Author: Robin Hopkins

LITIGANTS MAY – WITH THE TRIBUNAL’S LEAVE – PUBLISH PLEADINGS WHILE A CASE IS ONGOING

Posted on | by Robin Hopkins

Mr Todd has lodged an appeal against a decision notice of the Commissioner involving the BBC. He will be a litigant in person at the Tribunal hearing. He applied to the Tribunal for permission to publish on his blog the pleadings lodged by the Commissioner and the BBC, so as to “recruit advice and assistance from other members of a wide community of on-line democratic activists who may have relevant and informal contributions to make to my case”. In other words, he argued that publication would help him achieve equality of arms.

Neither the Commissioner nor the BBC objected to his doing so in this particular case. The Commissioner, however, contended that litigants had no automatic right to publish pleadings in a ‘live’ case, but could only do so with the leave of the Tribunal on a case-by-case basis. The BBC on the other hand, contended that the Tribunal had no power to authorise such publication under the Tribunal Procedure (First-tier Tribunal) (General Regulatory Chamber) Rules 2009.

The Tribunal agreed with the Commissioner (see its ruling here), and authorised the publication of the pleadings in this case. It is therefore theoretically open to litigants in person to take this approach – but only with the permission of the Tribunal. Importantly, the Tribunal’s reason for allowing publication in this case appears to have been the lack of objection by the other parties and not Mr Todd’s ‘equality of arms’ argument, which it expressly rejected. It seems then that the views of the respondents will be crucial to any such applications in future.

UNHELPFUL PRESENTATION OF REDACTED MATERIAL COULD BREACH SS. 1 & 16 FOIA

Posted on | by Robin Hopkins

The Tribunal’s recent decision in Gradwick v IC and the Cabinet Office (EA/2010/0030) dealt with sections 23 and 24 of FOIA. Its concluding dicta also dealt with some procedural matters with potentially substantive implications, particularly concerning redacted material. Public authorities may find these dicta worth noting, both when preparing to disclose redacted material and when preparing for Tribunal hearings.

In response to a FOIA request, the Cabinet Office had decided to disclose some extracts from its Manual of Protective Security but to withhold others. Due in part to administrative complications, it did so by compiling a document consisting solely of the former rather than blanking out parts of the original manual. Relying on FOIA’s reference point being information rather than documents, the Cabinet Office sought to justify this approach in the face of criticism from the Tribunal. The Tribunal however, remarked that “it is at least arguable that a document which sets out the passages that contain the information to be disclosed, but which has the effect of obscuring the nature and extent of the information which has been withheld, does not inform the party making the request whether or not it holds information of the description specified in the request, for which exemption is claimed”.

This approach to the presentation of information could, it observed (without deciding the issue), constitute a breach of section 1 (duty to provide information) and/or section 16 (duty to assist) of FOIA.

The Tribunal indicated that it prefers the following approach:

“Within the practice established by the Tribunal and its users to date, a document characterised as having been redacted has come to mean one in which the extent of the omitted material is indicated by blank spaces and in which, to the extent possible, headings or other indications are retained or inserted to give a fair indication, to both panel members and those presenting submissions, of the broad nature of the information that has been withheld. Annotating the resulting document to indicate the exemption relied on to justify each omission is also a valuable assistance in cases where different exemptions apply to different sections of the document or information.”

LANDMARK IPT DECISION ON LOCAL AUTHORITY’S USE OF RIPA

Posted on | by Robin Hopkins

The Investigatory Powers Tribunal today issued its decision in the first substantive public case on the use of surveillance powers under the Regulation of Investigatory Powers Act 2000.

Poole Borough Council suspected that Jenny Paton and her family may have lied about living in the catchment area of a sought-after primary school in Dorset. It therefore monitored their activity for around 3 weeks in 2008. This included covertly monitoring the movements of family members and their car, as well as examining the contents of their rubbish.

The IPT found that:

(1) investigating a potentially fraudulent school application was not a proper purpose in the sense required by RIPA;
(2) in these circumstances, the Council’s actions were in any event disproportionate, in that they were not necessary to achieve that aim, and
(3) the Council’s actions had breached the family’s rights under Article 8 of the ECHR.

Poole Borough Council has accepted the ruling and apologised to Ms Paton and her family.

NEW ICO CODE OF PRACTICE FOR PROCESSING OF PERSONAL DATA ONLINE

Posted on | by Robin Hopkins

The Information Commissioner has published a new Code of Practice explaining how the DPA applies in an online world, and offering ‘good practice’ advice for the collection and use of personal data through the internet.

The Code covers (among other things) application and payment forms, social networking sites, cookies and other personally-targeted marketing. It considers the difficulties of ‘non-obvious identifiers’ (such as IP addresses linked to devices rather than to individuals), cross-border data transfers by multinational or non-domestic organisations, and the practice of outsourcing the storage of databases to other web-based companies.

