Doolin v The Data Protection Commissioner [2020] IEHC 90 (21 February 2020)

Doolin v The Data Protection Commissioner [2020] IEHC 90 (21 February 2020)

The use of information derived from CCTV footage for disciplinary proceedings constituted further processing for a different purpose than that for which the data was originally collected. The Data Protection Commissioner erred in law by concluding that no further processing occurred, as the statutory definition of processing includes using or consulting data. There was no evidence to support the Circuit Court's finding that the disciplinary action was for security purposes.

Citation
[2020] IEHC 90
Parties
Appellant: Cormac Doolin; Respondent: The Data Protection Commissioner; Notice Party: Our Lady’s Hospice and Care Services
Jurisdiction
Ireland
Judgment Date
21 February 2020
Procedural Posture
Appeal on a Point of Law / High Court Judgment on Appeal From Circuit Court
Outcome
Appeal allowed; Circuit Court decision quashed; Data Protection Commissioner's decision set aside
Legal Topics
Purpose Limitation Principle, Processing of Personal Data, Use of CCTV Footage, Disciplinary Proceedings, Appeal on Point of Law
Data Protection Employment Law Administrative Law Purpose Limitation Principle Processing of Personal Data Use of CCTV Footage Disciplinary Proceedings Appeal on Point of Law

Case Brief

Summary, issues, holding and outcome

More case intelligence is available

Unlock the full research layer for this judgment.

Full judgment text Downloadable case file Legal principles 3 Authorities cited 6 Party arguments 2
Sign in to unlock

Parties

Cormac Doolin

Appellant

The Data Protection Commissioner

Respondent

Our Lady’s Hospice and Care Services

Notice Party

Procedural Posture

Appeal on a Point of Law / High Court Judgment on Appeal From Circuit Court

Legal Issues

  1. 1 Whether information derived from CCTV footage was unlawfully further processed for disciplinary purposes in breach of s.2(1)(c)(ii) of the Data Protection Act 1988 as amended
  2. 2 Whether the Data Protection Commissioner erred in law in concluding no further processing occurred

Ratio Decidendi

The use of information derived from CCTV footage for disciplinary proceedings constituted further processing for a different purpose than that for which the data was originally collected. The Data Protection Commissioner erred in law by concluding that no further processing occurred, as the statutory definition of processing includes using or consulting data. There was no evidence to support the Circuit Court's finding that the disciplinary action was for security purposes.

Court Disposition

Appeal allowed; Circuit Court decision quashed; Data Protection Commissioner's decision set aside

Orders

  • Decision of the Circuit Court quashed
  • Decision of the Data Protection Commissioner of 27 July 2018 set aside