BAILII [Home] [Databases] [World Law] [Multidatabase Search] [Help] [Feedback]

First-tier Tribunal (General Regulatory Chamber)


You are here: BAILII >> Databases >> First-tier Tribunal (General Regulatory Chamber) >> Christie v The Information Commissioner [2022] UKFTT 255 (GRC) (03 May 2022)
URL: http://www.bailii.org/uk/cases/UKFTT/GRC/2022/255.html
Cite as: [2022] UKFTT 255 (GRC)

[New search] [Context] [View without highlighting] [Printable PDF version] [Help]


Neutral citation number: [2022] UKFTT 255 (GRC)

 

Appeal Number: EA/2021/0355

First-Tier Tribunal

(General Regulatory Chamber)

Information Rights

Heard at Remote Hearing Room 3

Heard by CVP 1629

Heard on 26 April 2022.

Decision given on: 3 May 2022.

 

Tribunal Panel

Judge Brian Kennedy QC

Suzanne Cosgrave

Pieter De Waal

 

Between:

Anna Christie

Appellant:

And

 

The Information Commissioner

 

Respondent:

Representation: 

For the Appellant: Anna Christie as a Litigant in person.

For the Respondent: Nicholas Martin, Solicitor by way of written submissions.

Decision: Appeal dismissed.

 

REASONS

Introduction:   

[1]        This decision relates to an appeal brought under section 57 of the Freedom of Information Act 2000 (“FOIA”). The appeal is against the decision of the Information Commissioner (“the Commissioner”) contained in a Decision Notice (“DN”) dated 10 November 2021 (reference IC-94046-M7R8), which is a matter of public record.

Factual Background to this Appeal:

[2]        Full details of the background to this appeal, the complainant’s request for information and the Commissioner’s decision are set out in the DN. The appeal concerns a request for information relating to complaints of sexual misconduct about a named individual. In response, the Commissioner held that the Gloucestershire Constabulary (“the Constabulary”) correctly applied section 40(5B) FOIA in its initial response to neither confirm nor deny (“NCND”) that it held information within the scope of the request.

 

[3]        The Commissioner maintains the position set out in her DN; namely that the Constabulary correctly applied section 40(5B) FOIA in its initial response to NCND that it held information within the scope of the request. The Appellant now appeals against the DN. The Commissioner opposes the appeal and invites the Tribunal to uphold the DN. The Appellant seeks an oral hearing of this case. The Commissioner considers that this is an appeal which may appropriately be dealt with on the papers.

History and Chronology

[4]        On 7 October 2020 the Appellant wrote to the Constabulary and made the following request:

 

“Please provide me with the number of female suspects who have made complaints of sexual misconduct against [the Data Subject] or sometimes known as [the Data Subject] or also known as [the Data Subject], who worked as a [redacted] at Gloucester Police Station between 2012-2015.”

 

[5]        The Constabulary responded on 4 November 2020, declining to either confirm or deny holding the requested information under s.40(5B) FOIA. On 5 November 2020, the Appellant requested an internal review. The Appellant argued that the personal data of any female victims of sexual misconduct could be withheld or redacted. Subsequent to an internal review the Constabulary wrote to the Appellant on 17th March 2021.

 

[6]        The Appellant complained to the Commissioner about the way in which the request was handled on 12 March 2021. Further, the Appellant challenged the application of the exemption on the grounds that the personal data of any female victims of sexual misconduct could be redacted or withheld. Following the Commissioner’s investigation, she published the DN on the 10 November 2021, stating that she is satisfied that the Constabulary correctly applied section 40(5B) FOIA in its initial response to NCND that it held information within the scope of the request.

 

[7]        Legal Framework:

S1 FOIA - General right of access to information held by public authorities

(1) Any person making a request for information to a public authority is entitled—

(a) to be informed in writing by the public authority whether it holds information of the description specified in the request, and

(b) if that is the case, to have that information communicated to him.

