Enforcing jurisdiction
United Kingdom · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.

The Queen on the application of II (by his mother and Litigation Friend, NK) – Court Ruling (United Kingdom, 2020)

Court Ruling
DPA EWHC16 July 2020United Kingdom
final
Court Ruling

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A UK court ruled that the Metropolitan Police kept a 16-year-old boy's personal data longer than allowed. This happened after concerns were raised about his behavior when he was younger, but the police found no real threat. This ruling emphasizes the importance of deleting personal data when it is no longer necessary.

What happened

The Metropolitan Police unlawfully retained a 16-year-old boy's personal data despite no ongoing concerns.

Who was affected

The boy, who was 11 years old at the time the concerns were raised, and his mother.

What the authority found

The court decided that keeping the boy's personal data violated his right to privacy under the European Convention on Human Rights.

Why this matters

This case highlights the need for companies to regularly review their data retention practices. It shows that keeping personal data without a valid reason can lead to legal consequences.

National Law Articles
AI-identified
Article 8 ECHR
Section 35 UK DPA
Section 37 UK DPA
Section 39 UK DPA
Decision AuthorityEWHC

Source checks

Linked-source text retrieved.

Review needed — 18 March 2026.

Processing notes: articles corrected, national law identified, date discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Claimant in the case is a 16-year-old boy. In December 2015, when he was 11 years old, an online tutor raised certain concerns about his alleged behaviour with the Department for Education. More specifically, on 22 February 2016, the Department for Education's Due Diligence and Counter Extremism Group raised a concern with Counter Terrorism Command of the Metropolitan Police regarding a "radicalisation risk to a pupil" at a school in East London ("the Claimant's former school"). This was a referral pursuant to the Government's "Prevent Strategy", the aim of which is to stop people becoming terrorists or supporting terrorism. In the briefing note, the boy's tutor raised concerns because of the boy's statements about America being evil, obsession with killing the PM, and liking Game of Thrones because of the beheadings. The risk was assessed as being low, and "no concerns or potential concerns were identified". The authorities further noted that "the concerns expressed by the source appear to be a misunderstanding". Despite deletion requests from the Claimant and his mother, the boy's personal data was still retained on ten databases of the authorities. Was the personal data retention by the Metropolitan Police lawful under the ECHR and the 2018 UK Data Protection Act? The UK High Court held that the continued retention of the Claimant's personal data is in breach of Article 8 of the ECHR, as well as Sections 35 and 39 of the Data Protection Act.

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for The Queen on the application of II (by his mother and Litigation Friend, NK) in UK

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

16 July 2020

Authority

DPA EWHC

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. The Queen on the application of II (by his mother and Litigation Friend, NK) - United Kingdom (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: