Relevant cases

This section contains hyperlinks to case law established under the previous data protection legislation.


Title   Case Description
AB  and  A Chief Constable    Objection to processing, unfair use of personal data in reference
AB  v Ministry of Justice   Failure to comply with subject access request, compensation, damage not limited to pecuniary, distress
CSA  v  Information Commissioner   Personal data, barnardisation
Dawson-Damer v Taylor Wessing    SAR, LPP, proportionality, motive
Durant v FSA   "Personal data" & "Relevant filing systems"
Durham CC v Dunn    SAR, right to information not documents, legal proceedings
Elliott v Lloyds TSB Bank Plc   SAR, not abuse of process
Ezsias v Welsh Ministers    SAR, court application, right of access not "necessarily coterminous with a right to disclosure of documents"
Google v AEPD and Gonzalez C131/12   EU Court of Justice "Right to be Forgotten" Ruling May 2014
Google v Vidal-Hall & Anors UK EWCA 2015   Moral damage' compensation claims
"Right to be Forgotten" ruling Factsheet   EU Court of Justice Ruling on Right to be forgotten
Grinyer v Plymouth Hospital NHS Trust 2011   Unreported Case - unauthorised disclosure data protection compensation award
Guriev v Community Safety Development Ltd [2016] EWHC 643 (QB)   SAR, pre-litigation, not abuse of process, consideration of requirements for relying on exemptions
Halliday v Creation Consumer Finance [2013] EWCA Civ 333   Distress must be directly linked to data breach for consumers to claim compensation
HM AG v Island FM et al   Registration
I v Finland   Security measures Art 8 - "practical and effective protection to exclude any possibility of unauthorised access occurring"
Information Commissioner v FSA and Edem   Appeal to Upper Tribunal Appeal (FOI/DPA crossover personal data definitions taking account of Durant)
Ittihadieh v Cheyne Gdns & Anors Joined Deer v Oxford University   SAR
Johnson v MDU   Johnson v MDU
Kololo v Chief of Police of the Metropolis 2015 EWHC 600 QB   Kololo - SAR not abuse of process, the existence of other lawful means of obtaining the requested data (e.g., through a contractual or statutory right) is irrelevant and does not allow the data controller to refuse to honour the subject access request; accuracy of data
Moorcroft Judgment IOM   Inaccurate reference and opinions, compensation
R v Rooney   R v Rooney unlawful obtaining
R (Lord) v Secretary of State for Home Department   Lord - Subject Access requests Fair Processing
Smeaton v Equifax CA[2013] EWCA Civ 108   Smeaton v Equifax - accuracy decision
Smith v Lloyds TSB   Smith v Lloyds TSB
Southampton City Council v ICO EA 2012/0171   Southampton City Council v ICO Enforcement Notice Appeal CCTV
Southern Pacific Personal Loans Limited [2013] EWHC 2485 (Ch)   Subject access requests, fifth principle, data controller