(2) Subsection (1) has effect subject to the following provisions of this section and to the provisions of sections 2, 9, 12 and 14.

(3) Where a public authority—

(a) reasonably requires further information in order to identify and locate the information requested, and

(b) has informed the applicant of that requirement,

the authority is not obliged to comply with subsection (1) unless it is supplied with that further information.

(4) The information—

(a) in respect of which the applicant is to be informed under subsection (1)(a), or

(b) which is to be communicated under subsection (1)(b),

is the information in question held at the time when the request is received, except that account may be taken of any amendment or deletion made between that time and the time when the information is to be communicated under subsection (1)(b), being an amendment or deletion that would have been made regardless of the receipt of the request.

(5) A public authority is to be taken to have complied with subsection (1)(a) in relation to any information if it has communicated the information to the applicant in accordance with subsection (1)(b).

(6) In this Act, the duty of a public authority to comply with subsection (1)(a) is referred to as “the duty to confirm or deny”.

 

S 40 FOIA - Personal Information

(1) Any information to which a request for information relates is exempt information if it constitutes personal data of which the applicant is the data subject.

(2) Any information to which a request for information relates is also exempt information if—

(a) it constitutes personal data which does not fall within subsection (1), and

(b) the first, second or third condition below is satisfied.

(3A) The first condition is that the disclosure of the information to a member of the public otherwise than under this Act—

(a) would contravene any of the data protection principles, or

(b) would do so if the exemptions in section 24(1) of the Data Protection Act 2018 (manual unstructured data held by public authorities) were disregarded.

(3B) The second condition is that the disclosure of the information to a member of the public otherwise than under this Act would contravene Article 21 of the GDPR (general processing: right to object to processing).

(4A) The third condition is that—

(a) on a request under Article 15(1) of the GDPR (general processing: right of access by the data subject) for access to personal data, the information would be withheld in reliance on provision made by or under section 15, 16 or 26 of, or Schedule 2, 3 or 4 to, the Data Protection Act 2018, or

(b) on a request under section 45(1)(b) of that Act (law enforcement processing: right of access by the data subject), the information would be withheld in reliance on subsection (4) of that section.

(5A) The duty to confirm or deny does not arise in relation to information which is (or if it were held by the public authority would be) exempt information by virtue of subsection (1).

(5B) The duty to confirm or deny does not arise in relation to other information if or to the extent that any of the following applies—

(a) giving a member of the public the confirmation or denial that would have to be given to comply with section 1(1)(a)—

(i) would (apart from this Act) contravene any of the data protection principles, or

(ii) would do so if the exemptions in section 24(1) of the Data Protection Act 2018 (manual unstructured data held by public authorities) were disregarded.

(b) giving a member of the public the confirmation or denial that would have to be given to comply with section 1(1)(a) would (apart from this Act) contravene Article 21 of the GDPR (general processing: right to object to processing);

(c) on a request under Article 15(1) of the GDPR (general processing: right of access by the data subject) for confirmation of whether personal data is being processed, the information would be withheld in reliance on a provision listed in subsection (4A)(a);

(d) on a request under section 45(1)(a) of the Data Protection Act 2018 (law enforcement processing: right of access by the data subject), the information would be withheld in reliance on subsection (4) of that section.

(6). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(7) In this section—

“the data protection principles” means the principles set out in—

(a) Article 5(1) of the GDPR, and

(b) section 34(1) of the Data Protection Act 2018;

“data subject” has the same meaning as in the Data Protection Act 2018 (see section 3 of that Act);

“the GDPR”, “personal data”, “processing” and references to a provision of Chapter 2 of Part 2 of the Data Protection Act 2018 have the same meaning as in Parts 5 to 7 of that Act (see section 3(2), (4), (10), (11) and (14) of that Act).

(8) In determining for the purposes of this section whether the lawfulness principle in Article 5(1)(a) of the GDPR would be contravened by the disclosure of information, Article 6(1) of the GDPR (lawfulness) is to be read as if the second sub-paragraph (disapplying the legitimate interests gateway in relation to public authorities) were omitted.

