SlideShare ist ein Scribd-Unternehmen logo
1 von 109
Downloaden Sie, um offline zu lesen
Administrative and public law
October 2017
Administrative
and public law
4 October 2017,
London
Join in today with sli.do
• type sli.do into your browser bar
• enter the conference code #BJAPL
then ‘join’
• click on the seminar event box
• use the tabs to ask questions or
take part in polls.
No download
required
Agenda
• 1.30pm – Introduction and welcome
• 1.40pm – GDPR
• 2.40pm – Brexit
• 3.00pm – coffee break
• 3.20pm – Brexit
• 3.50pm – case study
• 4.50pm – any questions
• 5.00pm – drinks and canapés
General Data Protection Regulation
Dmitrije Sirovica
Today’s focus
• Briefing on the new law
• Exploring the role of the Data Protection
Officer
• Steps towards compliance
Background to the GDPR
GDPR background
• What is it?
• Why is it coming in?
• What about Brexit?
What is it?
• Probably the most lobbied piece of EU law ever
• Replaces the Data Protection Directive 1995 (DPD)
• Will be enforced in Member States from 25 May
2018
• EU Member State laws implementing the DPD will
no longer apply
• Creates a “level-ish” playing field across EU
Why the change?
Developments
• Legal
• Societal
• Technological
What about Brexit?
• GDPR will apply from May 2018 to Brexit
• After Brexit
– GDPR will apply to many UK organisations due to
extra-territorial scope
– GDPR will be swept up by the EU (Withdrawal) Bill
2017
– Government wishes to “maintain the stability of
data transfer between EU Member States and the
UK”
– Adequacy or essential equivalence
Data Protection Bill
• What is it?
• Released on 14 September 2017
• Supplemental to GDPR
The Regulation
Who has to comply?
• Data controller or data processor established in one
or more Member State(s)
• Data controller or data processor established
outside the EU and either it
– offers goods and services to data subjects in the
EU or
– monitors the behaviour of data subjects in the
EU
Key issues
• Principles and accountability
• Lawful basis for processing
• Transparency
• Responsibilities of controllers and processors
• International transfers
• Rights of data subjects
• Breach notification
• Enforcement and compensation
Personal Data
“means any information relating to an identified or identifiable
natural person (‘data subject’)
An identifiable natural person is one who can be identified, directly or
indirectly, in particular by reference to an identifier such as a name, an
identification number, location data, an online identifier or to one or
more factors specific to the physical, physiological, genetic, mental,
economic, cultural or social identity of that natural person;”
This means that an IP address or roll number can amount to
personal data
Special Categories
Article 9 now refers to “Special Categories of Personal Data”
rather than Sensitive Personal Data. This category includes
personal data revealing :
• racial or ethnic origin,
• political opinions,
• religious or philosophical beliefs, or
• trade union membership, and
• the processing of genetic data, biometric data for the purpose of uniquely
identifying a natural person,
• data concerning health or
• data concerning a natural person's sex life or sexual orientation
Processing
will mean “any operation or set of operations which is
performed on personal data … whether or not by automated
means, such as collection, recording, organisation,
structuring, storage, adaptation or alteration, retrieval,
consultation, use, disclosure by transmission, dissemination
or otherwise making available, alignment or combination,
restriction, erasure or destruction;”
Principles
The GDPR requires:
(a) Data to be processed lawfully, fairly and in a transparent manner;
(b) Data to be collected for specified, explicit and legitimate purposes and not
further processed in a manner that is incompatible with those purposes;
(c) Processing of data should be adequate, relevant and limited to what is necessary
in relation to the purposes for which they are processed;
(d) Data to be accurate and, where necessary, kept up to date; inaccurate data should
be erased or rectified without delay;
(e) Data to be kept in a form which permits identification of data subjects for no
longer than is necessary for the purposes for which the personal data are
processed;
(f) Data to be processed in a manner that ensures appropriate security of the personal
data, including protection against unauthorised or unlawful processing and against
accidental loss, destruction or damage, using appropriate technical or
organisational measures.
The data controller will be responsible for, and must be able to demonstrate,
compliance with these principles as well as accountability.
Accountability is the key
• Registration abolished
• Implement compliant policies and procedures
• Data Protection Officer mandatory for public
bodies
• Privacy by design and by default
• Privacy impact assessments
Lawful basis for processing
In order for Personal Data to be processed lawfully you must be able to satisfy one of
the processing conditions below:
• 6(1)(a) – Consent of the data subject (must be clear affirmation)
• 6(1)(b) – Processing is necessary for the performance of a contract with the data
subject or to take steps to enter into a contract
• 6(1)(c) – Processing is necessary for compliance with a legal obligation
• 6(1)(d) – Processing is necessary to protect the vital interests of a data subject or
another person
• 6(1)(e) – Processing is necessary for the performance of a task carried out in the
public interest or in the exercise of official authority vested in the controller
• 6(1)(f) – Necessary for the purposes of legitimate interests pursued by the
controller or a third party, except where such interests are overridden by the
interests, rights or freedoms of the data subject (this last one does not apply to
public authorities)
Lawful basis for processing
special categories
In order for special categories of data to be processed lawfully you must be able to satisfy one of
the following conditions below:
• 9(2)(a) – Explicit consent of the data subject, unless reliance on consent is prohibited by EU or
Member State law
• 9(2)(b) – Processing is necessary for carrying out obligations under employment, social security
or social protection law, or a collective agreement
• 9(2)(c) – Processing is necessary to protect the vital interests of a data subject or another
individual where the data subject is physically or legally incapable of giving consent
• 9(2)(d) – Processing carried out by a not-for-profit body with a political, philosophical, religious
or trade union aim provided the processing relates only to members or former members (or
those who have regular contact with it in connection with those purposes) and provided there is
no disclosure to a third party without consent
• 9(2)(e) – Processing relates to personal data manifestly made public by the data subject
• 9(2)(f) – Processing is necessary for the establishment, exercise or defence of legal claims or
where courts are acting in their judicial capacity
Lawful basis for processing
special categories
9(2)(g) – Processing is necessary for reasons of substantial public interest on the basis
of Union or Member State law which is proportionate to the aim pursued and which
contains appropriate safeguards
9(2)(h) – Processing is necessary for the purposes of preventative or occupational
medicine, for assessing the working capacity of the employee, medical diagnosis, the
provision of health or social care or treatment or management of health or social care
systems and services on the basis of Union or Member State law or a contract with a
health professional
9(2)(i) – -relates to public interest in the area of public health
9(2)(j) – Processing is necessary for archiving purposes in the public interest, or
scientific and historical research purposes or statistical purposes in accordance with
Article 89(1)
Consent and explicit consent
• Consent
Any freely given, specific, informed and unambiguous
indication of the data subject’s wishes by which he or
she, by a statement or by a clear affirmative action,
signifies agreement to the processing of personal data
relating to him or her
• Explicit consent
• Re-papering consents - recital 171
• ICO draft guidance
• Article 29 WP guidance
Rights of Data Subjects
Rights
• Information about processing
• Subject access
• Rectification
• Erasure (right to be forgotten)
• Data portability
• Objection
• Automated decision making and profiling
• Restriction
Subject Access
• Currently 40 day time limit
– Reduced to one month under GDPR
– Review processes for handling requests
• No fee
• Supplemental information
• Manifestly unfounded or unreasonable requests
Data Processors
New responsibilities for Data
Processors
• Direct legal obligations
• Penalties and liabilities
– Compensation
– Sanctions
What do Data Processors need to
do?
• Have a contract with data controllers
• Get data controller’s consent before sub-contracting
• Maintain records of processing
• Cooperate with ICO
• Maintain internal data protection and retention policies
What do Data Processors need to
do?
• Maintain appropriate technical and organisational
measures to protect the data
• Notify of data breaches
• Check privacy practices
• Appoint a DPO if required
• Check whether any data is sent outside the EEA
Data Sharing
Data Sharing
• Police
• Social services
• Other local authorities
• Education establishments
• Health bodies
• Government departments
• Data Sharing Agreements
Article 28 GDPR
Processing by a processor must be governed by a
contract that is binding on the processor with regard
to the controller and that sets out the subject-
matter and duration of the processing, the nature
and purpose of the processing, the type of personal
data, categories of individuals whose data is being
processed and the obligations and rights of the
controller.
Article 28 GDPR
• Contracts must stipulate that the processor will:
– Process only on documented instructions
– Ensure those processing personal data are under a confidentiality
obligation
– Take all measures required by Article 32 GDPR
– Only use sub-processors with controller’s consent
– Assist the controller in responding to requests
– Assist the controller in complying with obligations relating to security,
breach notification, impact assessments and consulting with supervisory
authorities
– Delete or return all personal data at the end of the agreement
– Make available to the controller all information necessary to demonstrate
compliance; allow and contribute to audits, and inform the controller if its
instructions breach the law
Third party relationships
• Assess third party relationships
• Appropriate contracts and controls
• Undertake due diligence and audits
Data Protection Officers
Data Protection Officers
• You should designate a DPO
• Responsible for data protection compliance
• Inform and advise the authority
• Monitor the implementation and application of the
Regulations and the data protection policies
• Monitor privacy impact assessments and breaches
• Point of contact for ICO
Data Protection Officers
• Can allocate to role of existing employee as long as
duties are compatible with the duties of the DPO and
do not lead to conflict of interests
• Can appoint the role externally
• Can share a DPO
• No specified qualifications but must have experience
and knowledge of data protection law
Data Protection Officers
You must ensure that:
• The DPO reports to the highest management level of
your organisation
• The DPO operates independently and is not
dismissed or penalised for performing their task
• Adequate resources are provided to enable DPOs to
meet their GDPR obligations
Data Breaches
Breach notification
• Personal data breach
• Controller breach notification – 72 hours
– Supervisory Authorities
– Affected individuals
• Processor breach notification – without undue delay
– Controller
Sanctions for non-compliance
• Supervisory Authorities
– Investigative powers
– Corrective powers
• Penalties
– 2% global turnover or €10m
– 4% global turnover or €20m
• Compensation
Next Steps
Compliance culture
• Senior leadership level issue
• Accountability
• Training and awareness
Turning the law into practice
• Map the law to your processing
• Identify key data processing
• Identify high-risk processing
• Identify gaps
• Mitigate the risks
The team
• Senior leadership level oversight
• Legal
• Compliance
• IT
• HR
• Marketing/Communications
• External advisers
The plan
• Initiation
– Awareness
– Buy-in
– Budget
• Assessment
– Mapping
– Gap analysis
• Remedy
Data mapping
• Review and record in writing all processing
activities
• Record any international transfers and mechanism
Data mapping
• The 5 Ws
– Why is personal data processed?
– Whose personal data is processed?
– What personal data is processed?
– When is personal data processed?
– Where is personal data processed?
• Questionnaire
• Produce a risk based report
Securing data and information
• Assess security risk
• Update information security and policy
• Maintain security measures
What assistance might you
require?
• End to end GDPR reviews
• Scoped assistance
• Ad hoc advice
• Steering group representation
Questions?
Contact us…
Dmitrije Sirovica – 0115 976 6238
dmitrije.sirovica@brownejacobson.com
Brexit – ‘The Repeal Bill’
Laura Hughes
Where have we got to?
• 29 March 2017 - government issues notice to the
European Council of the UK's intention to leave the
EU under Article 50 of the TEU
• 30 March 2017 - government publishes its Repeal
Bill White Paper
• 21 June 2017 – Queen’s Speech proposes Repeal bill
and 7 other Brexit related bills
• 13 July 2017 – Repeal Bill introduced and gets first
reading in parliament
• 7 and 11 September 2017
– Bill passes second reading in Parliament
– Ministers' amendments tabled
• 19 September 2017 - First Ministers of Wales and
Scotland publish joint proposed amendments to the
Bill and accompanying statement on devolved
legislative consent
The 8 Brexit Bills
• Repeal Bill
• Customs Bill
• Trade Bill
• Immigration Bill
• Fisheries Bill
• Agriculture Bill
• International Sanctions Bill
• Nuclear Safeguards Bill
The European Union
(Withdrawal) Bill 2017
• Otherwise known as the “Repeal” or the “Great
Repeal Bill”
• Bill and Explanatory note
– Both just over 60 pages long - to deal at least 5,000
regulations directly applicable to the UK
• So how does the bill work? ….
Clause 1 - Repeal of the ECA
1972
• “Exit day”
• End to the ‘supremacy of EU law’
– But note supremacy of retained EU law over other
legislation
 Clause 5
 Clause 2(3), 3(5) and 4(3)
Retaining EU Law (1)
• EU-derived domestic legislation (clause 2)
• Direct EU legislation (clause 3)
Retaining EU Law (2)
• Treaty rights (clause 4)
• But - Exceptions in clause 5
– Supremacy of EU Law
– Charter of Fundamental Rights
Problems ahead: Clause 4, a
decision yet to be made?
• Clause 4 – Saving of Rights under s.2(1) of the ECA
• But what is actually preserved?
– Option 1: Legislation read as UK no longer a member
- savings almost entirely inapplicable
– Option 2: Legislation read as if UK still a Member -
But major issues with reciprocity.
Retained EU Law (3)
• Retained case law (clause 6)
• Retained general principles of EU law (clause 6)
Retained EU Law (4)
• Interpretation
– Status of Post-exit CJEU decisions
– Limits to EU law based claims
– Pending CJEU cases on exit day
Ministerial powers (1)
• Henry VIII Clauses (Clause 7)
– Power to make regulations in relation to retained EU
law where there are:
 Failures to operate effectively; or
 Deficiencies
Ministerial Powers (2)
• Delegation of powers to public authorities (clause
7)
– Power for PAs to exercise functions of EU authorities
– Power to establish new public authorities
Devolution
• Power to make regulations
• Sewel Convention
Scottish and Welsh amendments
• Jointly published amendments
– Ensure devolved policy areas come back to the Scottish Parliament
and National Assembly of Wales on withdrawal from the EU.
– Prevent UK ministers unilaterally changing the Scotland Act and
Government of Wales Act.
– Require the agreement of the Scottish Government on necessary
changes to current EU law in devolved areas after Brexit.
– Ensure additional restrictions are not placed on devolved ministers
compared with UK Government ministers.
Repeal in practice – Environment
• Examples of potential areas of concern
– Henry VIII powers to change policy
– Underpinning principles
– Governance and Enforcing Institutions
– Devolved Government
Repeal in practice - Farming
• What will be dealt with in the Agriculture Bill?
• The CAP
• Tariffs/Trade
• Labour
• Devolved issues
• Transitional Arrangements
Repeal in practice - Health
• EU Working time directive
• Professional Regulation
• Staffing
• Reciprocal Healthcare
Any questions?
Contact us…
Laura Hughes – 0115 976 6582
laura.hughes@brownejacobson.com
Admin Law Seminar 4 Oct 2017
Case Study
Richard Barlow, Ben Standing and Will
Thomas
CASE STUDY
• The Administrative Affairs Agency
• Established by Administrative Affairs Act 2010
• The Agency is introducing a new licensing
application system for drones
• The Agency proposes to enter into a contract with
Super Hightech Innovative Technology PLC
• You are asked to advise on the public law issues
which impact upon whether or not to execute the
contract
Issues Arsing from the Case Study
• The obligation to consult in relation to public decision-
making
• The principle of legitimate expectation
• The rule against bias or pre-determination
• The “duty” to give reasons
• The need for the person or body with appropriate
authority (either from statutory provisions or through a
lawful delegation) to make a public decision
Grounds: Consultation
• Common ground for judicial review
• Government has produced guidance on consultation. This guidance
is best practice, not legally binding see:
https://www.gov.uk/government/publications/consultation-
principles-guidance
• However, an express legal duty to consult can exist, for example:
– Legislation, e.g. s.5D of the Childcare Act 2006 requires
consultation before making changes to provision of children’s
centres
– Statutory guidance may require consultation: such guidance
must be followed unless good reason to depart (R v London
Borough of Islington, ex parte Rixon) (1998)
Grounds: Consultation
• Duty to consult may arise as a matter of fairness
or due process
– General duty to act fairly, not general duty to consult:
“…judicial review is not granted for a mere failure to
follow best practice. It has to be shown that the
failure to consult amounts to a failure by the local
authority to discharge its admitted duty to act
fairly.” (R v Devon County Council, ex parte
Baker (1992))
Grounds: Consultation
• Impact of a proposed decision on individuals may give
rise to a right to be consulted
– R (Dudley MBC) v Secretary of State for
Communities (2012)
The Secretary of State’s decision fundamentally
altered the nature of a previously-made
commitment to fund capital projects, and had a
significant impact on the local authority. To make
the decision without consultation was so unfair as
to amount to an abuse of power.
Grounds: Consultation
• Contrast with:
– R (on the application of British Medical Association)
v General Medical Council (2008): The GMC
abolished without consultation an exemption on the
payment of medical register fees for doctors aged
over 65. The impact was minimal and the GMC were
not acting unfairly
Fairness in Consultation
R (on the application of Moseley) v Haringey LBC (2014)
• Supreme Court reaffirmed the Sedley principles of
fair and adequate consultation:
– Consultation at formative stage of proposals
– Proposer to give sufficient reasons for proposals
– Adequate time for consideration and response
– Product of consultation to be taken into account
Grounds: Fairness in Consultation
R (on the application of Moseley) v Haringey LBC
(2014)
• Previously wide discretion on options on which to
consult
– No obligation to consult on rejected options
• New ingredient: Court in Moseley held that
consultees had to be made aware of alternative
options and why the Council had rejected them
Grounds: Fairness in Consultation
• Application of the duty of fairness in consultation cases
is “intensely case-sensitive” (R (Rusal) v London Metal
Exchange (2014))
• “Judgments are not to be construed as though they
were enactments of general application, and the
extent to which judicial dicta are a response to the
particular factual matrix of the case under
consideration must always be borne in mind” (R
(Greenpeace Ltd) v Secretary of State for Trade and
Industry (2007))
Grounds: Fairness in Consultation
• Cases since Moseley suggest that the circumstances in
which a public body must consult on alternatives are rare
• Obligation to provide sufficient information for intelligent
consideration
• R (Robson) v Salford City Council (2015)
– The Court of Appeal held that in Moseley, consultation
material conveyed a positively misleading impression.
In this case, whilst the material presented an
incomplete picture, this did not amount an unfair
consultation process.
Grounds: Legitimate Expectation
• A public authority may, by practice or policy,
confer on a person a legitimate expectation that it
will act in a certain way
• Legitimate expectation can arise from an express
or implied representation, consistent past practice
or from a policy
– Representation must be clear, unambiguous and
unqualified
Grounds: Legitimate Expectation
• Procedural legitimate expectation
– Arises where a public authority has “provided an
unequivocal assurance, whether by means of an
express promise or an established practice, that it
will give notice or embark upon consultation before
it changes an existing substantive policy” (R (Bhatt
Murphy) v Secretary of State for the Home Department
(2008))
Grounds: Legitimate Expectation
• Substantive legitimate expectation
– “A substantive legitimate expectation constitutes
a specific undertaking, directed at a particular
individual or group, by which the relevant policy’s
continuance is assured.” Withdrawal would be
“conduct equivalent to a breach of contract or
representation” (Bhatt Murphy)
Grounds: Legitimate Expectation
• Small number of cases: Courts acknowledge that it
must be open to a public body to change its
policies, unless to do so would amount to abuse of
power
• Substantive procedural expectation recognised in
exceptional cases only:
– E.g. R v North and East Devon Health Authority ex
parte Coughlan (2001): Successful JR brought by
chronically ill tetraplegic who had been promised
a residential care home was her home for life
Grounds: Rule against bias or pre-
determination
• The modern law of bias and apparent bias was
settled in Porter v Magill (2001):
– The question is whether the fair-minded observer,
having considered the facts, would conclude that
there was a real possibility that the ‘tribunal’ was
biased
Grounds: Rule against bias or pre-
determination
• Practically, this means a decision-maker should not be ‘a judge in his own
cause’ R v Bow Street Metropolitan Stipendary Magistrate, ex parte Pinochet
Ungarte (2001)
• A decision-maker should declare their interest in and withdraw participation
from a decision:
– Which will affect a friend or relation
– In which they have a financial interest relating to the outcome
– Where they are a director of an organisation affected by the outcome of
the decision
– Where they are a member of a group campaigning for one outcome or
another
– In which their spouse or civil partner has an interest in the outcome
Grounds: Rule against bias or pre-
determination
• Kelton v Wiltshire Council and others (2015)
– Bias was found when a councillor whose
vote decided planning permission for a
development was a director in a housing
association that had an interest in the
development
Grounds: Rule against bias or pre-
determination
• Predetermination is also unlawful
• R (on the application of Lewis) v Persimmon Homes Teesside
Ltd (2008) is the leading case on bias and pre-determination
– Mere predisposition will not be enough
– Appearances of predetermination created by a councillor
voting for a planning project he has long supported are not
predetermination
– Importance of appearances limited in local government
context
Grounds: Rule against bias or pre-
determination
• S.25 of Localism Act 2011 provides that a decision
maker must not be taken to have had a closed mind
when approaching a decision just because they have
previously indicated a view on the relevant matter
• S.25 taken with Persimmon, bias and
predetermination will rarely be fatal in local
government decisions
Grounds: ‘Duty’ to give reasons
in public decision making
• Although there has been an increasing trend in
common law for decision-makers to give reasons,
the present legal position is there is no general
common law duty on public bodies to give reasons
R (Hasan) v Secretary of State for Trade and
Industry (2008)
• However, not giving reasons means that a decision-
maker may be much more susceptible to a
successful challenge on another ground for review
Grounds: ‘Duty’ to give reasons
in public decision making
• Oakley v South Cambridgeshire DC (2017)-
– Affirmed that there is no general obligation to give
reasons at common law.
– However, there is increasingly a tendency to require
them rather than not and it is more accurate to say
that the common law was moving to the position
that whilst there was no universal obligation to give
reasons in all circumstances, in general they should
be given unless there was a proper justification for
not doing so.
Grounds: ‘Duty’ to give reasons
in public decision making
• There are situations in which a duty to give reasons arises at law
• This can be imposed by statute or common law
• The common law right to reasons arises when the test set out in R
v Higher Education Funding Council Ex parte Institute of Dental
Surgery [1994] is met
– There is a practical need to know the reasons so an individual
can consider an appeal or review
– The importance of the decision to the person affected
– Whether there is a legitimate expectation as to how the
decision-maker should act
Grounds: ‘Duty’ to give reasons
in public decision making
• R (on the application of Hawksworth Securities Plc) v
Peterborough City Council [2016] gave details on how reasons
should be given:
– The standard of reasons to be applied to a local planning
authority's decision to grant planning permission was different
to the formulation of reasons where a minister or planning
inspector was giving a decision on a planning appeal. Where a
local authority planning committee gave reasons for a grant of
planning permission it needed only to summarise the main
reasons for the decision and could do so briefly: it was not
required to set out each step in its reasoning, nor indicate
which factual matters were accepted or rejected.
Grounds: Illegality
• Excess of Power (vires)
– Outside the limits of jurisdiction or otherwise
outside its powers (i.e. ultra vires)
• Abuse of Power
– Pursuing an objective other than that for which the
power to make the decision was conferred
• Error of Law
• Human Rights Act 1998
• Equality Act 2010
Grounds: Illegality
• Unauthorised delegation
– Where a power is given to someone by statute, it
cannot be delegated to someone else unless there
are express or implied powers to do so
– Carltona Ltd v Commissioners of Works (1943)
• Acting:
– In bad faith (dishonestly or maliciously);
– For an improper purpose (Porter v Magill (2002))
Other grounds
• Irrationality
– ‘Wednesbury Unreasonableness’ is a decision that was not reasonably
open to a public body… a decision so unreasonable that no reasonable
body would make it Associated Provincial Picture Houses Ltd v
Wednesbury Corporation (1943)
– All relevant considerations must be considered Anisminic v Foreign
Compensation Commission (1969). Irrelevant considerations should
not be considered. For example:
 Need to get business finished quickly
 Assumptions not based on evidence
 Personal experience of a different situation
 Dislike for the person affected by the decision or what they represent
Other grounds
• Proper Purpose
– A public body must not have ulterior motives or act
in bad faith Padfield v Minister of Agriculture,
Fisheries and Food (1968)
– For example, it must not:
 Exercise powers for electoral advantage of a particular
party
Real world regulation of Drones
• Both the EU and the UK are conducting assessments
and consultations with a view to introducing new
regulation of drones see eg:
https://www.gov.uk/government/uploads/syst
em/uploads/attachment_data/file/631638/unl
ocking-the-uks-high-tech-economy-
consultation-on-the-safe-use-of-drones-in-the-
uk-government-response.pdf
Real world regulation of Drones
• As it stands, drones weighing less than 20 kg
excluding fuel generally fall within the remit of the
Air Navigation Order 2009 as ‘small unmanned
aircraft’ (‘SUA’)
• SUA do not need to be insured or registered with
the Civil Aviation Authority (‘CAA’)
Real world regulation of Drones
• A person operating an SUA must ‘maintain direct, unaided visual
contact with the aircraft sufficient to monitor its flight path in
relation to other aircraft, persons, vehicles, vessels and structures
for the purpose of avoiding collisions’
• If the SUA weighs over 7 kg excluding fuel- which is relatively
uncommon- then it must not be flown in certain airspace without
permission from aircraft control
• When flown for commercial gain, the person controlling the drone
should generally be authorised by the CAA
Real world regulation of Drones
• If the drone is capable of recording images, it becomes a Small
Unmanned Surveillance Aircraft (‘SUSA’)
• Without CAA permission, SUSAs must not be flown:
– Within 150 metres of any substantially used residential,
industrial commercial or recreational area
– Within 150 metres of an organised open-air assembly of more
than 1000 persons
– Within 50 metres of any vessel, vehicle or structure
– Within 50 metres of any person
• Use of SUSAs or SUAs may also be subject to privacy
and trespass actions
Any questions?
Contact us…
Richard Barlow – 0115 976 6208
richard.barlow@brownejacobson.com
Ben Standing – 0115 976 6200
ben.standing@brownejacobson.com
Will Thomas – 0115 934 2007
will.thomas@brownejacobson.com
All information correct at time of production.
The information and opinions expressed within this
document are no substitute for full legal advice. It is for
guidance only and illustrates the law as at the published
date. If in doubt, please telephone us on 0370 270 6000.
© Browne Jacobson LLP 2017 – The information contained
within this document is and shall remain the property of
Browne Jacobson. This document may not be reproduced
without the prior consent of Browne Jacobson.

Weitere ähnliche Inhalte

Was ist angesagt?

Data Protection Seminar 2_Marketing & GDPR_ISOLAS LLP_26-07-17
Data Protection Seminar 2_Marketing & GDPR_ISOLAS LLP_26-07-17Data Protection Seminar 2_Marketing & GDPR_ISOLAS LLP_26-07-17
Data Protection Seminar 2_Marketing & GDPR_ISOLAS LLP_26-07-17Michael Adamberry
 
Simple GDPR Overview
Simple GDPR OverviewSimple GDPR Overview
Simple GDPR OverviewGydeline Ltd
 
Presentation on GDPR
Presentation on GDPRPresentation on GDPR
Presentation on GDPRDipanjanDey12
 
Administrative and public law seminar
Administrative and public law seminarAdministrative and public law seminar
Administrative and public law seminarBrowne Jacobson LLP
 
General Data Protection Regulations (GDPR): Do you understand it and are you ...
General Data Protection Regulations (GDPR): Do you understand it and are you ...General Data Protection Regulations (GDPR): Do you understand it and are you ...
General Data Protection Regulations (GDPR): Do you understand it and are you ...Cvent
 
GDPR 11/1/2017
GDPR 11/1/2017GDPR 11/1/2017
GDPR 11/1/2017isc2-hellenic
 
GDPR Demystified
GDPR DemystifiedGDPR Demystified
GDPR DemystifiedSPIN Chennai
 
GDPR Introduction and overview
GDPR Introduction and overviewGDPR Introduction and overview
GDPR Introduction and overviewJane Lambert
 
GDPR-Overview
GDPR-OverviewGDPR-Overview
GDPR-OverviewErica Walker
 
Regulation (EU) 2016_679_GDPR_Overview_June 2016
Regulation (EU) 2016_679_GDPR_Overview_June 2016Regulation (EU) 2016_679_GDPR_Overview_June 2016
Regulation (EU) 2016_679_GDPR_Overview_June 2016John Greenwood
 
Data Privacy Trends in 2021: Compliance with New Regulations
Data Privacy Trends in 2021: Compliance with New RegulationsData Privacy Trends in 2021: Compliance with New Regulations
Data Privacy Trends in 2021: Compliance with New RegulationsPECB
 
Overview on data privacy
Overview on data privacy Overview on data privacy
Overview on data privacy Amiit Keshav Naik
 
GDPR – what does it mean for charities and what you need to consider - Iain P...
GDPR – what does it mean for charities and what you need to consider - Iain P...GDPR – what does it mean for charities and what you need to consider - Iain P...
GDPR – what does it mean for charities and what you need to consider - Iain P...m-hance
 
EU data protection and security update COCIR annual meeting 2016
EU data protection and security update COCIR annual meeting 2016EU data protection and security update COCIR annual meeting 2016
EU data protection and security update COCIR annual meeting 2016Erik Vollebregt
 
Public sector breakfast club - October 2017, Exeter
Public sector breakfast club - October 2017, ExeterPublic sector breakfast club - October 2017, Exeter
Public sector breakfast club - October 2017, ExeterBrowne Jacobson LLP
 

Was ist angesagt? (20)

Data Protection Seminar 2_Marketing & GDPR_ISOLAS LLP_26-07-17
Data Protection Seminar 2_Marketing & GDPR_ISOLAS LLP_26-07-17Data Protection Seminar 2_Marketing & GDPR_ISOLAS LLP_26-07-17
Data Protection Seminar 2_Marketing & GDPR_ISOLAS LLP_26-07-17
 
Simple GDPR Overview
Simple GDPR OverviewSimple GDPR Overview
Simple GDPR Overview
 
Presentation on GDPR
Presentation on GDPRPresentation on GDPR
Presentation on GDPR
 
Administrative and public law seminar
Administrative and public law seminarAdministrative and public law seminar
Administrative and public law seminar
 
General Data Protection Regulations (GDPR): Do you understand it and are you ...
General Data Protection Regulations (GDPR): Do you understand it and are you ...General Data Protection Regulations (GDPR): Do you understand it and are you ...
General Data Protection Regulations (GDPR): Do you understand it and are you ...
 
GDPR 11/1/2017
GDPR 11/1/2017GDPR 11/1/2017
GDPR 11/1/2017
 
GDPR Demystified
GDPR DemystifiedGDPR Demystified
GDPR Demystified
 
GDPR Introduction and overview
GDPR Introduction and overviewGDPR Introduction and overview
GDPR Introduction and overview
 
GDPR-Overview
GDPR-OverviewGDPR-Overview
GDPR-Overview
 
Regulation (EU) 2016_679_GDPR_Overview_June 2016
Regulation (EU) 2016_679_GDPR_Overview_June 2016Regulation (EU) 2016_679_GDPR_Overview_June 2016
Regulation (EU) 2016_679_GDPR_Overview_June 2016
 
Data Protection GDPR Basics
Data Protection GDPR BasicsData Protection GDPR Basics
Data Protection GDPR Basics
 
EU GDPR (training)
EU GDPR (training)  EU GDPR (training)
EU GDPR (training)
 
Data Privacy Trends in 2021: Compliance with New Regulations
Data Privacy Trends in 2021: Compliance with New RegulationsData Privacy Trends in 2021: Compliance with New Regulations
Data Privacy Trends in 2021: Compliance with New Regulations
 
Privacy 101
Privacy 101Privacy 101
Privacy 101
 
General Data Protection Regulation (GDPR)
General Data Protection Regulation (GDPR)General Data Protection Regulation (GDPR)
General Data Protection Regulation (GDPR)
 
Overview on data privacy
Overview on data privacy Overview on data privacy
Overview on data privacy
 
GDPR – what does it mean for charities and what you need to consider - Iain P...
GDPR – what does it mean for charities and what you need to consider - Iain P...GDPR – what does it mean for charities and what you need to consider - Iain P...
GDPR – what does it mean for charities and what you need to consider - Iain P...
 
EU data protection and security update COCIR annual meeting 2016
EU data protection and security update COCIR annual meeting 2016EU data protection and security update COCIR annual meeting 2016
EU data protection and security update COCIR annual meeting 2016
 
GDPR and Research Data Management
GDPR and Research Data ManagementGDPR and Research Data Management
GDPR and Research Data Management
 
Public sector breakfast club - October 2017, Exeter
Public sector breakfast club - October 2017, ExeterPublic sector breakfast club - October 2017, Exeter
Public sector breakfast club - October 2017, Exeter
 

Ähnlich wie Browne Jacobson - Administrative and public law - October 2017

Changing legislation – General Data Protection Regulation (GDPR) and librarie...
Changing legislation – General Data Protection Regulation (GDPR) and librarie...Changing legislation – General Data Protection Regulation (GDPR) and librarie...
Changing legislation – General Data Protection Regulation (GDPR) and librarie...CILIPScotland
 
Introduction to GDPR
Introduction to GDPRIntroduction to GDPR
Introduction to GDPRPriyab Satoshi
 
GDPR Breakfast Briefing - For Business Owners, HR Directors, Marketing Direct...
GDPR Breakfast Briefing - For Business Owners, HR Directors, Marketing Direct...GDPR Breakfast Briefing - For Business Owners, HR Directors, Marketing Direct...
GDPR Breakfast Briefing - For Business Owners, HR Directors, Marketing Direct...Harrison Clark Rickerbys
 
GDPR Breakfast Briefing for Business Advisors
GDPR Breakfast Briefing for Business AdvisorsGDPR Breakfast Briefing for Business Advisors
GDPR Breakfast Briefing for Business AdvisorsHarrison Clark Rickerbys
 
General Data Protection Regulation (GDPR) for Identity Architects
General Data Protection Regulation (GDPR) for Identity ArchitectsGeneral Data Protection Regulation (GDPR) for Identity Architects
General Data Protection Regulation (GDPR) for Identity ArchitectsWSO2
 
GDPR Breakfast Briefing for Business Owners, IT Directors, HR Directors & Ops...
GDPR Breakfast Briefing for Business Owners, IT Directors, HR Directors & Ops...GDPR Breakfast Briefing for Business Owners, IT Directors, HR Directors & Ops...
GDPR Breakfast Briefing for Business Owners, IT Directors, HR Directors & Ops...Harrison Clark Rickerbys
 
GDPR Breakfast Briefing for Business Advisors
GDPR Breakfast Briefing for Business AdvisorsGDPR Breakfast Briefing for Business Advisors
GDPR Breakfast Briefing for Business AdvisorsHarrison Clark Rickerbys
 
GDPR Enforcement is here. Are you ready?
GDPR Enforcement is here. Are you ready? GDPR Enforcement is here. Are you ready?
GDPR Enforcement is here. Are you ready? SecurityScorecard
 
General Data Protection Regulation or GDPR
General Data Protection Regulation or GDPRGeneral Data Protection Regulation or GDPR
General Data Protection Regulation or GDPRNupur Samaddar
 
Gdpr demystified - making sense of the regulation
Gdpr demystified  - making sense of the regulationGdpr demystified  - making sense of the regulation
Gdpr demystified - making sense of the regulationJames Mulhern
 
How to implement GDPR for the health sector, February 2018
How to implement GDPR for the health sector, February 2018How to implement GDPR for the health sector, February 2018
How to implement GDPR for the health sector, February 2018Browne Jacobson LLP
 
Prepare Your Firm for GDPR
Prepare Your Firm for GDPRPrepare Your Firm for GDPR
Prepare Your Firm for GDPRMyComplianceOffice
 
Public sector breakfast club, October 2016, Exeter
Public sector breakfast club, October 2016, ExeterPublic sector breakfast club, October 2016, Exeter
Public sector breakfast club, October 2016, ExeterBrowne Jacobson LLP
 
3A – DATA PROTECTION: ADVICE
3A – DATA PROTECTION: ADVICE3A – DATA PROTECTION: ADVICE
3A – DATA PROTECTION: ADVICECFG
 
GDPR webinar presentation | LawBite
GDPR webinar presentation | LawBiteGDPR webinar presentation | LawBite
GDPR webinar presentation | LawBiteClive Rich
 
mHealth Israel_EU General Data Protection Regulation_Simon Marks
mHealth Israel_EU General Data Protection Regulation_Simon MarksmHealth Israel_EU General Data Protection Regulation_Simon Marks
mHealth Israel_EU General Data Protection Regulation_Simon MarksLevi Shapiro
 
GDPR - New European Union Legislation
GDPR - New European Union LegislationGDPR - New European Union Legislation
GDPR - New European Union LegislationTekwill
 
Data Protection & Risk Management
Data Protection & Risk Management Data Protection & Risk Management
Data Protection & Risk Management Endcode_org
 

Ähnlich wie Browne Jacobson - Administrative and public law - October 2017 (20)

Changing legislation – General Data Protection Regulation (GDPR) and librarie...
Changing legislation – General Data Protection Regulation (GDPR) and librarie...Changing legislation – General Data Protection Regulation (GDPR) and librarie...
Changing legislation – General Data Protection Regulation (GDPR) and librarie...
 
Introduction to GDPR
Introduction to GDPRIntroduction to GDPR
Introduction to GDPR
 
GDPR Breakfast Briefing - For Business Owners, HR Directors, Marketing Direct...
GDPR Breakfast Briefing - For Business Owners, HR Directors, Marketing Direct...GDPR Breakfast Briefing - For Business Owners, HR Directors, Marketing Direct...
GDPR Breakfast Briefing - For Business Owners, HR Directors, Marketing Direct...
 
GDPR Breakfast Briefing for Business Advisors
GDPR Breakfast Briefing for Business AdvisorsGDPR Breakfast Briefing for Business Advisors
GDPR Breakfast Briefing for Business Advisors
 
General Data Protection Regulation (GDPR) for Identity Architects
General Data Protection Regulation (GDPR) for Identity ArchitectsGeneral Data Protection Regulation (GDPR) for Identity Architects
General Data Protection Regulation (GDPR) for Identity Architects
 
GDPR for your Payroll Bureau
GDPR for your Payroll BureauGDPR for your Payroll Bureau
GDPR for your Payroll Bureau
 
GDPR Breakfast Briefing for Business Owners, IT Directors, HR Directors & Ops...
GDPR Breakfast Briefing for Business Owners, IT Directors, HR Directors & Ops...GDPR Breakfast Briefing for Business Owners, IT Directors, HR Directors & Ops...
GDPR Breakfast Briefing for Business Owners, IT Directors, HR Directors & Ops...
 
GDPR Breakfast Briefing for Business Advisors
GDPR Breakfast Briefing for Business AdvisorsGDPR Breakfast Briefing for Business Advisors
GDPR Breakfast Briefing for Business Advisors
 
GDPR Enforcement is here. Are you ready?
GDPR Enforcement is here. Are you ready? GDPR Enforcement is here. Are you ready?
GDPR Enforcement is here. Are you ready?
 
General Data Protection Regulation or GDPR
General Data Protection Regulation or GDPRGeneral Data Protection Regulation or GDPR
General Data Protection Regulation or GDPR
 
Gdpr demystified - making sense of the regulation
Gdpr demystified  - making sense of the regulationGdpr demystified  - making sense of the regulation
Gdpr demystified - making sense of the regulation
 
How to implement GDPR for the health sector, February 2018
How to implement GDPR for the health sector, February 2018How to implement GDPR for the health sector, February 2018
How to implement GDPR for the health sector, February 2018
 
Prepare Your Firm for GDPR
Prepare Your Firm for GDPRPrepare Your Firm for GDPR
Prepare Your Firm for GDPR
 
Public sector breakfast club, October 2016, Exeter
Public sector breakfast club, October 2016, ExeterPublic sector breakfast club, October 2016, Exeter
Public sector breakfast club, October 2016, Exeter
 
3A – DATA PROTECTION: ADVICE
3A – DATA PROTECTION: ADVICE3A – DATA PROTECTION: ADVICE
3A – DATA PROTECTION: ADVICE
 
GDPR webinar presentation | LawBite
GDPR webinar presentation | LawBiteGDPR webinar presentation | LawBite
GDPR webinar presentation | LawBite
 
mHealth Israel_EU General Data Protection Regulation_Simon Marks
mHealth Israel_EU General Data Protection Regulation_Simon MarksmHealth Israel_EU General Data Protection Regulation_Simon Marks
mHealth Israel_EU General Data Protection Regulation_Simon Marks
 
What does GDPR mean for your business?
What does GDPR mean for your business?What does GDPR mean for your business?
What does GDPR mean for your business?
 
GDPR - New European Union Legislation
GDPR - New European Union LegislationGDPR - New European Union Legislation
GDPR - New European Union Legislation
 
Data Protection & Risk Management
Data Protection & Risk Management Data Protection & Risk Management
Data Protection & Risk Management
 

Mehr von Browne Jacobson LLP

Employment law update - Browne Jacobson Exeter - 06 February 2020
Employment law update - Browne Jacobson Exeter - 06 February 2020Employment law update - Browne Jacobson Exeter - 06 February 2020
Employment law update - Browne Jacobson Exeter - 06 February 2020Browne Jacobson LLP
 
Exclusions: keeping you informed
Exclusions: keeping you informed Exclusions: keeping you informed
Exclusions: keeping you informed Browne Jacobson LLP
 
Procurement workshop training slides - Birmingham session
Procurement workshop training slides - Birmingham sessionProcurement workshop training slides - Birmingham session
Procurement workshop training slides - Birmingham sessionBrowne Jacobson LLP
 
Local authority acquisition and disposal of land - July 2019
Local authority acquisition and disposal of land - July 2019Local authority acquisition and disposal of land - July 2019
Local authority acquisition and disposal of land - July 2019Browne Jacobson LLP
 
Your employees, their future employers, and your intellectual property - July...
Your employees, their future employers, and your intellectual property - July...Your employees, their future employers, and your intellectual property - July...
Your employees, their future employers, and your intellectual property - July...Browne Jacobson LLP
 
Public Sector Planning Club - 4 July 2019
Public Sector Planning Club - 4 July 2019Public Sector Planning Club - 4 July 2019
Public Sector Planning Club - 4 July 2019Browne Jacobson LLP
 
Health tech slides 12 june 2019
Health tech slides   12 june 2019Health tech slides   12 june 2019
Health tech slides 12 june 2019Browne Jacobson LLP
 
Education Law Conference Manchester - Monday 10 June 2019
Education Law Conference Manchester - Monday 10 June 2019Education Law Conference Manchester - Monday 10 June 2019
Education Law Conference Manchester - Monday 10 June 2019Browne Jacobson LLP
 
