Data Protection & Cyber

We have extensive experience and expertise in navigating the law governing information rights, data protection and the use and abuse of cyberspace.

We have been involved in a number of leading cases in this complicated and fast-evolving area and are used to providing clear advice on what is permitted and what is forbidden and robust representation in related disputes.

In relation to advisory work and compliance with statutory obligations, we have in-depth knowledge of the relevant statutory and non-statutory provisions and principles including in relation to:

• Breach of confidence and misuse of private information
• Data Protection Act 1998
• Data Protection Act 2018
• Data Protection Directive 95/46/EC
• Data Protection Law Enforcement Directive (EU) 2016/680
• Environmental Information Regulations 2004
• Freedom of Information Act 2000
• General Data Protection Regulation (EU) 2016/679
• Human Rights Act 1998 and article 8 of the ECHR
• Investigatory Powers Act 2016
• Protection from Harassment Act 1997
• Regulation of Investigatory Powers Act 2000

In relation to contentious work, we have been involved in numerous cases relating to:

• Freedom of Information requests and appeals to the First-Tier and Upper Tribunals and the Court of Appeal
• Subject access requests, claims and complaints by data subjects
• Rectification, blocking, deletion and the right to be forgotten
• Damages and injunctions following online data breaches and online harassment
• Internet surveillance
• The misuse of social media
• Cyber risks and the availability of harmful material online
• Employee misuse of work equipment and accounts

We act for:

• Private individuals and bodies
• Charities
• NGOs and campaign groups
• Healthcare providers
• Central and local government
• The police
• The security and intelligence services
• Disciplinary, regulatory and oversight bodies

Notable cases include:

Personal data: misuse of private information, data protection & article 8

• Home Sec v TLU [2018] EWCA Civ 2217: Online data breach.
• R (Butt) v Home Sec [2017] EWHC 1930 (Admin): Extremism Analysis Unit.
• TLT v Home Sec [2016] EWHC 2217 (QB): Online data breach.
• MXA v Harrow LBC [2014] EWHC 3756 (QB): Child protection reports.
• General Dental Council v Savery [2011] EWHC 3011 (Admin): Disciplinary proceedings.
• Stone v South East Coast SHA [2006] EWHC 1668 (Admin): Public interest in report.

State surveillance of online activities & communications

• R (Butt) v Home Sec [2017] EWHC 1930 (Admin): Extremism Analysis Unit.
• Belhadj v Security Service [2015] UKIPT 13132H: Interception and LPP.
• Liberty v GCHQ [2014] UKIPT 1377H, [2015] 3 All ER 142: Edward Snowden claims.

Contempt of court, the internet & social media

• Dallas v United Kingdom (2016) 63 EHRR 13: Juror conducting online research.
• Attorney General v Fraill [2011] EWHC 1629 (Admin): Juror misuse of Facebook.
• Attorney General v Associated Newspapers Ltd [2011] EWHC 418 (Admin): Publication of prejudicial photos online.

Misuse of cyberspace & harmful material online

• ABC v WH [2015] EWHC 2687 (QB): Tort claim arising out of indecent text messages.
• Re Tallulah Wilson (deceased): Inquest raising issues about self-harm and the internet.
• McIntrye v Information Commissioner [2014] UKFTT EA/2013/0093 (GRC): FOIA appeal relating to extremist content online and filtering software.

Freedom of Information Act 2000

• GW v (1) The Information Commissioner, (2) The Cabinet Office [2017] UKUT 312 (AAC): Right to privacy for former Prime Ministers and their employees.
• Willow v Info Commr [2017] EWCA Civ 1876: Restraint of juveniles.
• DWP v Info Commr and Gale [2015] UKUT 599 (AAC): EU infraction proceedings.
• Home Office v Info Commr and Cobain [2015] UKUT 0027 (AAC): Deprivation of citizenship.
• Stevenson v Info Commr [2013] UKUT 181 (AAC): Hospitals.
• BERR v O’Brien [2009] EWHC 164 (QB): Legal professional privilege.