SECURITY BODIES, PRIVATE EMAILS – PARALLELS BETWEEN THE UK & US

Today was one of striking parallels between the USA and the UK in terms of litigation concerned with access to information.

APPGER and security bodies

First, one of The Independent‘s main stories this morning concerned a case brought in the US by the UK’s All Party Parliamentary Group on Extraordinary Rendition (APPGER). Readers will recall that in the UK, APPGER was partially successful before the Upper Tribunal last year; the decision of the First-Tier Tribunal in a second case (the hearing of which concluded in February 2012) is awaited.

In the US, APPGER requested information on extraordinary rendition from the Department of Defense, the CIA, the Department of Homeland Security, the Department of Justice , the Department of State, the FBI and the National Security Agency. Those requests were largely refused. APPGER appealed to the Courts. The US District Court, District of Columbia, upheld the Defendants’ partial motion to dismiss APPGER’s appeals. Its judgment is available here.

Prior to 2002, the exemptions under FOIA in the US turned on the nature of the requested information, not the identity of the requester. In 2002, however, Congress amended FOIA to include a “foreign government entity exemption”, which provides that no agency that is a member of the “intelligence community” shall make any record available to “(i) any government entity, other than a State, territory, commonwealth, or district of the United States, or any subdivision thereof; or (ii) a representative of a government entity described in clause (i).”

The Court held that APPGER fell within this exemption. It construed the terms “government entity” and “representative” according to their “plain meaning” and not according to UK law. On this basis, it found (contrary to APPGER’s arguments) that the UK Parliament is a “government entity”: it is the “primary organ tasked with the expression of sovereign political authority and its enactment into law” and is integral to the government of the UK. APPGER was held to be a “subdivision” of Parliament, and its chair, Andrew Tyrie MP (who has never been a government minister) was held to be a “representative” for the purposes of part (ii) of the exemption.

APPGER had also argued that its members had made their requests in their capacities as individuals rather than public officials. The Court rejected this argument in striking terms:

“It would be particularly inappropriate for the court to adopt the plaintiffs’ suggestion because their proposed exception would, without doubt, swallow the rule. The defendants describe the portentous consequences of the plaintiffs’ argument if drawn to its logical extreme: recently deceased North Korean dictator Kim Jong Il, despite his status as the Supreme Leader of the Democratic People’s Republic of North Korea, would have been able to file a FOIA request as long as he claimed to do so in his “individual capacity.”… It is not necessary to follow the defendants’ parade of horribles to its furthest reaches, however. Instead, the court observes that a statute susceptible of either of two opposed interpretations must be read in the manner which effectuates rather than frustrates the major purpose of the legislative draftsmen…. If the court is to give any meaning to the foreign government entity exception, this provision cannot turn on such evanescent factors as the subjective intent of the individual who files the claim. To do so would essentially allow a system of voluntary compliance — which is to say, no compliance at all. Accordingly, the court rejects the contention that the plaintiffs may evade the foreign government entity exception by filing in their “individual capacity.”

The Kim Jong Il point aside, the above passage is notable for its contrasts with axioms of FOIA in the UK: in the US, FOIA is motive blind, but no longer applicant blind.

Private email accounts

In the second of today’s US cases (thanks to the BBC’s Martin Rosenbaum for alerting me to this one), the San Antonio Express-News made a request under the Texas Public Information Act for emails concerned with public business sent to and from the private email account of the Bexar County Commissioner, Tommy Adkisson. Rather like the UK’s Information Commissioner in his Department for Education decision, the Texas Attorney General took the view that these emails should be disclosed. A District Judge in Austin has dismissed Mr Adkisson’s case and upheld the Attorney General’s position (though an appeal seems likely). Time will tell whether the UK Tribunal takes a similar view of the Department for Education’s appeal concerning private email accounts.

Robin Hopkins

Article 10 and Access to Information (again…) – the view from the Grand Chamber

Loyal readers know that the past 18 months have seen a succession of cases address whether Article 10 of the ECHR (the right to freedom of expression) comprehends a right of access to information held by public bodies.

As previously blogged by Julian Milford, in Sugar v BBC the UK Supreme Court (per Lord Brown, in his own inimitable style…) gave the argument that Article 10 could confer a right of access to information exceedingly short shrift. The Court of Appeal in Kennedy v Charity Commission [2012] EWCA Civ 317 (blogged by Anya Proops) then handed down a judgment that, notwithstanding the CoA’s somewhat quixotic decision to grant permission to appeal, appeared to signal that in Sugar the Article 10 ‘access to information’ argument had been given its quietus.