[8]        Section 3(2) of the Data Protection Act (“DPA”) defines personal data as:
any information relating to an identified or identifiable living individual”.

Article 5(1)(a) of the General Data Protection Regulations (GDPR) states that:

“Personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject”.

Article 6(1)(f) of the GDPR states:

processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child

 

 

Commissioner’s Decision Notice

[9]        The Commissioner investigated the matter and held that the Constabulary correctly applied section 40(5B) FOIA in its initial response to NCND that it held information within the scope of the request. The Commissioner reached her decision on the following grounds:

a)    “The request related to the number of complaints about the Data Subject which, if held, would reveal personal data relating to the Data Subject (DN [16]).

b)    Whilst there was a legitimate interest with regards to the Appellant’s concerns (DN [21]-[24]), and confirmation or denial was necessary to meet such legitimate interest ([25]-[27]), the Appellant’s legitimate interests were not sufficient to outweigh the Data Subject’s fundamental rights and freedoms. This was on the grounds that complaints, if made, would not equate to an indication of guilt and there were other complaint and investigative procedures which could be followed. Furthermore the decision was consistent with the Commissioner and Tribunal’s decision-making in similar circumstances (DN [28]-[38]).”

Grounds of Appeal

[10]        The Appellant’s Grounds of Appeal detailed that information is available online regarding the Data Subject which suggest previous allegations of sexual harassment, and it was necessary for this to have been taken into account in the decision made in this case. The Appellant argued that the Commissioner erred in considering the Data Subject’s reasonable expectations in balancing legitimate interests. Further, the Appellant contended that the Commissioner failed to take account of the public interest test.

The Commissioner’s Response

[11]        The Commissioner maintained her position as outlined in the DN and resisted the appeal. The Commissioner referred to the data protection principles under Article 5(1)(a) and Article 6(1) of the UK GDPR. The Commissioner referenced the three-part test to be applied under Article 6(1)(f) GDPR in the context of a request for information under FOIA:

(I)   Legitimate interest test: Whether a legitimate interest is being pursued by the request for information;

(II)  Necessity test: Whether disclosure of the information is necessary to meet the legitimate interest in question;

(III)                Balancing test: Whether the above interests override the legitimate interest(s) or fundamental rights and freedoms of the data subject.

 

[12]        In consideration of the three-part test the Commissioner cited the following decisions made by the Upper Tribunal:

Goldsmith International Business School v Information Commissioner and Home Office [2014] UKUT 563 (AAC) at [35]-[42] (reiterating the Supreme Court’s approach in South Lanarkshire Council v The Scottish Information Commissioner at [18]), Glenda Rodriguez-Noza v Information Commissioner and Nursing and Midwifery Council (GIA/0433/2014), and Information Commissioner v Colleen Foster and Nursing and Midwifery Council (GIA/1626/2014) at [19], [23]-[24], [27]).

 

[13]        The Commissioner accepted that the Appellant has a legitimate interest in requesting the information sought and obtaining confirmation or denial. However, the Commissioner referred to Judge Jacobs in Colleen Foster to note that a disclosure under FOIA is effectively a disclosure to the world with no restrictions. Thus, the privacy rights of the data subject should be taken into account.

 

[14]        In relation to Article 6(1)(f) which states that disclosure must be “necessary”, the Commissioner outlined the test to be applied as held in Goldsmith, which states that disclosure must be “more than desirable but less than indispensable or absolute necessity”. The Commissioner reviewed her position in light of the appeal and is no longer of the view that it is necessary for the Constabulary to NCND holding the requested information given that the Appellant’s concerns can be taken up directly with the Solicitors Disciplinary Tribunal (“SDT”) who stated:

 

“49. At the conclusion of the Respondent’s evidence the Tribunal indicated to the Respondent and his legal representative that it did not find the case against the Respondent to have been proved and it considered it unnecessary for the Respondent to call his wife, as he had intended, to give evidence or to call his current employer to give character evidence....

