![[2023] UKUT 132 (AAC)](https://backend.juristeca.com/files/emisores/logo_3a2BKne.png){kind=logo}
Relevance of law of agency
Relevance of law of agency
The Appellant argued that domestic agency law principles informed the attribution of responsibilities between processor and controller under the GDPR. The Tribunal disagreed:
“54. Having considered the submissions of both Parties, I am not persuaded that consideration of the law of agency assists with the determination of the central issue in this appeal, which is the extent to which [the Appellant] was controller of the data recovered and whether it bears responsibility for any data protection breaches arising from JPL’s processing activities.”
- Heading
- The decision of the Upper Tribunal is to refuse this appeal. The decision of the First-tier Tribunal, taken on 9 August 2021, under file reference EA/2020/0065/V, did not involve an error on a point o
- Meaning of terms used in these reasons
- The main issue of wider interest: summary of conclusion
- Background
- First-tier Tribunal’s decision
- Agreed facts
- Tribunal’s general role
- Burden of proof
- Standard of proof
- Relevance of law of agency
- General conclusions
- Whether a MPN was appropriate
- Penalty amount
- Legislative framework
- Data Protection Act 2018
- giving “careful attention” to the Commissioner’s reasons for imposing the MPN
- Ground 1 - arguments
- there is the potential for significant financial implications, but deprivation of liberty is not an issue
- the Commissioner’s work is clearly very important since he seeks to protect the fundamental rights of data subjects
- Ground 2 – reliance on Hope & Glory
- licensing authority sub-committees are comprised of elected individuals who are answerable to their electors Ground 2 –arguments
- Ground 3 – civil or criminal standard of proof
- Ground 3 – the arguments
- the term “satisfied”, in section 155(1)(a), DPA is relevant to the burden of proof not the standard
- Ground 4 – law of agency
- making a controller legally responsible for the acts of its processor is consistent with an agency relationship; and
- Ground 4 – the arguments
- Ground 5 – Tribunal’s reliance on breach of Article 24(1)
- The arguments
- Ground 6 – considerations relevant to amount of penalty
- rejected the Appellant’s argument that the breach documents originated from care homes when there was no countervailing evidence
- failed to deal with the points made in the Appellant’s skeleton argument at paragraphs 56(5) and (7) to (11)
- The arguments
- paragraph 56 of the skeleton argument . The Tribunal did not disregard the submission that the Commissioner’s finding of careless storage was contradicted by CCTV evidence (see paragraphs 65(xi) and 8
- Ground seven – the arguments
- Conclusions
- Ground 2
- Ground 3
- I do not understand why the ultimate destination of monies paid to satisfy a MPN should be of any relevance to its essential character or why it should tend to show that MPN proceedings have the ‘seri
- Ground 4
- Ground 5
- Ground 6
- Ground 7
- Conclusions