Discussion and conclusions
Discussion and conclusions
We have already concluded that the FTT took proper account of the Article 5(1)(a) transparency principle when we addressed the alleged overarching errors raised under Ground 1. The remaining complaint under Ground 3 is a narrower one, namely that the FTT did not have regard to or determine the Information Commissioner’s concerns as to the layering of the information provided on the CIP. For the reasons set out below we reject this proposition.
The FTT was clearly alive to the Information Commissioner’s case in this respect. They summarised this aspect of the EN at [18] of their decision. At [164] they correctly encapsulated her case as follows, “Experian made no attempt to identify the information that individuals were likely to find concerning or surprising and did not address its mind to the questions of what steps it should take to ensure the information was promptly located in the CIP”.
As we have already noted, the FTT were given a demonstration of the CIP’s pages ([135] above). They also referred to this at [163] of their decision, saying “We were taken at length through the consumer information portal”. Accordingly, the FTT were well-positioned to make an assessment as to the accessibility of information within the CIP and as to whether sufficient prominence was accorded to information that was of importance for data subjects. At [177] they concluded that the CIP was “adequately clear” and that “the relevant information is sufficiently prominently displayed and accessible to data subjects who want to understand how their data will be processed”. Mr Pitt-Payne suggested that their reference to “relevant information” was a reference to the information referred to in Article 14(1) and (2). However, it is clear to us that the reference to “relevant information” was a reference to the immediately preceding sentence in [177] where the FTT had accepted that the very large scale of the processing and the use of the data would be surprising to data subjects. Accordingly, the FTT found that information pertaining to the nature of the processing was “sufficiently prominently displayed” and in so finding they took account of their assessment that the scale of the processing and use of the data went beyond data subjects’ reasonable expectations.
In the circumstances it is inaccurate to suggest that the FTT did not address this aspect of the Information Commissioner’s case. It is true that they did so in a relatively compressed way, but no proper basis has been shown for overturning this evaluative assessment, which the FTT were well-placed to make. As Ms Proops suggested, the articulation of a concise conclusion on this point should be seen in its context, namely the FTT were setting out their overall impression after having had the relevant webpages demonstrated to them.
Mr Pitt-Payne emphasised those parts of the Article 29 Working Party’s guidelines on transparency that are concerned with the provision of accessible information in the digital context, particularly [11], [35] and [36] ([94] above). Amongst other points, these passages address layering, including recommending information to include in the first layer. There is nothing to suggest that the FTT were unaware of the guidelines; they were cited to them and they referred to another part of the guidelines when they were considering the residual cohort at [178] of their decision. We are satisfied that the FTT were mindful of these matters; they commented on the advantages and disadvantages of layering at [165] of their decision. However, these paragraphs of the guidelines do not lay down rules of law; it was for the FTT to make their own evaluative assessment as to whether information about Experian’s processing was sufficiently prominently displayed on the CIP; they did so and they found that it was.
Ground 4
We have summarised this ground at [53] above. As we have rejected Grounds 1 and 2 it does not arise.
- Heading
- THE HON. MRS JUSTICE HEATHER WILLIAMS DBE
- Hearing dates: 6-8 February 2024
- The structure of the Upper Tribunal’s decision
- Abbreviations
- Glossary
- The nature of Experian’s data processing
- The Information Commissioner’s Enforcement Notice
- Experian’s appeal to the First-tier Tribunal
- The Information Commissioner’s case before the First-tier Tribunal
- The hearing before the First-tier Tribunal
- The First-tier Tribunal’s decision
- The First-tier Tribunal’s findings
- The First-tier Tribunal’s conclusions
- The Substituted Enforcement Notice
- The Information Commissioner’s grounds of appeal to the Upper Tribunal
- The legal framework
- The Upper Tribunal’s “error of law” jurisdiction
- Adequacy of reasons
- Enforcement notices and appeals against them
- Recitals to the GDPR
- Proportionality
- The European Data Protection Board: decisions and guidelines
- Summary of relevant aspects of the transparency principle in the GDPR
- The parties’ overarching submissions
- Ground 1
- Experian’s submissions
- Alleged overarching errors: discussion and conclusions
- Alleged failure to address Article 5(1)(a) GDPR
- Alleged failure to identify the applicable standard of transparency
- The nature of the processing
- Relevance of the reasonable expectations of data subjects
- Alleged specific errors: discussion and conclusions
- Use of hyperlinks to the CIP
- Suggestion that people do not care about what happens to their data
- How the FTT addressed the reasonable expectations of data subjects
- Concluding observations on Ground 1
- Ground 2
- Experian’s submissions
- Alleged overarching error: discussion and conclusion
- Alleged specific errors: discussion and conclusions
- Article 14(5)(a) and whether the data subject already “has” the information
- The route from the third party suppliers to the CIP
- Article 14(5)(b)
- Concluding observations on Ground 2
- Ground 3
- Experian’s submissions
- Discussion and conclusions
- Ground 5
- Experian’s submissions
- Discussion and conclusions
- Conclusions
![[2024] UKUT 105 (AAC)](https://backend.juristeca.com/files/emisores/logo_3a2BKne.png)