Login
  • Bookmark
  • PDF
  • Share
  • CaseIQ

Nowak v The Data Protection Commissioner

Supreme Court of Ireland
Apr 28, 2016
Smart Summary (Beta)

Factual and Procedural Background

The Appellant, a trainee accountant, repeatedly failed an examination set by Company A. On 12 May 2010 he made a data–access request under the Data Protection Acts 1988 & 2003, seeking all “personal data” held by Company A, including his examination script. Company A released other records but declined to release the script, having received advice that an examination script is not “personal data”.

The Appellant complained to the Respondent (the national Data Protection supervisory authority). By letter of 21 July 2010 the Respondent stated that no substantive breach of the Acts had been identified, categorised the complaint as “frivolous or vexatious” under s. 10(1)(b)(i), and declined to investigate further.

The Appellant appealed under s. 26 to the Circuit Court. The Respondent successfully argued that no appeal lay from a “frivolous or vexatious” determination. The Circuit Court, however, went on to hold that even if an appeal lay the examination script was not personal data.

The Appellant pursued further appeals. The High Court and subsequently the Court of Appeal upheld the Circuit Court. The Supreme Court granted leave on two issues of general public importance and delivered the present judgment.

Legal Issues Presented

  1. Whether an appeal lies to the Circuit Court under s. 26 of the Data Protection Acts from a determination by the Respondent that a complaint is “frivolous or vexatious”.
  2. If such an appeal lies, what is the correct standard of review or test to be applied by the Circuit Court.
  3. Whether an examination script is “personal data” within the meaning of the Data Protection Acts and Directive 95/46/EC.

Arguments of the Parties

Appellant's Arguments

  • The letter of 21 July 2010 was plainly a “decision”, so an appeal lies under s. 26.
  • The Circuit Court should conduct a full rehearing rather than the limited review applied.
  • An examination script can identify a candidate (e.g. through handwriting) and contains information leading to the examination result; therefore it constitutes personal data.
  • Statutory provisions dealing with examination results implicitly acknowledge that scripts are personal data.
  • European Union law (Directive 95/46/EC and the Charter, Art. 47) requires an effective judicial remedy.

Respondent's Arguments

  • The term “decision” in s. 26 refers only to determinations made after a full investigation and attempted amicable resolution; therefore no appeal lies from a preliminary finding that a complaint is frivolous or vexatious.
  • Even if an appeal lies, the Circuit Court should apply the limited “Orange test” (serious or significant error) rather than a full rehearing.
  • An examination script is not personal data: it records knowledge displayed at a single point in time, contains no biographical or personal information, and cannot meaningfully be “corrected”.
  • Support is drawn from Advocate General Sharpston’s opinion in YS, distinguishing factual data from legal or evaluative documents.

Table of Precedents Cited

Precedent Rule or Principle Cited For Application by the Court
Orange Communications Ltd v. Director of Telecommunications Regulation (No. 2) [2000] 4 IR 159 Standard for statutory appeals: decision set aside if vitiated by a serious or significant error. Adopted as the appropriate test for appeals under s. 26.
Ulster Bank Investment Funds Ltd v. Financial Services Ombudsman [2006] IEHC 323 Confirmed use of the Orange standard. Referenced in support of adopting that standard.
Carrigdale Hotel Ltd v. Controller of Patents [2004] 3 IR 410 Further application of the Orange standard. Cited as consistent authority.
Canada (Director of Investigation and Research) v. Southam Inc (1997) 1 S.C.R. 748 Concept of “reasonableness” and deference to expert tribunals. Forms part of the rationale behind the Orange approach.
Barry v. Buckley [1981] I.R. 306 Power to dismiss proceedings that “must fail”. Illustrates meaning and limits of “frivolous or vexatious”.
Farley v. Ireland (1997) Clarified non-pejorative legal meaning of “frivolous” and “vexatious”. Used to show that a legally unsustainable claim may be so categorised.
R v. Mildenhall Magistrates’ Court ex p Forest Heath (1997) Described futile or hopeless claims as frivolous. Cited by the High Court below; noted by the Supreme Court.
Fox v. Data Protection Commissioner [2013] IEHC 49 Applied the sequential interpretation of s. 10 adopted by lower courts. Supreme Court declined to follow that interpretation.
Schrems v. Data Protection Commissioner (Case C-362/14) CJEU held that complainants must have access to a judicial remedy. Supports broad right of appeal under EU law.
YS v. Minister voor Immigratie (Cases C-141/12 & C-372/12) Distinguished factual data from legal analysis. Relied on by Respondent to argue scripts are not personal data.
Dunne v. Minister for Fisheries [1984] I.R. 230 Example of a full appeal on the merits confined to material before the decision-maker. Considered, but not adopted as the applicable standard.
CILFIT (Case 238/81) “Acte clair” doctrine governing references to the CJEU. Basis for concluding that the personal-data question required reference.

Court's Reasoning and Analysis

Appealability under s. 26. The Court held that the word “decision” in s. 26 bears its ordinary meaning and includes a determination that a complaint is frivolous or vexatious. Nothing in the 2003 amendment to s. 10 narrowed the pre-existing right of appeal. Limiting appeal would contradict the Act’s structure, create procedural traps for lay complainants, and risk incompatibility with Directive 95/46/EC and the Charter.

Standard of review. Having regard to functional considerations and prior authority, the Court concluded that the Circuit Court should apply the Orange standard: it must set aside the Respondent’s decision where, taking the adjudicative process as a whole, the decision is vitiated by a serious or significant error (including an error of law). A full rehearing on the merits is not required.

Whether the examination script is personal data. The Court acknowledged competing arguments and noted the absence of clear European precedent. Applying the CILFIT test, it found the issue not acte clair. Accordingly, questions will be referred to the Court of Justice of the European Union (CJEU) for a preliminary ruling.

Holding and Implications

HOLDING: The Supreme Court ruled that an appeal does lie to the Circuit Court under s. 26 from a determination that a complaint is frivolous or vexatious, and that the appropriate appellate standard is that set out in Orange. The Court did not decide whether the examination script is personal data; instead it referred that question to the CJEU.

Implications: The judgment broadens the availability of statutory appeals against the Respondent’s decisions and clarifies the standard of review that lower courts must apply. Final resolution of whether examination scripts constitute personal data now depends on the forthcoming CJEU ruling, which may have significant consequences for educational and professional bodies across the European Union.