Driver v Crown Prosecution Service [2022] EWHC 2500 (KB) (10 October 2022)
The June 2019 CPS email contained the claimant's personal data as it indirectly identified him as a suspect in Operation Sheridan; its disclosure to a member of the public constituted unlawful processing under Part 3 DPA 2018. The information was biographical and had the claimant as its focus. The claimant had a reasonable expectation of privacy in the information, and the disclosure was not justified. Damages for distress are appropriate.
- Citation
- [2022] EWHC 2500 (KB)
- Parties
- Claimant: Geoffrey Driver; Defendant: Crown Prosecution Service
- Jurisdiction
- England and Wales
- Judgment Date
- 10 October 2022
- Procedural Posture
- Data Protection, Misuse of Private Information, Human Rights / High Court Judgment
- Outcome
- Claim allowed in part
- Legal Topics
- GDPR, Data Protection Act 2018, Misuse of Private Information, Article 8 ECHR, Law Enforcement Processing
Case Brief
Summary, issues, holding and outcome
More case intelligence is available
Unlock the full research layer for this judgment.
Parties
Geoffrey Driver
Claimant
Crown Prosecution Service
Defendant
Procedural Posture
Data Protection, Misuse of Private Information, Human Rights / High Court Judgment
Legal Issues
- 1 Whether the June 2019 CPS email contained the claimant's personal data
- 2 Whether sending the email constituted unlawful processing under DPA 2018
- 3 Whether the email contained private information with a reasonable expectation of privacy
Ratio Decidendi
The June 2019 CPS email contained the claimant's personal data as it indirectly identified him as a suspect in Operation Sheridan; its disclosure to a member of the public constituted unlawful processing under Part 3 DPA 2018. The information was biographical and had the claimant as its focus. The claimant had a reasonable expectation of privacy in the information, and the disclosure was not justified. Damages for distress are appropriate.
Court Disposition
Claim allowed in part
Orders
- Declaration that the CPS breached the Data Protection Act 2018 by unlawful processing of the claimant's personal data
- Award of damages for distress not exceeding £2,000
Full Case Text
Judgment text and source record
Sign in to read
Sign in to read the full judgment text
Sign in to read the full judgment text. Downloads and additional research tools may depend on your plan.
Sign in to read the full judgment