Discussion and conclusions
Discussion and conclusions
We agree that this aspect of the case was a live issue before the FTT for the reasons that Mr Pitt-Payne identified.
However, it is apparent from the terms of the EN (which we have summarised in this respect at [18] above) that the Information Commissioner’s case that the LIAs should be re-assessed rested on the propositions that Experian’s processing was intrusive, non-transparent and harmful. As we have already explained the FTT rejected each of these propositions. There is no challenge to their conclusion in terms of the relatively innocuous nature of the processing and we have dismissed the grounds of appeal that challenge the FTT’s findings on intrusiveness and on transparency.
Accordingly, it follows that the FTT’s decision did contain a reasoned rejection of the Information Commissioner’s case. Whilst it would have been clearer, and thus desirable, for the FTT to have spelt out expressly that given these findings they did not uphold Requirement C6, we consider that it can clearly be inferred that this conclusion was part of their statement at [181] that they had found no other material contravention.
We do not consider that we are assisted by the discrete issues that arose in relation to the residual cohort. The conclusions reached in relation to the residual cohort and the terms of the SEN are not in issue on this appeal (and Experian indicated through Ms Proops that they are willing to agree to a requirement to re-visit the LIAs in so far as they concern this group of data subjects). For present purposes, we are satisfied that the FTT engaged with the question and their reasons make it tolerably clear why the Information Commissioner was unsuccessful in relation to this part of her case as regards the main cohort of data subjects.
- Heading
- THE HON. MRS JUSTICE HEATHER WILLIAMS DBE
- Hearing dates: 6-8 February 2024
- The structure of the Upper Tribunal’s decision
- Abbreviations
- Glossary
- The nature of Experian’s data processing
- The Information Commissioner’s Enforcement Notice
- Experian’s appeal to the First-tier Tribunal
- The Information Commissioner’s case before the First-tier Tribunal
- The hearing before the First-tier Tribunal
- The First-tier Tribunal’s decision
- The First-tier Tribunal’s findings
- The First-tier Tribunal’s conclusions
- The Substituted Enforcement Notice
- The Information Commissioner’s grounds of appeal to the Upper Tribunal
- The legal framework
- The Upper Tribunal’s “error of law” jurisdiction
- Adequacy of reasons
- Enforcement notices and appeals against them
- Recitals to the GDPR
- Proportionality
- The European Data Protection Board: decisions and guidelines
- Summary of relevant aspects of the transparency principle in the GDPR
- The parties’ overarching submissions
- Ground 1
- Experian’s submissions
- Alleged overarching errors: discussion and conclusions
- Alleged failure to address Article 5(1)(a) GDPR
- Alleged failure to identify the applicable standard of transparency
- The nature of the processing
- Relevance of the reasonable expectations of data subjects
- Alleged specific errors: discussion and conclusions
- Use of hyperlinks to the CIP
- Suggestion that people do not care about what happens to their data
- How the FTT addressed the reasonable expectations of data subjects
- Concluding observations on Ground 1
- Ground 2
- Experian’s submissions
- Alleged overarching error: discussion and conclusion
- Alleged specific errors: discussion and conclusions
- Article 14(5)(a) and whether the data subject already “has” the information
- The route from the third party suppliers to the CIP
- Article 14(5)(b)
- Concluding observations on Ground 2
- Ground 3
- Experian’s submissions
- Discussion and conclusions
- Ground 5
- Experian’s submissions
- Discussion and conclusions
- Conclusions
![[2024] UKUT 105 (AAC)](https://backend.juristeca.com/files/emisores/logo_3a2BKne.png)