DATABASE RIGHTS AND BREACH OF CONFIDENCE

Posted on | by Rachel Kamm

The Chancery Division has considered the scope of the database rights in the Copyright, Designs and Patent Act 1998  in Forensic Telecommunications Services Ltd v Chief Constable of West Yorkshire [2011] EWHC 2892 (Ch).

The Claimant was a forensic services company, which recovered digital evidence from mobile phones for criminal investigations. It had a list of the permanent memory absolute addresses for different types of phone (known as PM Abs addresses) and it created software from this list. The Claimant had granted the security service a licence to use the software, but this did not extent to law enforcement agencies. A police officer (who was the Second Defendant to the claim) received several PM Abs addresses from a security operative and he posted them on the internet. Other law enforcement officers added to the list. The police officer created a list which contained 32 of the Claimant’s 33 PM Abs addresses. The police officer used this list to create software that was similar to the Claimant’s software.

The Claimant issued a claim against the police officer’s force (the Chief Constable of West Yorkshire) and the police officer personally, alleging infringement of its copyright and database rights.

The Court found that no copyright subsisted in the individual PM Abs addresses because the skill, judgement and labour expended in ascertaining the addresses was not of the right kind to attract copyright protection. The PM Abs list was however a database because the addresses were systematically arranged and individually accessible (meeting the test in section 3A of the Copyright, Designs and Patents Act 1988) and therefore it was not protected by copyright. The Claimant had made a substantial investment in obtaining and verifying the data on the list and therefore a database right subsisted in the list. The police officer had extracted and re-utilised a substantial part of the database and thereby infringed the Claimant’s database right. The police force was vicariously liable for this act of infringement.

The Claimant also succeeded in a claim for breach of confidence against both Defendants. The PM Abs list had the necessary quality of confidence, since it was valuable information collated by  the Claimant through the exercise of skill, judgement and labour which was not in the public domain. The police officer had misused this confidential information by posting the list on the website forum and making copies of it for his own use. The police force was again vicariously liable for the police officer’s actions.

SECTION 38 FOIA: MEANING OF “ENDANGER”; IN-BUILT PUBLIC INTEREST

Posted on | by Robin Hopkins

The British Union for the Abolition of Vivisection’s requests for information from Newcastle University have reached the Tribunal system before: see my post from May this year on the Upper Tribunal decision concerning the meaning of “held”. The latest First-Tier Tribunal litigation between these parties, BUAV v IC and Newcastle University (EA/2010/0064), again considered information about project licences for experimentation on non-human primates. The Tribunal found that the University was required to disclose that information, except for a small amount which it was entitled to withhold on the basis of sections 38(1) (health and safety) and 43(2) (prejudice to commercial interests).

Section 38(1) crops up relatively infrequently at Tribunal level (for another notable example, see my post on the PETA case of 2010 – which, interestingly, also concerned a request to a university for information concerning animal experimentation). This BUAV decision is arguably now the leading case on this exemption.

There are four important points to note. First, what does “endanger” mean? BUAV submitted that it is the section 38 equivalent of “prejudice” as used in other exemptions. The University submitted that the “endangerment” requirement was met where there was a weighty chance of a risk to health or safety. The Tribunal drew a distinction between “risk” and ”danger”, saying this:

“We do not fully accept either submission. We must take into account that in s38(1) Parliament chose to use the word “endanger” and did not refer either to “injury” or to “prejudice”. On the other hand, considering the statutory purpose of freedom of information, balanced by exemptions, we are not persuaded that it would be right to read the word “endanger” in a sense which would engage the exception merely because of a risk. A risk is not the same as a specific danger. Every time a motorist drives on the road there is a risk that an accident may occur, but driving is only dangerous when a particularly risky situation arises. So, for example, there is always a risk that a researcher might become a target for persons opposing animal research by unlawful and violent means, but the researcher’s physical health would not be endangered unless a specific attack were made. We need to consider the likelihood of such an attack, and the likelihood of other conduct which would endanger mental health or other aspects of safety.”

Secondly, the Tribunal emphasised the importance of establishing a causal link between disclosure of the particular information and the envisaged danger:

“There is also a causation criterion to be met. We are not required to consider in the round the likelihood of the researchers or other persons being endangered, but specifically the likelihood of such endangerment as a result of disclosure of the requested information.”

For most of the requested information, section 38(1) was not engaged: the evidence showed the risk of harmful action by animal rights extremists to be low, and the evidence in support of engaging the exemption mainly comprised expressions of fear. A small amount of information did, however, come within the exemption because of how it was likely to be misconstrued. This raises the third important point, on which the Tribunal said this:

“In this connection we wish to make clear our view that information cannot generally be withheld simply because it might be misunderstood or taken out of context. A public authority can publish together with information released under FOIA whatever explanations or additional information it wishes. But we recognise that there comes a point where a particular piece of information may be so liable to be misunderstood and misused that the exemption is engaged.”

The fourth notable point concerns the in-built weight of the exemption. Section 38(1) is difficult to engage, but where it is engaged, the public interest in maintaining it is strong:

“Self-evidently, there would need to be very weighty countervailing considerations to outweigh a risk to health or safety which was of sufficient severity to engage section 38(1).”