Education Law Conference Exeter - Thursday 6 June 2019
Education Law Conference Exeter - Thursday 6 June 2019Education Law Conference Exeter - Thursday 6 June 2019
Education Law Conference Exeter - Thursday 6 June 2019Browne Jacobson LLP
 
Redress Schemes for Abuse and Misconduct, March 2019
Redress Schemes for Abuse and Misconduct, March 2019Redress Schemes for Abuse and Misconduct, March 2019
Redress Schemes for Abuse and Misconduct, March 2019Browne Jacobson LLP
 
Claims Club - March 2019 - Birmingham
Claims Club - March 2019 - BirminghamClaims Club - March 2019 - Birmingham
Claims Club - March 2019 - BirminghamBrowne Jacobson LLP
 
Claims Club - March 2019 - London
Claims Club - March 2019 - London Claims Club - March 2019 - London
Claims Club - March 2019 - London Browne Jacobson LLP
 
Admin and Public Law - April 2019 - London
Admin and Public Law - April 2019 - London Admin and Public Law - April 2019 - London
Admin and Public Law - April 2019 - London Browne Jacobson LLP
 
State aid and IP in R&D agreements, March 2019
State aid and IP in R&D agreements, March 2019 State aid and IP in R&D agreements, March 2019
State aid and IP in R&D agreements, March 2019 Browne Jacobson LLP
 
In House Lawyers, March 2019
In House Lawyers, March 2019In House Lawyers, March 2019
In House Lawyers, March 2019Browne Jacobson LLP
 
Privileged communications webinar, March 2019
Privileged communications webinar, March 2019 Privileged communications webinar, March 2019
Privileged communications webinar, March 2019 Browne Jacobson LLP
 
Social care forum, March 2019, Manchester
Social care forum, March 2019, ManchesterSocial care forum, March 2019, Manchester
Social care forum, March 2019, ManchesterBrowne Jacobson LLP
 
Public sector breakfast club, February 2019, Exeter
Public sector breakfast club, February 2019, Exeter Public sector breakfast club, February 2019, Exeter
Public sector breakfast club, February 2019, Exeter Browne Jacobson LLP
 
Public sector planning club, February 2019, Nottingham
Public sector planning club, February 2019, NottinghamPublic sector planning club, February 2019, Nottingham
Public sector planning club, February 2019, NottinghamBrowne Jacobson LLP
 
Mental health, capacity and deprivation of liberty case law update, February ...
Mental health, capacity and deprivation of liberty case law update, February ...Mental health, capacity and deprivation of liberty case law update, February ...
Mental health, capacity and deprivation of liberty case law update, February ...Browne Jacobson LLP
 

Mehr von Browne Jacobson LLP (20)

Employment law update - Browne Jacobson Exeter - 06 February 2020
Employment law update - Browne Jacobson Exeter - 06 February 2020Employment law update - Browne Jacobson Exeter - 06 February 2020
Employment law update - Browne Jacobson Exeter - 06 February 2020
 
Exclusions: keeping you informed
Exclusions: keeping you informed Exclusions: keeping you informed
Exclusions: keeping you informed
 
Procurement workshop training slides - Birmingham session
Procurement workshop training slides - Birmingham sessionProcurement workshop training slides - Birmingham session
Procurement workshop training slides - Birmingham session
 
Local authority acquisition and disposal of land - July 2019
Local authority acquisition and disposal of land - July 2019Local authority acquisition and disposal of land - July 2019
Local authority acquisition and disposal of land - July 2019
 
Your employees, their future employers, and your intellectual property - July...
Your employees, their future employers, and your intellectual property - July...Your employees, their future employers, and your intellectual property - July...
Your employees, their future employers, and your intellectual property - July...
 
Public Sector Planning Club - 4 July 2019
Public Sector Planning Club - 4 July 2019Public Sector Planning Club - 4 July 2019
Public Sector Planning Club - 4 July 2019
 
Health tech slides 12 june 2019
Health tech slides   12 june 2019Health tech slides   12 june 2019
Health tech slides 12 june 2019
 
Education Law Conference Manchester - Monday 10 June 2019
Education Law Conference Manchester - Monday 10 June 2019Education Law Conference Manchester - Monday 10 June 2019
Education Law Conference Manchester - Monday 10 June 2019
 
Education Law Conference Exeter - Thursday 6 June 2019
Education Law Conference Exeter - Thursday 6 June 2019Education Law Conference Exeter - Thursday 6 June 2019
Education Law Conference Exeter - Thursday 6 June 2019
 
Redress Schemes for Abuse and Misconduct, March 2019
Redress Schemes for Abuse and Misconduct, March 2019Redress Schemes for Abuse and Misconduct, March 2019
Redress Schemes for Abuse and Misconduct, March 2019
 
Claims Club - March 2019 - Birmingham
Claims Club - March 2019 - BirminghamClaims Club - March 2019 - Birmingham
Claims Club - March 2019 - Birmingham
 
Claims Club - March 2019 - London
Claims Club - March 2019 - London Claims Club - March 2019 - London
Claims Club - March 2019 - London
 
Admin and Public Law - April 2019 - London
Admin and Public Law - April 2019 - London Admin and Public Law - April 2019 - London
Admin and Public Law - April 2019 - London
 
State aid and IP in R&D agreements, March 2019
State aid and IP in R&D agreements, March 2019 State aid and IP in R&D agreements, March 2019
State aid and IP in R&D agreements, March 2019
 
In House Lawyers, March 2019
In House Lawyers, March 2019In House Lawyers, March 2019
In House Lawyers, March 2019
 
Privileged communications webinar, March 2019
Privileged communications webinar, March 2019 Privileged communications webinar, March 2019
Privileged communications webinar, March 2019
 
Social care forum, March 2019, Manchester
Social care forum, March 2019, ManchesterSocial care forum, March 2019, Manchester
Social care forum, March 2019, Manchester
 
Public sector breakfast club, February 2019, Exeter
Public sector breakfast club, February 2019, Exeter Public sector breakfast club, February 2019, Exeter
Public sector breakfast club, February 2019, Exeter
 
Public sector planning club, February 2019, Nottingham
Public sector planning club, February 2019, NottinghamPublic sector planning club, February 2019, Nottingham
Public sector planning club, February 2019, Nottingham
 
Mental health, capacity and deprivation of liberty case law update, February ...
Mental health, capacity and deprivation of liberty case law update, February ...Mental health, capacity and deprivation of liberty case law update, February ...
Mental health, capacity and deprivation of liberty case law update, February ...
 

KĂźrzlich hochgeladen

一比一原版赫尔大学毕业证如何办理
一比一原版赫尔大学毕业证如何办理一比一原版赫尔大学毕业证如何办理
一比一原版赫尔大学毕业证如何办理Airst S
 
The Main Steps on Starting a Business in Spain
The Main Steps on Starting a Business in SpainThe Main Steps on Starting a Business in Spain
The Main Steps on Starting a Business in SpainBridgeWest.eu
 
Corporate Governance (Indian Scenario, Legal frame work in India ) - PPT.ppt
Corporate Governance (Indian Scenario, Legal frame work in India ) - PPT.pptCorporate Governance (Indian Scenario, Legal frame work in India ) - PPT.ppt
Corporate Governance (Indian Scenario, Legal frame work in India ) - PPT.pptRRR Chambers
 
Smarp Snapshot 210 -- Google's Social Media Ad Fraud & Disinformation Strategy
Smarp Snapshot 210 -- Google's Social Media Ad Fraud & Disinformation StrategySmarp Snapshot 210 -- Google's Social Media Ad Fraud & Disinformation Strategy
Smarp Snapshot 210 -- Google's Social Media Ad Fraud & Disinformation StrategyJong Hyuk Choi
 
一比一原版(USYD毕业证书)澳洲悉尼大学毕业证如何办理
一比一原版(USYD毕业证书)澳洲悉尼大学毕业证如何办理一比一原版(USYD毕业证书)澳洲悉尼大学毕业证如何办理
一比一原版(USYD毕业证书)澳洲悉尼大学毕业证如何办理A AA
 
Analysis of R V Kelkar's Criminal Procedure Code ppt- chapter 1 .pptx
Analysis of R V Kelkar's Criminal Procedure Code ppt- chapter 1 .pptxAnalysis of R V Kelkar's Criminal Procedure Code ppt- chapter 1 .pptx
Analysis of R V Kelkar's Criminal Procedure Code ppt- chapter 1 .pptxadvabhayjha2627
 
ASMA JILANI EXPLAINED CASE PLD 1972 FOR CSS
ASMA JILANI EXPLAINED CASE PLD 1972 FOR CSSASMA JILANI EXPLAINED CASE PLD 1972 FOR CSS
ASMA JILANI EXPLAINED CASE PLD 1972 FOR CSSCssSpamx
 
3 Formation of Company.www.seribangash.com.ppt
3 Formation of Company.www.seribangash.com.ppt3 Formation of Company.www.seribangash.com.ppt
3 Formation of Company.www.seribangash.com.pptseri bangash
 
Police Misconduct Lawyers - Law Office of Jerry L. Steering
Police Misconduct Lawyers - Law Office of Jerry L. SteeringPolice Misconduct Lawyers - Law Office of Jerry L. Steering
Police Misconduct Lawyers - Law Office of Jerry L. SteeringSteering Law
 
CAFC Chronicles: Costly Tales of Claim Construction Fails
CAFC Chronicles: Costly Tales of Claim Construction FailsCAFC Chronicles: Costly Tales of Claim Construction Fails
CAFC Chronicles: Costly Tales of Claim Construction FailsAurora Consulting
 
A SHORT HISTORY OF LIBERTY'S PROGREE THROUGH HE EIGHTEENTH CENTURY
A SHORT HISTORY OF LIBERTY'S PROGREE THROUGH HE EIGHTEENTH CENTURYA SHORT HISTORY OF LIBERTY'S PROGREE THROUGH HE EIGHTEENTH CENTURY
A SHORT HISTORY OF LIBERTY'S PROGREE THROUGH HE EIGHTEENTH CENTURYJulian Scutts
 
How do cyber crime lawyers in Mumbai collaborate with law enforcement agencie...
How do cyber crime lawyers in Mumbai collaborate with law enforcement agencie...How do cyber crime lawyers in Mumbai collaborate with law enforcement agencie...
How do cyber crime lawyers in Mumbai collaborate with law enforcement agencie...Finlaw Associates
 
一比一原版(USC毕业证书)南加州大学毕业证学位证书
一比一原版(USC毕业证书)南加州大学毕业证学位证书一比一原版(USC毕业证书)南加州大学毕业证学位证书
一比一原版(USC毕业证书)南加州大学毕业证学位证书irst
 
Corporate Sustainability Due Diligence Directive (CSDDD or the EU Supply Chai...
Corporate Sustainability Due Diligence Directive (CSDDD or the EU Supply Chai...Corporate Sustainability Due Diligence Directive (CSDDD or the EU Supply Chai...
Corporate Sustainability Due Diligence Directive (CSDDD or the EU Supply Chai...Dr. Oliver Massmann
 
