Julian Todd v The Information Commissioner
[2023] UKFTT 782 (GRC)
Section 40(2) FOIA: Personal data is exempt information if its disclosure would contravene data protection principles.
Freedom of Information Act 2000
Article 6(1)(f) UK GDPR: Processing of personal data is lawful if necessary for the legitimate interests of the controller, unless overridden by the data subject's interests or fundamental rights.
UK General Data Protection Regulation
Three-part test for legitimate interest under Article 6(1)(f): (1) Legitimate interest pursued; (2) Processing necessary; (3) Interests not overridden by data subject's rights.
Case law on Article 6(1)(f)'s predecessor
Section 41 FOIA: Information obtained in confidence is exempt if disclosure would constitute an actionable breach of confidence.
Freedom of Information Act 2000
Coco v AN Clark (Engineers) Ltd [1969] RPC 41 three-part test for breach of confidence: (1) Information has quality of confidence; (2) Imparted in circumstances importing obligation of confidence; (3) Unauthorised use to detriment.
Coco v AN Clark (Engineers) Ltd [1969] RPC 41
Public interest balancing test applies to Section 41, but Section 40(2) is an absolute exemption.
Case Law
Appeal allowed.
The FTT found a legitimate public interest in transparency regarding the Community Panel and Resident Liaison Group's membership, outweighing the data subjects' privacy concerns. The FTT determined that disclosure was reasonably necessary and within the reasonable expectations of the group members. There was no actionable breach of confidence.
[2023] UKFTT 782 (GRC)
[2024] UKFTT 503 (GRC)
[2024] UKFTT 269 (GRC)
[2024] UKFTT 795 (GRC)
[2023] UKFTT 1063 (GRC)