R (Bridges) v Chief Constable of South Wales Police
[2020] EWCA Civ 1058
Case details
Case summary
The Court of Appeal allowed the appellant's challenge in part, holding that South Wales Police's overt use of Live Automated Facial Recognition (AFR) engaged Article 8 ECHR and was not "in accordance with the law" because the existing legal and policy framework left excessive discretion on two critical questions: (i) who may be placed on police watchlists for AFR and (ii) where AFR may be deployed. The court also found that the force's Data Protection Impact Assessment (DPIA) did not comply with section 64(3)(b) and (c) of the Data Protection Act 2018 and that the Public Sector Equality Duty in section 149 of the Equality Act 2010 had not been discharged. The appeal was dismissed on the proportionality ground and on the discrete question whether the force's section 42 policy document failed at that stage.
Case abstract
Background and parties. The appellant, Edward Bridges (a civil liberties campaigner), challenged South Wales Police's trial deployments of AFR Locate (overt, real‑time facial recognition linked to a police watchlist) on 21 December 2017 (Queen Street, Cardiff) and 27 March 2018 (Motorpoint Arena) and the force's ongoing use. Interested parties included the Secretary of State, the Information Commissioner and the Surveillance Camera Commissioner. The claim was an application for judicial review seeking declarations (and damages) that AFR use breached Article 8 ECHR, data protection law and the Public Sector Equality Duty (PSED).
Procedural history. The Divisional Court (Haddon‑Cave LJ and Swift J) dismissed the claim by judgment of 4 September 2019 ([2019] EWHC 2341 (Admin)). Permission to appeal was granted and the Court of Appeal heard full argument.
Issues for determination. The principal issues were: (i) whether AFR deployments were "in accordance with the law" for Article 8(2) purposes (the quality of law question); (ii) whether the specific deployments were proportionate; (iii) whether the DPIA met the requirements of section 64 DPA 2018; (iv) whether an appropriate policy document under section 42 DPA 2018 was in place; and (v) whether the PSED (section 149 Equality Act 2010) had been satisfied.
Court's reasoning and conclusions. The court accepted that AFR processing of facial biometrics engages Article 8. On the Article 8(2) "in accordance with the law" question the court endorsed the legal principles in R (Catt) and related authorities but concluded that the cumulative framework relied upon by the Divisional Court (DPA 2018, the Surveillance Camera Code and local SWP policies) was presently deficient because it did not give adequate clarity and safeguards on (a) who may be placed on watchlists (the "who question", including the problematic residual category of those of "intelligence interest") and (b) where AFR may be deployed (the "where question"). Those excessive discretions meant the interference failed the "quality of law" requirement. The court rejected the appellant's contest on proportionality in respect of the two deployments (finding the Divisional Court's assessment was not wrong). The court held the DPIA was defective because it proceeded on assumptions inconsistent with this judgment (notably treating Article 8 as not engaged and understating the risks to non‑watchlist members of the public) and so failed to assess risks and mitigations as required by section 64(3)(b)-(c). On the PSED the court held SWP had not done all that was reasonably required to discharge its non‑delegable duty, in particular it had not obtained or secured adequate information/tests to address potential racial or sex bias in the AFR system; reliance on an operator human check did not discharge the duty of due regard. The court declined to make a final determination on whether SWP's November 2018 policy fully complied with section 42, noting the Information Commissioner's subsequent guidance and revised policy work by SWP.
Remedy. The court made declarations to reflect these conclusions: that AFR use on the two dates and on an ongoing basis was not in accordance with the law for Article 8(2); that the DPIA did not comply with section 64(3)(b)-(c); and that SWP failed to comply with the PSED prior to and in the course of the deployments and on an ongoing basis.
Held
Appellate history
Cited cases
- R (P) v Secretary of State for Justice, [2019] UKSC 3 neutral
- Christian Institute v Lord Advocate, [2016] UKSC 51 neutral
- R (on the application of Catt) v Commissioner of Police of the Metropolis and another, [2015] UKSC 9 positive
- R (T) v Chief Constable of Greater Manchester Police, [2014] UKSC 35 neutral
- Bank Mellat v HM Treasury (No 2), [2013] UKSC 39 neutral
- S v United Kingdom (Grand Chamber), (2009) 48 EHRR 50 neutral
- R v Turnbull, [1977] QB 224 neutral
- Munjaz v United Kingdom (ECtHR), [2012] MHLR 351 positive
- Vidal-Hall v Google, [2015] EWCA Civ 311 positive
- Beghal v Director of Public Prosecutions, [2016] AC 88 mixed
- Rynes v Urad (CJEU), C-212/13 positive
- Tele2 Sverige AB v Post‑och telestyrelsen and R (Watson), C‑203/15 & C‑698/15 mixed
Legislation cited
- Data Protection Act 1998: Section 1(1)
- Data Protection Act 1998: Section 4
- Data Protection Act 1998: Schedule 1, Part I
- Data Protection Act 2018: Part 3
- Data Protection Act 2018: Section 31
- Data Protection Act 2018: Section 35(5) – The first data protection principle (section 35) in relation to sensitive processing
- Data Protection Act 2018: Section 42 – Safeguards for sensitive processing and policy documentation
- Data Protection Act 2018: Section 64 – Data protection impact assessment
- Data Protection Act 2018: Schedule 8
- Equality Act 2010: Section 149
- European Convention on Human Rights: Article 8
- Human Rights Act 1998: Section 6(1)
- Police Act 1996: Section 39A
- Protection of Freedoms Act 2012: Section 29
- Protection of Freedoms Act 2012: Section 30 – Code on surveillance, including facial recognition guidance
- Protection of Freedoms Act 2012: Section 33
- Protection of Freedoms Act 2012: Section 34 – Surveillance Camera Commissioner and guidance