Tag: Article 8 ECHR

Redacting for anonymisation: Article 8 v Article 10 in child protection context

Posted on | by Robin Hopkins

Panopticon has reported recently on the ICO’s new Code of Practice on Anonymisation: see Rachel Kamm’s post here. That Code offers guidance for ensuring data protection-compliant disclosure in difficult cases such as those involving apparently anonymous statistics, and situations where someone with inside knowledge (or a ‘motivated intruder’) could identify someone referred to anonymously in a disclosed document. The Upper Tribunal in Information Commissioner v Magherafelt District Council [2012] UKUT 263 AAC grappled with those issues earlier this year in the context of disclosing a summarised schedule of disciplinary action.

Redaction is often crucial in achieving anonymisation. Getting redaction right can be difficult: too much redaction undermines transparency, too much undermines privacy. The Court of Appeal’s recent judgment In the matter of X and Y (Children) [2012] EWCA Civ 1500 is a case in point. It involved the publication of a summary report from a serious case review by a Welsh local authority’s Safeguarding Children Board. The case involved very strong competing interests in terms of Article 8 and Article 10 ECHR. For obvious reasons (anonymity being the key concern here) little could be said of the underlying facts, but the key points are these.

A parent was convicted in the Crown Court of a serious offence relating to one of the children of the family (X). The trial received extensive coverage in the local media. The parent was named. The parent’s address was given. The fact that there were other siblings was reported, as also their number. All of this coverage was lawful.

The local authority’s Safeguarding Children Board conducted a Serious Case Review in accordance with the provisions of the Children Act 2004 and The Local Safeguarding Children Boards (Wales) Regulations 2006. Those Regulations require the Board to produce an “overview report” and also an anonymised summary of the overview report. The relevant Guidance provides that the Board should also “arrange for an anonymised executive summary to be prepared, to be made publicly available at the principal offices of the Board”.

Here two features of the draft Executive Summary were pivotal.

First, reference was made to the proceedings in the Crown Court in such a way as would enable many readers to recognise immediately which family was being referred to and would enable anyone else so inclined to obtain that information by only a few minutes searching of the internet.

Second, it referred, and in some detail, to the fact, which had not emerged during the proceedings in the Crown Court and which is not in the public domain, that another child in the family (Y), had also been the victim of parental abuse.

The local authority wanted to publish the Executive Summary, seeking to be transparent about its efforts to put right what went wrong and that it has learned lessons from X’s death. It recognised the impact on Y, but argued for a relaxtion of a restricted reporting order to allow it to publish the Executive Summary with some redactions. It was supported by media organisations who were legally represented.

The judge (Peter Jackson J) undertook a balance of interests under Articles 8 and 10. He allowed publication, with redactions which were (in the Court of Appeal’s words) “in substance confined to three matters: the number, the gender and the ages of the children.”

In assessing the adequacy of these redaction, the Court of Appeal considered this point from the judgment of Baroness Hale in ZH (Tanzania) v Secretary of State for the Home Department [2011] UKSC 4, [2011] 2 AC 166, at paragraph 33:

“In making the proportionality assessment under article 8, the best interests of the child must be a primary consideration. This means that they must be considered first. They can, of course, be outweighed by the cumulative effect of other considerations.”

Munby LJ thus concluded (paragraph 47 of this judgment) that “it will be a rare case where the identity of a living child is not anonymised”.

He recognised, on the other hand, that Article 10 factors always retained their importance: “there could be circumstances where the Article 8 claims are so dominant as to preclude publication altogether, though I suspect that such occasions will be very rare.”

On the approach to anonymisation through redaction, Munby LJ had this to say (paragraph 48):

“In some cases the requisite degree of anonymisation may be achieved simply by removing names and substituting initials. In other cases, merely removing a name or even many names will be quite inadequate. Where a person is well known or the circumstances are notorious, the removal of other identifying particulars will be necessary – how many depending of course on the particular circumstances of the case.”

In the present case, the redactions had been inadequate. They did not “address the difficulty presented by the two key features of the draft, namely, the reference to the proceedings in the Crown Court and the reference to the fact that Y had also been the victim of parental abuse” (paragraph 53).

