Elgizouli v Secretary of State for the Home Department [2020] UKSC 10

The appellant challenged the Home Secretary's decision to provide mutual legal assistance to the United States without obtaining death penalty assurances regarding her son, suspected of terrorism offences in Syria. The Supreme Court unanimously held the decision unlawful under the Data Protection Act 2018, as the Secretary of State failed to address statutory requirements when transferring personal data.

Facts

Shafee El Sheikh, the appellant’s son, was suspected of involvement in horrific terrorist offences in Syria, including beheadings of hostages. He was captured by Syrian Democratic Forces in January 2018. The United States requested mutual legal assistance from the UK for a criminal investigation. The Home Secretary, Sajid Javid, decided in June 2018 to provide evidence to US authorities without obtaining the customary death penalty assurances, departing from longstanding UK policy. This decision was influenced by US pressure and concerns about the prospect of Mr El Sheikh being transferred to Guantanamo Bay.

Background to the Request

The UK had initially sought full death penalty assurances from the US, consistent with established policy. The US offered only a limited ‘direct use’ assurance, which the UK considered inadequate. Following Mr El Sheikh’s capture and pressure from the US administration, the Home Secretary decided to accede to the request without any assurances.

Issues

Two questions were certified by the Divisional Court:

1. Whether it is unlawful at common law for the Secretary of State to provide mutual legal assistance facilitating the imposition of the death penalty in a foreign state.
2. Whether it was lawful under Part 3 of the Data Protection Act 2018 to transfer personal data for use in capital criminal proceedings.

Judgment

Common Law Ground

The court was divided on whether the common law prohibits facilitating the death penalty through mutual legal assistance. Lord Kerr held that such a common law principle should be recognised, drawing on various sources including ECHR jurisprudence, EU law, and evolving standards of decency. However, the majority (Lord Reed, Lord Carnwath, Lady Black, Lord Lloyd-Jones, and Lord Hodge) disagreed, finding no established common law principle extending beyond extradition and deportation cases.

Lord Reed stated:

The development of the law proposed by Lord Kerr does not appear to me to be an incremental step. I do not find in the sources cited by Lord Kerr an established principle, of which a right having the characteristics he describes can be regarded as an incremental development.

Data Protection Act 2018

The court was unanimous that the decision was unlawful under the Data Protection Act 2018. The Home Secretary failed to address his mind to the statutory requirements when processing personal data for transfer to the US. Lady Hale explained:

The short point is that, insofar as the information provided, or to be provided, to the US authorities consisted of personal data (which much of it did) the processing of such data by the Secretary of State as data controller required a conscious, contemporaneous consideration of whether the criteria for such processing were met. ‘Substantial compliance’ with those criteria, as found by the Divisional Court, is not enough.

Lord Carnwath emphasised that section 73 requires ‘conscious and contemporaneous’ consideration of the statutory tests, which did not occur. The transfer could not be justified under the ‘appropriate safeguards’ condition (section 75) given the absence of any safeguards, nor under the ‘special circumstances’ condition (section 76) without proper assessment.

Implications

This case establishes that the Data Protection Act 2018 imposes significant procedural requirements on government decisions to transfer personal data to third countries for law enforcement purposes. Decision-makers must consciously address the statutory criteria, including necessity and appropriate safeguards. The case also highlights potential constraints on transfers where the death penalty may result, given the reference in recital (71) of the Law Enforcement Directive to ensuring data ‘will not be used to request, hand down or execute a death penalty’.

While the common law ground was rejected by the majority, Lord Reed noted that decisions involving the right to life remain subject to ‘anxious scrutiny’ and that aspects of the Secretary of State’s reasoning might have been challenged on rationality grounds if properly argued.

Verdict: Appeal allowed unanimously on the Data Protection Act 2018 ground. The Secretary of State’s decision to provide mutual legal assistance without death penalty assurances was unlawful due to failure to comply with the requirements of the 2018 Act. No further assistance should be given without proper consideration of statutory requirements. The common law ground of appeal was dismissed by the majority.

Source: Elgizouli v Secretary of State for the Home Department [2020] UKSC 10