Elective Course on Forensic Science in Law
Elective Course on Forensic Science  in LawElective Course on Forensic Science  in Law
Elective Course on Forensic Science in LawNilendra Kumar
 
Human Rights_FilippoLuciani diritti umani.pptx
Human Rights_FilippoLuciani diritti umani.pptxHuman Rights_FilippoLuciani diritti umani.pptx
Human Rights_FilippoLuciani diritti umani.pptxfilippoluciani9
 
一比一原版(Griffith毕业证书)格里菲斯大学毕业证如何办理
一比一原版(Griffith毕业证书)格里菲斯大学毕业证如何办理一比一原版(Griffith毕业证书)格里菲斯大学毕业证如何办理
一比一原版(Griffith毕业证书)格里菲斯大学毕业证如何办理bd2c5966a56d
 
一比一原版曼彻斯特城市大学毕业证如何办理
一比一原版曼彻斯特城市大学毕业证如何办理一比一原版曼彻斯特城市大学毕业证如何办理
一比一原版曼彻斯特城市大学毕业证如何办理Airst S
 
Philippine FIRE CODE REVIEWER for Architecture Board Exam Takers
Philippine FIRE CODE REVIEWER for Architecture Board Exam TakersPhilippine FIRE CODE REVIEWER for Architecture Board Exam Takers
Philippine FIRE CODE REVIEWER for Architecture Board Exam TakersJillianAsdala
 
Relationship Between International Law and Municipal Law MIR.pdf
Relationship Between International Law and Municipal Law MIR.pdfRelationship Between International Law and Municipal Law MIR.pdf
Relationship Between International Law and Municipal Law MIR.pdfKelechi48
 

KĂźrzlich hochgeladen (20)

一比一原版赫尔大学毕业证如何办理
一比一原版赫尔大学毕业证如何办理一比一原版赫尔大学毕业证如何办理
一比一原版赫尔大学毕业证如何办理
 
The Main Steps on Starting a Business in Spain
The Main Steps on Starting a Business in SpainThe Main Steps on Starting a Business in Spain
The Main Steps on Starting a Business in Spain
 
Corporate Governance (Indian Scenario, Legal frame work in India ) - PPT.ppt
Corporate Governance (Indian Scenario, Legal frame work in India ) - PPT.pptCorporate Governance (Indian Scenario, Legal frame work in India ) - PPT.ppt
Corporate Governance (Indian Scenario, Legal frame work in India ) - PPT.ppt
 
Smarp Snapshot 210 -- Google's Social Media Ad Fraud & Disinformation Strategy
Smarp Snapshot 210 -- Google's Social Media Ad Fraud & Disinformation StrategySmarp Snapshot 210 -- Google's Social Media Ad Fraud & Disinformation Strategy
Smarp Snapshot 210 -- Google's Social Media Ad Fraud & Disinformation Strategy
 
一比一原版(USYD毕业证书)澳洲悉尼大学毕业证如何办理
一比一原版(USYD毕业证书)澳洲悉尼大学毕业证如何办理一比一原版(USYD毕业证书)澳洲悉尼大学毕业证如何办理
一比一原版(USYD毕业证书)澳洲悉尼大学毕业证如何办理
 
Analysis of R V Kelkar's Criminal Procedure Code ppt- chapter 1 .pptx
Analysis of R V Kelkar's Criminal Procedure Code ppt- chapter 1 .pptxAnalysis of R V Kelkar's Criminal Procedure Code ppt- chapter 1 .pptx
Analysis of R V Kelkar's Criminal Procedure Code ppt- chapter 1 .pptx
 
ASMA JILANI EXPLAINED CASE PLD 1972 FOR CSS
ASMA JILANI EXPLAINED CASE PLD 1972 FOR CSSASMA JILANI EXPLAINED CASE PLD 1972 FOR CSS
ASMA JILANI EXPLAINED CASE PLD 1972 FOR CSS
 
3 Formation of Company.www.seribangash.com.ppt
3 Formation of Company.www.seribangash.com.ppt3 Formation of Company.www.seribangash.com.ppt
3 Formation of Company.www.seribangash.com.ppt
 
Police Misconduct Lawyers - Law Office of Jerry L. Steering
Police Misconduct Lawyers - Law Office of Jerry L. SteeringPolice Misconduct Lawyers - Law Office of Jerry L. Steering
Police Misconduct Lawyers - Law Office of Jerry L. Steering
 
CAFC Chronicles: Costly Tales of Claim Construction Fails
CAFC Chronicles: Costly Tales of Claim Construction FailsCAFC Chronicles: Costly Tales of Claim Construction Fails
CAFC Chronicles: Costly Tales of Claim Construction Fails
 
A SHORT HISTORY OF LIBERTY'S PROGREE THROUGH HE EIGHTEENTH CENTURY
A SHORT HISTORY OF LIBERTY'S PROGREE THROUGH HE EIGHTEENTH CENTURYA SHORT HISTORY OF LIBERTY'S PROGREE THROUGH HE EIGHTEENTH CENTURY
A SHORT HISTORY OF LIBERTY'S PROGREE THROUGH HE EIGHTEENTH CENTURY
 
How do cyber crime lawyers in Mumbai collaborate with law enforcement agencie...
How do cyber crime lawyers in Mumbai collaborate with law enforcement agencie...How do cyber crime lawyers in Mumbai collaborate with law enforcement agencie...
How do cyber crime lawyers in Mumbai collaborate with law enforcement agencie...
 
一比一原版(USC毕业证书)南加州大学毕业证学位证书
一比一原版(USC毕业证书)南加州大学毕业证学位证书一比一原版(USC毕业证书)南加州大学毕业证学位证书
一比一原版(USC毕业证书)南加州大学毕业证学位证书
 
Corporate Sustainability Due Diligence Directive (CSDDD or the EU Supply Chai...
Corporate Sustainability Due Diligence Directive (CSDDD or the EU Supply Chai...Corporate Sustainability Due Diligence Directive (CSDDD or the EU Supply Chai...
Corporate Sustainability Due Diligence Directive (CSDDD or the EU Supply Chai...
 
Elective Course on Forensic Science in Law
Elective Course on Forensic Science  in LawElective Course on Forensic Science  in Law
Elective Course on Forensic Science in Law
 
Human Rights_FilippoLuciani diritti umani.pptx
Human Rights_FilippoLuciani diritti umani.pptxHuman Rights_FilippoLuciani diritti umani.pptx
Human Rights_FilippoLuciani diritti umani.pptx
 
一比一原版(Griffith毕业证书)格里菲斯大学毕业证如何办理
一比一原版(Griffith毕业证书)格里菲斯大学毕业证如何办理一比一原版(Griffith毕业证书)格里菲斯大学毕业证如何办理
一比一原版(Griffith毕业证书)格里菲斯大学毕业证如何办理
 
一比一原版曼彻斯特城市大学毕业证如何办理
一比一原版曼彻斯特城市大学毕业证如何办理一比一原版曼彻斯特城市大学毕业证如何办理
一比一原版曼彻斯特城市大学毕业证如何办理
 
Philippine FIRE CODE REVIEWER for Architecture Board Exam Takers
Philippine FIRE CODE REVIEWER for Architecture Board Exam TakersPhilippine FIRE CODE REVIEWER for Architecture Board Exam Takers
Philippine FIRE CODE REVIEWER for Architecture Board Exam Takers
 
Relationship Between International Law and Municipal Law MIR.pdf
Relationship Between International Law and Municipal Law MIR.pdfRelationship Between International Law and Municipal Law MIR.pdf
Relationship Between International Law and Municipal Law MIR.pdf
 