However, the plot simply continues to thicken as the Grand Chamber of the ECtHR has just handed down a judgment – Gillberg v Sweden, Application no. 41723/06, 3 April 2012 – which (while far from a model of clarity) appears to endorse the proposition that Article 10 can (in certain circumstances, the scope of which are almost entirely unclear) confer a right of access documents held by public bodies. The crucial paragraph of the Grand Chamber’s judgment is at [93] where it is stated that:

“…In the Court’s view, finding that the applicant had such a right under Article 10 of the Convention would run counter to the property rights of the University of Gothenburg. It would also impinge on K’s and E’s rights under Article 10, as granted by the Administrative Court of Appeal, to receive information in the form of access to the public documents concerned, and on their rights under Article 6 to have the final judgments of the Administrative Court of Appeal implemented (see, mutatis mutandis, Loiseau v. France (dec.) no. 46809/99, ECHR 2003-XII, extracts; Burdov v. Russia, no. 59498/00, § 34, ECHR 2002-III; and Hornsby v. Greece, judgment of 19 March 1997, § 40, Reports 1997-II).”

It should be noted immediately that: (i) the issue as to whether Article 10 connotes a right of access to documents was very much peripheral to the case, and so the Grand Chamber’s observation is very much obiter dictum (or the Strasbourgian (sic) equivalent); (ii) the passage does not cite the recent Strasbourg case law said to support the proposition that Article 10 confers a right of access to information e.g. Tarsasag v Hungary etc; and (iii) the critical part of the passage appears premised on the assumption that the content of the ‘Article 10 right’ of access to documents is defined by Swedish domestic law (rather than enjoying an autonomous ambit as defined by the ECHR itself).

However, notwithstanding these important caveats, this does appear to be the first occasion on which the Grand Chamber has endorsed the proposition that Article 10 (at least in some circumstances) is capable of conferring a right of access to documents held by public bodies. Could this prompt the UK Supreme Court in Kennedy to reappraise the stance towards the ambit of Article 10 advocated by Lord Brown in Sugar ? Watch this space.

Joe Barrett

TRIBUNAL’S DECISION IN DEPARTMENT OF HEALTH RISK REGISTER CASE

The First-Tier Tribunal’s decision in Department of Health v IC, John Healey MP and Nicholas Cecil (EA/2011/0286 & 287) played a central role in the highly-charged political debates about the Health and Social Care Act. The Tribunal dismissed the Department’s appeal in part, but was unable to give written reasons before the Act entered the statute books. The Tribunal’s written reasons have now been promulgated and are available here:

2012_04_05; DOH v IC Healey final decision

Panopticon analysis will follow, but we thought some of our readers would like a hot-off-the-press look at the decision in the interim.

Robin Hopkins

INTERNET SURVEILLANCE – A SNOOPER’S CHARTER?

In 2004, the former Information Commissioner, Richard Thomas, commenting on the then Labour Government’s proposed ID card scheme, warned us to take care that we do not ‘sleepwalk into a surveillance society’. That warning appears to have particular resonance this week following announcements by the Coalition Government of plans to extend current surveillance legislation so as to allow for the instantaneous tracking of internet usage by individuals within the UK. The plans would reportedly allow GCHQ to access all internet traffic (including information about webmails, web-browsing, internet calls and social networking activities) in real-time and on demand. Whilst the detail of the plans remains decidedly obscure, some media reports suggest that they are directed not only at capturing new technological modes of communication but also at loosening current restrictions on accessing tracking information so that, for example, warrants would not have to be sought in individual cases. The Government, which appears to be facing a huge backlash over the proposals, has indicated that current laws need to be updated so as to capture modern modes of communication which are not (or not adequately) caught by the existing regime, e.g. Skype calls and Facebook messaging. It has also suggested that rights of access under the new legislation would be limited to tracking information (e.g. who sent an email to whom, when and from where) and would not embrace any automatic right of access to the substantive content of the communication. However, critics have been swift to point out the potential threat to civil liberties posed by the plans, not to mention the inevitable risk of function creep. They highlight the dangers of a system which potentially draws, not only criminals and those posing a danger to our society into the snooping net, but potentially all innocent law abiding citizens as well. In an effort to defuse the current controversy, the Deputy Prime Minister has now promised  that open Parliamentary hearings would be held to examine draft clauses of any new bill based on the plans. However, it remains to be seen how the Government will seek to reconcile any draft bill with both the restrictions on the processing of personal data embodied in the existing 1995 Data Protection Directive the right to privacy afforded under Article 8 ECHR. It is of course inevitable that, as technology advances, so too will State surveillance systems need to evolve. However, the critical question is whether those systems can effectively be crafted so as to ensure that the surveillance society is kept within proper bounds.

