Elgizouli v Secretary of State for the Home Department
[2020] UKSC 10
Case details
Case summary
The Supreme Court allowed the appeal on statutory/data-protection grounds and quashed the Secretary of State’s decision to transfer material to the United States without death-penalty assurances because the decision did not comply with the Data Protection Act 2018 (in particular Part 3 implementing the Law Enforcement Directive and the conditions in sections 72–76, and the data protection principles in sections 34–36). The Court was unanimous that the decision-maker must give conscious, contemporaneous consideration to the statutory transfer gateways (including the strict necessity test in section 73(2) and the limited “special circumstances” gateway in section 76) and to the relevance of recital guidance in the LED (including recital 71 and recital 72) when transferring personal data to a third country.
On the separate common-law ground — whether it is unlawful at common law to facilitate the imposition or carrying out of the death penalty by providing mutual legal assistance — the court was divided. Lord Kerr concluded that the common law has developed to prohibit facilitating the death penalty (subject to narrow, urgent exceptions), but a majority (Lord Reed, Lord Carnwath, Lord Hodge and others) rejected that conclusion and would not recognise the wider common-law “non-facilitation” principle. The practical result is that further assistance must not be given for proceedings in the United States without appropriate death-penalty assurances because the transfer was unlawful under the 2018 Act.
Case abstract
Background and nature of the claim.
- The appellant, Maha Elgizouli, sought judicial review of the Secretary of State’s decision to provide mutual legal assistance (MLA) — including witness statements and other material gathered by UK police — to the United States in respect of her son, Shafee El Sheikh, who was suspected of extremely serious offences in Syria. Some offences under investigation in the United States carried the death penalty.
- The Divisional Court dismissed the claim on the merits but certified two questions of public importance: (i) whether it is unlawful at common law to provide MLA which will facilitate the imposition of the death penalty abroad; and (ii) whether such transfers of personal data are lawful under Part 3 of the Data Protection Act 2018, read with relevant EU data-protection law.
Procedural posture.
- Appeal to the Supreme Court from the Divisional Court ([2019] EWHC 60 (Admin)).
Issues framed by the court.
- Whether the common law prohibits the Government from facilitating the imposition or execution of the death penalty by providing MLA or other assistance to a foreign state.
- Whether the transfer of personal data for law-enforcement purposes to a non-EEA country (the United States) without the usual death-penalty assurances complied with Part 3 of the Data Protection Act 2018 (implementing the Law Enforcement Directive), in particular sections 34–36 and the international-transfer rules in sections 72–76.
Key facts.
- The United States requested MLA under a 1994 UK–US treaty for materials from UK police investigations into alleged terrorist offences in Syria. The Home Secretary’s predecessor had sought full written assurances that the death penalty would not be sought or carried out; the US response in March 2016 was not the full assurance requested. After diplomatic exchanges and pressure from the US, senior UK ministers decided in June 2018 to provide material without obtaining the full assurances. The appellant challenged that decision.
Court’s reasoning and conclusions.
- Data protection: the Court (unanimously) held that, insofar as the material transferred constituted personal data processed by a competent authority for law-enforcement purposes, the data controller (the Secretary of State) was required to address his mind to the statutory conditions in Part 3 of the Data Protection Act 2018 when authorising the transfer. The statutory framework requires a strict necessity assessment for transfers (section 73(2)), consideration of adequacy, appropriate safeguards (section 75) or, failing that, the narrow special-circumstances gateway (section 76), and documentation of the justification. The Secretary of State did not give the requisite conscious, contemporaneous consideration to these statutory criteria; substantial or retrospective compliance was insufficient. The transfer therefore failed under the 2018 Act.
- Common law: Lord Kerr (dissenting on this point) concluded that, having regard to the Bill of Rights, domestic abolition of capital punishment, ECHR Protocol 13 and the strong, near-universal international abhorrence of the death penalty, the common law should be developed to prohibit facilitating the death penalty by transfer of evidence except in narrowly defined and urgent circumstances. A majority disagreed, considering that recognition of such a broad common-law rule would not be an incremental development and that parliamentary and international law developments (including statutory schemes and existing ECHR jurisprudence) counsel caution. The majority therefore dismissed the common-law ground.
Practical outcome. The Secretary of State’s decision to provide material in July 2018 without obtaining appropriate assurance was unlawful under the Data Protection Act 2018; no further assistance should be given for proceedings in the United States without appropriate death-penalty assurances. The court declined to establish a binding, broad common-law prohibition on facilitation of the death penalty.
Held
Appellate history
Cited cases
- A v British Broadcasting Corporation, [2014] UKSC 25 positive
- Kennedy v The Charity Commission, [2014] UKSC 20 positive
- R (Osborn) v Parole Board, [2013] UKSC 61 positive
- Rabone v Pennine Care NHS Foundation Trust, [2012] UKSC 2 neutral
- R v Lyons, [2002] UKHL 44 positive
- R v Rusby, (1800) 2 Pea 189 neutral
- Soering v United Kingdom, (1989) 11 EHRR 439 positive
- Judge v Canada (UN Human Rights Committee), (2005) 40 EHRR SE4 positive
- Al-Saadoon v United Kingdom, (2010) 51 EHRR 9 positive
- Khan v United Kingdom (ECtHR), (2014) 58 EHRR SE15 negative
- R v Horseferry Road Magistrates' Court, Ex p Bennett, [1994] 1 AC 42 neutral
- Pratt and Morgan v Attorney-General for Jamaica, [1994] 2 AC 1 positive
- Guerra v Baptiste, [1996] AC 397 positive
- Henfield v Attorney General of the Commonwealth of the Bahamas, [1997] AC 413 positive
- Mohamed v President of the Republic of South Africa, [2001] ZACC 18 positive
- Attorney General for Barbados v Boyce, [2006] CCJ 1 (AJ) positive
- R (Zagorski) v Secretary of State for Business, Innovation and Skills, [2010] EWHC 3110 (Admin) mixed
- R (Sandiford) v Secretary of State for Foreign and Commonwealth Affairs, [2013] EWCA Civ 581 positive
- Guriev v Community Safety Development (UK) Ltd, [2016] EWHC 643 (QB) positive
- R (Miller) v Prime Minister, [2019] UKSC 41 positive
Legislation cited
- Bill of Rights 1688: Article 10
- British Nationality Act 1981: Section 40(4A)
- Charter of Fundamental Rights of the European Union: Article 52 and 53 – Articles 52 and 53
- Crime (Overseas Production Orders) Act 2019: Section 16
- Data Protection Act 2018: Part 3
- Data Protection Act 2018: Section 31
- Data Protection Act 2018: Section 34
- Data Protection Act 2018: Section 35(5) – The first data protection principle (section 35) in relation to sensitive processing
- Data Protection Act 2018: Section 36
- Data Protection Act 2018: Section 72
- Data Protection Act 2018: Section 73
- Data Protection Act 2018: Section 74
- Data Protection Act 2018: Section 75
- Data Protection Act 2018: Section 76
- Data Protection Act 2018: Section 80
- European Convention on Human Rights: Article 6
- Human Rights Act 1998: Section 1
- International Covenant on Civil and Political Rights: Article 6
- Investigatory Powers Act 2016: Section 52
- Mutual Legal Assistance Treaty between the United Kingdom and the United States (1994): article 1(2)(b)
- Thirteenth Protocol to the European Convention on Human Rights: Article 1