zoomLaw

Christian Institute v Lord Advocate

[2016] UKSC 51

Case details

Neutral citation
[2016] UKSC 51
Court
Supreme Court of the United Kingdom
Judgment date
28 July 2016
Subjects
Constitutional lawData protectionHuman rightsFamily lawAdministrative law
Keywords
named personinformation sharingChildren and Young People (Scotland) Act 2014Data Protection Act 1998Article 8 ECHRlegislative competenceScotland Act 1998proportionalityguidance (RDSG)privacy
Outcome
allowed

Case summary

This appeal concerned the legislative competence of Part 4 of the Children and Young People (Scotland) Act 2014, which establishes a statutory "named person" service and wide duties and powers for the sharing of information about children and young people (notably sections 23 and 26). The court analysed (a) whether any provision of Part 4 "relates to" the subject-matter of the Data Protection Act 1998 or Council Directive 95/46/EC (the reserved-matters challenge under section 29(2)(b) of the Scotland Act 1998), and (b) whether the information-sharing provisions are compatible with article 8 ECHR and with EU law.

The Supreme Court held that Part 4 does not relate to the subject-matter of the DPA/Directive so as to be outside devolved competence. However, the court concluded that the information-sharing provisions, read with the revised draft statutory guidance (RDSG) as then drafted, failed the article 8(2) requirement of being "in accordance with the law" and risked disproportionate interferences with private and family life. The court therefore allowed the appeal: the information-sharing provisions are not within the legislative competence of the Scottish Parliament. The court invited submissions on a section 102 order to suspend the effect of that conclusion to permit remedial legislation or measures.

Case abstract

The appellants (four charities and three parents) challenged the legality of the information-sharing and retention provisions in Part 4 of the Children and Young People (Scotland) Act 2014. They argued (i) that those provisions related to reserved matters because they touched the subject-matter of the Data Protection Act 1998 and Directive 95/46/EC; and (ii) that they were incompatible with Convention rights, in particular article 8 ECHR, because they allowed disclosure of confidential personal data on an unduly low threshold and lacked adequate safeguards.

  • Nature of the claim: a challenge to legislative competence under section 29 of the Scotland Act 1998 and Convention/EU-law compatibility of Part 4, seeking declaration that the impugned provisions are outside competence.
  • Procedural posture: appeal to the Supreme Court from the Inner House of the Court of Session ([2015] CSIH 64).
  • Issues framed: (i) whether Part 4 "relates to" the DPA/Directive (reserved matter); (ii) whether Part 4 is compatible with article 8 ECHR (accessibility/foreseeability and adequate safeguards; proportionality); (iii) whether there is additional incompatibility with EU law beyond article 8.

The court reasoned as follows. On reserved matters, the purpose and effect of Part 4 were examined: while Part 4 creates duties and powers for information sharing, its primary purpose is the promotion of children’s wellbeing and collaborative working—an objective which may be regarded as consequential to, not properly part of, the subject-matter of the DPA/Directive. The DPA itself contemplates statutory disclosures (section 35) and provides for UK-wide regulation and supervisory arrangements; Part 4 does not thereby relate to the subject-matter of the DPA so as to be outside competence.

On article 8, the court found that certain features of Part 4 (the low threshold for sharing: information which an information holder "considers" likely to be relevant; discretionary powers under section 26(8); explicit absence of a statutory duty to inform parents or to obtain consent; and the RDSG's non-binding guidance) meant that information sharing would not be sufficiently "accessible" or "foreseeable" and that safeguards against arbitrary interference were inadequate. Although in many individual cases the DPA and Directive limit disclosure (and thereby mitigate some concerns), the statutory scheme as drafted and the guidance produced do not ensure the requisite precision and safeguards. The court held that the information-sharing provisions are therefore not "in accordance with the law" and may lead to disproportionate interferences with private and family life. The EU-law challenge raised no separate incompatibility beyond article 8. The court allowed the appeal and invited submissions on a section 102 suspension order to permit corrective legislative or executive action.

