Pamela Underwood & Anor v Bounty UK Limited & Anor

Pamela Underwood & Anor v Bounty UK Limited & Anor

The Second Defendant is not liable for breach of the Data Protection Act 1998 or misuse of private information because it did not directly disclose or make available the Claimants' private information to the Bounty representative, nor did it authorise or encourage the representative's unauthorised access to documents. The presence of limited data at the bedside was necessary for patient care, and the unauthorised act of the Bounty representative does not constitute a breach by the Second Defendant. The claim for exemplary damages was also unfounded.

Parties
First Claimant: Pamela Underwood; Second Claimant: Dominic Underwood (a child by Pamela Underwood his litigation friend); First Defendant: Bounty UK Limited; Second Defendant: Hampshire Hospitals NHS Foundation Trust
Jurisdiction
England and Wales
Judgment Date
13 April 2022
Procedural Posture
Civil / Trial Judgment
Outcome
Claim dismissed as against the Second Defendant; judgment entered for the Second Defendant.
Legal Topics
Misuse of Private Information, Data Protection Act 1998, Hospital Data Security, Vicarious Liability, Exemplary Damages
Data Protection Privacy Law Tort Misuse of Private Information Data Protection Act 1998 Hospital Data Security Vicarious Liability Exemplary Damages

Case Brief

Summary, issues, holding and outcome

More case intelligence is available

Unlock the full research layer for this judgment.

Full judgment text Downloadable case file Legal principles 4 Authorities cited 8 Party arguments 2 Amounts and remedies 1
Sign in to unlock

Parties

Pamela Underwood

First Claimant

Dominic Underwood (a child by Pamela Underwood his litigation friend)

Second Claimant

Bounty UK Limited

First Defendant

Hampshire Hospitals NHS Foundation Trust

Second Defendant

Procedural Posture

Civil / Trial Judgment

Legal Issues

  1. 1 Whether the Second Defendant breached the Data Protection Act 1998 by allowing a third party to access and obtain the Claimants' private information
  2. 2 Whether the Second Defendant is liable for misuse of private information by a third party (Bounty representative)
  3. 3 Whether the Second Defendant failed to take appropriate technical and organisational measures to prevent unauthorised access to personal data

Ratio Decidendi

The Second Defendant is not liable for breach of the Data Protection Act 1998 or misuse of private information because it did not directly disclose or make available the Claimants' private information to the Bounty representative, nor did it authorise or encourage the representative's unauthorised access to documents. The presence of limited data at the bedside was necessary for patient care, and the unauthorised act of the Bounty representative does not constitute a breach by the Second Defendant. The claim for exemplary damages was also unfounded.

Court Disposition

Claim dismissed as against the Second Defendant; judgment entered for the Second Defendant.