Google Spain and the CJEU judgment it would probably like to forget.

Posted on | by Akhlaq Choudhury

In the landmark judgment in Google Spain SL and Google Inc., v Agencia Espanola de Proteccion de Datos, Gonzales (13th May 2014), the CJEU found that Google is a data controller and is engaged in processing personal data within the meaning of Directive 95/46 whenever an internet search about an individual results in the presentation of information about that individual with links to third party websites.  The judgment contains several findings which fundamentally affect the approach to data protection in the context of internet searches, and which may have far-reaching implications for search engine operators as well as other websites which collate and present data about individuals.

The case was brought Mr Costeja Gonzales, who was unhappy that two newspaper reports of a 16-year old repossession order against him for the recovery of social security debts would come up whenever a Google search was performed against his name. He requested both the newspaper and Google Spain or Google Inc. to remove or conceal the link to the reports on the basis that the matter had long since been resolved and was now entirely irrelevant. The Spanish Data Protection Agency rejected his complaint against the newspaper on the basis that publication was legally justified. However, his complaint against Google was upheld. Google took the matter to court, which made a reference to the CJEU.

The first question for the CJEU was whether Google was a data controller for the purposes of Directive 95/46. Going against the opinion of the Advocate General (see earlier post), the Court held that the collation, retrieval, storage, organisation and disclosure of data undertaken by a search engine when a search is performed amounted to “processing” within the meaning of the Directive; and that as Google determined the purpose and means of that processing, it was indeed the controller. This is so regardless of the fact that such data is already published on the internet and is not altered by Google in any way.

 The Court went on to find that the activity of search engines makes it easy for any internet user to obtain a structured overview of the information available about an individual thereby enabling them to establish a detailed profile of that person involving a vast number of aspects of his private life.  This entails a significant interference with rights to privacy and to data protection, which could not be justified by the economic interests of the search engine operator.  In a further remark that will send shockwaves through many commercial operators providing search services, it was said that as a “general rule” the data subject’s rights in this regard will override “not only the economic interest of the operator of the search engine but also the interest of the general public in finding that information upon a search relating to the data subject’s name” (at paras 81 and 97). Exceptions would exist, e.g. for those in public life where the “the interference with…fundamental rights is justified by the preponderant interest of the general public in having…access to the information in question”.

However, the Court did not stop there with a mere declaration about interference. Given the serious nature of the interference with privacy and data protection rights, the Court said that search engines like Google could be required by a data subject to remove links to websites containing information about that person, even without requiring simultaneous deletion from those websites.

Furthermore, the CJEU lent support to the “right to be forgotten” by holding that the operator of a search engine could be required to delete links to websites containing a person’s information. The reports about Mr Costejas Gonzales’s financial difficulties in 1998 were no longer relevant having regard to his right to private life and the time that had elapsed, and he had therefore established the right to require Google to remove links to the relevant reports from the list of search results against his name. In so doing, he did not even have to establish that the publication caused him any particular prejudice.

The decision clearly has huge implications, not just for search engine operators like Google, but also other operators providing web-based personal data search services. Expect further posts in coming days considering some of the issues arising from the judgment.

Akhlaq Choudhury

11KBW at PDP’s FOI Conference

Posted on | by Robin Hopkins

PDP Conferences is hosting its 10th annual Freedom of Information Conference in London on 15 and 16 May, with 11KBW hosting the wine and canapés reception.

The conference will be chaired by Robin Hopkins.

The Deputy Information Commissioner, Graham Smith, is the keynote speaker, with Timothy Pitt-Payne QC also among the speakers on day 1 of the conference.

On day 2, 11KBW’s Ben Hooper will host one of the workshops.

The full programme can be found here.

Open Justice in the Supreme Court

Posted on | by Christopher Knight

The principle of open justice has been reaffirmed today by the Supreme Court in A v BBC [2014] UKSC 25, as have its limits. In A, a foreign national had been given notice of deportation following conviction for a sexual offence against a child. In the subsequent tribunal appeals (dating back to 2001), A was anonymised because of the Article 2 and 3 ECHR concerns he had over his treatment if deported. That anonymisation position was retained by the Court of Session in 2012 when A sought to judicially review the refusal of the Upper Tribunal to grant him permission to appeal. The Court of Session’s directions were made under section 11 of the Contempt of Court Act 1981. The BBC, having learned of the directions, applied to set them aside.

