“Confidentiality The survey was carried out as part of the 2018 Civil Service People Survey, which is managed by the Cabinet Office on behalf of all participating organisations. The Cabinet Office commissioned ORC International to carry out the survey. ORC International is a member of the Market Research Society, and is bound by their strict code of conduct and confidentiality rules. These rules do not allow for the breakdown of the results to the extent where the anonymity of individuals may be compromised. Groups of fewer than 10 respondents will not be reported on, however their responses do contribute to the overall scores for the unit and organisation they belong to and the overall Civil Service Results.”
“27. In our view, it is abundantly clear the information to which the request relates does not constitute personal data. In the end DfT’s case, as gleaned from Mr Skinner’s submissions seems to be confined to the assertion that the relevant data subject is the former Chief Inspector of AAIB and to rest on the following propositions. First, the concept of ‘personal data’ is a wide one. Second, Dr Alexander’s purpose is to find out about the competence of the former Chief Inspector of AAIB and such a purpose is “highly indicate of the information being his personal data.”
“data which relate to a living individual who can be identified – (a) from those data, or (b) from those data and other information which is in the possession of, or is likely to come into the possession of, the data controller …”
“SCHEDULE 1 The data protection principles Part I The principles 1Personal data shall be processed fairly and lawfully and, in particular, shall not be processed unless— (a)at least one of the conditions in Schedule 2 is met, and …” “SCHEDULE 2 Conditions relevant for purposes of the first principle: processing of any personal data … Department for Transport v The Information Commissioner & (2) Dr Minh Alexander[2021] UKUT 327 (AAC) Appeal No. GIA/2301/2019 (V – CVP) 9 6(1)The processing is necessary for the purposes of legitimate interests pursued by the data controller or by the third party or parties to whom the data are disclosed, except where the processing is unwarranted in any particular case by reason of prejudice to the rights and freedoms or legitimate interests of the data subject. …”
“'personal data' shall mean any information relating to an identified or identifiable natural person ('data subject'); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity;”
“Whereas the principles of protection must apply to any information concerning an identified or identifiable person; whereas, to determine whether a person is identifiable, account should be taken of all the means likely reasonably to be used either by the controller or by any other person to identify the said person; whereas the principles of protection shall not apply to data rendered anonymous in such a way that the data subject is no longer identifiable; whereas codes of conduct within the meaning of Article 27 may be a useful instrument for providing guidance as to the ways in which data may be rendered anonymous and retained in a form in which identification of the data subject is no longer possible;”
“61. Mr Pitt-Payne QC, for the University, submitted that the definition of "personal data" consists of two limbs: i) Whether the data in question "relate to" a living individual and ii) Whether the individual is identifiable from those data. This is inherent in the form of the definition in the DPA. I agree, and the point is, in my judgment, even clearer in the definition of "personal data" in the Directive, where the definition is clearly split between two clauses.”
“24. The relevant part of the definition is head (b). It directs attention to “those data”, which in the present context means the information which is to be barnardised, and to “other information” which is or may come to be in the possession of the data controller. “Those data” will be “personal data” if, taken together with the “other information”, they enable a living individual to whom the data relate to be identified. The formula which this part of the definition uses indicates that each of these two components must have a contribution to make to the result. Clearly, if the “other information” is incapable of adding anything and “those data” by themselves cannot lead to identification, the definition will not be satisfied. The “other information” will have no part to play in the identification. The same result would seem to follow Department for Transport v The Information Commissioner & (2) Dr Minh Alexander[2021] UKUT 327 (AAC) Appeal No. GIA/2301/2019 (V – CVP) 10 if “those data” have been put into a form from which the individual or individuals to whom they relate cannot be identified at all, even with the assistance of the other information from which they were derived. In that situation a person who has access to both sets of information will find nothing in “those data” that will enable him to make the identification. It will be the other information only, and not anything in “those data”, that will lead him to this result.”
“Different types of anonymised data have different vulnerabilities and pose different levels of re-identification risk. At one end of the spectrum, pseudonymised or de-identified data may be very valuable to researchers because of its individual-level granularity and because pseudonymised records from different sources can be relatively easy to match. However, this also means that there is a relatively high reidentification risk. At the other end of the spectrum, aggregated data is relatively low-risk, depending on granularity, sample sizes and so forth. This data may be relatively ‘safe’ because re-identification risk is relatively low. However, this data may not have the level of detail needed to support the data linkage or individual-level analysis that some forms of research depend on. … The more aggregated and non-linkable the anonymised data is, the more possible it is to publish it. This might be the case for statistics showing the percentage of children in a wide geographical area who have achieved particularly high educational attainment, for example.”
