{"check":null,"uid":"129f6798553b4cf2","title":"Kerry Hindmarch v The Information Commissioner","title_generated":false,"country":"Великобритания","organ":"Суды Англии и Уэльса","kind":"case","kind_name":"Судебная практика","lang":"en","date":"2026-07-20","summary":"Прекратила производство по заявлению гражданина, требовавшего обязать Информационного комиссара по ст. 166(2) Data Protection Act 2018 иначе отработать жалобу на отказ юридической фирмы исполнить запрос субъекта данных. Комиссар 18 мая 2026 года сообщил итог — оснований для вмешательства нет — и 15 июня подтвердил его после внутренней проверки, то есть сделал всё, что мог бы предписать трибунал. Ст. 166 покрывает только процедурные упущения, а не существо решения; по существу спорят через судебный контроль в Административном суде или иском к контролёру по ст. 167 и 169. Заявление исключено по правилу 8(3)(c).","snippet":"","topics":["Персональные данные"],"status":"ok","error":"","text_len":15382,"versions":1,"url":"https://caselaw.nationalarchives.gov.uk/ukftt/grc/2026/1044","first_seen":"2026-08-19","last_checked":"2026-09-17 01:45","relevance":"hit","score":18,"query":"","source_key":"caselaw_uk","verdict":{"relevance":"hit","score":18,"topics":["Персональные данные"],"need_body":3,"authorities":[{"kind":"орган","name":"Information Commissioner","topic":"Персональные данные"},{"kind":"акт","name":"General Data Protection Regulation","topic":"Персональные данные"},{"kind":"акт","name":"GDPR","topic":"Персональные данные"},{"kind":"акт","name":"2016/679","topic":"Персональные данные"},{"kind":"акт","name":"UK GDPR","topic":"Персональные данные"},{"kind":"акт","name":"Data Protection Act 2018","topic":"Персональные данные"}],"evidence":[{"topic":"Персональные данные","term":"data protection","weak":false,"pos":157,"ctx":"тво по заявлению гражданина, требовавшего обязать информационного комиссара по ст. 166(2) data protection act 2018 иначе отработать жалобу на отказ юридической фирмы исполнить запрос субъекта дан","zone":"название","weight":3},{"topic":"Персональные данные","term":"data protection","weak":false,"pos":535,"ctx":"fusal by vincent solicitors limited of the applicant’s subject access request.  dpa:  the data protection act 2018 .  tribunal rules:  the tribunal procedure (first-tier tribunal) (general regula","zone":"текст","weight":1},{"topic":"Персональные данные","term":"gdpr","weak":false,"pos":670,"ctx":"the tribunal procedure (first-tier tribunal) (general regulatory chamber) rules 2009.  uk gdpr:  the general data protection regulation (eu) 2016/679, as it forms part of domestic law","zone":"текст","weight":1},{"topic":"Персональные данные","term":"data protection","weak":false,"pos":689,"ctx":"ure (first-tier tribunal) (general regulatory chamber) rules 2009.  uk gdpr:  the general data protection regulation (eu) 2016/679, as it forms part of domestic law in the united kingdom by virtu","zone":"текст","weight":1},{"topic":"Персональные данные","term":"gdpr","weak":false,"pos":4237,"ctx":"to the commissioner if that individual considers that there is an infringement of the uk gdpr and/or parts 3 or 4 of the dpa in connection with their personal data. section 165 sets o","zone":"текст","weight":1},{"topic":"Персональные данные","term":"personal data","weak":false,"pos":4298,"ctx":"is an infringement of the uk gdpr and/or parts 3 or 4 of the dpa in connection with their personal data. section 165 sets out the position as follows:  “(1)  articles 57(1)(f) and (2) and 77 of","zone":"текст","weight":1},{"topic":"Персональные данные","term":"gdpr","weak":false,"pos":4409,"ctx":"n 165 sets out the position as follows:  “(1)  articles 57(1)(f) and (2) and 77 of the uk gdpr (data subject's right to lodge a complaint) confer rights on data subjects to complain to","zone":"текст","weight":1},{"topic":"Персональные данные","term":"Information Commissioner","weak":false,"pos":22,"ctx":"Kerry Hindmarch v The Information Commissioner Прекратила производство по заявлению гражданина, требовавшего обязать Информационного ком","zone":"орган","weight":3},{"topic":"Персональные данные","term":"General Data Protection Regulation","weak":false,"pos":1345,"ctx":"l Procedure (First-tier Tribunal) (General Regulatory Chamber) Rules 2009.  