How the FTT addressed the reasonable expectations of data subjects
How the FTT addressed the reasonable expectations of data subjects
Lastly in terms of Ground 1, we do not accept that the FTT erred in law in the way that they addressed the reasonable expectations of those whose personal data was used by Experian or that their reasoning displays irrational inconsistency. The first sentence of the FTT’s [142] simply referred to the Information Commissioner’s case. The last sentence indicates that at this stage the FTT had in mind individuals’ subjective reactions to the way in which Experian processed their data. As we have explained when addressing the overarching elements of Ground 1, this is not a relevant contextual consideration. Accordingly, the FTT did not fall into error in finding that this was “not a particularly useful yardstick”. The middle of the paragraph legitimately referred to the FTT’s rejection of Mr Hulme’s evidence in this respect. At [165] of their decision, the FTT correctly drew a distinction between the subjective surprise that some users might experience and their reasonable expectations, noting that it was the latter that was in issue. Thus, in setting out their conclusion at [177] we consider that the FTT was referring to its assessment of those reasonable expectations when they acknowledged that, “the scale of the processing undertaken is very large, and that is something which would be surprising to data subjects as indeed would be the uses to which that data is put”. Read in this way we do not consider that there is significant inconsistency between the passages that Mr Pitt-Payne highlighted, albeit this is another respect in which the FTT’s decision could certainly have been better expressed.
It follows from our analysis that the FTT did proceed on the basis that Experian’s processing went beyond the reasonable expectations of the data subjects, when they assessed whether transparency requirements had been met. Nonetheless they found (as it was open to them to do so) that the transparency requirements were met in this instance.
Furthermore, insofar as there is any tension or inconsistency between [142] and [177] of the FTT’s reasoning (contrary to our primary conclusion), it is evident from the structure of the decision and their reasoning, that it was the latter that informed their conclusion on transparency. Accordingly, the FTT did not find that Experian’s data processing was not objectively surprising to data subjects and thus the perversity complaint falls away.
- Heading
- THE HON. MRS JUSTICE HEATHER WILLIAMS DBE
- Hearing dates: 6-8 February 2024
- The structure of the Upper Tribunal’s decision
- Abbreviations
- Glossary
- The nature of Experian’s data processing
- The Information Commissioner’s Enforcement Notice
- Experian’s appeal to the First-tier Tribunal
- The Information Commissioner’s case before the First-tier Tribunal
- The hearing before the First-tier Tribunal
- The First-tier Tribunal’s decision
- The First-tier Tribunal’s findings
- The First-tier Tribunal’s conclusions
- The Substituted Enforcement Notice
- The Information Commissioner’s grounds of appeal to the Upper Tribunal
- The legal framework
- The Upper Tribunal’s “error of law” jurisdiction
- Adequacy of reasons
- Enforcement notices and appeals against them
- Recitals to the GDPR
- Proportionality
- The European Data Protection Board: decisions and guidelines
- Summary of relevant aspects of the transparency principle in the GDPR
- The parties’ overarching submissions
- Ground 1
- Experian’s submissions
- Alleged overarching errors: discussion and conclusions
- Alleged failure to address Article 5(1)(a) GDPR
- Alleged failure to identify the applicable standard of transparency
- The nature of the processing
- Relevance of the reasonable expectations of data subjects
- Alleged specific errors: discussion and conclusions
- Use of hyperlinks to the CIP
- Suggestion that people do not care about what happens to their data
- How the FTT addressed the reasonable expectations of data subjects
- Concluding observations on Ground 1
- Ground 2
- Experian’s submissions
- Alleged overarching error: discussion and conclusion
- Alleged specific errors: discussion and conclusions
- Article 14(5)(a) and whether the data subject already “has” the information
- The route from the third party suppliers to the CIP
- Article 14(5)(b)
- Concluding observations on Ground 2
- Ground 3
- Experian’s submissions
- Discussion and conclusions
- Ground 5
- Experian’s submissions
- Discussion and conclusions
- Conclusions
![[2024] UKUT 105 (AAC)](https://backend.juristeca.com/files/emisores/logo_3a2BKne.png)