IPCC v IC: IMPORTANT NEW DECISION ON VEXATIOUS REQUESTS AND COST OF COMPLIANCE

 

The First-Tier Tribunal’s recent decision in Independent Police Complaints Commission v IC (EA/2011/0222) is very interesting and important. It concerns sections 14 (vexatious requests) and 12 (cost of compliance) of FOIA. The Tribunal has confirmed in resounding terms that cost alone can justify a section 14 finding, that a requester’s improper motive is relevant for section 14 purposes, and that the principle of aggregation of costs across separate requests is to be interpreted widely. On all these points, this decision will be welcomed by public authorities responding to unduly burdensome FOI requests.

The case concerned a requester with a keen interest in the work of the IPCC. The Tribunal said that his pattern of requests “focussed on no particular topic but appeared to range widely, even indiscriminately, over the whole spectrum of complaints that the IPCC investigates”. In particular, this case was concerned with two requests. One asked for IPCC managed investigation reports over a 3-year period (covering some 438 cases), the other was a multi-part request about a specific case which had been the subject of an earlier request. The IPCC had clearly had enough. It applied section 14 in refusing both requests.

While the Commissioner sympathised with aspects of the IPCC’s position (cost burden in particular), his overall conclusion – based on his five guiding questions for section 14 cases – was that the requests were not vexatious.

At Tribunal level, the IPCC relied on both section 14 and section 12. The Tribunal found in its favour on both counts.

Section 14 (vexatious requests)

On vexatious requests, the decision is worth quoting in some detail. At paragraph 14, it – like a number of Tribunals in recent cases – disapproved of an overly rigid application of the Commissioner’s five questions:

“The Tribunal considers that these requests were plainly vexatious when considered in the context of earlier requests or indeed in isolation. The criteria proposed in the ICO`s guidance are very helpful as a reference point. However, an approach which tests the request by simply checking how many of the five “boxes” are “ticked” is not appropriate. It is necessary to look at all the surrounding facts and apply them to the question whether the request is vexatious, a term not defined in FOIA but familiar to lawyers.”

It also found that cost alone can suffice for a section 14 finding – see paragraph 15:

“A request may be so grossly oppressive in terms of the resources and time demanded by compliance as to be vexatious, regardless of the intentions or bona fides of the requester. If so, it is not prevented from being vexatious just because the authority could have relied instead on s.12”.

This will be welcomed by those who find themselves unable to rely on section 12 due to the restricted list of activities which can be taken into account for cost purposes.

While cost can suffice regardless of motive, the Tribunal was emphatic that motive is relevant for section 14 purposes. In trenchant terms, it urged responsible use of FOIA (see paragraph 19):

“Abuse of the right to information under s.1 of FOIA is the most dangerous enemy of the continuing exercise of that right for legitimate purposes. It damages FOIA and the vital rights that it enacted in the public perception. In our view, the ICO and the Tribunal should have no hesitation in upholding public authorities which invoke s.14(1) in answer to grossly excessive or ill – intentioned requests and should not feel bound to do so only where a sufficient number of tests on a checklist are satisfied.”

In the present case, the Tribunal was not convinced of the requester’s good faith, and it considered his requests to be “not just burdensome and harassing but furthermore wholly unreasonable and of very uncertain purpose and dubious value, given the undiscriminating nature of the first request”. It had no hesitation in finding that section 14 had been correctly applied to the first request.

Section 12 (cost of compliance)

This provision was relied upon by the IPCC for the first time before the Tribunal. Interestingly, the Tribunal interpreted the Court of Appeal’s judgment on the late reliance issue (under the EIRs) in Birkett as meaning that the IPCC could rely on section 12 of FOIA late as of right – despite the Upper Tribunal’s rather different approach in APPGER (which is not referred to in this decision).

It was agreed that the cost limit was reached for the first request. The issue was whether section 12 applied to the second request. This turned on whether the costs of complying with that request could be aggregated, ie taken together with those for the first. Aggregation is provided for under the Information and Data Protection (Appropriate Limits and Fees) Regulations 2004. By regulation 5(2)(a), costs can be aggregated for requests which “relate, to any extent, to the same or similar information”. The Tribunal agreed with the IPCC that the requests in this case came within that provision. It said as follows (paragraphs 25-26):

“The second request was for specific details of a report which was a subject of an earlier request than those with which this appeal is concerned. It was the same kind of report as the 438 reports requested in the first request. We agree with the IPCC that the wording of Regulation 5(2) (a), for good reason, requires only a very loose connection between the two sets of information, hence the insertion of “to any extent” and “similar”. The information covered by the second request was quite obviously very similar in character to that described in the first. They were simply different reports.”

From a public authority perspective, this broad approach will be a welcome departure from the more restrictive analysis in cases such as Benson.

For a different take on the IPCC case, see this post from the ever-incisive FOI Man.

Robin Hopkins