Far more drastic redaction was required in these circumstances: to that extent, privacy trumped transparency, notwithstanding the legislation and the Guidance’s emphasis on disclosure. In cases such as this (involving serious incidents with respect to children), those taking disclosure decisions should err on the side of heavy redaction.

Robin Hopkins

 

Important developments in surveillance law: RIPA and CCTV

Posted on | by Robin Hopkins

Important changes to the Regulation of Investigatory Powers Act 2000 come into force from 1 November 2012, thanks to the Protection of Freedoms Act 2012 (Commencement No. 2) Order 2012, passed last week. This is an extremely important development for local authorities.

Local authorities are empowered under RIPA to use three surveillance techniques: directed surveillance, the deployment of a Covert Human Intelligence Source (CHIS) and accessing communications data. Early in its term, the Coalition government indicated that it would impose additional safeguards on local authorities’ use of such powers, responding in part to concerns aired by Big Brother Watch and others (see our post here and the recent ‘Grim RIPA’ report here). Chapter 2 of Part 2 of the Protection of Freedoms Act 2012 Act amended RIPA so as to require local authorities to obtain the approval of a magistrate for any authorisation for the use of a covert investigatory technique.

The procedure for obtaining judicial approval may be much like that involved in obtaining search warrants. It remains to be seen how magistrates scrutinise the reasoning and evidence supporting an authorisation so as to ensure that the conditions laid down by RIPA – in particular, necessity and proportionality – are satisfied. Ibrahim Hasan has discussed the changes in his Local Government Lawyer piece here.

Last week also saw a second important announcement on surveillance. The government has announced that it is busy with preparatory work on a new CCTV code of practice, with the aim of consulting on the draft code over the autumn and bringing the new one into force in April 2013. Authorities specified in s. 33(5) of the Protection of Freedoms Act 2012 have a duty to have regard to the code, and other system operators will be encouraged to adopt it on a voluntary basis.

The Home Office Minister, Jeremy Browne MP, told the House of Commons last week that the government is “committed to ensuring that any deployment in public places of surveillance cameras, including close circuit television (CCTV) and automatic number plate recognition (ANPR), is appropriate, proportionate, transparent and effective in meeting its stated purpose”.

Oversight of – and independent recommendations about – the new code will fall to Andrew Rennison, who will remain in post as both surveillance camera commissioner and forensic science regulator until February 2014.

If one adds the Local Authorities (Executive Arrangements) (Meetings and Access to Information) (England) Regulations 2012, also passed last week (see my post here), this is clearly a time of great flux in terms of the information law landscape for local authorities in particular.

Robin Hopkins

The Data Protection Act in defamation cases: increasingly relevant, potentially primary?

Posted on | by Robin Hopkins

The Data Protection Act 1998 is increasingly being deployed as part of a claimant’s arsenal in defamation claims. The Information Commissioner has historically resisted policing DPA breaches in the context of allegedly defamatory expressions of opinion by one person about another.

Courts, on the other hand, have accepted that expressions of opinion about individuals are (as the definition at section 1 of the DPA makes clear) personal data, and that the DPA can therefore bite. This has arisen, for example, in the context of Norwich Pharmacal claims seeking the disclosure of the identities of users posting allegedly defamatory material. See for example Applause Store Productions Ltd and another v Raphael [2008] EWHC 1781 (QB), on which Anya posted here.

The use of the DPA in defamation claims (or cases which, though brought under the DPA, look in substance like defamation claims) has, it seems, gathered momentum. In late 2011, Tugendhadt J gave judgment in a case about the ‘solicitors from hell’ website:  The Law Society and others v Rick Kordowski [2011] EWHC 3185 (QB), on which Rachel Kamm posted here.

Last month, the DPA was again successfully relied upon as founding an arguable defamation-type claim. Desmond v Foreman, Shenton, Elliott, Cheshire West and Cheshire Council and Cheshire East Council [2012] EWHC 1900 (QB), involved a cover teacher who was suspended and ultimately dismissed following allegations that he had conducted himself in an inappropriate sexual manner towards a sixth-form student. The case involved a number of communications: meetings to discuss the allegations; requests for information from the police and previous employers; referrals to the Independent Safeguarding Authority, and queries about his home situation made by an officer of one local authority to an officer at another.

