Martin Hibbert & Anor v Richard D Hall
[2024] EWHC 2677 (KB)
Case details
Case summary
This claim concerned a long-running campaign of publications and investigative steps by the defendant asserting that the 22 May 2017 Manchester Arena attack was a staged hoax and that many victims (including the claimants) were "crisis actors". The claimants alleged statutory harassment under section 1 of the Protection from Harassment Act 1997 and breaches of data protection law (UK GDPR and the Data Protection Act 2018).
The court found that the defendant pursued a course of conduct comprising repeated public publications (videos, a film and a book) together with a targeted visit to the second claimant’s home and furtive filming. Viewed objectively and in light of the claimants’ vulnerability, that course of conduct was oppressive and unacceptable and amounted to harassment. The defendant either knew or ought to have known that his conduct would cause alarm or distress and failed to establish the defences in section 1(3) (prevention/detection of crime and reasonableness). The court held that the harassment claim therefore succeeds.
On the data protection claim the judge did not finally determine liability or remedies. The court identified issues with the pleadings and with the relief properly pleaded under the UK GDPR and DPA 2018 and invited further submissions on those matters and on remedies for the harassment claim.
Case abstract
Background and parties: On 22 May 2017 a suicide bomb detonated at Manchester Arena, killing 22 people and injuring many. The claimants are a father (Martin Hibbert) and his daughter (Eve) who each suffered life-changing injuries. The defendant, an independent journalist and broadcaster, published a series of videos, a film and a book advancing a theory that the attack was staged, and he undertook investigative steps including visiting the second claimant’s home and filming from his vehicle.
Nature of the claim / procedural posture: The claimants sued for harassment under the Protection from Harassment Act 1997 and for breaches of data protection law. Some factual issues had been the subject of earlier summary judgment (Master Davison: [2024] EWHC 227 (KB)) and refusals of permission to appeal were recorded. The trial before Steyn J (Media & Communications List) ran over four days in July 2024.
Issues for decision: For harassment the court framed and decided whether (i) the defendant pursued a course of conduct (statutory requirement of conduct on at least two occasions), (ii) the course of conduct amounted to harassment (objective assessment against the statutory test and Convention rights), (iii) whether the defendant knew or ought to have known his conduct amounted to harassment, and (iv) whether statutory defences applied (prevention/detection of crime and whether the conduct was reasonable in the circumstances). For data protection the court identified whether the claimants were data subjects, whether the defendant was a data controller, whether the defendant processed the claimants’ personal data, and whether that processing breached the data protection principles of the UK GDPR.
Court’s reasoning on harassment: The judge found that the publications (2018 and 2019 videos, the Film and the Book published 27 March 2020, the Statement Analysis Video of 16 May 2020 and the 2020 video of 13 June 2020) together with the September 2019 visit and surreptitious filming amounted to a single, deliberate course of conduct aimed at victims and survivor families. Taken as a whole and assessed objectively, and bearing in mind the vulnerability of the claimants (particularly Eve), the conduct was oppressive and unacceptable and crossed the threshold required for harassment under section 1 PHA. The court applied the balancing exercise between article 8 and article 10 rights, noting that freedom of expression in journalism is important and exceptions narrow, but concluded that the defendant had abused media freedom: repeated false allegations, reckless statement analysis, and intrusive investigative steps produced foreseeable alarm and distress. The defendant did not show that preventing or detecting crime was his dominant purpose; nor was his conduct reasonable in the circumstances. Consequently the harassment claim succeeds.
Court’s approach to the data protection claim: The judge observed that the data protection claim had received less focus at trial and identified deficiencies in the pleading (lack of specification of particular data or acts of processing and the remedies sought). The court did not finally determine data-protection liability, finding it appropriate to invite further submissions on what specific processing is relied on and the remedies properly pleaded under the UK GDPR and the Data Protection Act 2018.
Subsidiary findings and consequences: The judgment records previous summary judgments and related refusals of permission to appeal; it finds that the defendant’s investigation and publication practices caused real anxiety and distress to both claimants and in particular to the vulnerable second claimant. Remedies and the data-protection issues were left for further submissions.
Held
Appellate history
Cited cases
- Redmond-Bate v Director of Public Prosecutions, (1999) 7 BHRC, [2000] HRLR 249 neutral
- Association Ekin v France, (39288/98) (2002) 35 EHRR 35 neutral
- Thomas v News Group Newspapers Ltd, [2001] EWCA Civ 1233 neutral
- R v Broadcasting Standards Commission, Ex p BBC, [2001] QB 885 neutral
- Merelie v Newcastle PCT, [2004] EWHC 2554 (QB) neutral
- Re S (A Child) (Identification: Restriction on Publication), [2004] UKHL 47 [2005] 1 AC 593 neutral
- EDO MBM Technology Ltd v Axworthy, [2005] EWHC 2490 (QB) neutral
- Majrowski v Guy’s and St Thomas’s NHS Trust, [2006] UKHL 34 [2007] 1 AC 224 neutral
- McClintock v Department of Constitutional Affairs, [2008] IRLR 29 neutral
- Grainger Plc v Nicholson, [2010] ICR 460 neutral
- Law Society v Kordowski, [2011] EWHC 3185 (QB) neutral
- Trimingham v Associated Newspapers, [2012] EWHC 1296 (QB) neutral
- CXX v DXX, [2012] EWHC 1535 (QB) neutral
- Hayes v Willoughby, [2013] UKSC 17 [2013] 1 WLR 935 positive
- Bank Mellat v HM Treasury (No 2), [2014] AC 700 neutral
- Levi v Bates, [2015] EWCA Civ 206 [2016] QB 91 neutral
- Daniel and another v St George’s Healthcare NHS Trust and another, [2016] EWHC 23 (QB) [2016] 4 WLR 32 neutral
- Hourani v Thomson, [2017] EWHC 432 (QB) positive
- Sube v News Group Newspapers Ltd, [2020] EWHC 1125 (QB) neutral
- Hayden v Dickenson, [2020] EWHC 3291 (QB) neutral
- McNally v Saunders, [2022] EMLR 3 neutral
- Sledziewski v Persons Unknown, [2024] EWHC 1955 (KB) neutral
Legislation cited
- Civil Evidence 1962: Section 11
- Civil Procedure Rules: Part 18
- Civil Procedure Rules: Rule 32.13(iii) – CPR r.32.13(iii)
- Data Protection Act 2018: Section 167
- Data Protection Act 2018: Section 168(1)
- Data Protection Act 2018: Section 29
- Data Protection Act 2018: section 3(2) and (3)
- Data Protection Act 2018: Section 43(2)
- Human Rights Act 1998: Section 1
- Human Rights Act 1998: Schedule Schedule 1
- Inquiries Act 2005: Section 26
- Inquiries Act 2005: Section 35(2)-(3) – 35(2) and (3)
- Protection from Harassment Act 1997: Section 1
- Protection from Harassment Act 1997: Section 3
- Protection from Harassment Act 1997: Section 7
- UK GDPR: Article 16
- UK GDPR: Article 17
- UK GDPR: Article 18
- UK GDPR: Article 20
- UK GDPR: Article 4(1)
- UK GDPR: Article 49(1)
- UK GDPR: Article 5
- UK GDPR: Article 6
- UK GDPR: Article 82(4) and (5)