Yesim Kul & Ors v DWF Law LLP

Yesim Kul & Ors v DWF Law LLP

The defendant's processing of claimants' personal and special category data in JS1, including use of names, was necessary and proportionate for the establishment, exercise or defence of legal claims, fell within statutory exemptions, and did not breach UK GDPR or DPA 2018 requirements. The claims for declaratory relief and compliance orders are dismissed.

Parties
Claimant: Yesim Kul; Claimant: Rohat Mahir; Claimant: Mahmut Mahir; Defendant: DWF Law LLP
Jurisdiction
England and Wales
Judgment Date
22 July 2025
Procedural Posture
Civil / Final Judgment
Outcome
claims dismissed
Legal Topics
UK GDPR, Data Protection Act 2018, Personal Injury, Litigation Privilege, Fairness, Transparency, Data Minimisation, Purpose Limitation, Special Category Data, Necessity, Proportionality, Abuse of Process
Data Protection Civil Procedure UK GDPR Data Protection Act 2018 Personal Injury Litigation Privilege Fairness Transparency +6 more

Case Brief

Summary, issues, holding and outcome

More case intelligence is available

Unlock the full research layer for this judgment.

Full judgment text Downloadable case file Legal principles 7 Authorities cited 11 Party arguments 2
Sign in to unlock

Parties

Yesim Kul

Claimant

Rohat Mahir

Claimant

Mahmut Mahir

Claimant

DWF Law LLP

Defendant

Procedural Posture

Civil / Final Judgment

Legal Issues

  1. 1 Whether the defendant's processing of claimants' personal and special category data in JS1 breached UK GDPR and Data Protection Act 2018 requirements, specifically regarding lawfulness, fairness, transparency, purpose limitation, data minimisation, storage limitation, integrity and confidentiality, and whether pseudonymisation was required.
  2. 2 Whether the processing was necessary and proportionate for the establishment, exercise or defence of legal claims.
  3. 3 Whether the claimants' rights under articles 14 and 17 UK GDPR were violated.

Ratio Decidendi

The defendant's processing of claimants' personal and special category data in JS1, including use of names, was necessary and proportionate for the establishment, exercise or defence of legal claims, fell within statutory exemptions, and did not breach UK GDPR or DPA 2018 requirements. The claims for declaratory relief and compliance orders are dismissed.

Court Disposition

claims dismissed