The claimant contended that a number of these communications implied that he was actually guilty of and had actually committed various serious offences (including rape, of which he had been accused in 2001 but exonerated through court proceedings). He brought a defamation claim, also contending that the allegedly defamatory statements infringed his rights under Article 8 and the DPA (in particular, breaches of data protection principles 1, 2, 3, 4 and 6).

The defendants – two local authorities, a headmaster and two local authority officers – sought summary judgment. They said the communications complained of were no more than expressions of concern that matters needed investigating, they asserted qualified privilege (based on the performance of their public duties) and justification.

The judge – as in Kordowski, Tugendhadt J – dismissed the application for summary judgment in part, finding that the claimant’s case under Article 8 and the DPA had a real prospect of success in relation to some of the communications complained of.

The judgment is of interest not only as an illustration of the difficulties of lawfully sharing sensitive information (including opinions) in the context of safeguarding children. It also illustrates that the DPA is increasingly – and realistically – being pressed into the service of types of complaint traditionally brought under other heads. The DPA and Article 8 are, of course, long-standing and natural complements to each other. Defamation, however, is slightly more alien territory for the DPA. Copyright infringement (on which, see a post of mine from last year here) is another area to which the DPA is increasingly relevant.

What, it is sometimes wondered, does a claim under the DPA add which is not already covered by claims under Article 8, defamation and so on? After all, as the defendants in Desmond argued, if someone is aggrieved at DPA breaches, then he has another remedy available, namely a complaint to the ICO. Interestingly, Tugendhadt J’s judgment in Desmond reverses this: what, he asked, would an Article 8 or defamation claim add to the DPA claim – at least with respect to one of the communications complained of? In particular, he was concerned with how best to deal with the claim that information about the 2001 rape allegation had been processed (retained, communicated) without reference to the judgments exonerating the claimant.

This last point about fair and accurate records of serious allegations is important: see an older post of mine here.

For the moment, back to Desmond and how best to deal with legal claims about this sort of complaint. Tugendhadt J said this:

“81. How and why it is that the references to the 2001 incident came to be recorded, but recorded without mentioning the public judgments of the court containing the police’s explanation for not charging the Claimant, is a question for which the proceedings under the DPA may provide the most appropriate form of investigation (as the Court of Appeal suggested in para 51 of their judgment). It is for consideration whether claims under the HRA or in defamation would add any benefit to the Claimant over and above a claim under the DPA. And as noted above, a claim under the DPA appears to raise no issues of limitation.

82. I invited the parties to consider why the Court should not direct that the claim under the DPA proceed first and separately from the other two claims, and give directions as to the filing of evidence (or agreed statements of facts) so that the matter could be determined in accordance with the overriding objective, and in particular with the objective of allotting to the case an appropriate share of the court’s resources.”

This demonstrates that, at least in some circumstances, the DPA may appropriately play the lead role rather than a supporting one in a complaint about unjustifiable and damaging communications about individuals. It looks as if the DPA will continue to flex muscles it did not even know it had.

Robin Hopkins

Important new privacy judgment: police retention of protestor’s data not an Article 8 infringement

Posted on | by Robin Hopkins

The Admin Court (Gross LJ and Irwin J) has handed down judgment this week in Catt v Association of Chief Police Officers and Commissioner of Police of the Metropolis [2012] EWHC 1471 (Admin). It is an extremely important judgment on Article 8 ECHR in the context of personal information retained for policing purposes. It is also notable for its analysis of protest as an inherently public activity.

The background

ACPO launched a National Domestic Extremism Database containing information provided by police forces. The Metropolitan Police subsequently assumed responsibility for the database. The database contained information relating to the attendance by the claimant (an 87-year old protestor of good character) at various political protests made by a group called “Smash EDO”. Smash EDO opposes a US arms manufacturer with a factory in Brighton; its activities have often involved violent disorder and criminality (though apparently not by the claimant), necessitating a substantial police presence. Police officers overtly gathered information (including photographic and video material) at those protests. They then compiled reports on the protests, identifying a number of individuals including the claimant. The information at issue in this case comprised those sorts of reports – they were about incidents rather than the claimant per se, although the claimant was identified in the reports. The defendants retained that information pursuant to the statutory Code of Practice on the Management of Police Information, made under the Police Acts 1996 and 1997, and associated Guidance on the Management of Police Information.

