We are excited to announce: Panopticon is proliferating! You will now be able to get your Panopticon fix on three different platforms.
X/Twitter
Follow us at @11KBWpanopticon to stay up to date on the latest developments in info, tech and media law and to get instant reaction and analysis from the team.
11KBW Panopticon Podcast
Keep your ears peeled wherever you get your podcasts. Our debut episode will be available shortly, and features Anya Proops KC telling me (Leo Davidson) all about the new Online Safety Act 2023. Future episodes will cover a diverse range of topics in info, tech and media law.
Revamped blog
You may have noticed that the blog is getting a revamp. We hope this will improve your experience and make reading updates on info, tech and media law even more enjoyable than it already is (scientists now believe this is possible).
If you have any feedback on anything we’re doing (or not doing!), let us know at panopticon@11kbw.com.
Clearview: international data jurisdiction in action
Our increasingly Internet-centric lives create many possibilities for digital interaction and intrusion, which may be thrilling or troubling depending on one’s perspective.
Facial recognition technology is a particularly stark instance of those possibilities, and of the risks and benefits associated with them. There has been significant public debate concerning facial recognition technology in the UK. In some other countries, notably China, the technology is already in widespread use, and provides a simple, efficient and effective vector for biometric identification by the state and the private sector alike. The potential unlocked by a biometric identification vector which operates on faces (the primary means of direct human interaction with the physical world), for security purposes, targeted advertising, and much else besides, is obvious. The privacy and anonymity implications, and the risks of over-use of such technology, are also obvious. Continue reading
Clearview AI succeeds in jurisdictional appeal before the First-tier Tribunal
The First-tier Tribunal has given judgment in Clearview AI Inc v The Information Commissioner [2023] UKFTT 00819 (GRC).
The case concerned an enforcement notice and a £7.5 million Penalty Notice issued by the Commissioner to Clearview AI, an American facial recognition company, in May 2022. The Tribunal found that the Commissioner had no jurisdiction to issue either notice, on the basis that the GDPR/UK GDPR did not apply to the processing in issue. Accordingly, the Tribunal overturned both notices.
A more detailed case report will follow on Panopticon. In the meantime, the judgment can be found here.
Anya Proops KC, Christopher Knight and I acted for Clearview AI, instructed by Jenner and Block London LLP.
Timothy Pitt-Payne KC and Jamie Susskind acted for the Information Commissioner, instructed by the Information Commissioner’s Office.
Art.10 rights attenuated by contract: R (Craighead) v Secretary of State for Defence [2023] EWHC 2413 (Admin)
“Grabbing his ballistic body armour, Diemaco C8 assault rifle and Glock 9mm pistol, and with a balaclava pulled over his head to protect his identity, the soldier swept into the area where the firefight was going on, engaged the enemy and led several civilians to safety outside.”
In January 2019, five terrorists launched a major attack at a hotel complex in Nairobi, Kenya, killing at least 21 people. A then fully-badged SAS soldier, who goes by the pseudonym “Christian Craighead”, intervened, assisting the Kenyan authorities, and later earned an award for his conspicuous gallantry. Mr Craighead wishes to tell his story.
He wrote a book, which he wants to publish, providing “an insider’s account of how a young man with a difficult upbringing served his country and saved lives during the Incident”. He is bound, however, by a confidentiality contract providing that unless he obtains ‘express prior authority in writing’ (“EPAW”) he would not disclose any information about the work of the UK Special Forces. The Ministry of Defence refused EPAW on the basis of its assessment that the material in the book is covered by the confidentiality contract and its publication would cause damage to national security. Continue reading
Online safety – evening briefing on 3 October 2023
As foreshadowed in our post of 20 September 2023, we are pleased to announce an evening briefing session with leading data and internet specialists Anya Proops KC and Jamie Susskind on the Online Safety Act, arguably the most significant new law in a generation.
We have happily managed to secure a larger venue than expected for this event, and so there are still some places available. Please RSVP at RSVP@11kbw.com if you wish to attend.
Date: Tuesday, 3rd October 2023
Time: 6:30 PM – 7:30 PM
Venue: IET London: Savoy Place, London WC2R 0BL
Delegate Charge: This event is free of charge
A Data Bridge over Troubled Waters?
On 12 October 2023, the Data Protection (Adequacy) (United States of America) Regulations 2023 will come into effect and the UK-USA ‘data bridge’ will be effected. This will mean that, under the terms of the revised EU-US Data Privacy Framework, and the UK Extension to it, transfers of personal data from the UK to a person in the USA on the Data Privacy Framework List, will be deemed to meet the test of adequacy for the purposes of the UK GDPR and the DPA 2018. Continue reading