Johnson v The Medical Defence Union Ltd (2)

Johnson v The Medical Defence Union Ltd (2)

The MDU's processing of Mr Johnson's personal data in its risk assessment review, except for two non-lead files, was not unfair under the Data Protection Act 1998. The processing of the two non-lead files was technically unfair due to lack of notification, but this did not cause the termination of Mr Johnson's membership or any compensable damage. The MDU's risk management policy and its application did not breach the first data protection principle, and no compensation was due for damage, distress, or harm to reputation.

Parties
Claimant: David Paul Johnson; Defendant: The Medical Defence Union Limited
Jurisdiction
England and Wales
Judgment Date
03 March 2006
Procedural Posture
Civil / Judgment After Trial
Outcome
Claim dismissed
Legal Topics
Data Protection Act 1998, Unfair Processing of Personal Data, Compensation for Unlawful Processing, Membership Termination, Professional Indemnity

Case Brief

Summary, issues, holding and outcome

More case intelligence is available

Unlock the full research layer for this judgment.

Full judgment text Downloadable case file Legal principles 4 Authorities cited 11 Party arguments 2 Amounts and remedies 5
Sign in to unlock

Parties

David Paul Johnson

Claimant

The Medical Defence Union Limited

Defendant

Procedural Posture

Civil / Judgment After Trial

  1. 1 Whether the MDU's risk review involved processing of Mr Johnson's personal data under the Data Protection Act 1998
  2. 2 Whether any such processing was unfair and in breach of the first data protection principle
  3. 3 Whether any unfair processing caused the termination of Mr Johnson's MDU membership

Ratio Decidendi

The MDU's processing of Mr Johnson's personal data in its risk assessment review, except for two non-lead files, was not unfair under the Data Protection Act 1998. The processing of the two non-lead files was technically unfair due to lack of notification, but this did not cause the termination of Mr Johnson's membership or any compensable damage. The MDU's risk management policy and its application did not breach the first data protection principle, and no compensation was due for damage, distress, or harm to reputation.

Court Disposition

Claim dismissed

Orders

  • Claim under section 10 of the Data Protection Act dismissed
  • Claim for compensation under section 13 of the Data Protection Act dismissed