The issues

The overarching issue was whether this infringed Mr Catt’s rights under Article 8 ECHR, the right to respect for private life.

It is important (if not entirely surprising) to note how the parties and the Court saw Article 8 and the Data Protection Act 1998 interacting (see paragraph 6(iv)). All agreed that the DPA was theoretically in play, but added nothing: if the Article 8 claim succeeded then the DPA claim was not needed; if Article 8 was engaged, but the interference was justified, then the DPA claim would automatically fail; if Article 8 was not engaged, the prospects of success under the DPA were negligibly remote.

The issues were therefore: (i) whether there was an interference with the claimant’s rights under Article 8(1), and (ii) if so, whether this interference was justified. The Court said no on both counts, by application of the authorities to three crucial findings.

Crucial findings

First, the Court accepted the need for such information to be retained by the police. Gross LJ said this at paragraph 19:

“… the use of intelligence is a fundamental policing tool.  Investigators need the ability to identify relationships within protest groups. Likewise, they need to be able to identify individuals associated with the use of particular tactics, together with those with a propensity to violence, disorderly behaviour and organised coordinated actions.  Although Mr. Catt has not been convicted of any offence, the evidence, which again I accept, is that his close association with violent members of Smash EDO and knowledge of this association is of intelligence value.  Such knowledge forms part of a “far wider picture of information”… needed by the police, inter alia, to investigate incidents of criminality and to assist the policing of future events.”

Secondly, “the essential nature of such activity [protesting] is that it is of a public nature. Indeed, its very object is to make others aware of his views and the causes to which he lends his support” (paragraph 36).

Thirdly, given the violent disorder which characterised Smash EDO’s activities, it was reasonable to expect the police to gather and retain such information. This was especially so as this information had been gathered by over rather than covert policing.

Issue 1: Article 8(1) neither engaged nor infringed

Given those findings, the Court concluded that the claimant’s rights under Article 8(1) were not engaged at all. The claimant’s reliance on R (Wood) v Commr of Police of the Metropolis [2009] EWCA Civ 414 did not assist: the facts were different, and it would be “unreal and unreasonable” to find an infringement of Article 8(1) in the present case.

Issue 2: interference would in any event be justified

The Court went on to conclude that even if there had been an interference with Article 8(1), this would be justified. The claimant had argued inter alia that he was not personally suspected of criminality and that there was no democratic oversight of the database system. The defendant argued inter alia that, given Smash EDO’s activities, the retention of this sort of information – police reports as opposed, for example, to photos or video material – was reasonably necessary and proportionate.

Gross LJ (with whom Irwin J agreed) had “no hesitation in concluding that any interference with Mr. Catt’s rights was amply justified under Art. 8.2”.

His reasons included the following (paragraph 64):

“Any interference with Mr. Catt’s Art. 8.1 rights was at the margins. The reports, the product of overt policing, did no more than record Mr. Catt’s public activities, the very object of which was to convey his views to as wide an audience as possible.  The reports were compiled and retained for intelligence purposes, in accordance with the Code and the Guidance, with a view to an appropriate police response to a campaign marred by serious, persistent criminality and posing a significant public order problem.”

Irwin J agreed that there was no expectation of privacy here, applying the approach in Campbell v MGN [2004] UKHL 22.

At paragraph 70 he added that it was not easy to see “… how it can affect the engagement of Art 8.1 that the material is recorded by police officers as opposed, say, to journalists; or collated and held within the National Extremism Database, as opposed to a local history archive in the town where the demonstrations have been held.  The latter distinction was advanced by Mr Owen (“the entries were not recorded on any database…”).  The issue is not whether the individual concerned likes or dislikes the thought of the data being held by this or that body: the issue is whether a reasonable expectation of privacy arises.  In my judgment, it does not arise in respect of any of the information in this case.”

Irwin J did, however, add this observation at paragraph 70, which might give rise to interesting arguments in future cases on such issues:

“Different questions might arise if material recorded in that context were collated with material which was private in its nature.  That does not arise in this case.”

