CRH Plc, Irish Cement Ltd & ors v The Competition and Consumer Protection Commission

Factual and Procedural Background

On 14 May 2015 authorised officers of the Appellant/Defendant executed a District Court search warrant at the premises of the second-named Respondent/Plaintiff. The warrant was issued pursuant to s. 37 of the Competition and Consumer Protection Act 2014 and was aimed at investigating alleged anti-competitive conduct concerning bagged cement. During the “dawn raid” the entire e-mail account of the third-named Respondent/Plaintiff, a senior executive, was copied (approx. 96 GB/380,000 files). The material included correspondence unrelated to the Irish business under investigation.

Following correspondence, the Respondents/Plaintiffs commenced plenary proceedings in November 2015 seeking declarations that the search, seizure and proposed review were ultra vires and infringed constitutional and Convention privacy rights. The High Court ([2016] IEHC 162) agreed, declared the seizure unlawful, and restrained any review of the data. The Appellant/Defendant obtained a “leap-frog” appeal to the Supreme Court. On 29 May 2017 the Supreme Court (Denham C.J., MacMenamin J., Laffoy J., Dunne J., Charleton J.) delivered judgment dismissing the appeal and affirming the High Court orders.

Legal Issues Presented

1. Whether the seizure and retention of the third-named Respondent’s complete e-mail account exceeded the powers granted by s. 37 of the 2014 Act.
2. Whether the manner of seizure and proposed blanket review breached the constitutional right to privacy and Article 8 ECHR.
3. Whether, absent statutory procedures, the Appellant/Defendant could lawfully analyse “out-of-scope” data without independent or judicial safeguards.
4. The appropriate declaratory and injunctive relief and the relevance of data-protection legislation.

Arguments of the Parties

Respondents/Plaintiffs’ Arguments

• The warrant authorised only material relevant to the Irish cement investigation; copying every e-mail was disproportionate and ultra vires.
• The seizure intruded on privacy rights of the corporate Respondents and of the individual executive, contrary to the Constitution and Article 8.
• Out-of-scope data should be treated analogously to legally privileged material: segregated, vetted by an independent lawyer and, if irrelevant, returned or destroyed.
• The Appellant/Defendant’s refusal to give undertakings or adopt a filtering protocol left no option but to seek court protection.

Appellant/Defendant’s Arguments

• S. 37 confers broad powers to copy, seize and later review records that may be required; relevance is determined after forensic analysis.
• Only documents covered by legal professional privilege are excluded; all other seized material may be examined subject to confidentiality duties in s. 25.
• The volume of data reflected standard investigative practice; keyword searches and internal protocols were sufficient safeguards.
• Data-protection objections were displaced by s. 8 of the Data Protection Act 1988 (as amended).

Table of Precedents Cited

Court’s Reasoning and Analysis

The Supreme Court undertook a detailed construction of s. 37, emphasising that statutory powers must be exercised compatibly with constitutional norms and Convention obligations.

• Statutory Scope: While s. 37 permits seizure of records that may be required, it does not authorise an unlimited trawl. The warrant lacked any temporal, personal or subject-matter limits and failed to inform the lawyers on site of what could lawfully be taken.
• Proportionality: Copying 380,000 files when only a small subset could relate to Irish anti-competitive conduct was an “extraordinary over-reach”. The Commission later accepted it was “highly probable” that much material was irrelevant, confirming disproportionality.
• Safeguards: Unlike s. 33 (legal privilege), the Act provides no mechanism for segregating third-party or irrelevant data. The Commission’s evolving offers (belated keyword searches, making data “invisible”) came ten months after the raid and did not involve independent or judicial supervision as required by ECtHR jurisprudence.
• Privacy Rights: Corporate entities and individuals enjoy constitutional and Article 8 protections. The wholesale seizure without post-search filtering or return unjustifiably intruded on those rights.
• Ultra Vires Finding: Because the manner of execution ignored constitutional limitations, the search, seizure and retention were declared ultra vires s. 37. Claims under the Data Protection Acts were rejected, but the Article 8 breach was established.

Holding and Implications

Holding: The Supreme Court affirmed the High Court and DISMISSED the appeal. It declared that the Appellant/Defendant acted ultra vires and in breach of the Respondents/Plaintiffs’ constitutional and Article 8 rights, and upheld the injunction preventing any review of the unlawfully seized data.

Implications: Competition regulators must conduct digital searches in a focused and proportionate manner, supported by clear protocols for on-site filtering, independent oversight of irrelevant material, and timely return or destruction of out-of-scope data. The judgment signals that statutory search powers, however broad, are constrained by privacy principles and may prompt legislative refinement of post-search safeguards.