Ground 3
Ground 3
The Information Commissioner’s submissions
There appeared to be a significant degree of overlap between the Information Commissioner’s submissions on Ground 1 and Ground 3. In this section of our decision we only summarise and address those matters that we have not already covered when we considered Ground 1. Mr Pitt-Payne submitted that the FTT had failed to address the Commissioner’s specific criticism that the most striking and/or surprising features of Experian’s processing were not covered in the first levels of the CIP that would be reached when a data subject navigated to the website. He said that the first layer of the CIP focused on explaining why Experian’s processing was beneficial, rather than on what the processing actually entailed. He contended that the CIP failed to reflect the approach identified in the Article 29 Working Party’s guidelines on transparency in terms of layering and giving prominence to information that was relevant to the reasonable expectations of data subjects. He said that it was incumbent on the FTT to resolve this issue as it was clearly raised by Requirement A1 of the EN and maintained during the hearing, including in the Commissioner’s written closing submissions.
- Heading
- THE HON. MRS JUSTICE HEATHER WILLIAMS DBE
- Hearing dates: 6-8 February 2024
- The structure of the Upper Tribunal’s decision
- Abbreviations
- Glossary
- The nature of Experian’s data processing
- The Information Commissioner’s Enforcement Notice
- Experian’s appeal to the First-tier Tribunal
- The Information Commissioner’s case before the First-tier Tribunal
- The hearing before the First-tier Tribunal
- The First-tier Tribunal’s decision
- The First-tier Tribunal’s findings
- The First-tier Tribunal’s conclusions
- The Substituted Enforcement Notice
- The Information Commissioner’s grounds of appeal to the Upper Tribunal
- The legal framework
- The Upper Tribunal’s “error of law” jurisdiction
- Adequacy of reasons
- Enforcement notices and appeals against them
- Recitals to the GDPR
- Proportionality
- The European Data Protection Board: decisions and guidelines
- Summary of relevant aspects of the transparency principle in the GDPR
- The parties’ overarching submissions
- Ground 1
- Experian’s submissions
- Alleged overarching errors: discussion and conclusions
- Alleged failure to address Article 5(1)(a) GDPR
- Alleged failure to identify the applicable standard of transparency
- The nature of the processing
- Relevance of the reasonable expectations of data subjects
- Alleged specific errors: discussion and conclusions
- Use of hyperlinks to the CIP
- Suggestion that people do not care about what happens to their data
- How the FTT addressed the reasonable expectations of data subjects
- Concluding observations on Ground 1
- Ground 2
- Experian’s submissions
- Alleged overarching error: discussion and conclusion
- Alleged specific errors: discussion and conclusions
- Article 14(5)(a) and whether the data subject already “has” the information
- The route from the third party suppliers to the CIP
- Article 14(5)(b)
- Concluding observations on Ground 2
- Ground 3
- Experian’s submissions
- Discussion and conclusions
- Ground 5
- Experian’s submissions
- Discussion and conclusions
- Conclusions
![[2024] UKUT 105 (AAC)](https://backend.juristeca.com/files/emisores/logo_3a2BKne.png)