53. In all of the particular circumstances of this case the Tribunal concluded that the evidence in support of the allegation made by the Applicant did not establish that the alleged events occurred beyond reasonable doubt. The Respondent was entitled to the benefit of the doubt and the Tribunal dismissed the allegations made against him.”

 

[15]        Further, the Commissioner found that even if it were necessary to provide confirmation or denial the Appellant’s legitimate interest is outweighed by the Data Subject’s right to privacy for the reasons outlined in her DN. With reference to Glenda Rodriguez-Noza and Collen Foster, the Commissioner argued that confirmation or denial would be unwarranted given the prejudice likely to be suffered by the Data Subject as a result of confirmation or denial free from any duty of confidence and available to the world at large and given the alternative means of addressing the Appellant’s concerns.

 

[16]        The Commissioner highlighted that as per sections 2 and 40 FOIA, the duty to NCND is an absolute exemption where it corresponds to an absolute exemption within section 40 FOIA. The Commissioner interpreted section 40(5B)(a)(i) as an absolute exemption as it corresponds to the absolute exemption in section 40(2) taken with section 40(3A)(a). This interpretation was supported by the Tribunal in Rt. Hon. Frank Field MP v the Information Commissioner (EA/2009/0055), which stated:

 

What is also critical for present purposes is the further issue of whether exclusion of the duty is absolute or qualified. It is absolute in the present case since section 40(2) is treated as conferring an absolute exemption by section 2(3)(f)(ii) of FOIA: “... so far as relating to cases where the first condition referred to in that subsection [i.e. section 40(2)] is satisfied by virtue of subsection (3)(a)(i) or (b) of that section ...” ” [24]

 

[17]        The Commissioner submitted that the Appellant’s arguments are insufficient. The Commissioner adopted and repeated the findings provided in her DN.

 

Appellant’s Reply:

 

[18]        The Appellant maintained that information is available online regarding the Data Subject which suggest previous allegations of sexual harassment, and it was necessary for this to have been taken into account in the decision made. Further, the Appellant stated that she could have provided the same had she been asked.

 

[19]        The Appellant argued that the rights of the victims have not been taken into account in this instance. The Appellant referred to the standard set by the SDT and stated that the Commissioner is not adhering to the comments made by that Tribunal in a Judgment which the Appellant asserted is in relation to the Data Subject. The Appellant averred that an alleged victim would not make false accusations. The Appellant did not accept that the appropriate recourse is through the SRA.

 

Appellant’s Final Submission:

[20]        The Appellant stated that the Commissioner refused to direct that the withheld information be disclosed. The Appellant maintained that the personal data of any female victims of sexual misconduct could be redacted. The Appellant argued that the Commissioner has not lodged enquiries with the Constabulary or the SRA in relation to this case. The Appellant reiterated that information is available online regarding the Data Subject which suggests previous allegations of sexual harassment, and that it was necessary for this to have been taken into account in the decision made.

 

[21]        The Appellant contended that the Commissioner is not interested in the appeal and is refusing to recognise the public interest test to be applied. The Appellant stated that the Commissioner has erred in the duty bestowed upon her as a regulator. The Appellant sought and received limited and what she regarded as unhelpful information from the SRA. The Appellant refuted the conclusions of the SRA. The Appellant highlighted that an alleged victim would not make false accusations and further that it is a criminal offence. The Appellant submitted that every case must be decided upon the facts. Therefore, the Appellant invited the Tribunal to uphold the appeal and direct that the requested information be disclosed.

 

 

The Hearing:

 

[22]        At the hearing on 26 April 2022, the Tribunal were working from two hearing bundles, one form the Commissioner and a shorter one supplied by the Appellant, it is not clear to us whether or not the Commissioner had the Appellants bundle and some references are form the Pagination given to the Appellants bundle which may unavoidably cause some confusion.  