With the aid of examples from such contexts, the Code turns established principles into specific recommendations for internet businesses, including: avoid collecting personal data too early in the relationship or transaction with the user; only collect personal as far as is necessary; provide a clear explanation of how users’ personal data will be processed; ensure that employees only have access to customers’ personal data where necessary, and that this access withdrawn as soon as their employment ends.

Certain suggestions will be particularly welcomed by privacy campaigners: alert users to the security risks associated with ‘autocomplete’ forms; give users a simple option of declining to have their personal data stored and of disabling cookies or other trackers of their online behaviour, and make it easy for them to contact the data controller about how their personal data is being used.

LATEST TRIBUNAL DECISION ON THE ‘PERSONAL DATA’ AND ‘COST OF COMPLIANCE’ EXEMPTIONS

Posted on | by Robin Hopkins

The Tribunal’s first decision in the case of Alasdair Roberts v IC and Department for Business, Innovation & Skills (EA/2009/0035) established the controversial principle that the s. 36 exemption only applies where the opinion of the ‘qualified person’ was reached by the time the request was responded to: see Anya Proops’ post on that decision. DBIS was therefore not entitled to rely on s. 36 in refusing Mr Roberts’ request. Its refusal was, however, upheld in the Tribunal’s second decision in this case, which provides the latest word on the s. 40 ‘personal data’ exemption.

 

In particular, this case concerned the first data protection principle (processing must be fair and lawful and meet a Schedule 2 condition) and paragraph 6(1) of Schedule 2 to the DPA 1998. That condition is that “the processing is necessary for the purposes of legitimate interests pursued by the data controller or by the third party or parties to whom the data are disclosed, except where the processing is unwarranted in any particular case by reason of prejudice to the rights and freedoms or legitimate interests of the data subject”.

 

Two notable points about the application of this principle emerge.

 

First – on whether the processing would be fair – senior civil servants (Grade 5 or above) do not have a reasonable expectation of anonymity in respect of any document, no matter how sensitive. More junior civil servants might have reasonable expectations: this will be less cogent where the job is “public-facing” (such as a Job Centre manager), and more cogent where the information is controversial (such as information about animal testing).

 

Secondly – on legitimate interests of ‘parties to whom the data are disclosed’ – the Tribunal found that the requester’s strong individual interest (for research purposes) was not sufficient to override the fact that this information was of very little interest to the world at large (to whom disclosure is, in the eyes of FOIA, to be made).

 

This decision also offers further guidance on what can be included within the ‘cost of compliance’ for s. 12 purposes. The Tribunal accepted the established principle that costs of redacting names are to be excluded, but qualified this as follows: “that may be appropriate where the task is simply to locate individuals’ names and redact them… but where, as here, the process requires a judgment to be made, document by document, balancing the various criteria we have identified, then we believe that much, if not all, of the process should be regarded as retrieving from each document the information which requires to be disclosed and therefore properly included in the cost estimate”.

PLANNING DECISIONS & HISTORIC BUILDINGS: PUBLIC SCRUTINY TRUMPS COMMERCIAL CONFIDENTIALITY

Posted on | by Robin Hopkins

Local planning authorities will wish to take careful note of the recent Tribunal decision in Bristol City Council v ICO and Portland and Brunswick Squares Association (EA/2010/0012), which will please residents’ associations, conservation groups and others wishing to scrutinise planning decisions about historic buildings.

 

PPG 15 (a Planning Policy Guidance document) requires that, where a building is listed or makes a positive contribution to a conservation area, it should only be demolished if there is “clear and convincing evidence that all reasonable efforts have been made to sustain existing uses or find viable new uses and these efforts have failed”. Bristol CC granted permission to demolish a listed building in its ownership, relying for PPG 15 purposes on the developer’s viability reports which apparently showed alternative uses of the building to be commercially unviable. It subsequently refused to disclose those reports, relying on the exemption at regulation 12(5)(e) of the EIR 2004, which applies to the extent that disclosure “would adversely affect … the confidentiality of commercial or industrial information where such confidentiality is provided by law to protect a legitimate economic interest”.

 

The requesters argued that a reasonable person would not regard these reports as confidential because the planning process is one that assumes and requires public involvement. The Tribunal disagreed, and found that regulation 12(5)(e) was engaged.

 

It went on to find, however, that the public interest favoured disclosure, given the decisiveness of these reports in a matter which had aroused substantial local controversy. The Tribunal considered it proper to take into account the “general mismatch between the resources of developers and residents’ groups” and noted that “so far as PPG 15 viability reports are concerned, it seems to us that developers will not be able to refuse to supply them if they want to obtain the relevant consent but that, given their hypothetical nature, it may be possible for them to construct such reports in a way that does not reveal sensitive commercial information specific to themselves”.

 

The Tribunal stressed that it was not setting down a general precedent concerning planning decisions, and that absent PPG 15 (or, presumably, its successor guidance PPS 5) or council ownership of the building in question, its decision might have been different. Where those two factors are present however, public accountability trumps commercial confidentiality.