UK GDPR:  The General Data Protection Regulation (EU) 2016/679, as it forms part of domestic law in the United Kingdom by virtue of sectio","zone":"акт","weight":0},{"topic":"Персональные данные","term":"GDPR","weak":false,"pos":1334,"ctx":"The Tribunal Procedure (First-tier Tribunal) (General Regulatory Chamber) Rules 2009.  UK GDPR:  The General Data Protection Regulation (EU) 2016/679, as it forms part of domestic law","zone":"акт","weight":0},{"topic":"Персональные данные","term":"2016/679","weak":false,"pos":1385,"ctx":"al Regulatory Chamber) Rules 2009.  UK GDPR:  The General Data Protection Regulation (EU) 2016/679, as it forms part of domestic law in the United Kingdom by virtue of section 3 of the Eur","zone":"акт","weight":0},{"topic":"Персональные данные","term":"UK GDPR","weak":false,"pos":1331,"ctx":":  The Tribunal Procedure (First-tier Tribunal) (General Regulatory Chamber) Rules 2009.  UK GDPR:  The General Data Protection Regulation (EU) 2016/679, as it forms part of domestic law","zone":"акт","weight":0},{"topic":"Персональные данные","term":"Data Protection Act 2018","weak":false,"pos":157,"ctx":"тво по заявлению гражданина, требовавшего обязать Информационного комиссара по ст. 166(2) Data Protection Act 2018 иначе отработать жалобу на отказ юридической фирмы исполнить запрос субъекта данных. Коми","zone":"акт","weight":0}],"dropped":[]},"last_changed":"2026-08-19","meta":{"neutralCitation":"[2026] UKFTT 01044 (GRC)","court":"United Kingdom First-tier Tribunal (General Regulatory Chamber)"},"source_url":"https://caselaw.nationalarchives.gov.uk/ukftt/grc/2026/1044","text":"Preliminary matters\n\n1.\n\nIn this\ndecision\n, I use the following terms to denote the meanings shown:\n\nApplicant:\n\nKerry Hindmarch.\n\nApplication:\n\nThe Applicant’s application dated 26 May 2026 (via Form GRC3) for an order by the Tribunal under section 166(2) in respect of the Complaint.\n\nCommissioner:\n\nThe Information Commissioner (the Respondent).\n\nComplaint:\n\nThe Applicant’s complaint to the Commissioner, dated 30 May 2025, concerning the refusal by Vincent Solicitors Limited of the Applicant’s subject access request.\n\nDPA:\n\nThe\nData Protection Act 2018\n.\n\nTribunal Rules:\n\nThe Tribunal Procedure (First-tier Tribunal) (General Regulatory Chamber) Rules 2009.\n\nUK GDPR:\n\nThe General Data Protection Regulation (EU) 2016/679, as it forms part of domestic law in the United Kingdom by virtue of\nsection 3\nof the\nEuropean Union (Withdrawal) Act 2018\n.\n\n2.\n\nUnless the context otherwise requires (or as otherwise expressly stated), references in this decision:\n\na.\n\nto a section are references to the applicable section of the DPA; and\n\nb.\n\nto a Rule are references to the applicable rule of the Tribunal Rules.\n\n3.\n\nNothing I say in this decision should be treated as the Tribunal’s view regarding the merits of the Commissioner’s decision (outcome) in respect of the Complaint. That is not a matter which is within the powers of the Tribunal to determine, for the reasons I refer to below.\n\nSummary of this decision\n\n4.\n\nThis decision relates to the Applicant’s application for an order by the Tribunal under section 166(2).\n\n5.\n\nThe Commissioner made an application to strike out the Application.\n\n6.\n\nPursuant to Rule 8(3)(c), the Tribunal may strike out proceedings if it considers that there is no reasonable prospect of a case succeeding. However, in accordance with Rule 8(4), the Applicant is to be afforded the opportunity to make submissions in relation to any proposed strike out. As noted below, the Applicant has provided such submissions.\n\n7.\n\nHaving considered the relevant evidence and submissions of the parties, I conclude that the Application should be struck out as having no reasonable prospect of success. I set out my reasons below.\n\nThe Application\n\n8.\n\nThe basis of the Application was the Applicant’s view that, in essence, the Commissioner’s statement (in his outcome to the Complaint) that no factors had been identified to suggest significant harm which would warrant intervention from the Commissioner was inaccurate. The Applicant asserted that his was an unjust and ‘suspect’ response from the Commissioner.\n\n9.