ICO cannot have a second go

Okay, the following points are mainly about procedure, but they are nonetheless quite important for those involved in FOIA litigation before the Tribunals. These points come from a pair of recent Upper Tribunal decisions, both arising out of requests from the same requester.

One is IC v Bell [2014] UKUT 0106 (AAC): Bell UT s58. Question: suppose the First-Tier Tribunal thinks the ICO got it wrong in its decision notice. Can it remit the matter to the ICO for him to think again and issue another decision notice on the same complaint? Answer: no, it can’t; it must dispose of the appeal itself. There are some exceptions, but that is the general view with which parties should approach Tribunal litigation.

That Bell decision also comments on the importance, in relevant circumstances, of the Tribunal ensuring that it gets the input of the public authority and not just of the ICO, as there will be cases where only the public authority can really provide the answers to questions that arise at the Tribunal stage.

That same Bell decision also explores this point, for those with an interest in FOIA and statutory construction (surely there are some of you?): under s. 58 of FOIA, unless the Tribunal is going to dismiss an appeal, it must “allow the appeal or substitute such other notice as could have been served by the Commissioner” (my emphasis). That is curious. Quite often, Tribunals do both of those things at the same time. What to make of this? Judge Jacobs explains in the Bell decision.

There was also a second Bell appeal on the same day: Bell UT s14. Same Bell, different public authority and separate case: IC and MOD v Bell (GIA/1384/2013). This was about s. 14 of FOIA (vexatious requests). The public authority had provided lots of detail about the background to the series of requests to make good its case under s. 14. But there was a paper hearing rather than an oral one and the Tribunal appears to have overlooked some of that detail and it found that s. 14 had been improperly applied.

Judge Jacobs overturned that decision. One reason was this: when a binding and decisive new judgment (here, Dransfield) appears between the date of a hearing and the date of the Tribunal’s final deliberations, justice requires that the parties be given an opportunity to make submissions on the application of that judgment.

Another was that the Tribunal had failed properly to engage with the documentary evidence before it. “That is why the papers were provided: to be read. A tribunal is not entitled to rely on the parties to point to the passages that it should read and to look at nothing else” (my emphasis). This underlined point is obviously of general application to Tribunal litigation.

Robin Hopkins @hopkinsrobin

Data protection and compensation: the “irreversible march” towards revolutionary change

At 11KBW’s Information Law conference this past Tuesday, I talked a bit about the progress of the draft EU Data Protection Regulation. I omitted to mention last week’s development (my reason: I was on holiday in Venice, where data protection seemed less pressing). In a plenary session on 12 March, the European Parliament voted overwhelmingly in support of the Commission’s current draft of the Regulation. This is all explain in this Memo from the European Commission. Here are some key points.

One is the apparently “irreversible” progress towards getting the Regulation onto the EU statute books. “The position of the Parliament is now set in stone and will not change even if the composition of the Parliament changes following the European elections in May. As a reminder, the remaining stage is for the European Council to agree to the proposal. Its ministers are meeting again in early June. So far, they have been broadly supportive.

Another point is about business size and data protection risk: SMEs will not need to notify (so where will the ICO get its funding?), they won’t need to have data protection officers or carry out privacy impact assessments as a default rule. “We want to make sure that obligations are not imposed except where they are necessary to protect personal data: the baker on the corner will not be subject to the same rules as a (multinational) data processing specialist.”

A third point has great consequences for international transfers: “Non-European companies, when offering services to European consumers, will have to apply the same rules and adhere to the same levels of protection of personal data. The reasoning is simple: if companies outside Europe want to take advantage of the European market with more than 500 million potential customers, then they have to play by the European rules”.

Fourth, the “right to be forgotten” is still very much on the agenda. “If an individual no longer wants his or her personal data to be processed or stored by a data controller, and if there is no legitimate reason for keeping it, the data should be removed from their system” (subject to freedom of expression). This “citizen in the driving seat” principle, like the consistency aim (the same rules applied the same away across the whole EU) and the “one-stop shop” regulatory model has been part of the reform package from the outset.

