Factual and Procedural Background
The Appellant, a consultant orthopaedic surgeon, was a member of the Defendant, a mutual society providing discretionary benefits including professional indemnity cover and medico-legal advice to medical practitioners. Membership was held from 1980 to 1985 and again from 1986 until termination on 31 March 2002 under article 11(a) of the Defendant’s Memorandum and Articles of Association, without reasons being given.
The Appellant had never been subject to a claim for professional negligence but had multiple contacts with the Defendant, resulting in 17 files being opened relating to various complaints and incidents. The termination of membership resulted in the loss of professional indemnity cover, which was promptly replaced by cover from another medical protection society.
The Appellant contended that his expulsion was due to unfair processing of his personal data by the Defendant under its risk assessment policy, which led to damage to his professional reputation and consequent loss. The claim was brought under section 13 of the Data Protection Act 1998 ("DPA").
The Defendant maintained that the risk assessment, including a scoring system based on allegations made against the Appellant (regardless of their merits), justified the termination of membership. The Defendant asserted that the Appellant had consented to the processing of his personal data and that the termination was a responsible exercise of its absolute discretion under its constitutional documents.
The central legal issues were whether any personal data processing occurred, whether it was unfair, whether unfairness caused the termination, and if so, what compensation was due. The procedural history included prior rulings on data access claims and abandonment of certain claims.
Legal Issues Presented
- Did the Defendant's risk review involve processing of the Appellant's personal data?
- If so, was the processing unfair under the Data Protection Act 1998?
- If unfair, did such processing causally contribute to the decision to terminate membership?
- What compensation, if any, is payable for any breach of the Data Protection Act?
Arguments of the Parties
Appellant's Arguments
- The Defendant unfairly processed his personal data by relying on a risk assessment policy that scored allegations without investigating their merits or allowing the Appellant to respond.
- The scoring system was irrational and arbitrary, leading to unfair termination of membership.
- The Defendant failed to provide sufficient information about the purposes and nature of data processing, breaching the first data protection principle.
- The termination damaged his professional reputation and caused distress, entitling him to compensation under section 13 of the DPA.
Defendant's Arguments
- The risk assessment policy was a legitimate commercial exercise to protect the mutual society’s funds and was applied fairly and consistently.
- The Appellant consented to the processing of his personal data for risk management purposes via the renewal agreement.
- The processing of data was limited to selecting and summarising allegations, not assessing their truth, which was lawful and fair.
- The termination was a proper exercise of absolute discretion under the constitutional documents and not subject to challenge except for alleged data protection breaches.
- The Appellant suffered no pecuniary loss and his distress claims fail without proof of such loss; general damage to reputation is not compensable under section 13 of the DPA.
Table of Precedents Cited
| Precedent |
Rule or Principle Cited For |
Application by the Court |
| Durant v. Financial Services Authority [2000] FSR 28 |
Definition of "data" and "relevant filing system" under the Data Protection Act 1998 |
Guided interpretation of what constitutes personal data and relevant filing systems, influencing whether processing occurred. |
| Campbell v. MGN Ltd [2003] QB 633 |
Wide definition of "processing" including manual and partial automated operations |
Supported finding that selection and input of data by the Defendant amounted to processing under the DPA. |
| CCN Systems Limited v. The Data Protection Registrar (1991) |
Fairness in processing personal data, particularly relating to third party information |
Distinguished on facts; tribunal found unfairness in indiscriminate use of third party data but this case involved different circumstances. |
| Infolink Limited v. The Data Protection Registrar (1991) |
Similar to CCN Systems; processing of third party data and fairness |
Also distinguished; no direct assistance as facts and context differ markedly. |
| British Gas Trading Limited v. The Data Protection Registrar (1998) |
Balancing interests of data subjects and data users in fairness assessment |
Supported approach to assessing fairness of processing in light of contractual and commercial context. |
| Aerial Advertising Co. v. Batchelors Peas Ltd (1938) and Malik v. Bank of Credit and Commerce International SA [1998] AC 20 |
Recoverability of damages for pecuniary loss flowing from reputational injury |
Clarified that only pecuniary loss flowing from reputational damage is recoverable outside defamation claims. |
Court's Reasoning and Analysis
The court first determined that the Defendant’s preparation of a risk assessment review, involving the selection and summarisation of information from both manual and electronic files and inputting it into computerised forms, constituted "processing" of personal data under the DPA, applying a purposive interpretation consistent with the Directive and relevant case law.
Regarding fairness under the first data protection principle, the court found that the Appellant had consented to processing for risk management purposes through the renewal agreement, which adequately informed him of the purposes. The term "risk management" was construed as internal risk management by the Defendant, including decisions on membership renewal.
The court rejected the Appellant’s argument that the Defendant was required to consult him or seek his input on the summaries or scoring before the review was submitted to the Risk Assessment Group (RAG). It held that the Defendant’s adopted risk assessment policy, which scored members based on allegations without assessing their merits or requiring member input, was a legitimate commercial judgment and not unfair processing under the DPA.
The court distinguished the processing of "lead files" (data from the Appellant himself) from "non-lead files" (data from third parties). It found that the Defendant failed to notify the Appellant of the existence and processing of data in the non-lead files, rendering that processing unfair. However, this unfairness was immaterial to the termination decision, which would have been the same absent that unfair processing.
The court carefully examined the summaries of the 17 files prepared by the Defendant’s risk manager and found no material unfairness or misstatement in those summaries when measured against the Defendant’s risk assessment policy. It noted that the policy did not require assessment of the truth or merits of allegations, only their existence as markers of risk.
On causation, the court concluded that the unfair processing of the non-lead files did not cause the termination decision. It also found it improbable that any additional input or consultation by the Appellant would have altered the RAG’s recommendation or the final decision, given the nature of the policy.
Regarding compensation, the court held that section 13 of the DPA limits recoverable damage to pecuniary loss and distress linked to such loss. General damage for harm to reputation is not recoverable under section 13 and must be pursued, if at all, by defamation proceedings. The Appellant failed to prove any pecuniary loss beyond a modest expense related to a meeting with a new insurer, and his distress was limited to a short period before alternative cover commenced.
The court found the press reports relating to the claim were fair and not defamatory. Evidence of reputational damage was minimal and largely confined to adverse inferences by a competitor with whom the Appellant had a strained relationship. No substantial harm to reputation was established.
Holding and Implications
The court DISMISSED the Appellant's claim under section 13 of the Data Protection Act 1998 for compensation arising from alleged unfair processing of personal data.
The court held that while there was unfair processing of data obtained from third parties (non-lead files) due to lack of notification, this did not cause the termination of membership and thus did not give rise to compensation. The Defendant’s risk assessment policy and its implementation were lawful and fair within the meaning of the DPA. The termination of membership was a proper exercise of absolute discretion and not invalidated by data protection breaches.
The Appellant was entitled only to a minimal pecuniary award and modest compensation for distress linked to that loss, but no compensation for general reputational damage, which is not recoverable under the DPA.
The decision underscores the contractual and commercial context of mutual medical defence organisations’ risk management policies and clarifies the scope of data protection principles in relation to internal risk reviews. It confirms that members have limited rights to input in such processes and that reputational damage claims under the DPA are narrowly construed.