Info Gov

The Court of Appeal has granted green energy entrepreneur Dale Vince summary judgment against Associated Newspapers for unfair processing of his personal data under the UK GDPR, in what is understood to be the first claim of its kind ever to succeed in the courts of England and Wales.

In a unanimous judgment handed down on 15 July 2026 ([2026] EWCA Civ 899), Sir Geoffrey Vos, Master of the Rolls, sitting with Lord Justice Warby and Lady Justice Whipple, reversed the decision of Mr Justice Swift, who had struck out Mr Vince's claim as an abuse of process and entered summary judgment for the publisher. The Court of Appeal instead granted Mr Vince summary judgment for damages to be assessed.

The claim arose from articles published in the Daily Mail and Mail+ on 8 and 9 June 2023 under the headline "Labour repays £100,000 to sex pest donor" (or "sex harassment donor" in print). Photographs of Mr Vince at a Just Stop Oil demonstration appeared immediately beneath the headline, although the donor referred to was another Labour Party donor, financier Davide Serra.

The photographs were removed from the Mail+ article within the hour and replaced with an image of Mr Serra, but the print version remained available on the PressReader platform until October 2023.

Mr Vince had first sued in defamation, but that claim was struck out in July 2024 under the principle in Charleston v News Group Newspapers, which requires a libel claim to be assessed on the whole of an article rather than its headline or selected parts. Read in full, the articles made clear that Mr Vince was not the donor accused of harassment. He had, however, intimated an unfair processing claim in his original letter before action, and issued it separately while judgment in the libel proceedings was awaited.

The claim was brought under article 5(1)(a) of the UK GDPR, which requires personal data to be processed lawfully, fairly and in a transparent manner, together with article 82, which gives any person who has suffered material or non-material damage from an infringement the right to compensation from the controller.

Associated Newspapers sought to rely on the journalism exemption in paragraph 26 of Part 5 of Schedule 2 to the Data Protection Act 2018, which disapplies the fairness requirement where a controller reasonably believes its application would be incompatible with the purposes of journalism and that publication is in the public interest.

Sir Geoffrey Vos held that Swift J had been too harsh in treating the second set of proceedings as abusive. Although the Henderson v Henderson principles were in play - the court rejecting the argument that they could be circumvented by issuing precautionary proceedings shortly before an expected adverse ruling - a broad, merits-based judgment showed no abuse. Mr Vince had advanced the data protection claim from his first contact with the publisher, acted on legal advice throughout, and did not delay, while Associated Newspapers was a seasoned litigant that could be compensated in costs.

On the substance, the Master of the Rolls said anyone who read no further than the headline and photographs would have reached the irresistible conclusion that Mr Vince was the person referred to, and the court could take judicial notice that many readers go no further, so many people would actually have been misled.

He declined to lay down any generally applicable test for unfair processing, holding that fairness is an autonomous concept under the UK GDPR whose content depends on context, involving a balance between the interests of the data subject, the data controller and the public, informed by the data subject's reasonable expectations and the proportionality of the processing to any harm caused.

Decisive in this case was the Editors' Code of Practice, a relevant privacy code to which the court was bound to have regard under section 12 of the Human Rights Act 1998. Clause 1 obliges newspapers to take care not to publish inaccurate, misleading or distorted information or images, including headlines not supported by the text, an obligation the court held goes beyond accuracy.

Whether or not the headline and images were "inaccurate" under the Charleston rule, they were certainly misleading, and the view expressed in earlier authorities that Charleston applies to inaccurate processing claims under article 5(1)(d) could not be read across to a claim of unfair processing.

The night editor's explanation, that the juxtaposition was justified because Mr Vince had attended the Just Stop Oil demonstration that day, was unconvincing, and IPSO's rejection of Mr Vince's complaint was irrelevant because the regulator had dealt only with inaccuracy, not with whether the headline and photographs together were misleading.

The journalism exemption was of no assistance, the court held, because having regard to the Editors' Code the publisher could never show it reasonably believed that publishing the headline juxtaposed to the photographs was in the public interest. There was no evidence anyone at Associated Newspapers had thought applying the fairness requirement would be incompatible with journalism.

Associated Newspapers conceded it had no answer to the claim for material harm - the £903.50 in solicitors' costs incurred in securing removal of the article from PressReader. Questions about whether compensation for reputational harm is recoverable in a claim of this kind, and the existence and extent of any non-material harm, remain open for the assessment of damages.

The judgment is available on the Judiciary website here.

Also in this section

Oct 14, 2026

ICO reprimands Met Police over unlawful data sharing

The Metropolitan Police Service (MPS) has been reprimanded by the Information Commission’s Office (ICO) after officers and staff unlawfully shared personal information through an unapproved third-party platform used to identify suspected shoplifters.
Oct 02, 2026

Campaigners invoke UK GDPR to challenge NHS Palantir platform

Campaign group 38 Degrees has coordinated legal objections from more than 44,000 people asking NHS England to stop the Federated Data Platform (FDP), which runs on Palantir software, from sharing, storing or using their health records, the Guardian has reported.
Sep 28, 2026

NHS staff suspended or removed from duty over access to Noah Woods' medical records

East Suffolk and North Essex NHS Foundation Trust (ESNEFT) has suspended or removed from active duty ten members of staff and reported itself to the Information Commissioner's Office after concerns that the medical records of three-year-old Noah Woods were viewed without a legitimate clinical reason following his disappearance.

InfoGov Masthead Newsletter 800