Browne Jacobson - Administrative and public law - October 2017

  • 1. Administrative and public law October 2017
  • 2. Administrative and public law 4 October 2017, London Join in today with sli.do • type sli.do into your browser bar • enter the conference code #BJAPL then ‘join’ • click on the seminar event box • use the tabs to ask questions or take part in polls. No download required
  • 3. Agenda • 1.30pm – Introduction and welcome • 1.40pm – GDPR • 2.40pm – Brexit • 3.00pm – coffee break • 3.20pm – Brexit • 3.50pm – case study • 4.50pm – any questions • 5.00pm – drinks and canapĂŠs
  • 4. General Data Protection Regulation Dmitrije Sirovica
  • 5. Today’s focus • Briefing on the new law • Exploring the role of the Data Protection Officer • Steps towards compliance
  • 7. GDPR background • What is it? • Why is it coming in? • What about Brexit?
  • 8. What is it? • Probably the most lobbied piece of EU law ever • Replaces the Data Protection Directive 1995 (DPD) • Will be enforced in Member States from 25 May 2018 • EU Member State laws implementing the DPD will no longer apply • Creates a “level-ish” playing field across EU
  • 9. Why the change? Developments • Legal • Societal • Technological
  • 10. What about Brexit? • GDPR will apply from May 2018 to Brexit • After Brexit – GDPR will apply to many UK organisations due to extra-territorial scope – GDPR will be swept up by the EU (Withdrawal) Bill 2017 – Government wishes to “maintain the stability of data transfer between EU Member States and the UK” – Adequacy or essential equivalence
  • 11. Data Protection Bill • What is it? • Released on 14 September 2017 • Supplemental to GDPR
  • 13. Who has to comply? • Data controller or data processor established in one or more Member State(s) • Data controller or data processor established outside the EU and either it – offers goods and services to data subjects in the EU or – monitors the behaviour of data subjects in the EU
  • 14. Key issues • Principles and accountability • Lawful basis for processing • Transparency • Responsibilities of controllers and processors • International transfers • Rights of data subjects • Breach notification • Enforcement and compensation
  • 15. Personal Data “means any information relating to an identified or identifiable natural person (‘data subject’) An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;” This means that an IP address or roll number can amount to personal data
  • 16. Special Categories Article 9 now refers to “Special Categories of Personal Data” rather than Sensitive Personal Data. This category includes personal data revealing : • racial or ethnic origin, • political opinions, • religious or philosophical beliefs, or • trade union membership, and • the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, • data concerning health or • data concerning a natural person's sex life or sexual orientation
  • 17. Processing will mean “any operation or set of operations which is performed on personal data … whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;”
  • 18. Principles The GDPR requires: (a) Data to be processed lawfully, fairly and in a transparent manner; (b) Data to be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; (c) Processing of data should be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed; (d) Data to be accurate and, where necessary, kept up to date; inaccurate data should be erased or rectified without delay; (e) Data to be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; (f) Data to be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures. The data controller will be responsible for, and must be able to demonstrate, compliance with these principles as well as accountability.
  • 19. Accountability is the key • Registration abolished • Implement compliant policies and procedures • Data Protection Officer mandatory for public bodies • Privacy by design and by default • Privacy impact assessments
  • 20. Lawful basis for processing In order for Personal Data to be processed lawfully you must be able to satisfy one of the processing conditions below: • 6(1)(a) – Consent of the data subject (must be clear affirmation) • 6(1)(b) – Processing is necessary for the performance of a contract with the data subject or to take steps to enter into a contract • 6(1)(c) – Processing is necessary for compliance with a legal obligation • 6(1)(d) – Processing is necessary to protect the vital interests of a data subject or another person • 6(1)(e) – Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller • 6(1)(f) – Necessary for the purposes of legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject (this last one does not apply to public authorities)
  • 21. Lawful basis for processing special categories In order for special categories of data to be processed lawfully you must be able to satisfy one of the following conditions below: • 9(2)(a) – Explicit consent of the data subject, unless reliance on consent is prohibited by EU or Member State law • 9(2)(b) – Processing is necessary for carrying out obligations under employment, social security or social protection law, or a collective agreement • 9(2)(c) – Processing is necessary to protect the vital interests of a data subject or another individual where the data subject is physically or legally incapable of giving consent • 9(2)(d) – Processing carried out by a not-for-profit body with a political, philosophical, religious or trade union aim provided the processing relates only to members or former members (or those who have regular contact with it in connection with those purposes) and provided there is no disclosure to a third party without consent • 9(2)(e) – Processing relates to personal data manifestly made public by the data subject • 9(2)(f) – Processing is necessary for the establishment, exercise or defence of legal claims or where courts are acting in their judicial capacity
  • 22. Lawful basis for processing special categories 9(2)(g) – Processing is necessary for reasons of substantial public interest on the basis of Union or Member State law which is proportionate to the aim pursued and which contains appropriate safeguards 9(2)(h) – Processing is necessary for the purposes of preventative or occupational medicine, for assessing the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or management of health or social care systems and services on the basis of Union or Member State law or a contract with a health professional 9(2)(i) – -relates to public interest in the area of public health 9(2)(j) – Processing is necessary for archiving purposes in the public interest, or scientific and historical research purposes or statistical purposes in accordance with Article 89(1)
  • 23. Consent and explicit consent • Consent Any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her • Explicit consent • Re-papering consents - recital 171 • ICO draft guidance • Article 29 WP guidance
  • 24. Rights of Data Subjects
  • 25. Rights • Information about processing • Subject access • Rectification • Erasure (right to be forgotten) • Data portability • Objection • Automated decision making and profiling • Restriction
  • 26. Subject Access • Currently 40 day time limit – Reduced to one month under GDPR – Review processes for handling requests • No fee • Supplemental information • Manifestly unfounded or unreasonable requests
  • 28. New responsibilities for Data Processors • Direct legal obligations • Penalties and liabilities – Compensation – Sanctions
  • 29. What do Data Processors need to do? • Have a contract with data controllers • Get data controller’s consent before sub-contracting • Maintain records of processing • Cooperate with ICO • Maintain internal data protection and retention policies
  • 30. What do Data Processors need to do? • Maintain appropriate technical and organisational measures to protect the data • Notify of data breaches • Check privacy practices • Appoint a DPO if required • Check whether any data is sent outside the EEA
  • 32. Data Sharing • Police • Social services • Other local authorities • Education establishments • Health bodies • Government departments • Data Sharing Agreements
  • 33. Article 28 GDPR Processing by a processor must be governed by a contract that is binding on the processor with regard to the controller and that sets out the subject- matter and duration of the processing, the nature and purpose of the processing, the type of personal data, categories of individuals whose data is being processed and the obligations and rights of the controller.
  • 34. Article 28 GDPR • Contracts must stipulate that the processor will: – Process only on documented instructions – Ensure those processing personal data are under a confidentiality obligation – Take all measures required by Article 32 GDPR – Only use sub-processors with controller’s consent – Assist the controller in responding to requests – Assist the controller in complying with obligations relating to security, breach notification, impact assessments and consulting with supervisory authorities – Delete or return all personal data at the end of the agreement – Make available to the controller all information necessary to demonstrate compliance; allow and contribute to audits, and inform the controller if its instructions breach the law
  • 35. Third party relationships • Assess third party relationships • Appropriate contracts and controls • Undertake due diligence and audits
  • 37. Data Protection Officers • You should designate a DPO • Responsible for data protection compliance • Inform and advise the authority • Monitor the implementation and application of the Regulations and the data protection policies • Monitor privacy impact assessments and breaches • Point of contact for ICO
  • 38. Data Protection Officers • Can allocate to role of existing employee as long as duties are compatible with the duties of the DPO and do not lead to conflict of interests • Can appoint the role externally • Can share a DPO • No specified qualifications but must have experience and knowledge of data protection law
  • 39. Data Protection Officers You must ensure that: • The DPO reports to the highest management level of your organisation • The DPO operates independently and is not dismissed or penalised for performing their task • Adequate resources are provided to enable DPOs to meet their GDPR obligations
  • 41. Breach notification • Personal data breach • Controller breach notification – 72 hours – Supervisory Authorities – Affected individuals • Processor breach notification – without undue delay – Controller
  • 42. Sanctions for non-compliance • Supervisory Authorities – Investigative powers – Corrective powers • Penalties – 2% global turnover or €10m – 4% global turnover or €20m • Compensation
  • 44. Compliance culture • Senior leadership level issue • Accountability • Training and awareness
  • 45. Turning the law into practice • Map the law to your processing • Identify key data processing • Identify high-risk processing • Identify gaps • Mitigate the risks
  • 46. The team • Senior leadership level oversight • Legal • Compliance • IT • HR • Marketing/Communications • External advisers
  • 47. The plan • Initiation – Awareness – Buy-in – Budget • Assessment – Mapping – Gap analysis • Remedy
  • 48. Data mapping • Review and record in writing all processing activities • Record any international transfers and mechanism
  • 49. Data mapping • The 5 Ws – Why is personal data processed? – Whose personal data is processed? – What personal data is processed? – When is personal data processed? – Where is personal data processed? • Questionnaire • Produce a risk based report
  • 50. Securing data and information • Assess security risk • Update information security and policy • Maintain security measures
  • 51. What assistance might you require? • End to end GDPR reviews • Scoped assistance • Ad hoc advice • Steering group representation
  • 53. Contact us… Dmitrije Sirovica – 0115 976 6238 dmitrije.sirovica@brownejacobson.com
  • 54. Brexit – ‘The Repeal Bill’ Laura Hughes
  • 55. Where have we got to? • 29 March 2017 - government issues notice to the European Council of the UK's intention to leave the EU under Article 50 of the TEU • 30 March 2017 - government publishes its Repeal Bill White Paper
  • 56. • 21 June 2017 – Queen’s Speech proposes Repeal bill and 7 other Brexit related bills • 13 July 2017 – Repeal Bill introduced and gets first reading in parliament
  • 57. • 7 and 11 September 2017 – Bill passes second reading in Parliament – Ministers' amendments tabled • 19 September 2017 - First Ministers of Wales and Scotland publish joint proposed amendments to the Bill and accompanying statement on devolved legislative consent
  • 58. The 8 Brexit Bills • Repeal Bill • Customs Bill • Trade Bill • Immigration Bill • Fisheries Bill • Agriculture Bill • International Sanctions Bill • Nuclear Safeguards Bill
  • 59. The European Union (Withdrawal) Bill 2017 • Otherwise known as the “Repeal” or the “Great Repeal Bill” • Bill and Explanatory note – Both just over 60 pages long - to deal at least 5,000 regulations directly applicable to the UK • So how does the bill work? ….
  • 60. Clause 1 - Repeal of the ECA 1972 • “Exit day” • End to the ‘supremacy of EU law’ – But note supremacy of retained EU law over other legislation  Clause 5  Clause 2(3), 3(5) and 4(3)
  • 61. Retaining EU Law (1) • EU-derived domestic legislation (clause 2) • Direct EU legislation (clause 3)
  • 62. Retaining EU Law (2) • Treaty rights (clause 4) • But - Exceptions in clause 5 – Supremacy of EU Law – Charter of Fundamental Rights
  • 63. Problems ahead: Clause 4, a decision yet to be made? • Clause 4 – Saving of Rights under s.2(1) of the ECA • But what is actually preserved? – Option 1: Legislation read as UK no longer a member - savings almost entirely inapplicable – Option 2: Legislation read as if UK still a Member - But major issues with reciprocity.
  • 64. Retained EU Law (3) • Retained case law (clause 6) • Retained general principles of EU law (clause 6)
  • 65. Retained EU Law (4) • Interpretation – Status of Post-exit CJEU decisions – Limits to EU law based claims – Pending CJEU cases on exit day
  • 66. Ministerial powers (1) • Henry VIII Clauses (Clause 7) – Power to make regulations in relation to retained EU law where there are:  Failures to operate effectively; or  Deficiencies
  • 67. Ministerial Powers (2) • Delegation of powers to public authorities (clause 7) – Power for PAs to exercise functions of EU authorities – Power to establish new public authorities
  • 68. Devolution • Power to make regulations • Sewel Convention
  • 69. Scottish and Welsh amendments • Jointly published amendments – Ensure devolved policy areas come back to the Scottish Parliament and National Assembly of Wales on withdrawal from the EU. – Prevent UK ministers unilaterally changing the Scotland Act and Government of Wales Act. – Require the agreement of the Scottish Government on necessary changes to current EU law in devolved areas after Brexit. – Ensure additional restrictions are not placed on devolved ministers compared with UK Government ministers.
