Professional Documents
Culture Documents
Table of Contents
I. Introduction
IV. The First Principle: Societal Attitudes to the Information or Activity in Question
VII. Conclusion
Journal Article
Subject
Torts
Keywords
Jurisprudence; Misuse of private information; Privacy; Reasonableness
if reasonable people would think that people should be protected against exposure of the information or activity at issue. The
second principle asks what signals the claimant gave that he or she regarded the information or activity as private and whether
social norms would usually require such privacy signals to be respected. These principles operate as two alternative, but usually
mutually reinforcing, routes to the same destination, i.e. establishing a prima facie actionable privacy interest.
By uncovering these principles for the first time, this article seeks to recalibrate our understanding of the legal privacy interest.
The first aim in doing this is to bring more certainty to the application of the reasonable expectation of privacy test. Courts should
not feel moved, as the English Court of Appeal recently did, to express "sympathy" with the view that the private information
tests "are too vague and uncertain of application for an editor to know with a reasonable degree of confidence whether it is safe
to publish". Nor should they say that the "the guidance to be derived from the case law has only limited value". 1 The action
need not be this amorphous. Secondly, the articulation of the claimant-focused signals principle aims to return consideration
of the claimant’s own behaviour in respect of the information or activity to the heart of the enquiry into what is and is not
private. This principle not only reflects the subjective elements of the privacy interest, but also highlights the ongoing relevance
of breach of confidence principles, particularly those recognising the importance of the circumstances in which information
is imparted. It also gives coherence to many apparently disparate *L.Q.R. 652 factors which bear on the application of the
reasonable expectation of privacy test including the claimant’s location, the treatment of children, surreptitious observation and
the degree of knowledge required.
The article is developed in four main stages. It begins by making two preliminary points about how the reasonable expectation
of privacy test works: first, that that test entails a normative enquiry focusing on what "privacy protection" the claimant deserves
and secondly, that reasonable expectations of privacy are significantly affected by context. The two new principles are then
discussed in detail. The article concludes by showing how the two principles can work together to provide an intuitive and
predictable conceptual framework for applying the reasonable expectation of privacy test.
"As we see it, the question whether there is a reasonable expectation of privacy is a broad one, which takes account of all
the circumstances of the case. They include the attributes of the claimant, the nature of the activity in which the claimant was
engaged, the place at which it was happening, the nature and purpose of the intrusion, the absence of consent and whether it
was known or could be inferred, the effect on the claimant and the circumstances in which and the purposes for which the
information came into the hands of the publisher."
Other factors, including the form in which the information was stored, the way it was communicated, and whether the claimant
courted publicity, can also be considered. *L.Q.R. 653 5
This article starts from the position that the reasonable expectation of privacy test is essentially a good one. The concept of
"reasonable expectation" recognises the subjective nature of the privacy interest (the expectation part) whilst at the same time
imposing an objective check (the reasonableness part). 6 Courts are also right, in this author’s view, to recognise that a wide
range of factors can bear on the scope of a claimant’s reasonable expectation of privacy including some factors which other
authors would argue belong in the second stage of privacy enquiry. The framework set out in this article therefore envisages
a more limited role for the second part of the misuse of private information action than scholars, like Eric Barendt, who argue
that courts should define privacy expansively and then rely on exceptions or the balance with competing interests to weed out
unmeritorious claims.7 Finally, the article starts from the premise that the courts in Murray and other cases have generally
identified an appropriate set of factors to guide the application of the reasonable expectation of privacy test. There are, however,
two exceptions. To the extent that they are asking whether there is a public interest in the claimant’s activity, the enquiries
into "attributes of the claimant" and "purpose of the intrusion" should be dealt with when courts consider the public interest
defence.8 Factors such as the claimant’s location, the nature of the activity, the absence of consent, and courting publicity are,
however, highly relevant to the reasonable expectation of privacy enquiry.