What about ongoing retention of this information?

Gross LJ thought it sensible for the police to review its retention of this sort of information when the Smash EDO campaign concludes, but he agreed with Irwin J’s comments at paragraph that 73:

“… even when the Smash EDO campaign ends, it may yet be justifiable to retain some or all of this information.  The picture here is that there are connections between this group and parts of the animal rights movement, active before this group was formed.  It may be a legitimate function of intelligence to keep records of this group after it has ceased to be active, the better to understand the risks associated with after-coming groups with overlapping membership.  To my mind, there is no expectation that a review at a suitable point in the future will conclude otherwise.”

Robin Hopkins

Statutory bars on disclosure: don’t construe too widely

Posted on | by Robin Hopkins

The Tribunal’s decision in Cubells v IC and Wrightington, Wigan & Leigh NHS Foundation Trust (EA/2011/0183) is notable for the approach taken to construing a statutory bar on disclosure for the purposes of s. 44 of FOIA. There are hundreds of bars. Usually, they were drafted prior to FOIA. Tricky issues often arise as to how widely the prohibition extends, especially in a FOIA world.

Mr Cubells’ mother died while in the care of the Trust. He complained to the Parliamentary and Health Service Ombudsman, who declined to investigate. Mr Cubells then made a request under FOIA for information passed by the Trust to the Ombudsman pursuant to his complaint, and internal Trust information about the complaint.

The Trust refused the request, relying on s. 44 of FOIA and the prohibition of disclosure imposed by s. 15 of the Health Service Commissioners Act 1993, which provides that:

“Information obtained by the [Ombudsman] or his officers in the course of or for the purposes of an investigation shall not be disclosed except-

(a) for the purposes of the investigation and any report to be made in respect of it…”

The Commissioner agreed – but the Tribunal did not. Interestingly, it allowed and considered submissions by Maurice Frankel of the Campaign for FOI in support of Mr Cubells’ appeal. Relevant points from those submissions included the following. The prohibition was designed to provide reassurance to those supplying information that no improper disclosure of that information will occur. The prohibition should not interpreted as meaning that any third party holding information which it happens also to have supplied to the Ombudsman was itself bound by the same prohibition. Otherwise, strange results would follow. For example, the Trust would be prevented from even sharing information which had been passed to the Ombudsman with a patient’s GP or another health authority into whose area the patient moved. On the ICO’s reading, the Trust would be bound indefinitely by a prohibition on disclosure apparently aimed not at the Trust but at the Ombudsman. That cannot have been what Parliament intended.

The Campaign for FOI also raised arguments under the European Convention on Human Rights: an outcome that resulted in a blanket prohibition on the disclosure of information about the medical treatment of a family member would breach Article 8 ECHR. Also, on the ICO’s reading, the prohibition would extend to a complainant as well – in other words, if a complainant passed information to the Ombudsman, they would thereafter be prohibited from disclosing it further. That would breach Article 10 ECHR.

Before the Tribunal, the ICO relied on the judgment of Mrs Justice Dobbs in R (on the

application of Kay) v Health Service Commissioner [2008] EWHC 2063 (Admin) in contending that the prohibition should regarded as extending to both those to whom information was passed by the Ombudsman as well as those from whom the Ombudsman obtained it.

The Tribunal disagreed. It distinguished Kay and concluded that the prohibition:

“should be interpreted as imposing a prohibition only on the Ombudsman and her staff. It may follow, from what we have said above, that the prohibition should continue to apply, or should be imposed, if the Ombudsman needs to disclose any of the information she has obtained to a third party. There is no inconsistency there. The information, once obtained during an investigation, should obviously not be released from the prohibition on disclosure just because it becomes necessary for the Ombudsman to disclose it to a third party. There is no logical reason, however, for the prohibition to be imposed on those holding information that has been shared with the Ombudsman. The profoundly unattractive consequences which Mr Frankel outlined demonstrate the absurdity of such an outcome.”

In reaching its conclusion, the Tribunal did not need to consider the ECHR arguments. Those arguments may well, however, be raised again in future cases.