\n\nFollowing the Commissioner’s strike out application, the Applicant provided their submissions in respect of it, which I have taken into account. In summary, though, it was clear that the Applicant was unhappy with the merits or substance of the outcome to the Complaint. Regarding the Commissioner’s submissions in support of his strike out application, the Applicant stated (in essence) that:\n\na.\n\nthere was much emphasis by the Commissioner on procedural focus, but the matters which were the subject of the Complaint were not procedural in nature but rather concerned “biases and other significant factors”; and\n\nb.\n\nthe Application was not concerned with procedural issues, but rather the reasons behind the data controller’s refusal of the Applicant’s subject access request.\n\nThe Tribunal’s powers and role\n\n10.\n\nThe relevant\npowers\nof the Tribunal are set out in section 166(2) (as supplemented by section 166(3))\n.\nIn summary, the Tribunal is empowered\nto make an order requiring the Commissioner either:\n\na.\n\nto take appropriate steps to respond to an applicable complaint; or\n\nb.\n\nto inform the complainant of the progress on that complaint, or of the outcome of that complaint, within a period which the Tribunal may specify.\n\n11.\n\nHowever, an application under section 166 permits the Tribunal to make any such order only if the Commissioner has failed in some procedural respect, as specified in section 166(1) which is referred to below.\n\nThe\nrelevant statutory framework\n\nThe right to complain to the Commissioner\n\n12.\n\nAn individual (a ‘data subject’) has a right to make a complaint to the Commissioner if that individual considers that there is an infringement of the UK GDPR and/or Parts 3 or 4 of the DPA in connection with their personal data. Section 165 sets out the position as follows:\n\n“(1)\n\nArticles 57(1)(f) and (2) and 77 of the UK GDPR (data subject's right to lodge a complaint) confer rights on data subjects to complain to the Commissioner if the data subject considers that, in connection with personal data relating to him or her, there is an infringement of the UK GDPR.\n\n(2)\n\nA data subject may make a complaint to the Commissioner if the data subject considers that, in connection with personal data relating to him or her, there is an infringement of Part 3 or 4 of\nthis Act\n.\n”.\n\n13.\n\nSo far as is relevant, section 165 then goes on to provide:\n\n“(4)\n\nIf the Commissioner receives a complaint under subsection (2), the Commissioner must—\n\n(a)\n\ntake appropriate steps to respond to the complaint,\n\n(b)\n\ninform the complainant of the outcome of the complaint,\n\n(c)\n\ninform the complainant of the rights under section 166, and\n\n(d)\n\nif asked to do so by the complainant, provide the complainant with further information about how to pursue the complaint.\n\n(5)\n\nThe reference in subsection (4)(a) to taking appropriate steps in response to a complaint includes—\n\n(a)\n\ninvestigating the subject matter of the complaint, to the extent appropriate, and\n\n(b)\n\ninforming the complainant about progress on the complaint...\n”.\n\n14.\n\nIn essence, therefore, section 165(4) requires the Commissioner to take appropriate steps, as well as the specified other actions, when he receives a relevant complaint from an individual. The appropriate steps which the Commissioner must take include (in summary) investigating the complaint and informing the individual about its progress.\n\nThe right to apply to the Tribunal\n\n15.\n\nSection 166 provides individuals with a right to make an application to the Tribunal for an order requiring the Commissioner to take appropriate steps to respond to a relevant complaint, or to inform the individual of the progress on (or outcome of) the complaint, if the Commissioner has failed to take certain procedural actions in relation to it. So far as is relevant, section 166 provides:\n\n“(1)\n\nThis section applies where, after a data subject makes a complaint under section 165 or Article 77 of the UK GDPR, the Commissioner—\n\n(a)\n\nfails to take appropriate steps to respond to the complaint,\n\n(b)\n\nfails to provide the complainant with information about progress on the complaint, or of the outcome of the complaint, before the end of the period of 3 months beginning when the Commissioner received the complaint, or\n\n(c)\n\nif the Commissioner's consideration of the complaint is not concluded during that period, fails to provide the complainant with such information during a subsequent period of 3 months.