EU citizens win right to access personal data held by Home Office

Appeal court ruling means people denied settled status or immigration visas can see records used in the case

EU citizens have won the right to get full access to records about them held by the Home Office or any other body after a legal battle by campaigners.

Three judges at the court of appeal unanimously overturned an earlier high court decision that their case had no legal merit and ruled the Data Protection Act 2018 (DPA) unlawfully denied them access to their data through an “immigration exemption” clause.

It brings to an end a three-year challenge by campaign groups the3million and the Open Rights Group.

The ruling means EU citizens who are denied settled status or future immigration visas can have full access to Home Office databases to see records used against them that could include social benefits, entry to the country records, criminal and civil offence records.

Open Rights Group said it was a “momentous day” and lawyers at Leigh Day, which represented the groups, said it would have far-reaching implications for data controllers across the public and private sector including landlords, banks and employers.

The lord justices Underhill, Singh and Warby ruled on Wednesday that the immigration exemption in the DPA was “non-compliant” with the General Data Protection Regulation (GDPR) and the charter of fundamental rights of the EU.

They sided with those who submitted evidence in 2016 that 10% of the Home Office’s database of individuals identified as a “disqualified person” was wrong and that almost half the appeals against their decision before the DPA came into effect were successful.

“The fact that the Home Office deal imperfectly with ‘Windrush generation’ is a matter of common knowledge,” they noted.

The Open Rights Group and the3million had failed in their attempt to overturn the immigration exemption in the DPA in a judicial review in 2018, arguing it undermined their legal right to challenge decisions by the Home Office.

The exemption meant an EU citizen seeking to challenge a decision to refuse settled status or future leave to remain in the UK was automatically handicapped because they did not have access to the records used against them. The Home Office had argued the law was necessary.

But the case lifted the lid on the secretive decision-making processes in the Home Office, with case workers using a “prejudice test” for the “maintenance of effective immigration control”.

The judgment ruled against the Home Office’s consideration that immigration control policies “outweighed the benefits of the individual exercising their data subject rights”.

The judges noted that in the first year of the DPA coming into force, the Home Office relied on the immigration exemption rule in 10,823, or 59%, of cases.

Sahdya Darr, Open Rights Group’s immigration policy manager, said the judges had “recognised that the immigration exemption drives a huge hole through data protection law”. She added that public bodies should be allowed to deny subject access requests only in “exceptional circumstances ... such as during a criminal investigation”.

Maike Bohn, the co-founder of the3million, welcomed the judgment. “As it stands, the exemption from data protection for foreign nationals hands all the cards to unaccountable parties – a recipe for things to go horribly wrong.”

The judges have ruled that further legal argument must follow to establish what remedies must be put in place.

“Winning the appeal means we can hopefully reintroduce much-needed scrutiny so errors and data misuse cannot go undetected,” said Bohn.


Lisa O'Carroll Brexit correspondent

The GuardianTramp

Related Content

Article image
EU citizens lose court challenge over access to Home Office data
Judge rules Data Protection Act clause denying them right to obtain records is not unlawful

Lisa O'Carroll Brexit correspondent

03, Oct, 2019 @11:14 AM

Article image
Home Office apologises for sharing EU citizens' email addresses
Victims of ‘administrative error’ say they are being treated as second-class citizens

Jedidajah Otte

11, Apr, 2019 @9:32 AM

Article image
Home Office suspected of prioritising help for high-profile EU citizens
TV star Fred Sirieix says he got settled status within hours after tweeting his frustration

Amelia Gentleman

03, Sep, 2019 @3:41 PM

Article image
French woman held by Home Office officials at Gatwick for eight hours
Tessa Stines, who has EU settlement claim in progress, detained by Border Force despite rule change

Diane Taylor and Lisa O'Carroll

16, Sep, 2021 @6:31 PM

Article image
Home Office plans to deny immigrants access to data 'are illegal'
Digital rights campaigners threaten legal action if data protection bill clause is enacted

Owen Bowcott Legal affairs correspondent

05, Mar, 2018 @11:58 AM

Article image
Home Office to release information about detainees' access to lawyers
Home Office challenged over failure to ensure all people threatened with removal from UK had access to phones

Diane Taylor

18, Feb, 2020 @5:30 PM

Article image
UK decision to deny EU citizens access to data challenged in court
Lawyers say blocking right to records could lead to Home Office errors going unchecked

Lisa O'Carroll Brexit correspondent

23, Jul, 2019 @3:28 PM

Article image
Data laws could harm EU citizens' attempts to stay in UK, court told
Judge grants hearing of judicial review request after being told millions cannot access records

Owen Bowcott Legal affairs correspondent

17, Jan, 2019 @5:26 PM

Article image
UK citizens to get more rights over personal data under new laws
New legislation will give people right to force online traders and social media to delete personal data and will comply with EU data protection

Rowena Mason Deputy political editor

06, Aug, 2017 @11:01 PM

Article image
Britain could lose access to EU data after series of scandals
Exchange of key security information at risk after Dutch concerns over data protection

Daniel Boffey in Brussels and Martin Beckford in London

27, Jan, 2020 @5:30 AM