A final point is that the Parliament wants regulators to be able to impose big fines: “It has proposed strengthening the Commission’s proposal by making sure that fines can go up to 5% of the annual worldwide turnover of a company (up from 2% in the Commission’s proposal)”. Monetary penalties will not be mandatory, but they will potentially be huge.

On this last point about money: as under the current law, a regulatory fine is one thing and the individual’s right to be compensated another. At out seminar on Tuesday, we discussed whether there would soon be a sweeping away (see for example the Vidal-Hall v Google litigation) of the long-established Johnson v MDU principle that in order to be compensated for distress under section 13 of the DPA, you need first to prove that you suffered financial loss. That may well be so for the DPA, in which case the short- and medium-term consequences for data protection litigation in the UK will be huge.

But it is important to be clear about the longer term: this is going to happen anyway, regardless of any case-law development in UK jurisprudence. Article 77 of the current draft of the Regulation begins like this “Any person who has suffered damage, including non-pecuniary damage, as a result of an unlawful processing operation or of an action incompatible with this Regulation shall have the right to claim compensation from the controller or the processor for the damage suffered”.

If we are indeed irreversibly on track towards a new Regulation, then data protection litigation – notably, though not only about compensating data subjects – is guaranteed to be revolutionised.

Robin Hopkins @hopkinsrobin

A history and overview of the FOIA/EIR veto

The ‘veto’ (ministerial certificate) provision under s. 53 of FOIA (imported also into the EIRs) has been much discussed – on this blog and elsewhere – of late. Here is another excellent resource on the subject which is worth drawing to the attention of readers who want to understand this issue in more detail. Earlier this week, the House of Commons library published this note by Oonagh Gay and Ed Potton on the veto, its use to date, and comparative jurisdictions (Australia, New Zealand, Ireland).

Robin Hopkins @hopkinsrobin

Stop Press: Supreme Court to Hand Down Kennedy Judgment on Weds 26 March 2014

The Supreme Court has announced on its website that it will hand down judgment in the long-running saga of Kennedy v Charity Commission on Wednesday 26 March 2014. The judgment is expected to address the construction of section 32 FOIA and the extent to which Article 10 ECHR can be used to found a right of access to information. The judgment hand-down will be at 9.45 and can be watched live through the Supreme Court’s website.

Christopher Knight

Government security classifications to change on 2 April 2014

The government currently uses a scheme of ‘protective markings’ to classify the sensitivity of the information and documents it holds.  The protective markings are, in ascending order of security, protect; restricted; confidential; secret; top secret.  For further information see the HMG Security Policy Framework.

As of 2 April 2014 protective markings will be abolished and replaced by ‘security classifications’.  Those security classifications will be ‘official’, ‘secret’, and ‘top secret’.

For further information see the document Government Security Classifications and accompanying guidance.

Thomas Ogg

The Not Entirely Secret Diary of Mr Lansley

 What considerations are relevant when deciding whether a Ministerial diary should be disclosed under FOIA?  The decision of the First-tier Tribunal in Department of Health v Information Commissioner EA/2013/0087 is, perhaps surprisingly, the first Tribunal decision to address this issue.  The judgment engages with a number of difficult issues:  the Tribunal’s approach to Government evidence, the value of cross-examination in Tribunal hearings, aggregation of public interests under FOIA, and Parliamentary privilege.  Hence it is of general importance, going beyond the intrinsic interest of its specific subject matter.

The request was for the Ministerial diary of the Rt Hon Andrew Lansley MP for the period 12th May 2010 to 30th April 2011, during which he was Secretary of State for Health.  During this period, the Minister’s primary focus was the Department’s NHS reform programme.  The requester was a journalist dealing with health issues.  After the Department refused the request, and maintained its refusal on internal review, the requester complained to the Information Commissioner.  In the course of the Commissioner’s investigation the Department disclosed a heavily redacted version of the diary.

The Commissioner ordered the Department to disclose the whole diary, with very limited redactions.  On the Department’s appeal, the First-tier Tribunal upheld the Commissioner’s decision, with minor modifications reflecting points that were conceded by the Commissioner before the Tribunal.