\n\n(2)\n\nThe Tribunal may, on an application by the data subject, make an order requiring the Commissioner—\n\n(a)\n\nto take appropriate steps to respond to the complaint, or\n\n(b)\n\nto inform the complainant of progress on the complaint, or of the outcome of the complaint, within a period specified in the order.\n\n(3)\n\nAn order under subsection (2)(a) may require the Commissioner—\n\n(a)\n\nto take steps specified in the order;\n\n(b)\n\nto conclude an investigation, or take a specified step, within a period specified in the order.\n”.\n\nDiscussion and findings\n\nThe nature and effect of section 166\n\n16.\n\nI start by addressing the nature and effect of section 166. The Commissioner, in his response to the Application (and his associated strike-out application), referred to various authorities from case law in that regard (in decisions of the Upper Tribunal, the High Court and the Court of Appeal). It is not necessary for me to refer to that case law again in this decision, but I accept the relevance to the Application of the various authorities which the Commissioner referred to.\n\n17.\n\nI consider that it is appropriate, though, to briefly summarise the legal position based on those authorities. In essence (and so far as is relevant for current purposes) the following are the relevant legal principles.\n\n18.\n\nAn application under section 166:\n\na.\n\nis not concerned with the merits of the relevant complaint; and\n\nb.\n\ndoes not provide a right of challenge to the substantive outcome of the Commissioner’s investigation into that complaint.\n\n19.\n\nIn other words, an application under section 166 does not address the merits or substance of a complaint but rather is merely procedural in nature: it is concerned only with procedural actions which the Commissioner is required to take in respect of the complaint.\n\n20.\n\nThe test (in section 166(1)(a)) as to whether the Commissioner has failed “to take appropriate steps to respond to the complaint” is exactly as it says – namely “appropriate steps” and not an ‘appropriate outcome’ (or similar). Likewise, the Tribunal’s powers where the Commissioner has failed to take appropriate steps include making an order that the Commissioner must “take appropriate steps to\nrespond to\nthe complaint” (and not to ‘take appropriate steps to\nresolve\nthe complaint’).\n\n21.\n\nWhere the Commissioner has provided an outcome to a complaint, there may still be some scope for the First-tier Tribunal to make an order under section 166(2). However, in practice, once an outcome has been provided then the First-tier Tribunal will have limited scope to find that an “appropriate step” has been omitted.\n\n22.\n\nIt is also well established that the Tribunal does not undertake an oversight role over the Commissioner’s exercise of his functions or internal processes. In considering an application under section 166, the Tribunal must bear in mind that the Commissioner is the expert regulator and so is in the best position to consider the merits of a complaint and to reach a conclusion as to its outcome. Likewise, the Commissioner has a very broad discretion as to how he investigates complaints. However, whilst the Commissioner’s view carries weight, it is not decisive.\n\nThe Commissioner’s strike-out application\n\n23.\n\nThe Commissioner applied for the Application to be struck out pursuant to Rule 8(2)(a) or Rule 8(3)(c) on the grounds that either the Tribunal has no jurisdiction to consider the Application or that the Application has no reasonable prospect of success.\n\n24.\n\nAs the Application was made pursuant to section 166, seeking an order from the Tribunal pursuant to section 166(2), it follows that I must reject the Commissioner’s argument (in respect of the first ground) that the Tribunal has no jurisdiction to determine the matters before it.\n\n25.\n\nIn respect of the second ground, the Commissioner argued that the Application has no reasonable prospect of success, on the basis that an outcome to the Complaint has been provided by the Commissioner and consequently there is no reasonable prospect of persuading the Tribunal to make an order under section 166(2).\n\n26.