anonymisation position was retained by the Court of Session in 2012 when A sought to judicially review the refusal of the Upper Tribunal to grant him permission to appeal. The Court of Session’s directions were made under section 11 of the Contempt of Court Act 1981. The BBC, having learned of the directions, applied to set them aside.

The Supreme Court unanimously held that it could be in the interests of justice to limit the open justice principle, considering the purpose of the open justice principle, the potential value of the information in advancing that purpose, and any risk of harm that its disclosure may cause to the maintenance of an effective judicial process or to the legitimate interests of others (see at [41]). Lord Reed held that the order allowing A to withhold his identity was in accordance with the court’s common law powers; the section 11 order was made in accordance with the power conferred by that provision; and it was not incompatible with the BBC’s Article 10 ECHR rights. Lord Reed also reiterated that the common law principles applied just as vigorously, even where the ECHR was engaged (at [55]-[57]), reiterating a point he had made at length in Osborn v Parole Board [2103] UKSC 61.

Christopher Knight

Open Justice and Court Files

May 8th, 2014 by Christopher Knight

Perhaps not hot off the press, but nonetheless worth noting, is the decision of the High Court last month in NAB v Serco & Home Office [2014] EWHC 1225 (QB), which reiterates the Court’s commitment to the open justice principle and press access.

B had been a detainee in an immigration removal centre, in which she alleged she had been sexually assaulted by a male nurse employed by Serco. She brought claims against Serco (in vicarious liability for the assault) and the Home Office (for false imprisonment) for damages. A statement was filed which exhibited Serco’s internal investigation report into B’s complaint of assault. Serco settled the claim, but the claim proceeded against the Home Office. The exhibited report remained part of the trial bundle but was not referred to in the judgment and was not relevant to the issues between B and the Home Office. After the judgment, the Guardian applied for a declaration that B could lawfully provide it with a copy of the report, under CPR r.31.22.

Bean J granted the declaration. It is now fairly well-established that in R (Guardian News and Media Ltd) v City of Westminster Magistrates’ Court [2012] EWCA Civ 420, [2013] QB 618 it had been held that in a case where documents had been placed before a judge and referred to in the course of proceedings, and the default position should be that access to those documents should be permitted on the open justice principle. Although it was an unusual feature that Serco was no longer a party to the claim and the report was no longer relevant to the issues in the case, those matters were not decisive. The particulars of claim and other pleadings were public documents subject to inspection as of right under CPR r.5.4C(1). The fact of the allegations having been made was therefore in the public domain. If after the settlement, but before the case against the Home Office had come to trial, the Guardian had applied under r.5.4C(2) for access to the report, the application, would have succeeded, just as it would had it been made at any time before the Court disposed of the file. There was a proper journalistic reason for seeking the report, and it was sometimes important to understand why a claim had settled. Providing the individuals were anonymised, the Guardian could be provided with the report.

The application of the open justice principle, and the ability of journalists to access court documents remains a current trend in the case law – given a kick-start by Guardian v Westminster and an unexpected sidewind in Kennedy v Charity Commission [2014] UKSC 20 – and NAB is a helpful reminder of its utility when using the existing court records access provisions in the CPR.

Christopher Knight

Legal professional privilege does not automatically engage an EIR exception

May 6th, 2014 by Robin Hopkins

FOIA provides an exemption (s. 42) expressly for legal professional privilege; as is well known, there is ‘strong inherent weight’ in maintaining that exemption. What about the EIRs? LPP is not expressly mentioned, but regulation 12(5)(b) EIR applies to information the disclosure of which would adversely affect “the course of justice, the ability of a person to receive a fair trial or the ability of a public authority to conduct an inquiry of a criminal or disciplinary nature”. Does information attracting LPP automatically come within that exception? Many practitioners operate on the assumption that the answer is ‘yes’. The Upper Tribunal has on a previous occasion, however, left that question open: DCLG v IC and Robinson [2012] UKUT 103 (AAC); [2012] 2 Info LR 43.

That question has recently been revisited. In GW v IC, Local Government Ombudsman and Sandwell MBC [2014] UKUT 0130 (AAC), the Upper Tribunal answered ‘no’: just because LPP applies, it does not automatically follow that regulation 12(5)(b) EIR is engaged. Further analysis is needed – and the onus is on the public authority to make out its case on adverse effects on the course of justice etc.

The requester has complained to the Council about what was being emitted from the chimneys of two of his neighbours who were using wood-burning stoves. The Council obtained written legal advice from counsel. It told the requester it could not progress his complaint as he wished. He complained to the Ombudsman. The Council shared its legal advice with the Ombudsman, expressly on a confidential basis. The requester sought that advice from the Ombudsman. His request was refused. The IC’s decision went against him. So too did that of the First-Tier Tribunal.