The material before the Tribunal included witness statements from Sir Alex Allan and Paul Macnaught in support of the Department’s case.  Sir Alex is a distinguished former civil servant, currently the Prime Minister’s Independent Adviser on Ministerial Interests.  Mr. Macnaught is the Director of Assurance at the Department.  The Commissioner had initially accepted that the hearing should take place without oral evidence, but on the Tribunal’s request Sir Alex and Mr. Macnaught attended the hearing and were questioned.

At the start of its decision, the Tribunal considered whether the entire contents of the diary were “held” by the Department, within the meaning of FOIA section 3(2).  In this context it focused on the entries that related to non-Ministerial activities such as constituency work.  The Department accepted that these entries were held by the Department when they were first made, but contended that by the time of the request the Department was merely providing electronic storage for this information.  The Tribunal rejected this.  There was no evidence of the Minister asking the Department to store this information; and even after the engagements had been fulfilled the information remained of potential value to the Department, e.g. if there was a need to check where the Minister had been at a particular time.  The whole of the diary, therefore, was held by the Department and potentially disclosable under FOIA.

As to the personal data exemption (section 40(2)), there was little controversy except in relation to meetings between the Minister and constituency MPs acting as elected representatives.  The Commissioner considered that the identity of the MPs should be disclosed; the Department did not concede this; and the Tribunal agreed with the Commissioner.

In relation to the national security exemption (ss 23(5) and 24(2)) there was no dispute between the Commissioner and the Department as to the information that ought to be withheld.  The Tribunal considered that it would be sterile to address the areas of disagreement as to the precise application of these two exemptions.

The main area of controversy was the application of the exemptions in s 35(1)(a) (formulation or development of Government policy), s 35(1)(b)  (Ministerial communciations), and s 35(1)(d) (operation of a Ministerial private office).  By the time the Tribunal came to make its decision, the Commissioner accepted that these exemptions were applicable where claimed by the Department: so the issue was whether the public interest in maintaining the exemptions outweighed the public interest in disclosure.

At the start of its consideration of the public interest test, the Tribunal addressed a number of general issues.

It began by considering the value of oral evidence.  The Tribunal referred to what was said about cross-examination by the Upper Tribunal in APPGER v IC and FCO [2013] UKUT 560 (AAC).  It interpreted the Upper Tribunal’s remarks as highlighting the need to consider whether cross-examination was necessary in the particular case, but not as ruling it out.  The Tribunal considered that oral evidence and cross-examination could often be of great assistance; in particular it affirmed the value of testing the public authority’s evidence in this way where cases involved a difficult judgment on the balance of public interest.  Cross-examination could be especially important where there was closed evidence.

Next, the Tribunal considered the extent to which deference should be given to Government evidence, and the relevance (if any) of the case law about public interest immunity (PII) when applying the public interest test under FOIA.  The Tribunal rejected the contention that FOIA cases and PII cases should in all respects be approached in the same way.  The remarks in the APPGER case about the relevance of PII were intended to emphasise the need, in both PII and FOIA cases, properly to identify the factors for and against disclosure; they were not meant to assimilate FOIA and PII in all respects.  The Tribunal accepted that proper weight should be given to the expertise of Government witnesses; but, if “deference” meant that their evidence should be accepted unless it lacked any rational basis or was given in bad faith, then the Tribunal rejected the suggestion that it should show deference to that evidence.  Broadly speaking, the Tribunal accepted that the Government’s expertise would carry greater weight in relation to state security or international relations than in s 35 cases, but this was not a hard and fast distinction.

When it came to striking the public interest balance, the Tribunal emphasised the need to identify the particular benefits and detriments, and their likelihood, on each side of the equation.  At the same time, the Tribunal recognised the assumption underlying FOIA, that there is a general public interest in the transparency of public authorities; in many cases it would only be possible for the benefits of disclosure to be identified at a high and generic level.  It indicated that the inclusion (e.g. in skeleton arguments) of a table summarising the various factors and their significance could often be of assistance.