\n\nCase law has established the principles to be followed by the Tribunal when considering whether to strike out a case as having no reasonable prospect of success. In essence, the Tribunal must consider whether there is a realistic, as opposed to a fanciful (in the sense of it being entirely without substance), prospect of the case succeeding at a full hearing.\n\nWhether there was a procedural failing by the Commissioner\n\n27.\n\nAs I have noted, section 166 is concerned with providing a remedy for any procedural failings on the part of the Commissioner after a complaint is made to him (not the merits of the complaint or its outcome). The Tribunal may only make an order under section 166(2) only if the Commissioner has failed in some procedural respect.\n\n28.\n\nThe procedural failings in question are those set out in section 166(1), which (in summary and paraphrasing) are as follows:\n\na.\n\nnot taking appropriate steps to respond to the complaint;\n\nb.\n\nnot updating the complainant about progress on, or of the outcome of, the complaint within three months of the Commissioner receiving the complaint;\n\nc.\n\nnot updating the complainant during a subsequent period of three months if the Commissioner has not concluded matters within the first three months.\n\n29.\n\nThe evidence shows that certain steps were taken by the Commissioner, including correspondence with the Applicant regarding the Complaint, and that an outcome to the Complaint was provided by the Commissioner.\n\n30.\n\nAn outcome to the Complaint was provided by the Commissioner by way of letter dated 18 May 2026. The Commissioner stated that it may have been frustrating for the Applicant to not receive a response from the data controller to their subject access request, but concluded that there were no identified factors to suggest significant harm, wider impact, or broader data protection concerns that would warrant intervention from the Commissioner in respect of the Complaint.\n\n31.\n\nAfter further correspondence with the Applicant, the Commissioner also provided written confirmation dated 15 June 2026 (following an internal review) that, in summary, the outcome previously provided was appropriate.\n\n32.\n\nGiven the above, I therefore find that the Commissioner has taken appropriate steps to respond to the Complaint.\n\n33.\n\nIt is important to reiterate that, for the purposes of section 166, the merits or substance of the Complaint are not relevant - but rather only the procedural actions which the Commissioner is required to take in respect of them.\n\nWhether there is a reasonable prospect of the Applicant’s case succeeding\n\n34.\n\nAs I have outlined, the Tribunal’s powers (had the Application been successful) would only extend to making an order for the Commissioner to either take appropriate steps to respond to the Complaint, or to inform the Applicant of progress on (or the outcome of) the Complaint.\n\n35.\n\nThe Commissioner has therefore now done all that the Tribunal could have ordered him to do regarding the Complaint. Consequently\nI find that there is no basis for the Tribunal to make an order under section 166(2) and accordingly that there is no reasonable prospect of the Applicant’s case succeeding.\n\nOther points\n\n36.\n\nI recognise that the matters which are the subject of the Complaint are important to the Applicant and that the Applicant is unhappy with the Commissioner’s conclusions regarding the Complaint. However:\n\na.\n\nif the Applicant wishes to challenge the merits or the substance of the Commissioner’s decision (outcome) in respect of the Complaint, that is not a matter for the Tribunal under section 166 but rather a matter for a judicial review claim in the Administrative Court;\n\nb.\n\nif the Applicant wishes to take action against the data controller in question relating to their personal data rights, again that is not a matter for the Tribunal under section 166 but there are options for the Applicant to pursue civil proceedings under section 167 and section 169.\n\nFinal conclusions\n\n37.\n\nFor the reasons I have given, the proceedings are struck out under Rule 8(3)(c) on the basis that there is no reasonable prospect of the Applicant’s case succeeding.\n\nSigned:\nStephen Roper\nDate: 8 July 2026\n\nJudge of the First-tier Tribunal","changes":[]}