The Upper Tribunal, however, found that the FTT went wrong in attributing too much weight to the prejudicial effects which it thought likely to arise “simply through the weakening of this important doctrine” [of LPP].

UT Judge Turnbull considered the wording of regulation 12(5)(b) EIR and said this: “In my judgment that requires attention to be focused on all the circumstances of the particular case, and there is no room for an absolute rule that disclosure of legally privileged information will necessarily adversely affect the course of justice”.

The crux, in his judgment was this: “What particularly matters for present purposes is in my judgment that the rationale for the doctrine and its absolute nature is established as being the need for the client to be able to obtain legal advice on a full and frank basis”.

In the present case, disclosure would be unlikely to prejudice that underlying principle – the Council’s ability to obtain free and frank advice would not be impeded. “What might be damaged would be not the course of justice but the ability of the LGO to conduct future investigations on a fully informed basis” – but that was a different point to the one at the heart of the FTT’s reasoning. The FTT had thus gone wrong in its public interest analysis.

Interestingly, one factor in the UT’s reasoning appears to have been that it was not taken to “any particular part or feature of the Advice which the Council would be unhappy about disclosing, or pointed to any specific concern which it has about Mr W or the public in general seeing it. Nor has it been suggested, for example, that the Advice needs to be qualified because of some inaccuracy or incompleteness in the instructions to counsel. The weight to be accorded to the adverse effect on the course of justice in this case is in my judgment very substantially less than it would have been if the LGO had been able to rely on the weakening of the doctrine of LPP which compulsory disclosure of legal advice will almost always involve”. This offers useful indications of what, in this UT’s view, might suffice to engage regulation 12(5)(b) EIR in respect of information which attracts LPP.

The public authorities also sought to rely on regulation 12(5)(d) EIR (confidentiality of proceedings). By regulation 12(9), however, that exception cannot be relied upon “to the extent that the environmental information to be disclosed relates to information on emissions”. Did that disapplication provision bite here? No, said the UT: “In substance the Advice did not “relate to” information as to the particular nature and extent of those emissions, but rather it related to the meaning and effect of the legislation”. In this case, regulation 12(5)(d) EIR was engaged.

Turning to the public interest balance, a preliminary point addressed by the UT concerned timing: matters post-dating the statutory time for compliance with a request can only properly be taken into account to the extent that they shed light on matters as they stood up to that time, or if they are relevant to the IC’s ‘steps discretion’ under s. 50(4) FOIA. They are not otherwise relevant to the public interest balance.

What might count in favour of the disclosure of privileged information? “In my judgment, therefore, when considering this issue it is relevant to consider not only whether the Council (and/or the LGO) made statements which were positively wrong, but whether they made statements which were liable to mislead or confuse the reader, and so have generated a confusing picture as to the effect of and reasoning behind the Advice”.

In this case, while there was no intention to mislead, “the combined effect of the information which the LGO and the Council had given up to this point was liable to create substantial confusion, in the mind of any reasonable reader, as to what the Advice did say”.

As to the public interest in maintaining the exception, the main factor was “the effect which disclosure would have on the ability of the LGO to obtain legally privileged information from local authorities on the footing that it should remain confidential” – especially given that the Ombudsman cannot compel local authorities to share such information with it. There would thus be a chilling effect on such information-sharing.

In contrast, the unfairness to the Council of having its legal advice shared with the requester was a relatively weak factor.

Overall, however, the balance very firmly favoured the maintenance of the exception. In this case therefore, the likely damage to the LGO’s work prevailed where LPP had not.

Robin Hopkins @hopkinsrobin

Local Government Transparency Code

May 2nd, 2014 by Christopher Knight

The Secretary of State for Communities and Local Government has just issued a Local Government Transparency Code in exercise of his powers under section 2 of the Local Government, Planning and Land Act 1980 to issue a Code of Recommended Practice as to the publication of information by local authorities about the discharge of their functions and other matters which he considers to be related.

The Code sets out in some detail in Part 2 the type of information held by local authorities which must be published (some of it annually) and in Part 3 the information which, in the view of the Secretary of State, ought to be published. A helpful Annex A provides the details in tabular form.

Paragraph 14 of the Code provides that: “Where information would otherwise fall within one of the exemptions from disclosure under the Freedom of Information Act 2000, the Environmental Information Regulations 2004, the Infrastructure for Spatial Information in the European Community Regulations 2009 or falls within Schedule 12A to the Local Government Act 1972 then it is in the discretion of the local authority whether or not to rely on that exemption or publish the data.” There is therefore no attempt to override the FOIA exemptions. But where a qualified exemption applies, the appearance of the requested information in one of the categories set out in the Code will have a role (possibly a significant role) in establishing the public interest in support of disclosure.

Christopher Knight