Factual and Procedural Background
The Department of Health appealed a decision by the Information Tribunal ordering it to disclose detailed statistics on late term abortions. The Department argued that disclosure risked identifying patients, while the Information Commissioner, responsible under the Freedom of Information Act 2000 ("FOIA") and the Data Protection Act 1998 ("DPA"), maintained that the information should be disclosed. The Tribunal had found the statistics constituted personal data but ruled that disclosure would not breach data protection principles or statutory prohibitions, ordering disclosure. The Department of Health challenged this decision.
The background involves statutory provisions under the Abortion Act 1967 and Abortion Regulations 1991, which require certain detailed information about terminations, including late term (ground E) abortions, to be reported confidentially to the Chief Medical Officer. Historically, detailed statistics were published by the Office of National Statistics ("ONS") until 2002, after which the Department of Health took over publication but provided less detailed data citing privacy concerns.
Following a Freedom of Information request by the ProLife Alliance in 2005 for detailed 2003 statistics, the Department refused disclosure citing exemptions under FOIA and awaited ONS guidance on confidentiality. The ONS issued guidance recommending suppression of small cell counts to avoid identification risks. The Department published statistics accordingly, with suppressed data where counts were below 10.
The ProLife Alliance pursued internal review and then complaint to the Information Commissioner, who ordered disclosure, finding the disputed statistics were not personal data and no statutory prohibition applied. The Department appealed to the Information Tribunal, which upheld the Commissioner's decision. The Department then appealed to the High Court.
Legal Issues Presented
- Whether the disputed abortion statistics constitute personal data within the meaning of the Data Protection Act 1998 and thus are exempt from disclosure under Section 40 of FOIA.
- Whether disclosure of the statistics would contravene the data protection principles, particularly the first principle concerning fairness and lawfulness.
- Whether disclosure would breach statutory prohibitions under the Abortion Regulations (Section 44 FOIA).
- Whether the Information Tribunal erred in its assessment of the risk of identification from the published statistics.
- Whether the Tribunal correctly applied the public interest and necessity tests under Schedule 2 and Schedule 3 of the DPA to justify disclosure.
- Whether the Tribunal properly considered the engagement and balancing of Article 8 of the European Convention on Human Rights (ECHR) regarding privacy rights.
Arguments of the Parties
Appellant's Arguments (Department of Health)
- The disputed information constitutes personal data of patients and doctors because the Department holds other information (HSA4 forms) that could be used to identify individuals (limb B of the DPA definition).
- Disclosure would breach the data protection principles, especially given the high sensitivity of late term abortion information and the potentially devastating consequences of identification.
- The Tribunal failed to give proper weight to expert evidence, including ONS guidance, which indicated a real risk of identification from small cell counts.
- The Tribunal's conclusion that the risk of identification was "extremely remote" was not reasonably open on the evidence and misunderstood the Department’s case.
- The legitimate aims identified by the Tribunal to justify disclosure were flawed, unnecessary, or speculative, as existing regulatory and oversight mechanisms were sufficient.
- Disclosure would breach Article 8 ECHR rights to privacy as it was neither necessary nor proportionate.
- Disclosure would contravene statutory prohibitions under the Abortion Regulations.
Appellee's Arguments (Information Commissioner)
- The disputed statistics do not constitute personal data as they are sufficiently anonymised to prevent identification by the public, even if the Department holds identifying information.
- The Tribunal correctly found that disclosure would not breach the data protection principles.
- The risk of identification is extremely remote, supported by the absence of any known identifications from published statistics.
- The public interest in disclosure includes enabling scrutiny of the application of abortion law, ensuring accountability, planning healthcare services, and informing public debate.
- The Tribunal properly balanced competing interests and applied legal principles consistently with the DPA and FOIA.
- Article 8 rights are not engaged because the risk of identification is negligible and any interference would be lawful and proportionate.