The Supreme Court unanimously held that it could be in the interests of justice to limit the open justice principle, considering the purpose of the open justice principle, the potential value of the information in advancing that purpose, and any risk of harm that its disclosure may cause to the maintenance of an effective judicial process or to the legitimate interests of others (see at [41]). Lord Reed held that the order allowing A to withhold his identity was in accordance with the court’s common law powers; the section 11 order was made in accordance with the power conferred by that provision; and it was not incompatible with the BBC’s Article 10 ECHR rights. Lord Reed also reiterated that the common law principles applied just as vigorously, even where the ECHR was engaged (at [55]-[57]), reiterating a point he had made at length in Osborn v Parole Board [2103] UKSC 61.

Christopher Knight

Open Justice and Court Files

Posted on | by Christopher Knight

Perhaps not hot off the press, but nonetheless worth noting, is the decision of the High Court last month in NAB v Serco & Home Office [2014] EWHC 1225 (QB), which reiterates the Court’s commitment to the open justice principle and press access.

B had been a detainee in an immigration removal centre, in which she alleged she had been sexually assaulted by a male nurse employed by Serco. She brought claims against Serco (in vicarious liability for the assault) and the Home Office (for false imprisonment) for damages. A statement was filed which exhibited Serco’s internal investigation report into B’s complaint of assault. Serco settled the claim, but the claim proceeded against the Home Office. The exhibited report remained part of the trial bundle but was not referred to in the judgment and was not relevant to the issues between B and the Home Office. After the judgment, the Guardian applied for a declaration that B could lawfully provide it with a copy of the report, under CPR r.31.22.

Bean J granted the declaration. It is now fairly well-established that in R (Guardian News and Media Ltd) v City of Westminster Magistrates’ Court [2012] EWCA Civ 420, [2013] QB 618 it had been held that in a case where documents had been placed before a judge and referred to in the course of proceedings, and the default position should be that access to those documents should be permitted on the open justice principle. Although it was an unusual feature that Serco was no longer a party to the claim and the report was no longer relevant to the issues in the case, those matters were not decisive. The particulars of claim and other pleadings were public documents subject to inspection as of right under CPR r.5.4C(1). The fact of the allegations having been made was therefore in the public domain. If after the settlement, but before the case against the Home Office had come to trial, the Guardian had applied under r.5.4C(2) for access to the report, the application, would have succeeded, just as it would had it been made at any time before the Court disposed of the file. There was a proper journalistic reason for seeking the report, and it was sometimes important to understand why a claim had settled. Providing the individuals were anonymised, the Guardian could be provided with the report.

The application of the open justice principle, and the ability of journalists to access court documents remains a current trend in the case law – given a kick-start by Guardian v Westminster and an unexpected sidewind in Kennedy v Charity Commission [2014] UKSC 20 – and NAB is a helpful reminder of its utility when using the existing court records access provisions in the CPR.

Christopher Knight

Legal professional privilege does not automatically engage an EIR exception

Posted on | by Robin Hopkins

FOIA provides an exemption (s. 42) expressly for legal professional privilege; as is well known, there is ‘strong inherent weight’ in maintaining that exemption. What about the EIRs? LPP is not expressly mentioned, but regulation 12(5)(b) EIR applies to information the disclosure of which would adversely affect “the course of justice, the ability of a person to receive a fair trial or the ability of a public authority to conduct an inquiry of a criminal or disciplinary nature”. Does information attracting LPP automatically come within that exception? Many practitioners operate on the assumption that the answer is ‘yes’. The Upper Tribunal has on a previous occasion, however, left that question open: DCLG v IC and Robinson [2012] UKUT 103 (AAC); [2012] 2 Info LR 43.

That question has recently been revisited. In GW v IC, Local Government Ombudsman and Sandwell MBC [2014] UKUT 0130 (AAC), the Upper Tribunal answered ‘no’: just because LPP applies, it does not automatically follow that regulation 12(5)(b) EIR is engaged. Further analysis is needed – and the onus is on the public authority to make out its case on adverse effects on the course of justice etc.

The requester has complained to the Council about what was being emitted from the chimneys of two of his neighbours who were using wood-burning stoves. The Council obtained written legal advice from counsel. It told the requester it could not progress his complaint as he wished. He complained to the Ombudsman. The Council shared its legal advice with the Ombudsman, expressly on a confidential basis. The requester sought that advice from the Ombudsman. His request was refused. The IC’s decision went against him. So too did that of the First-Tier Tribunal.

The Upper Tribunal, however, found that the FTT went wrong in attributing too much weight to the prejudicial effects which it thought likely to arise “simply through the weakening of this important doctrine” [of LPP].

