Burns v John J. Quinn and Co. LLP. and Ors (Approved)

Factual and Procedural Background

This is an application brought before Judge Nolan by the Plaintiff seeking multiple declarations and reliefs arising from the sale of a residential property. The Plaintiff and his spouse purchased the property in the early 2000s and took a mortgage with Company A. The Plaintiff alleges that on 1 February 2019 Company A securitised and transferred the mortgage to Company B without his consent and in breach of the GDPR, rendering subsequent dealings unlawful.

Company B appointed receivers (Receiver A and Receiver B) with power of sale. On 31 May 2024 the mortgage was transferred to Company C by deed of novation, and the same receivers were re-appointed. The property was marketed in September 2024 via an online auction platform (Company E); third parties (represented by the Solicitors — the First and Second Named Defendants) purchased the property. The Solicitors conducted enquiries, assisted in the contract for sale, transferred purchase monies, paid stamp duty, and assisted with the first registration at Company D. The Third Named Defendant is a tenant of the purchasers and occupies the property.

The Plaintiff issued a plenary summons on 20 April 2025 seeking 40 declarations and a Statement of Claim seeking 11 further reliefs (total 51 reliefs/declarations). He had earlier issued separate proceedings on 12 September 2024 against various parties connected to the sale, which he admits he has not progressed. The present proceedings include a motion by the Solicitors to dismiss the claim under Order 19 Rule 28(1) or the inherent jurisdiction for disclosing no reasonable cause of action, and a separate motion by the Plaintiff seeking inspection of the Solicitors' files and various injunctions.

Legal Issues Presented

1. Whether the Plaintiff's proceedings should be struck out under Order 19 Rule 28(1) of the Rules of the Superior Courts or dismissed under the court's inherent jurisdiction as disclosing no reasonable cause of action and being bound to fail.
2. Whether processing and use of the Plaintiff's personal data by the Solicitors in the course of the conveyance was unlawful under Articles 5 and 6 of the GDPR.
3. Whether the Plaintiff's claims amount to an abuse of process or an improper collateral attack on the sale.

Arguments of the Parties

Plaintiff's Arguments

• The transfer of the mortgage from Company A to Company B was unlawful because Company A did not obtain the Plaintiff's consent, in breach of the GDPR.
• All subsequent transactions (appointment of receivers, transfer to Company C, auction sale and registration) are tainted by that alleged illegality and therefore any processing of his personal data in relation to the loan and property was unlawful.
• The Solicitors should have known of the alleged unlawfulness and are alleged to have been involved in money laundering.
• The Plaintiff sought inspection of the Solicitors' files and various injunctions and proprietary reliefs.

Defendants' Arguments (First and Second Named Defendants — "the Solicitors")

• The Solicitors state they never acted for or against the Plaintiff and had no correspondence with him outside these proceedings; they did not prepare or publish the auction legal pack.
• Any use of the Plaintiff's personal data was proportionate and necessary for the legitimate purpose of acting for their clients (the purchasers) and for duties arising from the retainer and statutory obligations.
• Allegations of criminality or money laundering are unsubstantiated and professionally damaging; the Plaintiff should withdraw them.
• Attorney Geoghegan submitted that GDPR-based actions must be evidence-based and do not permit an audit of a data controller's files absent evidence of infringement.

Table of Precedents Cited

Court's Reasoning and Analysis

The court proceeded from undisputed facts. It analysed the GDPR framework focusing on Articles 5 and 6 and explained that lawful processing requires a valid legal basis under Article 6. The court described the three-stage legitimate interest test from Case C-252/21 (Meta Platforms) — purpose, necessity, balancing — and observed that it is for national courts to apply that test.

The court examined the role and duties of solicitors in conveyancing (contractual retainer duties and statutory duties under the Solicitors Act 1954 and the Legal Services Regulation Act 2015), and statutory requirements for registration and deeds (Registration of Title Act 1964; Land and Conveyancing Reform Act 2009). It concluded that the Solicitors' use of the Plaintiff's name and property details was incidental and necessary for performance of the contract for sale (Article 6(1)(b)), compliance with legal obligations (Article 6(1)(c)), performance of a task in the public interest (Article 6(1)(e)), and for legitimate interests (Article 6(1)(f)).

The court found the pleadings deficient: the plenary summons and statement of claim recited facts but failed to connect them to the alleged GDPR breaches by evidence or adequate factual particularity. The court noted the Plaintiff had assistance from a McKenzie friend and appeared to have received external "GDPR expert" input, but emphasised procedural and criminal limits on unqualified persons drafting legal submissions.

Critically, the court determined the proceedings had an alternative and improper purpose: rather than genuinely seeking redress for data protection infringements, they were aimed at preventing or interfering with the sale and registration of the property (a collateral attack on the sale). Citing Sean Quinn Group Ltd, the court treated this as abuse of process. Given the legal bases for the Solicitors' processing and the absence of a storable factual or legal case, the court concluded there was no real risk of injustice in striking out and that amendment would not cure the deficiencies.

Holding and Implications

HOLDING: The Plaintiff's proceedings are DISMISSED / STRUCK OUT for being bound to fail and for being an abuse of process.

Implications:

• The direct effect is that the Plaintiff's claims against the First and Second Named Defendants (the Solicitors) are dismissed and will not proceed to trial.
• The court found the Solicitors' processing of the Plaintiff's personal data lawful under Articles 5 and 6 of the GDPR in the circumstances described.
• The court provisionally indicated that the Solicitors are entitled to recover costs against the Plaintiff under Section 169 of the Legal Services Regulation Act 2015; the Plaintiff may apply within seven days for a short hearing on costs, but, if the court confirms the provisional view, the Plaintiff may incur additional costs for that hearing.
• No broader novel legal principle was established by this decision beyond its application of existing authorities to the facts; the immediate consequence is the dismissal of the proceedings and the costs directions described above.