Tribunal Dismisses Data Protection Complaint Against Information Commissioner

The First-tier Tribunal has dismissed an application by Mr. Baldwin against the Information Commissioner (IC) concerning the handling of his personal data by the Home Office. Mr. Baldwin sought an order under Section 166(2) of the Data Protection Act 2018 (DPA 2018) requiring the IC to take appropriate steps to respond to his complaint regarding the Home Office's sharing of his personal data with external legal counsel.

The tribunal found that the IC had addressed Mr. Baldwin's complaint on four separate occasions, thereby fulfilling the procedural requirements outlined in Sections 165(4) and 166(1) of the DPA 2018. It emphasized that Section 166 is limited to procedural issues related to the IC's handling of complaints and does not permit challenges to the substantive outcomes or merits of a complaint.

Mr. Baldwin's dissatisfaction with the IC's conclusion—that the Home Office appropriately shared his data under the 'Public Interest' exemption—was deemed outside the tribunal's jurisdiction. Consequently, the application was struck out under rule 8(2)(a) for lack of jurisdiction and under rule 8(3)(c) for having no reasonable prospect of success.

This ruling underscores the tribunal's role in addressing procedural aspects of data protection complaints rather than reassessing the substantive decisions made by the IC. It highlights the importance of understanding the scope and limitations of legal avenues available under the DPA 2018 for individuals seeking redress in data protection matters.