- Enforcing jurisdiction
- United Kingdom · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
The Queen on the application of II (by his mother and Litigation Friend, NK) – Court Ruling (United Kingdom, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A UK court ruled that the Metropolitan Police kept a 16-year-old boy's personal data longer than allowed. This happened after concerns were raised about his behavior when he was younger, but the police found no real threat. This ruling emphasizes the importance of deleting personal data when it is no longer necessary.
What happened
The Metropolitan Police unlawfully retained a 16-year-old boy's personal data despite no ongoing concerns.
Who was affected
The boy, who was 11 years old at the time the concerns were raised, and his mother.
What the authority found
The court decided that keeping the boy's personal data violated his right to privacy under the European Convention on Human Rights.
Why this matters
This case highlights the need for companies to regularly review their data retention practices. It shows that keeping personal data without a valid reason can lead to legal consequences.
Source checks
Linked-source text retrieved.
Review needed — 18 March 2026.
Processing notes: articles corrected, national law identified, date discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Claimant in the case is a 16-year-old boy. In December 2015, when he was 11 years old, an online tutor raised certain concerns about his alleged behaviour with the Department for Education. More specifically, on 22 February 2016, the Department for Education's Due Diligence and Counter Extremism Group raised a concern with Counter Terrorism Command of the Metropolitan Police regarding a "radicalisation risk to a pupil" at a school in East London ("the Claimant's former school"). This was a referral pursuant to the Government's "Prevent Strategy", the aim of which is to stop people becoming terrorists or supporting terrorism. In the briefing note, the boy's tutor raised concerns because of the boy's statements about America being evil, obsession with killing the PM, and liking Game of Thrones because of the beheadings. The risk was assessed as being low, and "no concerns or potential concerns were identified". The authorities further noted that "the concerns expressed by the source appear to be a misunderstanding". Despite deletion requests from the Claimant and his mother, the boy's personal data was still retained on ten databases of the authorities. Was the personal data retention by the Metropolitan Police lawful under the ECHR and the 2018 UK Data Protection Act? The UK High Court held that the continued retention of the Claimant's personal data is in breach of Article 8 of the ECHR, as well as Sections 35 and 39 of the Data Protection Act.
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for The Queen on the application of II (by his mother and Litigation Friend, NK) in UK
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. The Queen on the application of II (by his mother and Litigation Friend, NK) - United Kingdom (2020). Retrieved from cookiefines.eu
Last updated: