privacy
1 November 2016 by David Hart KC
This blog has covered a number of claims for damages arising out of the misuse of private information. The Mirror Group phone hacking case is one example (see my post here and the appeal decision here), and the fall-out from the hapless Home Office official who put private information about asylum-seekers on the Internet, being another – (Gideon Barth’s post on TLT here). See also below for related posts.
But this post is to give a bit of context, via the wider and scarier cyber crime which is going on all around us. It threatens the livelihoods of individuals and businesses the globe over – and has given and will undoubtedly give rise to complex spin-off litigation.
So let’s just start with the other week. On 21 October 2016, it seems nearly half the Internet was hit by a massive DDoS attack affecting a company, Dyn, which provides internet services infrastructure for a host of websites. Twitter, Reddit, Netflix, WIRED, Spotify and the New York Times were affected. DDoS, for cyber virgins, is Distributed Denial of Service, i.e. an overloading of servers via a flood of malicious requests, in this case from tens of millions of IP addresses. No firm culprits so far, but a botnet called Mirai seems to be in the frame. It is thought that non-secure items like cars, fridges and cameras connected to the Internet (the Internet of Things) may be the conscripted foot soldiers in such attacks.
And now to the sorts of cases which have hit the headlines in this country to date.
Continue reading →
Like this:
Like Loading...
27 April 2016 by Rosalind English
In the matter of proceedings brought by Kings College NHS Foundation Trust concerning C (who died on 28 November 2015) v The Applicant and Associated Newspapers Ltd and others [2016] EWCOP21 – read judgment
The Court of Protection has just ruled that where a court has restricted the publication of information during proceedings that were in existence during a person’s lifetime, it has not only the right but the duty to consider, when requested to do so, whether that information should continue to be protected following the person’s death.
I posted last year on the case of a woman who had suffered kidney failure as a result of a suicide attempt has been allowed to refuse continuing dialysis. The Court of Protection rejected the hospital’s argument that such refusal disclosed a state of mind that rendered her incapable under the Mental Capacity Act. An adult patient who suffers from no mental incapacity has an absolute right to choose whether to consent to medical treatment (King’s College Hospital NHS Foundation Trust v C and another [2015] EWCOP 80).
Continue reading →
Like this:
Like Loading...
14 January 2016 by Kate Richmond

Social Media button on a keyboard with speech bubbles.
Barbulescu v Romania, 12 January 2016 – read judgment
In December 2015, the European Court of Human Rights, by 6 votes to 1, dismissed a Romanian national’s appeal against his employer’s decision to terminate his contract for using a professional Yahoo Messenger account to send personal messages to his fiancé and brother.
Mr Barbulescu contended that his employer had breached his Article 8 right to respect for his private life and correspondence, and that the domestic courts had failed to protect his right. The Court found that there had been no such violation because the monitoring of the account by his employer had been limited and proportionate.
Background facts
Mr Barbulescu’s employers asked him to create a Yahoo Messenger account for responding to client enquiries and informed him that these communications had been monitored. The records showed that he had used the Internet for personal purposes, contrary to internal regulations. The employer’s regulations explicitly prohibited all personal use of company facilities, including computers and Internet access. The employer had accessed the Yahoo Messenger account in the belief that it had contained professional messages.
Continue reading →
Like this:
Like Loading...
9 November 2015 by Rosalind English
Richardson v Facebook [2015] EWHC 3154 (2 November 2015) – read judgment
An action in defamation and under the right to privacy against Facebook has been dismissed in the High Court. The Facebook entity named as defendant did not “control” the publication so as to allow liability; and even if it did, no claim under the Human Rights Act could lie against FB as it could not be described as any sort of a public authority for the purposes of Section 6 of the Act.
The claimant, acting as a litigant in person, sought damages in respect of the publication in 2013 and 2014 of a Facebook profile and a posting on the Google Blogger service. The Profile and the Blogpost each purported to have been created by the claimant, but she complained that each was a fake, created by an impostor. She claimed that each was defamatory of her, and infringed her right to respect for her private life under Article 8 of the European Convention on Human Rights (ECHR).
Continue reading →
Like this:
Like Loading...
8 July 2015 by Jim Duffy
In the matter of an application by JR38 for Judicial Review (Northern Ireland) [2015] UKSC 42
Does the publication of photographs of a child taken during a riot fall within the scope of Article 8 ECHR?
It depends, says a Supreme Court majority, specifically on whether there was a reasonable expectation of privacy. Either way, the Court in J38 agreed that whether or not the 14 year-old Appellant’s right to respect for private life was in play, the publication of police photographs of him was justified in the circumstances.
Continue reading →
Like this:
Like Loading...