Table of Precedents Cited
| Precedent |
Rule or Principle Cited For |
Application by the Court |
| Common Services Agency v Scottish Information Commissioner [2008] UKHL 47 |
Definition and interpretation of personal data under the Data Protection Act 1998, particularly limb B (data plus other information held by the controller); anonymisation and its effect on personal data status. |
The court treated Lord Hope's leading speech as determinative, holding that anonymised data which cannot lead to identification by the public is not personal data for disclosure purposes, even if the data controller holds identifying information. |
| Corporate Officer of the House of Commons v Information Commissioner & Brooke [2008] EWHC 1084 |
Meaning of "necessary" in Schedule 2 paragraph 6 of the DPA; balancing social need and proportionality in data disclosure. |
The court applied this standard to assess whether disclosure of sensitive data met the necessity test and was proportionate, guiding the Tribunal’s analysis. |
| All Parliamentary Group on Extraordinary Rendition v Information Commissioner [2011] UKUT 153 (AAC) |
Non-binding nature of divergent reasoning on personal data definition in CSA case; flexibility in approach to limb B. |
The court acknowledged the lack of binding majority on limb B but reaffirmed adherence to the leading House of Lords authority. |
| Magherafelt District Council v Information Commissioner EA/2009/0047 |
Statistical methods (barnardisation) and anonymisation of data. |
The court discussed the limitations of barnardisation as an anonymisation method, emphasizing that it may not render data fully anonymous to the data controller. |
| Officer of the House of Commons v Information Commissioner [2008] EWHC 1084 (Admin) |
Scope of judicial review over specialist tribunal decisions. |
The court confirmed limited jurisdiction to interfere with Tribunal decisions absent legal error, guiding its review of the Tribunal's findings. |
Court's Reasoning and Analysis
The court began by addressing the key legal issue of whether the disputed abortion statistics constitute personal data under the DPA. It adopted the reasoning of the House of Lords in the Common Services Agency (CSA) case, particularly Lord Hope’s leading speech, which holds that data sufficiently anonymised to prevent identification by the public is not personal data for disclosure purposes, even if the data controller retains identifying information.
The court found that the Tribunal erred in holding the statistics to be personal data, as the risk of identification by the public was extremely remote and the statistics were effectively anonymised. It rejected the Department of Health’s argument that possession of additional information by the data controller rendered the statistics personal data, emphasizing that the relevant test is identifiability by the public, not by the controller.
Turning to the Tribunal’s assessment of the risk of identification, the court upheld the Tribunal’s evaluation, noting that it had properly weighed expert evidence, ONS guidance, and the context of the data. The Tribunal’s conclusion that the risk was extremely remote was within its discretion and supported by evidence, including the absence of any known identifications arising from published statistics.
The court also addressed the proportionality and necessity tests under Schedules 2 and 3 of the DPA. It found that the Tribunal reasonably identified legitimate aims for disclosure, such as enabling public scrutiny of abortion law application, accountability of medical practitioners, healthcare planning, and informed public debate. The Tribunal’s balancing of these interests against the minimal risk of identification was sound.
Regarding Article 8 ECHR, the court agreed with the Tribunal that the right was not engaged due to the negligible risk of identification. Even if engaged, any interference would be lawful and proportionate given the statutory framework and public interest in disclosure.
The court rejected the Department’s contention that the Tribunal failed to properly consider the sensitivity of the data and the seriousness of potential consequences. It noted the Tribunal’s clear recognition of the sensitivity and the devastating consequences of identification but emphasized that these concerns were contingent on identification occurring, which was extremely unlikely.
Finally, the court noted that the Department did not appeal the Tribunal’s finding that disclosure would not breach the statutory prohibition under the Abortion Regulations (Section 44 FOIA).
Holding and Implications
The appeal is dismissed and the Tribunal’s decision ordering disclosure of the late term abortion statistics is upheld.
The court’s ruling clarifies that statistical information which is sufficiently anonymised to prevent identification by the public does not constitute personal data under FOIA and the DPA, even if the data controller holds additional identifying information. The decision confirms the application of the CSA case principles in balancing data protection against public interest in disclosure.
The direct effect is that the Department of Health must disclose the requested detailed abortion statistics. No new precedent beyond the application of established principles was set. The court emphasized the limited scope for judicial interference with specialist tribunal findings absent legal error.