 

[23]        The Appellant took time to expand on her submissions and helpfully presented her arguments as set out in paragraphs [18] to [21] above in more detail and with genuine passion illustrating a grave and understandable concern for alleged victims of sexual harassment. The Appellant explained that she was aware of 12 or more complaints made against the Data Subject. She indicated that previous information is available on-line which suggests previous allegations of sexual harassment, and it was necessary that these be considered. The Appellant argued that this was a matter of grave public interest and other potential vulnerable victims needed to be warned.

 

[24]        The Tribunal took time to try to explain to the Appellant the reasoning as set out in the DN, the recognition of the legitimate interest she has presented, the necessity test and the balance of the legitimate interest in so far as it could or should outweigh the Data Subject’s fundamental rights and freedoms. However, it was also explained that false allegations can be made and hence the significant burden required to outweigh or override those fundamental rights.

The issues:

 

 

[25]        The remit of the Tribunal is limited to considering the Commissioner’s DN. It is important to focus on whether, as alleged by the appellant the commissioner erred in her decision making. 

 

[26]        As explained to the Appellant the Tribunal have carefully considered the reasoning in the DN set out clearly at Paragraphs 11 to 37 inclusive therein, and how the conclusion at Paragraph 37 was arrived at. In our deliberations we accept, approve and adopt the Commissioner’s reasoning and find no error of Law therein. We accept that the exemption relied upon by the Constabulary is properly relied upon and it is an absolute exemption, meaning that the Public Interest balance test is not engaged.

 

[27]        The key elements in the DN made by the Commissioner to be considered, in a somewhat cryptic form are as follows: - 

Further information was provided in the solicitor, Mr Nicolas Martin’s response on behalf of the Commissioner dated 21 December 2021 pages A16 - A27 ;

 

 

[26] On the papers before us, the Appellant relies on two extraneous pieces of evidence to support her submission that legitimate interest in publication of the requested information outweighs the data subject's privacy interests:

  1. A judgment of the Solicitors Disciplinary Tribunal, which according to the Appellant relates to the same person as the Data Subject referred to in her information request. However, that judgment concluded that the evidence in support of the allegations did not establish that the alleged events occurred beyond reasonable doubt, and that Tribunal dismissed the allegations.
  1. The fact that conditions have been recorded by the SRA on the practicing certificate of a person whom the Appellant again asserts is the same person as the Data Subject referred to in her information request. However, the SRA have not given any information about the background to those conditions or said that the conditions are related to any allegations or complaints of harassment. 

 

[27] For purposes of the balancing exercise between legitimate interest in disclosure of information about 'complaints of sexual misconduct' (the information request) and privacy interests, we are in no position to draw any reliable conclusion or inference in relation to the judgment of the Solicitors Disciplinary Tribunal judgment or in relation to the SRA's regulatory actions or decisions.

 

[28] This Tribunal also considers that, contrary to the Appellant’s understanding, the Commissioner's case is not that the Appellant has other remedies or avenues to obtain the requested information. The Commissioner's case is that the Appellant’s concerns can be taken up with the SRA who can: “investigate her concerns and make enquiries without having to publicly disclose confidential information.” This is an important factor in the balancing exercise between legitimate interests in disclosure and legitimate privacy interests. Further we are of the view that there is also recourse to criminal investigative and prosecuting authorities, recognising that the SRA's regulatory powers are limited to purposes of professional sanctions. In general, however, the position is that there are alternative options to achieve the legitimate interest without the unwarranted interference with the legitimate interests and fundamental rights of the Data Subject that would result from the public Constabulary having to confirm or deny whether the requested information is held.

 

[29] Accordingly for all the above reasons, we find no error of Law in the Commissioner’s decision nor in any exercise of her discretion as applied therein and we must dismiss this appeal.

 

Brian Kennedy QC                                                                       29 April 2022.

 

                                                         


BAILII: Copyright Policy | Disclaimers | Privacy Policy | Feedback | Donate to BAILII
URL: http://www.bailii.org/uk/cases/UKFTT/GRC/2022/255.html