22 May 2015 by David Hart KC
Gulati v. MGN Ltd [2015] EWHC 1482 (Ch), Mann J – judgment here
For some years in the early and mid 2000s, a routine form of news-gathering in the Mirror Group was phone hacking – listening to voicemails left for celebrities by their friends, and then dishing up revelations in their papers. And this judgment amounts to a comprehensive pay-back time for the years of distress and upset sustained by those celebrities, as the ins and outs of their private lives were played out for the Mirror Group’s profit. The damages awarded well exceeded those previously payable, as justified in the tour de force of a judgment by Mann J.
Warning – the judgment, compelling though it is, runs to 712 paragraphs. It concerns the assessment of damages in eight cases. The Mirror Group belatedly admitted liability and apologised, not before denying any wrongdoing to the Leveson inquiry. Other claims rest in the wings pending this trial. But with awards between £72,500 and £260,250, the bar has been set high by Mann J.
The claimants (with one exception) were the classic subjects of tabloid columns, namely EastEnders and Corrie stars (or those unfortunate to be married to them), the sometime air hostess girlfriend of Rio Ferdinand, Jude Law’s former wife, Sadie Frost, and, inevitably, Gazza. Seven sued because the hacking led to repeated articles about them. The eighth, Alan Yentob, Creative Director of the BBC, was hacked because of the information derived from the famous people who had left voicemails for him.
Continue reading →
Like this:
Like Loading...
23 April 2015 by Rosalind English
JK, R(on the application of) v Secretary of State for Home Department and another [2015] EWHC 990 (Admin) 20 April 2015 – read judgment
This case concerned the rights of transgender women, and their families, in particular the right to keep private the fact that they are transgender.
The Court heard a challenge to the requirement in the UK’s birth registration system that men who had changed gender from male to female should be listed as the “father” on the birth certificates of their biological children. Having decided that this did engage the claimant’s privacy rights under Article 8 of the European Convention of Human Rights, in conjunction with the right not to be discriminated against under Article 14, the Court concluded that the interference was justified.
Factual and legal background
The clamant JK had been born male. She was married to a woman, KK, and the couple had two naturally conceived children. After the birth of the first child in 2012, JK was diagnosed with gender identity disorder and concomitant gender dysphoria. In October 2012, she started a course of feminising hormone treatment. The treatment pathway requires two years living as a female before consideration is given for referral for gender reassignment surgery. Before the claimant started feminising hormone therapy, KK fell pregnant a second time, again conceiving naturally by the claimant.
Continue reading →
Like this:
Like Loading...
17 April 2015 by Rosalind English
Reactiv Media Limited v The Information Commissioner (Privacy & Electronic Communications Regulations (2003) [2015] UKFTT 2014_0213 (GRC) (13 April 2015) – read judgment
Although an individual’s right to privacy is usually thought of in the context of state intrusion in one form or another, in reality the real threat of intrusion in a society such as ours comes from unsolicited marketing calls.
What many people may not be aware of is that if an individual has registered with the Telephone Preference Service, these calls are unlawful and the company responsible may be fined. It is therefore worth making a complaint, even if one instinctively feels that taking such a step will invite more intrusion. This case is a nice illustration of privacy being upheld and the rules enforced against an unscrupulous and persistent offender.
TPS is operated on behalf of the direct marketing industry by the Direct Marketing Association (DPA) and subscribers’ rights not to receive such calls may be enforced under Regulation 21 of the Privacy and Electronic Communications (EC Directive) Regulations 2003.
Continue reading →
Like this:
Like Loading...
27 March 2015 by Matthew Flinn

Photo credit: The Guardian
Matthew Flinn
And so, the long legal saga of the Black Spider Letters finally comes to a close.
I last blogged about this case back in October 2012. At that time, the Attorney General had ignited controversy by invoking a little-known power under section 53 of the Freedom of Information Act 2000 (FOIA).
Under that provision, he issued a certificate which effectively vetoed a decision of the Upper Tribunal that a number of items of correspondence sent by Prince Charles to seven Government Departments (characterised as “advocacy correspondence” as opposed to personal letters) had to be disclosed to Mr Rob Evans of the Guardian newspaper.
Continue reading →
Like this:
Like Loading...
6 March 2015 by Dominic Ruck Keene

John Catt. Photo credit: The Guardian
R (Catt) and R (T) v Commissioner of Police of the Metropolis [2015] UKSC 9
A majority of the Supreme Court has held that the retention by police of information on the Domestic Extremism Database about a 91 year-old activist’s presence at political protests was (1) in accordance with the law and (2) a proportionate interference with his right to a private life under Article 8(1) of the ECHR.
However, Lord Toulson’s dissent noted that the information was retained for many years after Mr Catt had attended these mainstream political events, and the police had concluded that he was not known to have acted violently. Accordingly, he thought its retention was unnecessary and disproportionate.