Robin Hopkins

ARTICLE 8 CHALLENGE TO ENHANCED CRIMINAL RECORDS REGIME FAILS (AT FIRST INSTANCE)

Posted on | by Robin Hopkins

Yesterday, the High Court(Kenneth Parker J) gave judgment in R (T) v (1) Chief Constable of Greater Manchester Police, (2) Secretary of State for the Home Department (Secretary of State for Justice an interested party) [2012] EWHC 147 (Admin). The judgment is available here:  T_v_Greater_Manchester_Police.

In July 2002, the Claimant was 11 years old. He received a warning (a private procedure, under the Crime and Disorder Act 1998) from Greater Manchester Police for the theft of two bicycles. His subsequent conduct was apparently exemplary. By section 113B of the Police Act 1997, Enhanced Criminal Record Certificates (ECRCs) must contain all convictions, cautions and warnings. The Claimant, a 20-year old student applying for a sports studies course, obtained his ECRC in December 2010. It contained details of the bike theft warning.

He argued that the inflexible requirement under the 1997 Act for all convictions, cautions and warnings to be disclosed in ECRCs was incompatible with Article 8 of the ECHR.

With overt reluctance, Kenneth Parker J dismissed the claim. His decision was based on the analysis of R (L) v Commissioner of Police for the Metropolis [2009] UKSC 3 [2010] 1 AC 410, where the majority of the Supreme Court decided that the disclosure of “information” (under s. 115(6) of the 1997 Act) potentially breached Article 8. Such a breach would be justified only if (a) the information is relevant to the decision for which the ECRC is required, and (b) disclosure is proportionate, taking into account factors such as the gravity of the material, the reliability of the information on which it was based, the relevance of the material to the particular job application, the period since the relevant events and the impact on the applicant of including the material in the ECRC.

The disclosure of “information” was, however, a separate matter from the disclosure of convictions, cautions and warnings. It was clear from L that, insofar as it required the latter, the 1997 Act was not open to challenge under Article 8.

Kenneth Parker J had great sympathy with the Claimant’s analogy with R (F) v Justice Secretary [2010] UKSC 17; [2011] 1 AC 331, in which the subjecting of the claimants to indefinite reporting requirements under the Sexual Offences Act 2003 was found to violate their rights under Article 8. As in F, the provisions under challenge in the present case provided for no reviews, and no exceptions. This caused the learned judge great concern. He observed that:

“… a system that allows no exceptions imposes a very heavy cost in terms of effect on the fundamental rights protected by Article 8 ECHR.  I am not persuaded that the marginal benefit that a system which admits no exceptions brings to, admittedly important, competing interests is justified as a matter of proportionality when the serious detrimental effects of such a system, particularly on child offenders, are weighed in the balance.  A system that permitted exceptions would probably be more prone to error, but only marginally so if the criteria for review were themselves conservative and risk averse.  The consequential improvement to the protection of Article 8 rights on the other hand, would be likely to be substantial.”

Nonetheless, his hands were tied by L: the requirement to disclose convictions, cautions and warnings did not violate Article 8. It may be a “bright line rule”, and arguably a harsh one, but the law has condoned such rules in other circumstances (see for example R (Animal Defenders International) v Secretary of State for Culture, Media and Sport [2008] 1 AC).

The Claimant also sought to challenge the lawfulness of the Rehabilitation of Offenders Act 1974 (Exceptions) Order 1975 – which removes, in certain circumstances, the protections concerning spent convictions. This claim failed for the same reasons. Kenneth Parker J added this notable observation:

“In these circumstances I do not believe that there is any real independent issue about the legality of the Order under Article 8 ECHR.  The conclusion must be the same.  However, I should perhaps add that the reverse argument does not necessarily apply.  In other words, even if it were disproportionate under Article 8 ECHR for the state to disclose, say, a warning long ago given to a child for a minor criminal matter, it would not automatically be an infringement if the state permitted a private employer to enquire about all criminal convictions, to insist on truthful answers and to take appropriate action in response to the answers given.”

The learned judge also observed that, if he had had to decide the issue of whether the state had a positive obligation in these circumstances, he would have found that it did not.

The claims were accordingly dismissed. However, given their general importance and Kenneth Parker J’s reluctant conclusions, he granted leave to appeal.

11KBW’s Jason Coppel appeared for the Secretaries of State.

Robin Hopkins