"28. … Mere mention of the data subject in a document held by a data controller does not necessarily amount to his personal data. Whether it does so in any particular instance depends on where it falls in a continuum of relevance or proximity to the data subject as distinct, say, from transactions or matters in which he may have been involved to a greater or lesser degree. It seems to me that there are two notions that may be of assistance. The first is whether the information is biographical in a significant sense, that is, going beyond the recording of the putative data subject's involvement in a matter or an event that has no personal connotations, a life event in respect of which his privacy could not be said to be compromised. The second is one of focus. The information should have the putative data subject as its focus rather than some other person with whom he may have been involved or some transaction or event in which he may have figured or have had an interest, for example, as in this case, an investigation into some other person's or body's conduct that he may have instigated. In short, it is information that affects his privacy, whether in his personal or family life, business or professional capacity. A recent example is that considered by the European Court in Criminal Department for Transport v The Information Commissioner & (2) Dr Minh Alexander[2021] UKUT 327 (AAC) Appeal No. GIA/2301/2019 (V – CVP) 11 proceedings against Lindqvist,Case C-101/01 (6th November 2003 ), in which the Court held, at para. 27, that "personal data" covered the name of a person or identification of him by some other means, for instance by giving his telephone number or information regarding his working conditions or hobbies."
‘36 Prejudice to effective conduct of public affairs (1)This section applies to— (a) information which is held by a government department or by the National Assembly for Wales and is not exempt information by virtue of section 35, and (b)information which is held by any other public authority. (2) Information to which this section applies is exempt information if, in the reasonable opinion of a qualified person, disclosure of the information under this Act— (a) would, or would be likely to, prejudice— (i)the maintenance of the convention of the collective responsibility of Ministers of the Crown, or (ii)the work of the Executive Committee of the Northern Ireland Assembly, or (iii)the work of the executive committee of the National Assembly for Wales, (b)would, or would be likely to, inhibit— (i)the free and frank provision of advice, or (ii)the free and frank exchange of views for the purposes of deliberation, or (c) would otherwise prejudice, or would be likely otherwise to prejudice, the effective conduct of public affairs. … Department for Transport v The Information Commissioner & (2) Dr Minh Alexander[2021] UKUT 327 (AAC) Appeal No. GIA/2301/2019 (V – CVP) 12 (4) In relation to statistical information, subsections (2) and (3) shall have effect with the omission of the words “in the reasonable opinion of a qualified person”. …’
“29. First, there is a need to identify the applicable interest(s) within the relevant exemption … “30. Second, the nature of the ‘prejudice’ being claimed must be considered. An evidential burden rests with the decision maker to be able to show that some causal relationship exists between the potential disclosure and the prejudice and that the prejudice is, as Lord Falconer of Thoroton has stated, ‘real, actual or of substance’ (Hansard (HL Debates),20 April 2000 , col 827). If the public authority is unable to discharge this burden satisfactorily, reliance on ‘prejudice’ should be rejected. There is therefore effectively a de minimis threshold which must be met.” ………. “34. A third step for the decision-maker concerns the likelihood of occurrence of prejudice. A differently constituted division of this tribunal in John Connor Press Associates Ltd v Information Comr (EA/2005/0005) interpreted the phrase ‘likely to prejudice’ as meaning that the chance of prejudice being suffered should be more than a hypothetical or remote possibility; there must have been a real and significant risk. That tribunal drew support from the decision of Munby J in R (Lord) v Secretary of State for the Home Department[2003] EWHC 2073 (Admin) , where a comparable approach was taken to the construction of similar words in theData Protection Act 1998 . Munby J stated that ‘likely’: ‘connotes a degree of probability where there is a very significant and weighty chance of prejudice to the identified public interests. The degree of risk must be such that there “may very well” be prejudice to those interests, even if the risk falls short of being more probable than not.’ “35. On the basis of these decisions there are two possible limbs on which a prejudice-based exemption might be engaged. Firstly, the occurrence of prejudice to the specified interest is more probable than not, and secondly there is a real and significant risk of prejudice, even if it cannot be said that the occurrence of prejudice is more probable than not.”
"The reasons for a decision must be intelligible and they must be adequate. They must enable the reader to understand why the matter was decided as it was and what conclusions were reached on the 'principal important controversial issues', disclosing how any issue of law or fact was resolved. Reasons can be briefly stated, the degree of particularity required depending entirely on the nature of the issues falling for decision."
"Counsel for both Respondents have reminded me of the importance of the Upper Tribunal exercising restraint when faced with a challenge to a decision of the First-tier Tribunal and in particular when the reasons which it gives are being examined. As Lord Hope said in Jones v First-tier Tribunal & CICA[2013] UKSC 19 at [25], "
"The question is rather whether the Tribunal has done enough to show that it has applied the correct legal test and in broad terms explained its decision…"
“‘personal data’ means data which relate to a living individual who can be identified- (a) from those data, or (b) from those data and other information which is in the possession of, or is likely to come into the possession of, the data controller, and includes any expression of opinion about the individual and any indication of the intentions of the data controller or any other person in respect of the individual.”
“Information that enables a group of people to be identified, but not any particular individual within the group is not personal data. Conversely, information that does enable particular individuals within a group – or all the members of a group – to be identified will be personal data in respect of all the individuals who can be identified.”