Tim Pitt-Payne QC appeared for Newcastle University.

Robin Hopkins

AGGREGATION AND ARTICLE 10 IN THE FIRST-TIER TRIBUNAL: NEITHER NEEDED

Posted on | by Robin Hopkins

Sinclair v IC and Department for Energy and Climate Change (EA/2011/0052) concerned a request under the EIR from the Taxpayers’ Alliance for information on the potential financial and/or economic cost of Britain meeting a pledge to cut emissions by 42 per cent from 1990 levels by 2020. This pledge had been considered in connection with the Copenhagen Conference on climate change in 2009.

DECC refused this request, relying on regulations 12(5)(a) (disclosure would adversely affect international relations) and 12(4)(e) (internal communications).

In one of the first applications of the “aggregation” approach to the public interest test approved by the ECJ in the OFCOM case (on which, see here), the Commissioner held that the composite aggregated weight of the public interest factors in maintaining the two exceptions outweighed those which favoured disclosure – the international relations exception alone would not have sufficed.

The Tribunal was sufficiently impressed by DECC’s evidence to conclude that aggregation was not needed – the public interest in maintaining the international relations exception was sufficient to outweigh that in disclosure.

Interestingly, the Tribunal also considered an Article 10 ECHR argument: the appellant relied on that Article in support of his right to the requested information. The Tribunal found that Article 10 did not assist the appellant on the facts of his case. Its views on the application of Article 10 to information rights more generally was as follows.

In terms of authorities supporting the application of Article 10 to information rights, the high point was the Second Chamber decision in the ECtHR in Társaság a Szabadságjogokért v Hungary (Application no. 37374/05), in which the state had conceded that Article 10 rights were engaged where a civil liberties pressure group requested information about a complaint to the Constitutional Court.

Previous Grand Chamber authorities, however, had consistently rejected the proposition that Article 10 supported a right of access to official information.

The Tribunal is required to follow any clear and consistent Strasbourg jurisprudence. It found that “there is as yet no clear decision that Article 10 extends as far as Mr Sinclair submitted”.

11KBW’s Holly Stout appeared for the Information Commissioner.

Robin Hopkins

JUDICIAL REVIEW AND THE DPA: PATIENT’S CONSENT VITAL

Posted on | by Robin Hopkins

The Court of Appeal last week gave judgment in R (on the application of TA) v North East London NHS Trust (not yet reported or publicly available). The case is an interesting illustration of (a) the Data Protection Act 1998 being used as a ‘shield’ in an application for judicial review, and (b) the vital importance of patient consent in the use of medical records.

TA was engaged in family court proceedings with his ex-wife concerning custody of their children. Part of her evidence in support of her suitability to care for the children was the report of a psychiatrist at the defendant NHS Trust. According to that report, TA’s ex-wife did not suffer from a mental health disorder. TA complained to the Trust about this report. It refused to investigate the refusal because to do so would require it to access his ex-wife’s medical records. She had refused her consent to that access, and the Trust’s position was therefore that it could not investigate TA’s complaint without breaching the data protection principles in its processing of his ex-wife’s (sensitive) personal data. TA’s application for judicial review of the Trust’s refusal failed. So too did his appeal to the Court of Appeal.

Robin Hopkins

THREE NEW PUBLIC AUTHORITIES SUBJECT TO FOIA

Posted on | by Robin Hopkins

The Freedom of Information (Designation as Public Authorities) Order 2011 came into force on 1st November 2011. It brings the following three public authorities within the scope of FOIA: the Associaton of Chief Police Officers of England, Wales and Northern Ireland (ACPO); the Financial Ombudsman Service and the Universities and Colleges Admissions Service (UCAS).

VEXATIOUS REQUESTS: LOOK TO THE DICTIONARY, AND TO COMMON SENSE

Posted on | by Robin Hopkins

Readers with an eye on the correct application of section 14 of FOIA – vexatious requests – will be familiar with the ICO’s guidance on and approach to deciding whether a request meets that definition. The touchstones are obsessiveness, imposing a significant burden, lacking a serious purpose and/or causing distress, disruption or annoyance. The Tribunal has on many occasions approved those touchstones as being useful guidance. Two very recent decisions, however, have seen the Tribunal preferring to emphase a common-sense and dictionary-led approach in preference to a checklist of tests: see Graham v IC (EA/2011/0133-34) and Ainslie v IC and Dorset County Council (EA/2011/0097).

This fresh emphasis is encapsulated in the following words of the Tribunal:

“While the Information Commissioner may have developed his own guidance with respect to this matter; from the perspective of the tribunal the common sense application of the ordinary meaning of the word to the actual circumstances of an individual case must be the correct approach to adopt. The Oxford English dictionary provides useful guidance as to the meanings of vexatious and associated words. While this guidance extends over several columns it seems to the tribunal that a definition of “tending to cause trouble or harassment by unjustified interference” fairly summarises the meaning.”

Robin Hopkins