Case study 5: High Court Rules That Personal Data Can Be Accessed By Litigant [2012] IEDPC 5 (2012)

Case study 5: High Court Rules That Personal Data Can Be Accessed By Litigant [2012] IEDPC 5 (2012)

The existence of legal proceedings between a data requester and a data controller does not preclude the data requester from making an access request under the Data Protection Acts, nor does it justify the data controller in refusing the request. Exemptions to access must be expressly stated in the legislation and narrowly construed.

Citation
[2012] IEDPC 5
Parties
Appellant: Dublin Bus; Respondent: Data Protection Commissioner; Complainant: Data Subject (individual)
Jurisdiction
Ireland
Procedural Posture
Appeal / High Court Judgment Following Circuit Court Appeal of Enforcement Notice
Outcome
Appeal dismissed
Legal Topics
Personal Data Access, Legal Professional Privilege, Discovery in Litigation, Statutory Interpretation
Data Protection Civil Procedure Personal Data Access Legal Professional Privilege Discovery in Litigation Statutory Interpretation

Case Brief

Summary, issues, holding and outcome

More case intelligence is available

Unlock the full research layer for this judgment.

Full judgment text Downloadable case file Legal principles 3 Authorities cited 6 Party arguments 2 Amounts and remedies 1
Sign in to unlock

Parties

Dublin Bus

Appellant

Data Protection Commissioner

Respondent

Data Subject (individual)

Complainant

Procedural Posture

Appeal / High Court Judgment Following Circuit Court Appeal of Enforcement Notice

Legal Issues

  1. 1 Whether the existence of legal proceedings between a data requester and a data controller precludes a data requester from making an access request under the Data Protection Acts
  2. 2 Whether CCTV footage constitutes personal data under the Data Protection Acts
  3. 3 Whether legal professional privilege exemption under Section 5(1)(g) applies to CCTV footage preserved for litigation

Ratio Decidendi

The existence of legal proceedings between a data requester and a data controller does not preclude the data requester from making an access request under the Data Protection Acts, nor does it justify the data controller in refusing the request. Exemptions to access must be expressly stated in the legislation and narrowly construed.

Court Disposition

Appeal dismissed

Orders

  • Costs awarded to the Data Protection Commissioner