Held

Appeal allowed. The Supreme Court held that Part 4 of the Children and Young People (Scotland) Act 2014 does not "relate to" the subject-matter of the Data Protection Act 1998 or Directive 95/46/EC (so the reserved-matters challenge failed), but the information‑sharing provisions (notably sections 23 and 26), as drafted and in light of the RDSG, are not "in accordance with the law" under article 8 ECHR and risk disproportionate interferences with private and family life; accordingly those provisions are not within the legislative competence of the Scottish Parliament. The court invited submissions on a suspension order under section 102 of the Scotland Act 1998 to permit remediation.

Appellate history

On appeal from the Inner House of the Court of Session (Second Division) reported as [2015] CSIH 64. The case reached the Supreme Court by way of appeal from that Court of Session decision.

Cited cases

  • R (Roberts) v Comr of Police of the Metropolis, [2015] UKSC 79 neutral
  • R (Bibi) v Secretary of State for the Home Department, [2015] UKSC 68 neutral
  • Bank Mellat v HM Treasury (No 2), [2013] UKSC 39 neutral
  • R (Aguilar Quila) v Secretary of State for the Home Department, [2011] UKSC 45 neutral
  • Martin v Most, [2010] UKSC 10 positive
  • Huang v Secretary of State for the Home Department, [2007] UKHL 11 neutral
  • Nielsen v Denmark, (1988) 11 EHRR 175 neutral
  • Olsson v Sweden (No 1), (1988) 11 EHRR 259 neutral
  • Z v Finland (European Court of Human Rights), (1998) 25 EHRR 371 neutral
  • I v Finland, (2009) 48 EHRR 740 neutral
  • Gillan v United Kingdom, (2010) 50 EHRR 1105 neutral
  • Neulinger and Shuruk v Switzerland, (2012) 54 EHRR 31 neutral
  • El-Al Israeli Airlines Ltd v Danielowitz, [1992-4] IsrLR 478 neutral
  • X v Commission, [1994] ECR I-4347 neutral
  • Campbell v MGN Ltd, [2004] 2 AC 457 neutral
  • Imperial Tobacco Ltd v Lord Advocate, [2012] UKSC 61 positive
  • South Lanarkshire Council v Scottish Information Comr, [2013] UKSC 55 neutral
  • In re Agricultural Sector (Wales) Bill, [2014] UKSC 43 neutral
  • R (T) v Chief Constable of Greater Manchester Police, [2015] AC 49 neutral
  • Salvesen v Riddell, 2013 SC (UKSC) 236 neutral
  • Pierce v Society of Sisters, 268 US 510 (1925) neutral
  • MM v United Kingdom, Application No 24029/07 neutral
  • Bodil Lindqvist, Case C-101/01 neutral
  • Google Spain SL v Agencia Española de Protección de Datos, Case C-131/12 neutral
  • Schrems v Data Protection Comr, Case C-362/14 neutral
  • Volker und Marcus Schecke GbR and Hartmut Eifert v Land Hessen, Cases C-92/09 and C-93/09 neutral

Legislation cited

  • Children and Young People (Scotland) Act 2014: Section 19
  • Children and Young People (Scotland) Act 2014: Section 23
  • Children and Young People (Scotland) Act 2014: Section 26
  • Children and Young People (Scotland) Act 2014: Section 27
  • Children and Young People (Scotland) Act 2014: Section 28
  • Children and Young People (Scotland) Act 2014: Section 96
  • Children's Hearings (Scotland) Act 2011: Section 36
  • Children's Hearings (Scotland) Act 2011: Section 38
  • Children's Hearings (Scotland) Act 2011: Section 39
  • Children's Hearings (Scotland) Act 2011: Section 67
  • Council Directive 95/46/EC: Article 7
  • Council Directive 95/46/EC: Article 8
  • Data Protection Act 1998: Section 27(5)
  • Data Protection Act 1998: Section 35(1)
  • Data Protection Act 1998: Section 4
  • Data Protection Act 1998: Section 70(2)
  • Data Protection Act 1998: Schedule Schedule 2
  • Data Protection Act 1998: Schedule Schedule 3
  • Human Rights Act 1998: Section 6(1)
  • Scotland Act 1998: Section 101
  • Scotland Act 1998: Section 102
  • Scotland Act 1998: section 29(1)–(4)
  • Scotland Act 1998: Section 30
  • Scotland Act 1998: Schedule 5