Data, Information & Technology

We have extensive experience and expertise in navigating the law governing data, information and privacy rights and the use and abuse of online platforms and social media.

We have been involved in a number of leading cases in this complicated and fast-evolving area and are used to providing clear advice on what is permitted and what is forbidden and robust representation in related disputes.

In relation to advisory work and compliance with statutory obligations, we have in-depth knowledge of the relevant statutory and non-statutory provisions and principles including in relation to:

• Breach of confidence and misuse of private information
• Data Protection Act 1998
• Data Protection Act 2018 and UK GDPR
• Data Protection Directive 95/46/EC
• Data Protection Law Enforcement Directive (EU) 2016/680
• Electronic Money Regulations 2011
• Environmental Information Regulations 2004
• Financial Services and Markets Act 2000
• Freedom of Information Act 2000
• General Data Protection Regulation (EU) 2016/679
• Human Rights Act 1998 and article 8 of the ECHR
• Investigatory Powers Act 2016
• Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017
• Online Safety Act 2023
• Payment Services Regulations 2017
• Protection from Harassment Act 1997
• Regulation of Investigatory Powers Act 2000

Members also speak, publish and advise in the emerging area of crypto and blockchain assets and web3 regulation.

In relation to contentious work, we have been involved in numerous cases relating to:

• Damages and injunctions following accidental and deliberate data and privacy breaches, online harassment, image-based abuse and voyeurism
• Data subject access requests, claims and complaints
• Rectification, blocking, deletion and the right to be forgotten
• Online safety and online harms
• Surveillance and use of online information including open sources and the dark web
• Employee misuse of work equipment and accounts
• Freedom of Information requests and appeals
• Contempt of court and the internet

We act for:

• Private individuals and organisations
• Charities
• NGOs and campaign groups
• Crypto firms
• Healthcare providers
• Central and local government
• The police
• The security and intelligence services
• Disciplinary, regulatory and oversight bodies

Notable cases include:

Data and privacy breaches and online harassment

• FGX v Gaunt [2023] EWHC 419 (KB): Image-based abuse.
• Ashley v Amplifon Ltd [2021] EWHC 2921 (QB): allocation of low-level data breach claim.
• Home Sec v TLU [2018] EWCA Civ 2217: Online data breach.
• TLT v Home Sec [2016] EWHC 2217 (QB): Online data breach.
• ABC v WH [2015] EWHC 2687 (QB): Indecent text messages.
• MXA v Harrow LBC [2014] EWHC 3756 (QB): Child protection reports.
• General Dental Council v Savery [2011] EWHC 3011 (Admin): Disciplinary proceedings.
• Stone v South East Coast SHA [2006] EWHC 1668 (Admin): Public interest in report.

Online safety and online harms

• Re Molly Russell (deceased): Children and online safety on social media.
• Re Frances Thomas (deceased): Children and online safety in schools.
• Re Tallulah Wilson (deceased): Children and online safety on social media.
• McIntrye v Information Commissioner [2014] UKFTT EA/2013/0093 (GRC): FOIA appeal relating to extremist content online and filtering software.

Surveillance and use of online information and communications

• Liberty v Security Service [2023] UKIPT 1: MI5 data handling.
• SF v NCA [2023] UKIPT 3 & [2023] UKIPT 4: Enchrochat.
• R (Privacy International) v IPT [2022] EWHC 770 (QB): Bulk personal datasets.
• R (Liberty) v Home Sec [2019] EWHC 2057 (Admin): Bulk surveillance.
• R (Butt) v Home Sec [2019] EWCA Civ 256: Extremism Analysis Unit.
• Belhadj v Security Service [2015] UKIPT 13132H: Interception and LPP.
• Liberty v GCHQ [2014] UKIPT 1377H: Edward Snowden claims.

Freedom of Information Act 2000

• Willow v Info Commr [2017] EWCA Civ 1876: Restraint of juveniles.
• Webber v Info Commr [2017] UKUT 312 (AAC): Former Prime Ministers.
• DWP v Info Commr and Gale [2015] UKUT 599 (AAC): EU infraction proceedings.
• Home Office v Info Commr and Cobain [2015] UKUT 0027 (AAC): Deprivation of citizenship.
• Stevenson v Info Commr [2013] UKUT 181 (AAC): Hospitals.
• BERR v O’Brien [2009] EWHC 164 (QB): Legal professional privilege.

Contempt of court and the internet

• Dallas v United Kingdom (2016) 63 EHRR 13: Juror conducting online research.
• Attorney General v Fraill [2011] EWHC 1629 (Admin): Juror misuse of Facebook.
• Attorney General v Associated Newspapers Ltd [2011] EWHC 418 (Admin): Publication of prejudicial photos online.