  • 70. Repeal in practice – Environment • Examples of potential areas of concern – Henry VIII powers to change policy – Underpinning principles – Governance and Enforcing Institutions – Devolved Government
  • 71. Repeal in practice - Farming • What will be dealt with in the Agriculture Bill? • The CAP • Tariffs/Trade • Labour • Devolved issues • Transitional Arrangements
  • 72. Repeal in practice - Health • EU Working time directive • Professional Regulation • Staffing • Reciprocal Healthcare
  • 74. Contact us… Laura Hughes – 0115 976 6582 laura.hughes@brownejacobson.com
  • 75. Admin Law Seminar 4 Oct 2017 Case Study Richard Barlow, Ben Standing and Will Thomas
  • 76. CASE STUDY • The Administrative Affairs Agency • Established by Administrative Affairs Act 2010 • The Agency is introducing a new licensing application system for drones • The Agency proposes to enter into a contract with Super Hightech Innovative Technology PLC • You are asked to advise on the public law issues which impact upon whether or not to execute the contract
  • 77. Issues Arsing from the Case Study • The obligation to consult in relation to public decision- making • The principle of legitimate expectation • The rule against bias or pre-determination • The “duty” to give reasons • The need for the person or body with appropriate authority (either from statutory provisions or through a lawful delegation) to make a public decision
  • 78. Grounds: Consultation • Common ground for judicial review • Government has produced guidance on consultation. This guidance is best practice, not legally binding see: https://www.gov.uk/government/publications/consultation- principles-guidance • However, an express legal duty to consult can exist, for example: – Legislation, e.g. s.5D of the Childcare Act 2006 requires consultation before making changes to provision of children’s centres – Statutory guidance may require consultation: such guidance must be followed unless good reason to depart (R v London Borough of Islington, ex parte Rixon) (1998)
  • 79. Grounds: Consultation • Duty to consult may arise as a matter of fairness or due process – General duty to act fairly, not general duty to consult: “…judicial review is not granted for a mere failure to follow best practice. It has to be shown that the failure to consult amounts to a failure by the local authority to discharge its admitted duty to act fairly.” (R v Devon County Council, ex parte Baker (1992))
  • 80. Grounds: Consultation • Impact of a proposed decision on individuals may give rise to a right to be consulted – R (Dudley MBC) v Secretary of State for Communities (2012) The Secretary of State’s decision fundamentally altered the nature of a previously-made commitment to fund capital projects, and had a significant impact on the local authority. To make the decision without consultation was so unfair as to amount to an abuse of power.
  • 81. Grounds: Consultation • Contrast with: – R (on the application of British Medical Association) v General Medical Council (2008): The GMC abolished without consultation an exemption on the payment of medical register fees for doctors aged over 65. The impact was minimal and the GMC were not acting unfairly
  • 82. Fairness in Consultation R (on the application of Moseley) v Haringey LBC (2014) • Supreme Court reaffirmed the Sedley principles of fair and adequate consultation: – Consultation at formative stage of proposals – Proposer to give sufficient reasons for proposals – Adequate time for consideration and response – Product of consultation to be taken into account
  • 83. Grounds: Fairness in Consultation R (on the application of Moseley) v Haringey LBC (2014) • Previously wide discretion on options on which to consult – No obligation to consult on rejected options • New ingredient: Court in Moseley held that consultees had to be made aware of alternative options and why the Council had rejected them
  • 84. Grounds: Fairness in Consultation • Application of the duty of fairness in consultation cases is “intensely case-sensitive” (R (Rusal) v London Metal Exchange (2014)) • “Judgments are not to be construed as though they were enactments of general application, and the extent to which judicial dicta are a response to the particular factual matrix of the case under consideration must always be borne in mind” (R (Greenpeace Ltd) v Secretary of State for Trade and Industry (2007))
  • 85. Grounds: Fairness in Consultation • Cases since Moseley suggest that the circumstances in which a public body must consult on alternatives are rare • Obligation to provide sufficient information for intelligent consideration • R (Robson) v Salford City Council (2015) – The Court of Appeal held that in Moseley, consultation material conveyed a positively misleading impression. In this case, whilst the material presented an incomplete picture, this did not amount an unfair consultation process.
  • 86. Grounds: Legitimate Expectation • A public authority may, by practice or policy, confer on a person a legitimate expectation that it will act in a certain way • Legitimate expectation can arise from an express or implied representation, consistent past practice or from a policy – Representation must be clear, unambiguous and unqualified
  • 87. Grounds: Legitimate Expectation • Procedural legitimate expectation – Arises where a public authority has “provided an unequivocal assurance, whether by means of an express promise or an established practice, that it will give notice or embark upon consultation before it changes an existing substantive policy” (R (Bhatt Murphy) v Secretary of State for the Home Department (2008))
  • 88. Grounds: Legitimate Expectation • Substantive legitimate expectation – “A substantive legitimate expectation constitutes a specific undertaking, directed at a particular individual or group, by which the relevant policy’s continuance is assured.” Withdrawal would be “conduct equivalent to a breach of contract or representation” (Bhatt Murphy)
  • 89. Grounds: Legitimate Expectation • Small number of cases: Courts acknowledge that it must be open to a public body to change its policies, unless to do so would amount to abuse of power • Substantive procedural expectation recognised in exceptional cases only: – E.g. R v North and East Devon Health Authority ex parte Coughlan (2001): Successful JR brought by chronically ill tetraplegic who had been promised a residential care home was her home for life
  • 90. Grounds: Rule against bias or pre- determination • The modern law of bias and apparent bias was settled in Porter v Magill (2001): – The question is whether the fair-minded observer, having considered the facts, would conclude that there was a real possibility that the ‘tribunal’ was biased
  • 91. Grounds: Rule against bias or pre- determination • Practically, this means a decision-maker should not be ‘a judge in his own cause’ R v Bow Street Metropolitan Stipendary Magistrate, ex parte Pinochet Ungarte (2001) • A decision-maker should declare their interest in and withdraw participation from a decision: – Which will affect a friend or relation – In which they have a financial interest relating to the outcome – Where they are a director of an organisation affected by the outcome of the decision – Where they are a member of a group campaigning for one outcome or another – In which their spouse or civil partner has an interest in the outcome
  • 92. Grounds: Rule against bias or pre- determination • Kelton v Wiltshire Council and others (2015) – Bias was found when a councillor whose vote decided planning permission for a development was a director in a housing association that had an interest in the development
  • 93. Grounds: Rule against bias or pre- determination • Predetermination is also unlawful • R (on the application of Lewis) v Persimmon Homes Teesside Ltd (2008) is the leading case on bias and pre-determination – Mere predisposition will not be enough – Appearances of predetermination created by a councillor voting for a planning project he has long supported are not predetermination – Importance of appearances limited in local government context
  • 94. Grounds: Rule against bias or pre- determination • S.25 of Localism Act 2011 provides that a decision maker must not be taken to have had a closed mind when approaching a decision just because they have previously indicated a view on the relevant matter • S.25 taken with Persimmon, bias and predetermination will rarely be fatal in local government decisions
  • 95. Grounds: ‘Duty’ to give reasons in public decision making • Although there has been an increasing trend in common law for decision-makers to give reasons, the present legal position is there is no general common law duty on public bodies to give reasons R (Hasan) v Secretary of State for Trade and Industry (2008) • However, not giving reasons means that a decision- maker may be much more susceptible to a successful challenge on another ground for review
  • 96. Grounds: ‘Duty’ to give reasons in public decision making • Oakley v South Cambridgeshire DC (2017)- – Affirmed that there is no general obligation to give reasons at common law. – However, there is increasingly a tendency to require them rather than not and it is more accurate to say that the common law was moving to the position that whilst there was no universal obligation to give reasons in all circumstances, in general they should be given unless there was a proper justification for not doing so.
  • 97. Grounds: ‘Duty’ to give reasons in public decision making • There are situations in which a duty to give reasons arises at law • This can be imposed by statute or common law • The common law right to reasons arises when the test set out in R v Higher Education Funding Council Ex parte Institute of Dental Surgery [1994] is met – There is a practical need to know the reasons so an individual can consider an appeal or review – The importance of the decision to the person affected – Whether there is a legitimate expectation as to how the decision-maker should act
  • 98. Grounds: ‘Duty’ to give reasons in public decision making • R (on the application of Hawksworth Securities Plc) v Peterborough City Council [2016] gave details on how reasons should be given: – The standard of reasons to be applied to a local planning authority's decision to grant planning permission was different to the formulation of reasons where a minister or planning inspector was giving a decision on a planning appeal. Where a local authority planning committee gave reasons for a grant of planning permission it needed only to summarise the main reasons for the decision and could do so briefly: it was not required to set out each step in its reasoning, nor indicate which factual matters were accepted or rejected.
  • 99. Grounds: Illegality • Excess of Power (vires) – Outside the limits of jurisdiction or otherwise outside its powers (i.e. ultra vires) • Abuse of Power – Pursuing an objective other than that for which the power to make the decision was conferred • Error of Law • Human Rights Act 1998 • Equality Act 2010
  • 100. Grounds: Illegality • Unauthorised delegation – Where a power is given to someone by statute, it cannot be delegated to someone else unless there are express or implied powers to do so – Carltona Ltd v Commissioners of Works (1943) • Acting: – In bad faith (dishonestly or maliciously); – For an improper purpose (Porter v Magill (2002))
  • 101. Other grounds • Irrationality – ‘Wednesbury Unreasonableness’ is a decision that was not reasonably open to a public body… a decision so unreasonable that no reasonable body would make it Associated Provincial Picture Houses Ltd v Wednesbury Corporation (1943) – All relevant considerations must be considered Anisminic v Foreign Compensation Commission (1969). Irrelevant considerations should not be considered. For example:  Need to get business finished quickly  Assumptions not based on evidence  Personal experience of a different situation  Dislike for the person affected by the decision or what they represent
  • 102. Other grounds • Proper Purpose – A public body must not have ulterior motives or act in bad faith Padfield v Minister of Agriculture, Fisheries and Food (1968) – For example, it must not:  Exercise powers for electoral advantage of a particular party
  • 103. Real world regulation of Drones • Both the EU and the UK are conducting assessments and consultations with a view to introducing new regulation of drones see eg: https://www.gov.uk/government/uploads/syst em/uploads/attachment_data/file/631638/unl ocking-the-uks-high-tech-economy- consultation-on-the-safe-use-of-drones-in-the- uk-government-response.pdf
  • 104. Real world regulation of Drones • As it stands, drones weighing less than 20 kg excluding fuel generally fall within the remit of the Air Navigation Order 2009 as ‘small unmanned aircraft’ (‘SUA’) • SUA do not need to be insured or registered with the Civil Aviation Authority (‘CAA’)
  • 105. Real world regulation of Drones • A person operating an SUA must ‘maintain direct, unaided visual contact with the aircraft sufficient to monitor its flight path in relation to other aircraft, persons, vehicles, vessels and structures for the purpose of avoiding collisions’ • If the SUA weighs over 7 kg excluding fuel- which is relatively uncommon- then it must not be flown in certain airspace without permission from aircraft control • When flown for commercial gain, the person controlling the drone should generally be authorised by the CAA
  • 106. Real world regulation of Drones • If the drone is capable of recording images, it becomes a Small Unmanned Surveillance Aircraft (‘SUSA’) • Without CAA permission, SUSAs must not be flown: – Within 150 metres of any substantially used residential, industrial commercial or recreational area – Within 150 metres of an organised open-air assembly of more than 1000 persons – Within 50 metres of any vessel, vehicle or structure – Within 50 metres of any person • Use of SUSAs or SUAs may also be subject to privacy and trespass actions
  • 108. Contact us… Richard Barlow – 0115 976 6208 richard.barlow@brownejacobson.com Ben Standing – 0115 976 6200 ben.standing@brownejacobson.com Will Thomas – 0115 934 2007 will.thomas@brownejacobson.com
  • 109. All information correct at time of production. The information and opinions expressed within this document are no substitute for full legal advice. It is for guidance only and illustrates the law as at the published date. If in doubt, please telephone us on 0370 270 6000. Š Browne Jacobson LLP 2017 – The information contained within this document is and shall remain the property of Browne Jacobson. This document may not be reproduced without the prior consent of Browne Jacobson.