Despite it being almost ten years since the start of Operation Motorman, and the subsequent furore which lead to the closure of the News of the World, it is still not possible for a person found guilty of illegally obtaining and disclosing personal information to be imprisoned for that offence. However, strong words from the Information Commissioner’s Office this week suggest that this may be ripe for change.
The call comes as four private investigators were sentenced to between six and 12 months imprisonment after pleading guilty to fraud offences. Daniel Summers, Philip Campbell Smith, Graham Freeman and Adam John Spears accepted ‘commissions’ to impersonate a legitimate party, or otherwise deceive the information holder, in order to gain personal data (such as bank statements and telephone bills) on particular targets. Such ‘blagging’ has been an offence since 2000 under the Data Protection Act 1998 but has become a buzzword since the exposure of such practices amongst British newspapers, together with phone-hacking and alleged bribery.
However, as the law stands, a person guilty of unlawfully obtaining personal data under s55 DPA 1998 can only be fined (up to £5,000 in a magistrates’ court or an unlimited amount in the Crown Court). Those imprisoned this week received jail sentences because their conduct, carried out as a commercial operation, was prosecuted as a conspiracy to defraud.
On the same day, by contrast, a London estate agent was fined just £200 for attempting to access the account of a benefit claimant tenant over the telephone. In a subsequent press release, Information Commissioner Christopher Graham lamented the “chicken feed fines” available against breaches of the DPA and called for there to be no further delay in implementing new powers beyond the regime of fines.
Related offences of phone-hacking are already imprisonable. Most prominently, Glenn Mulcaire and Clive Goodman were sentenced to six and four months respectively for interception of communications offences under the Criminal Law Act 1977 and the Regulation of Investigatory Powers Act 2000. As such the lack of prison sentences for DPA offences, which are frequently utilised for prosecuting equally serious conduct, appears to be something of a lacuna.
The solution to this disparity already lies on the statute books. Under s77 Criminal Justice and Immigration Act 2008, the Secretary of State is empowered to introduce prison sentences of up to 12 months for summary conviction and 24 months for those convicted on indictment of breaching s55 DPA 1998. (Those concerned with the freedom of the press should also take note that s78 CJIA 2008 gives the Secretary of State the power to provide a defence for a person showing that he acted, inter alia, for a journalistic purpose with a reasonable belief that it was justified in the public interest.)
In October 2011 the Justice Select Committee called for these powers to be implemented swiftly, noting that the current fines were an “inadequate deterrent” to breaches. The Government remained noncommittal. However, now it seems as though a week seldom goes by without the Leveson Inquiry uncovering some previously unknown seam of dishonesty. If the hole goes much deeper, the Government may be glad it has the option to increase penalties in a hurry.
Corker Binning is a law firm specialising in fraud, regulatory litigation and general criminal work of all types. For more information about data protection offences, call us now on 0207 353 6000.
Prosecuting companies for criminality in their supply chains – an impossible prospect
June 3 2023
The war in Ukraine, solicitors and the rule of law
May 29 2023
The Online Safety Bill and the Criminalisation of Senior Managers
May 27 2023