UT Judge Turnbull considered the wording of regulation 12(5)(b) EIR and said this: “In my judgment that requires attention to be focused on all the circumstances of the particular case, and there is no room for an absolute rule that disclosure of legally privileged information will necessarily adversely affect the course of justice”.

The crux, in his judgment was this: “What particularly matters for present purposes is in my judgment that the rationale for the doctrine and its absolute nature is established as being the need for the client to be able to obtain legal advice on a full and frank basis”.

In the present case, disclosure would be unlikely to prejudice that underlying principle – the Council’s ability to obtain free and frank advice would not be impeded. “What might be damaged would be not the course of justice but the ability of the LGO to conduct future investigations on a fully informed basis” – but that was a different point to the one at the heart of the FTT’s reasoning. The FTT had thus gone wrong in its public interest analysis.

Interestingly, one factor in the UT’s reasoning appears to have been that it was not taken to “any particular part or feature of the Advice which the Council would be unhappy about disclosing, or pointed to any specific concern which it has about Mr W or the public in general seeing it. Nor has it been suggested, for example, that the Advice needs to be qualified because of some inaccuracy or incompleteness in the instructions to counsel. The weight to be accorded to the adverse effect on the course of justice in this case is in my judgment very substantially less than it would have been if the LGO had been able to rely on the weakening of the doctrine of LPP which compulsory disclosure of legal advice will almost always involve”. This offers useful indications of what, in this UT’s view, might suffice to engage regulation 12(5)(b) EIR in respect of information which attracts LPP.

The public authorities also sought to rely on regulation 12(5)(d) EIR (confidentiality of proceedings). By regulation 12(9), however, that exception cannot be relied upon “to the extent that the environmental information to be disclosed relates to information on emissions”. Did that disapplication provision bite here? No, said the UT: “In substance the Advice did not “relate to” information as to the particular nature and extent of those emissions, but rather it related to the meaning and effect of the legislation”. In this case, regulation 12(5)(d) EIR was engaged.

Turning to the public interest balance, a preliminary point addressed by the UT concerned timing: matters post-dating the statutory time for compliance with a request can only properly be taken into account to the extent that they shed light on matters as they stood up to that time, or if they are relevant to the IC’s ‘steps discretion’ under s. 50(4) FOIA. They are not otherwise relevant to the public interest balance.

What might count in favour of the disclosure of privileged information? “In my judgment, therefore, when considering this issue it is relevant to consider not only whether the Council (and/or the LGO) made statements which were positively wrong, but whether they made statements which were liable to mislead or confuse the reader, and so have generated a confusing picture as to the effect of and reasoning behind the Advice”.

In this case, while there was no intention to mislead, “the combined effect of the information which the LGO and the Council had given up to this point was liable to create substantial confusion, in the mind of any reasonable reader, as to what the Advice did say”.

As to the public interest in maintaining the exception, the main factor was “the effect which disclosure would have on the ability of the LGO to obtain legally privileged information from local authorities on the footing that it should remain confidential” – especially given that the Ombudsman cannot compel local authorities to share such information with it. There would thus be a chilling effect on such information-sharing.

In contrast, the unfairness to the Council of having its legal advice shared with the requester was a relatively weak factor.

Overall, however, the balance very firmly favoured the maintenance of the exception. In this case therefore, the likely damage to the LGO’s work prevailed where LPP had not.

Robin Hopkins @hopkinsrobin

Local Government Transparency Code

Posted on | by Christopher Knight

The Secretary of State for Communities and Local Government has just issued a Local Government Transparency Code in exercise of his powers under section 2 of the Local Government, Planning and Land Act 1980 to issue a Code of Recommended Practice as to the publication of information by local authorities about the discharge of their functions and other matters which he considers to be related.

The Code sets out in some detail in Part 2 the type of information held by local authorities which must be published (some of it annually) and in Part 3 the information which, in the view of the Secretary of State, ought to be published. A helpful Annex A provides the details in tabular form.

Paragraph 14 of the Code provides that: “Where information would otherwise fall within one of the exemptions from disclosure under the Freedom of Information Act 2000, the Environmental Information Regulations 2004, the Infrastructure for Spatial Information in the European Community Regulations 2009 or falls within Schedule 12A to the Local Government Act 1972 then it is in the discretion of the local authority whether or not to rely on that exemption or publish the data.” There is therefore no attempt to override the FOIA exemptions. But where a qualified exemption applies, the appearance of the requested information in one of the categories set out in the Code will have a role (possibly a significant role) in establishing the public interest in support of disclosure.

Christopher Knight