The discussion of aggregation is particularly interesting.  Since the decision of the European Court in the Ofcom case, Tribunals in EIR cases have been required to look at exemptions on an aggregated basis, considering the overall public interest balance for and against disclosure; there is as yet no definitive judgment as to whether the same approach applies under FOIA.  Here, the Tribunal took a middle position between the submissions made for the Department and the Commissioner.  It accepted (contrary to the Commissioner’s position) that aggregation applied under FOIA.  But it took a more limited view of aggregation than did the Department:  properly understood, Ofcom supported aggregation in EIR cases only where there was an overlap between the interests served by the different exemptions, and the same approach should be applied under FOIA.

In relation to Parliamentary materials, the Department had relied upon parts of chapter 6 of the House of Commons Justice Committee report:  Post-legislative scrutiny of the Freedom of Information Act 2000 (3rd July 2012).  The Tribunal considered whether it was proper to take this material into account, having regard to Parliamentary privilege.  It discussed the decision of Stanley Burnton J in the OGC case, and the less restrictive approach to the use of Parliamentary materials adopted in the R (Age UK) v Secretary of State for Business, Innovation and Skills [2009] EWHC 2336 (Admin):  the Tribunal decided to follow the Age (UK) case.  The Tribunal took into account the material relied upon by the Department, and found it helpful by way of background, but stated that it would be inappropriate to rely on any particular view expressed to or by the Parliamentary Committee.

The Tribunal then carried out the public interest balance in relation to the disputed information (i.e. the relevant Ministerial diary).  In respect of both the interests favouring disclosure and the interests in maintaining the section 35 exemptions, the Tribunal summarised its conclusions in a table, setting out the factors taken into account and the impact of disclosure on those factors.  For instance, in terms of the interests served by disclosure, it considered that there would be a “positive” impact in relation to “accountability:  whether the public was getting good value from the Minister and whether he was properly carrying out his functions”.  In terms of the adverse impacts of disclosure, it considered that a “modest additional burden” was likely by reason that “potentially misleading information would need to be explained”.  A number of factors for and against disclosure were listed and assessed in a similar way.

In order to reach the conclusions set out in tabulated form, the Tribunal conducted a detailed assessment of the evidence given.  It was critical of some of the evidence given by the Department’s witnesses, and was careful to explain why despite their expertise it was departing from that evidence in some regards: this is the practical application of the Tribunal’s discussion of deference, earlier in the decision.  For instance, in relation to the public interest in favour of disclosure, the Department’s evidence was that this interest was substantially met by the publication of quarterly information releases about ministerial activity.  The Tribunal was critical of this part of the evidence for giving insufficient weight to the fact that the information releases (unlike the diary) did not cover meetings by video conference or telephone.  In relation to the public interests for maintaining the exemption, the Tribunal considered that some of the Department’s evidence was unrealistic:  for instance, it did not accept that the prospect of disclosure of their diaries would encourage Ministers to arrange unnecessary meetings as window dressing in order to deflect potential public criticism.  The overall effect of these criticisms, according to the Tribunal, was to reduce their confidence in the objectivity of the evidence and the accuracy and soundness of the witnesses’ evaluative judgments.

Overall, the Tribunal’s assessment was that the factors in favour of disclosure outweighed those in favour of maintaining the exemptions, but not by a particularly large margin.  With limited exceptions – reflecting concessions made by the Commissioner at the hearing – it upheld the Commissioner’s decision in favour of disclosure.

Apart from the interest of its specific subject-matter, the case is of general importance in relation to the Tribunal’s approach to the public interest test, especially under section 35.  It both exemplifies and defends the Tribunal’s established approach:  i.e. the Tribunal will consider Government evidence carefully; witnesses will be cross-examined on their assessment of the factors for and against disclosure; the Tribunal will take account of witness expertise, but will ultimately form its own view; and the Tribunal will reject Government evidence where it thinks it appropriate to do so, notwithstanding the absence of witness evidence taking a contrary view.  The central question on any appeal will be whether this approach requires modification.

Timothy Pitt-Payne QC