Continue reading →
Like this:
Like Loading...
25 February 2015 by Rosalind English
CG v Facebook Ireland & Another [2015] NIQB 11 (20 February 2015) – read judgment
The plaintiff was a former sex offender who had been identified on a Facebook page run by the second defendant called “Keep Our Kids Safe From Predators 2”. He had been released on licence and he was apprehensive about his safety upon his return to the community.
He resides with his father, who is disabled, and with his adult children one of whom is also disabled. He was particularly fearful of the reactions of others to his conduct in the light of the fact that his name had been published on the internet. I have posted on an earlier case where another former sex offender won an injunction against Facebook Ireland Limited in respect of the original KOKSFP, which was subsequently taken down (XY v Facebook Ireland Ltd [2012] NIQB 96).
Continue reading →
Like this:
Like Loading...
7 January 2015 by Rosalind English
M, R (on the application of) v Hampshire Constabulary and another (18 December 2014) [2014] EWCA Civ 1651 – read judgment
The law governing the monitoring of sex offenders, allowing police officers to visit the homes of registered offenders, did not constitute an unlawful interference with the offenders’ privacy rights under Article 8 of the ECHR.
This was an appeal against a decision by the appellant (M) against a decision by Hallett LJ and Collins J in the Administrative Court that the practice of police officers making visits to the homes of registered sex offenders for the purpose of monitoring their behaviour did not violate the Convention.
Continue reading →
Like this:
Like Loading...
1 October 2014 by Rosalind English
Keynote speech by Lord Neuberger at 5 RB Conference on the Internet, 30 September 2014
The President of the Supreme Court has delivered a very interesting address on the protections that should be afforded to what might be termed the “new Fourth Estate” – journalism on the internet. The following summary does not do justice to his speech but is meant to act as a taster – download the full text of his talk here.
Lord Neuberger explores the interrelationship of privacy and freedom of expression, particularly in the light of developments in IT, and especially the internet. He recalls a colourful eighteenth century figure who contributed a series of letters to a widely disseminated journal under the pseudonym of “Junius”. He managed to make such effective attacks on public figures he brought about the resignation of the Prime Minister, the Duke of Grafton, in 1770. Because of his anonymity this character was able to make criticisms of the powerful for which others of his time faced prosecution.
Junius offered a voice of firm if sometimes scurrilous criticism, prompting both political and legal change. He is rightly remembered as one of the greatest political writers in an age dominated by great figures, yet his identity [still] remains a mystery.
And it is this lack of traceability that links Junius with today’s bloggers. Print journalists are – with the exception of writers for The Economist – known figures. But forty percent of the world’s population use the internet, and despite initial expectations that bloggers and tweeters could hide behind pseudonyms, it has turned out to be extremely difficult for internet writers to maintain their anonymity. The public and the courts increasingly recognise the press’ interest in publishing the names of individuals in appropriate circumstances.
Continue reading →
Like this:
Like Loading...
30 April 2014 by Rosalind English
L.H. v Latvia [2014] ECHR 453 (29 April 2014) – read judgment
The release of confidential patient details to a state medical institution in the course of her negotiations with a hospital over a lawsuit was an unjustified interference with her right to respect for private life under Article 8.
Background
In 1997 the applicant gave birth at a state hospital in Cēsis. Caesarean section was used, with the applicant’s consent, because uterine rupture had occurred during labour. In the course of that surgery the surgeon performed tubal ligation (surgical contraception) without the applicant’s consent.
In 2005, after her attempt to achieve an out-of-court settlement with the hospital had failed, the applicant initiated civil proceedings against the hospital, seeking to recover damages for the unauthorised tubal ligation. In December of 2006 her claim was upheld and she was awarded compensation in the amount of 10,000 Latvian lati for the unlawful sterilisation.
Continue reading →
Like this:
Like Loading...
3 December 2013 by Rosalind English
J19 and Another v Facebook Ireland [2013] NIQB 113 – read judgment
The High Court in Northern Ireland has chosen to depart from the “robust” Strasbourg approach to service providers and their liability for comments hosted on their sites. Such liability, said the judge, was not consonant with the EC Directive on E-Commerce.
This was an application on behalf of the defendant to vary and discharge orders of injunction dated 27 September 2013 made in the case of both plaintiffs. One of the injunctions restrained “the defendant from placing on its website photographs of the plaintiff, his name, address or any like personal details until further order.” These interim injunctions were awarded pursuant to writs issued by the plaintiffs for damages by reason of the publication of photographs, information and comments on the Facebook webpages entitled “Irish Blessings”, “Ardoyne under Siege” and “Irish Banter” on 11 September 2013 and on subsequent dates.
Continue reading →
Like this:
Like Loading...
Recent comments