It follows that the reasonable expectation of privacy test is not a factual question about what potential privacy-infringers can or
usually do in the situation in question. Courts in other jurisdictions have, however, interpreted it in this way. For example, in
Schulman v W Productions Ltd the Californian Supreme Court held that the claimant could not have had a reasonable expectation
that members of the media would be excluded or prevented from photographing her as she was attended by paramedics at
the scene of a serious road accident because "for journalists to attend and record the scenes of accidents and rescues is in no
way unusual or unexpected". 13 In contrast, the claimant did have an objectively reasonable expectation of privacy in respect
of conversations conducted inside a rescue helicopter because the court was "aware of no law or custom permitting the press
to ride in ambulances or enter hospital rooms during treatment without the patient’s consent". 14 In other words, whether the
claimant had an objectively reasonable expectation of privacy depended not on whether the defendant’s conduct was acceptable
but on whether the media usually respected an individual’s privacy in the situations in question. Hints of this type of reasoning
can also be seen in English privacy decisions. For example, in Kinloch v HM Advocate , Lord Hope of Craighead observed
in obiter dicta that a person has to:
"expect to be the subject of monitoring on closed circuit television in public areas where he may go, as it is a familiar feature
in places that the public frequent". 15
In other words, because CCTV filming has become common, people cannot expect to be free from it.
It is regrettable that it is not clear on the face of the English reasonable expectation of privacy test that it is not supposed to
be applied in this way. Clearly, it should not be the case that once an intrusive practice becomes sufficiently widespread to be
"in no way unusual or unexpected" (be it videoing people in ambulances, watching people with CCTV cameras, or bugging
Narcotics *L.Q.R. 655 Anonymous meetings) then all rights of privacy in respect of it are automatically lost.16 If it were,
defendants themselves would set the parameters of the legal privacy interest. As courts have made clear, this is not the position
in the English misuse of private information action—rather the focus is on what a person should be entitled to expect in the
circumstances in question.
A simple change to the formulation of the reasonable expectation of privacy test would make this clearer. If courts were to add
the word "protection" to the end of the test—so that the question became whether the claimant had a reasonable expectation
of privacy protection —then the epithet itself would make it clear that the question is whether the claimant was entitled to
expect his or her privacy to be protected in the situation in question. There is Supreme Court support for this approach. In
JR38 , that court considered whether the police breached the art.8 right to respect for private life of a 14-year-old boy by
publishing photographs of him allegedly involved in a riot. Although the minority did not agree that the claimant had to establish
a reasonable expectation of privacy before art.8 would be engaged,17 all five judges agreed that the reasonable expectation
test is about the claimant’s entitlement to privacy protection. For example, Lord Kerr regarded the test as being about "what is
reasonable to expect as to protection of his or her privacy"; Lord Wilson said he could not think of a situation where art.8 would
be engaged absent a "reasonable expectation of privacy or a reasonable expectation of protection and respect for private life";
and Lord Toulson (with whom Lord Clarke concurred on this point) said that he regarded the questions of whether the claimant
had a "reasonable expectation of privacy" or "legitimate expectation of protection" as "synonymous". 18 The test should be
amended to reflect this focus on whether the claimant is entitled to be protected against the defendant’s alleged privacy intrusion.
The epithet "reasonable expectation of privacy protection" will therefore be used, when appropriate, in the rest of this article.
Finally, and relatedly, it should be stressed that a claimant seeking to establish a reasonable expectation of privacy (or of privacy
protection) does not need to establish that he or she had an actual expectation that his or her privacy would be respected in the
situation in question. As Barendt has pointed out, the claimant might not have turned his or her mind to the question or be too
young to have an *L.Q.R. 656 opinion on the matter.19 If, as is being argued here, the reasonable expectation of privacy test
is a normative enquiry into what privacy protection a claimant is entitled to then the claimant’s contemporaneous expectations
should not be determinative. Rather courts should be concerned with whether, at the time of the hearing, the claimant is entitled
to expect society, acting through the law, to step in to protect his or her privacy interests. This does not necessarily depend on
what the claimant was or was not thinking about at the time of the alleged intrusion.
Many of the factors which the Court of Appeal in Murray identified as bearing on a claimant’s reasonable expectation of
privacy—including the "nature and purpose of the intrusion", "the attributes of the claimant" and the "circumstances in which
and the purposes for which the information came into the hands of the publisher"—direct courts towards this detailed contextual
enquiry into the exact *L.Q.R. 657 nature of the claimant’s objection. As Lord Sumption said in the HRA context, in R. (on
the application of Catt) v Commissioner of Police of the Metropolis , the question is whether the claimant had a "reasonable
expectation in the relevant respect". 23
All this means that, although it is useful to use the epithet "reasonable expectation of privacy" (or "reasonable expectation
of privacy protection") to describe the test applied in misuse of private information cases, what courts are actually asking in
any given case is whether the claimant had a reasonable expectation that he or she would be protected against the particular
exposure which occurred in that case. They do not simply ask, then, whether a claimant has a reasonable expectation of privacy
protection in respect of his or her sexual life but whether the claimant has a reasonable expectation of privacy not to have
photographs of him or her engaging in intimate sexual activity uploaded to the internet. And the question is not just whether
health information is private but whether disclosure of, say, one’s battle with depression should have been disclosed to one’s
employer. It is unsurprising in light of this that courts in privacy cases almost always begin their analysis with a detailed
articulation of what exactly happened, how the information or material in question was acquired, the circumstances in which
it was published or communicated, the impact on the claimant and such like.24 All of this information is essential to their
assessment of whether reasonable people would expect the claimant’s privacy to be legally protected in the circumstances.
IV. The First Principle: Societal Attitudes to the Information or Activity in Question
So, how should this contextual, normative enquiry into the claimant’s reasonable expectation of privacy protection be applied?
As outlined above, there are two inter-related ways of showing that information or an activity is private for the purposes of the
misuse of private information action. The claimant-focused route, which examines the signals the claimant used to communicate
that he or she regarded the information or activity as private will be discussed below. This section is about the society-focused
route to satisfying the test. This part of the framework focuses on societal attitudes to the activity or information in question; on
whether reasonable people would regard the matter as private vis-à-vis those to whom it was exposed. Although both parts of
the framework are designed to reflect social mores about when information should be private, it is the first route which examines
what reasonable people would think about the information or activity in question in general whilst the second route explores
social mores in respect of the privacy signals which the claimant relied on. *L.Q.R. 658 25
Although courts have yet to articulate this societal-attitudes principle expressly, Eady J. neatly summarised its application in
X & Y v Persons Unknown when he asked, in the course of applying the reasonable expectation of privacy test, whether the
case concerned "the sort of information which most people would reasonably expect to be able to keep to themselves". 26 The
significance of the nature of the information or the activity in question to the reasonable expectation of privacy enquiry has
also been recognised in numerous other cases. These include Hutcheson (formerly known as KGM) v News Group Newspapers
Ltd where the Court of Appeal said "the nature of the information requires careful consideration"27 and Murray , in which
"the nature of the activity in which the claimant was engaged" was included on the list of factors which bear on reasonable
expectations of privacy.28 Societal attitudes to the revelation of the information or activity at issue have also clearly borne
on courts’ attempts to identify particular types of information or activities which are "obviously" or "inherently" private.29 In
Campbell , for example, Baroness Hale of Richmond stressed that the defendant’s disclosures related to the claimant’s "health
and treatment for ill-health", a type of information which "has always been accepted … is both private and confidential". 30
Lord Hope also cited with approval Gleeson C.J.’s suggestion in the Australian High Court that some types of information or
activity can be recognised as private by reference to contemporary moral standards:
"Certain kinds of information about a person, such as information relating to health, personal relationships, or finances, may
be easy to identify as private; as may certain kinds of activity, which a reasonable person, applying contemporary standards of
morals and behaviour, would understand to be meant to be unobserved." 31
European Court of Human Rights judgments on the scope of the art.8 right to respect for private life also feed into this social
normative perspective. For example, Baroness Hale referred to ECtHR judgments in support of her above-mentioned conclusion
in Campbell that health information is private32 and the Court of Appeal in Weller , having observed that the "starting point" for
analysis was where the activity depicted in the photograph happened and the nature of the activity, stressed that: *L.Q.R. 659
"it was a family activity which belongs to that part of life which is protected by the broader right of personal autonomy recognised
in the case law of the Strasbourg court". 33
So, although the societal-attitudes principle itself has not yet been articulated, the reasoning which underpins it is widely
accepted and uncontroversial. Indeed, it seems obvious that once an action for breach of privacy has been recognised it should
reflect social mores about what should and should not be regarded as private. As Tipping J. said in the leading New Zealand
case of Hosking v Runting, the word "reasonableness" plainly imports into the reasonable expectation of privacy test an enquiry
into "contemporary societal values" in respect of the matter at hand.34 And it is intuitively right that a claimant should be held
to have a reasonable expectation of privacy if most reasonable people would agree that the matter was private in the particular
circumstances of the case.
Courts’ attempts to identify categories of information or activities which reasonable people usually regard as private inform
the operation of this societal-attitudes principle. Although the subjective nature of the privacy interest makes it problematic to
rely on categories when looking for a theoretical definition of the privacy interest,35 at a doctrinal level categories can provide
readily-understandable guidance about the sorts of information or activity that reasonable people are likely to regard as private.36
This in turn enhances predictability, especially once (as in England and Wales) there is a significant body of case law suggesting
what the categories might be. Detailed discussion of the content of these categories of probably-private information or activities
will not be undertaken in this article, the main aim of which is rather to show how claimant-focused principles fit into a wider
framework for determining when there is a reasonable expectation of privacy. It can be said, however, that seven categories
of usually-private information or activity can be identified from within existing misuse of private information case law. They
arise where information or activities relate to: (i) the appearance or workings of the physical body (including matters relating
to health, bodily functions, and nakedness); (ii) to sexual encounters or activity; (iii) to the intimate details of one’s personal
relationships; (iv) to the intimacies of one’s family and/or domestic life; (v) to the experience of trauma, grief or strong emotion;
(vi) to the inner workings of one’s mind (including strong emotion and the content of fears, fantasies, dreams); and (vii) to
detailed patterns of one’s daily life (as would be observed, for example, as a result of systematic surveillance). 37 A matter
which falls within one of these categories will—subject *L.Q.R. 660 to the point made above about needing to factor in the
exact nature and extent of the observation, disclosure or exposure—be more likely to be regarded by most reasonable people as
private and hence to satisfy this first route to establishing a reasonable expectation of privacy protection. And the more squarely
a matter relates to the core interest the category is designed to protect or the more categories to which it squarely relates, the
more strongly social mores will support this conclusion.
It should be briefly noted, however, that if categorisation is going to be an effective means of determining what society usually
regards as private, it needs to be approached carefully. In particular, courts need to articulate clearly the interest at the heart of
each category of probably-private information; they need to set out clearly the reasons why the information or activities in each
of the categories are usually considered private. Consider, for example, the category relating to the appearance or workings
of the physical body, i.e. matters relating to health, nakedness, or bodily functions. Given that the body is involved in most
human activities, there are numerous things which could potentially be said to fall within this category including, for example,
one’s appearance as one walks down the street or the fact that one has a cold. But, as Daniel Solove suggests, this part of
the privacy interest is really about the "primal aspects" of individuals’ lives, i.e. matters that are "physical, instinctual, and
necessary" and which cause embarrassment and humiliation if exposed.38 Once this is recognised, it becomes plain that only
"primal" or "mechanical" bodily functions like toileting, physical trauma and injury, nudity, sex or the mechanical workings of
the body should fall into the "physical body" category. It then, in turn, becomes clear that one’s appearance as one walks down
the street or the fact that one has a cold does not fit into the physical body category at all. Therefore, disclosure of those matters
is unlikely to satisfy the societal-attitudes route to establishing a reasonable expectation of privacy protection.39 Categories,
whilst useful then, need to be approached with care.
To begin with theoretical conceptions of privacy, this focus on the claimant’s own privacy-seeking signals is consistent with the
widely-accepted idea that privacy is at its heart a subjective interest; that "private" means different things to different people.
I might be quite happy to blog about matters—my medical history, finances or relationships—which you would not tell even
your closest friends. Privacy theorists have consistently recognised this, often defining privacy in terms of an individual’s own
control over, choice about or desire for access.41 Privacy is therefore seen as the "ability to control who has access to us and
to information about us" or "freedom from unwanted access" rather than as a right to be protected against access to specified
types of information or activity.42
People communicate their subjective choices about which aspects of themselves they wish to keep private though the use of
signals or "barriers". As Kirsty Hughes argues (drawing on the work of sociologist Irving Altman and philosopher Samuel
Rickless), these barriers include physical and behavioural signals that access is not welcome:
"Physical barriers include things such as walls, doors, hedges, lockers and safes. Behavioural barriers are means by which
we seek to communicate to others that we do not want them to access us. They may include verbal or non-verbal forms of
communication: we may tell others that we want privacy; or we may use our body language to communicate this desire, for
example by turning our bodies away from others. Thus, physical and behavioural barriers are means by which we can seek
privacy." 43
In other words, physical and behavioural signals are the means by which we communicate to others the subjective choices
outlined above. These privacy signals *L.Q.R. 662 need not necessarily involve physical interventions like encryption,
clothing, walls or keys. They can be as subtle as a turned back or a hushed voice or as physically ineffectual as a scant bush
or a hand put up against a photographer. Nor does it matter that the claimant did not use every privacy-enhancing measure
which might have been available to him or her. A colleague who picks up your mobile phone is not at liberty to trawl through
your messages and photographs simply because you do not have them password protected; the act of storing the material on
a private device is signal enough that it was not intended for his or her observation. That said, the fact that someone wants
something to be private does not automatically make it legally, or even morally, so;44 this article is about the wide range of
considerations courts have to take into account when determining whether or not that is the case. Social mores dictate, however,
that our physical or behavioural signals be respected most of the time.45 For example, it is unacceptable in contemporary British
society—often criminally so—to hack into someone’s emails, film over a cubicle wall, install a bugging device in a bedroom
or break into someone’s home.46
"a duty of confidence arises when confidential information comes to the knowledge of a person (the confidant) in circumstances
where he has notice, or is held to have agreed, that the information is confidential, with the effect that it would be just in all the
circumstances that he should be precluded from disclosing the information to others."
This requirement in turn brought into consideration the signals that the claimant gave about how he or she regarded the
information. For example, in Creation Records v News Group Newspapers Ltd 48 and Shelley Films Ltd v Rex Features Ltd
,49 the defendants were liable for taking unauthorised photographs of a photograph shoot and film set respectively (even in the
absence of a pre-existing *L.Q.R. 663 relationship) because signage and tight security made it clear that photography was not
permitted. In other words, the fact that the claimant made it clear that photography was unwelcome helped create an obligation
of confidence in respect of it. This is consistent with the Court of Appeal’s statement in the more recent case of Tchenguiz v
Imerman that the "essence" of the confidentiality right is the ability to:
"choose whether, and, if so, to whom and in what circumstances and on what terms, to reveal the information which has the
protection of confidence". 50
This focus on the defendant’s knowledge of the claimant’s privacy choices has been carried into the misuse of private information
action. Thus, in a passage typical of early formulations of the privacy action, Brooke L.J. said about publication of unauthorised
photographs of the claimants’ wedding in Douglas v Hello! :51
"if on some private occasion the prospective claimants make it clear, expressly or impliedly, that no photographic images are
to be taken of them, then all those who are present will be bound by the obligations of confidence created by their knowledge
(or imputed knowledge) of this restriction."
Courts since then have also stressed the desirability of consistency between the breach of confidence and privacy actions and the
continued relevance of traditional breach of confidence factors to the reasonable expectation of privacy enquiry.52 This means
that, if concern about signals forms part of the breach of confidence action, it will also inform development of the privacy tort.
Consistently with that, the Court of Appeal said in Associated Newspapers Ltd v HRH Prince of Wales :53
"It is not easy in this case, as in many others, when concluding that information is private to identify the extent to which this
is because of the nature of the information, the form in which it is conveyed and the fact that the person disclosing it was in
a confidential relationship with the person to whom it relates. Usually, as here, these factors form an interdependent amalgam
of circumstances."
In modern case law, the privacy signals principle underpins two of the factors identified in Murray , "the absence of consent
and whether it was known or could be inferred" and "the circumstances in which the information came into the hands of the
publisher". 54 In the first instance decision in Weller , Dingemans J. held—echoing the language of the early misuse of private
information cases—that *L.Q.R. 664 these two factors made it important to know what the publishers knew, or ought to have
known, about the claimant’s father’s objection to the fact that someone was taking photographs of his children.55 The Court of
Appeal agreed that when it came to the publication of photographs of children, the parents’ "lack of consent, if it was known
to the publishers, will carry particular weight". 56 What the claimant knew about the defendant’s wishes was therefore seen as
central to the application of these factors.
Courts have also recognised the importance of privacy signals in cases concerning the courting of publicity. Although courts now
rarely ascribe to the view that voluntarily publicising one aspect of one’s private life gives others a carte blanche to report on
any aspect of that zone of life in the future,57 the claimant’s own behaviour is still relevant to his or her reasonable expectations
of privacy protection. In particular, the fact that the public figure has declined to court publicity about his or her private or
family life can strengthen his or her claim to a reasonable expectation of privacy protection. Thus, in McKennitt v Ash , the
Court of Appeal said that the first instance judge "rightly" saw as a matter of "great importance" the fact that the claimant had,
unusually for a well-known singer, guarded her privacy very carefully.58 The fact that the parents had not "courted publicity"
for the children photographed in Weller and Murray also weighed in favour of a reasonable expectation of privacy in the
circumstances in question.59 Conversely, in AAA v Associated Newspapers Ltd , the same court held that the fact that the infant
claimant’s mother was willing to reveal to strangers the identity of the child’s father (a prominent married politician), to allow
others publicly to "entertain speculation" about it and generally to display "ambivalence" about the secrecy of the information
meant that the claimant’s reasonable expectation of privacy in respect of that information was weakened.60 Thus, as was said
in Hutcheson (formerly known as KGM) v News Group Ltd , the "claimant’s own attitude towards the maintaining of privacy
or secrecy and the importance he seems to attach to it" is an important factor in determining whether he or she has a reasonable
expectation of privacy.61 Privacy signals, then, matter.
This new privacy-signals principle provides a conceptual rationale for many of the factors which courts routinely take into
account when ascertaining a claimant’s privacy interests. This section will show that, in addition to those discussed above, these
include the claimant’s location, his or her age, the way information is communicated or stored, surreptitiousness on the part of
the defendant, and the extent of the defendant’s knowledge about the claimant’s expectations. The principle also explains how
those factors should be developed in future cases. The signals principle, therefore, has considerable explanatory power.
i) Location
The place where an activity occurs has consistently been held to be of central importance by courts considering whether a
claimant has a reasonable expectation of privacy in the misuse of private information case law. In Murray , for example, Sir
Anthony Clarke M.R. specifically identified "the place at which [the claimant’s activity] was happening" as a factor contributing
to whether the claimant has a reasonable expectation of privacy. In numerous other cases courts have stressed, on the one
hand, the limited privacy expectations usually enjoyed in public places63 and on the other, the "the traditional sanctity accorded
to hearth and home". 64 The privacy signals principle—the idea that a reasonable expectation of privacy protection can be
established by the signals that he or she gave about whether access was welcome—helps explain why this factor looms so large
in the privacy case law.
The courts’ approach to different types of location is often expressed in terms of retreat (when talking about protected spaces) or
the voluntary acceptance of scrutiny (when talking about public space). For example, Thomas J. explained in the New Zealand
Supreme Court case of Brooker v Police:65
"The home is a place where the well-being of the occupants can be nurtured and protected and the peace and quiet provided
within the four outer walls (or fences) enjoyed by the occupants without unwanted intrusions. It provides its occupants with a
sanctuary, a place to retreat or repair to in order to escape from the tensions and tribulations of the daily world. *L.Q.R. 666 "
This echoes reference to the "sanctity" of the home in McKennitt v Ash 66 and the language of early privacy case Prince
Albert v Strange , in which Knight Bruce V-C described the home as "a word hitherto sacred among us". 67 In contrast, when
courts discuss the reduced privacy rights people enjoy in public places they often use the language of agreement or assent. For
example, in a passage often cited by English courts, the ECtHR held in PG v United Kingdom that there are "occasions when
people knowingly or intentionally involve themselves in activities which are or may be recorded or reported in a public manner"
and that this in turn will affect their reasonable expectations of privacy.68 Similarly, in Campbell , Lord Hoffmann said that
people who go out in public must "accept" that they might be seen or photographed without their consent.69 This, he says, is
"[p]art of the price we pay for living in an organised society". 70
These are examples of the privacy signals principle at play. The fact that an activity is conducted in a particular place, these
courts say, sends a signal about how the claimant feels—or should feel—about others observing it. If we engage in an activity
in a public place knowing that it is likely to be seen and/or recorded by others, we accept—and therefore implicitly signal to
others—that observation or recording of it is acceptable. When we go into our homes, toilet cubicles or changing rooms, we
signal the opposite. These are well-known places of retreat—zones where we can disrobe, engage in bodily functions, drop the
mask—and by entering them we strongly signal that we do not want uninvited outsiders to follow us. Our location therefore
has embedded within it strong behavioural and/or physical signals about how we feel about outside access.
Seeing location in this way (i.e. as a manifestation of individual choice about access) helps us to understand the role that this
factor should play when determining whether a claimant has a reasonable expectation of privacy protection. First, it explains
why what happens in an inaccessible place will be private even if it is not particularly intimate or interesting. I am not allowed
to film you in your bedroom even if you are just sitting reading a book because your location sends a strong socially-sanctioned
message my observation is unwelcome. Secondly, the privacy-signals principle helps show that "public" and "private" should
not be all-or-nothing concepts. Instead, there are degrees of public; the degrees being determined in part by the signals the
claimant gave about whether he or she wanted to be the subject of the defendant’s attention including through body language,
manner of dress, behaviour, and the precise nature of his or her "public" location. *L.Q.R. 667 71
Thirdly, the signals principle highlights the importance of considering voluntariness in our assessment of location. If, as the
courts suggest, the right of others to observe or record what a person does in public is predicated on the claimant’s assumed
assent to observation, then a different approach is needed if the claimant was unwillingly forced to experience something that
would usually be regarded as private in that space. It is difficult to argue that a person who is filmed after being struck by a car,
suffering a heart attack or having his or her clothes blown off by a terrorist bomb (all leading to the revelation of things which
would usually be private) has implicitly consented to the dissemination of images simply by virtue of entering public space. On
the contrary, courts have often recognised that people in these situations are entitled to legal privacy protection.72
The signals principle—and the need for voluntariness which flows from it—helps explain why this is so. Take the example of
two spectators at a televised cricket match. The first spectator is filmed voluntarily streaking semi-naked across the pitch during
play whilst the second is filmed at the same event semi-naked after she collapsed and had her clothes removed by paramedics.
The first woman has sent a clear signal to the world that she is happy for her body to be seen and as a result, is unlikely to have
a reasonable expectation of privacy protection in respect of broadcast of the footage (matters of decency aside). The second
woman has sent no such message. The exposure of her body was the unfortunate consequence of health trauma that was beyond
her control. It follows that even though both incidents occurred at the same place and involved similar levels of exposure of the
body, the second woman would have a reasonable expectation of privacy protection where the first would not. In the case of
the first woman, the public nakedness was the manifestation of a choice she had made about the exposure of her body; in the
second, it was not. The signals principle helps show then why the two women need to be treated differently.
Once all of this is recognised—i.e. that because location is a signal about one’s openness to access by others, courts need
carefully to consider issues of voluntariness—it becomes clear that questions need to be asked about how far distinctions based
on voluntariness should extend. It is arguable, for example, that the protection accorded to a claimant who suffers a sudden
shock or trauma in public should also extend to claimants who retain their decision-making capacity but in reality have no
real choice but to do something intimate or traumatic in public. It is difficult to argue, for example, that a person who enters
public space to attend a funeral, a fertility clinic or to access mental health services is—by virtue of his or her public location
—voluntarily accepting widespread scrutiny of his or her health or emotional state. Privacy protection should perhaps also
extend to claimants who clearly fail to appreciate the public nature of their environment. Leaving aside questions about the
defendant’s knowledge (discussed below), it is difficult to argue that a couple who, say, engage in sexual activity under the
evidently mistaken impression that no-one could see through a mirror-glass window *L.Q.R. 668 at night time are, by virtue
of their "public" location, signalling that a person can upload pictures of that activity on to the internet.73
It is striking that all of these special considerations relate in some way to the child claimant’s inability to form or signal a
desire for privacy. They are too young, say the courts, to form a view about inaccessibility, too young to understand or protect
themselves against potential privacy loss in public places, and too young to give or withhold consent to publicity. In other words,
because children are unable to use physical and behavioural signals to protect themselves, the court steps in to do it for them.
This says two things about the application of the privacy signals principle. First, the fact that the child claimant’s inability to
use physical and behavioural privacy signals requires a recalibration of the reasonable expectation of privacy protection test
reinforces the importance such signals usually have in the application of that test. The reason that a new approach is needed
when children go into public, for example, is because usually going into public is taken as a signal from the claimant that
external observation is acceptable. Secondly, recognising that cases involving children are a manifestation of a broader privacy
*L.Q.R. 669 signals principle helps us to see how the reasoning from those cases should be applied in comparable situations.
In particular, once it is recognised that the special position of children rests on their lack of capacity to form or signal privacy
desires, it becomes obvious that similar protection should be accorded to those who lack that decision-making capacity for
other reasons. People who are unable to form or signal their views about privacy because they are, say, unconscious, severely
mentally impaired or suffering severe emotional or physical trauma, should enjoy similar protections.80
was actionable irrespective of the subject matter of the messages.82 This echoes the Court of Appeal’s conclusion in Associated
Newspapers Ltd v HRH Prince of Wales that the fact that the material in question was contained in a journal written in the
Prince’s "own hand" and only seen by people who had been expressly told that they were personal and confidential made it
"perfectly obvious" that the information was both private and confidential.83
This is another example of the signals principle in operation. These dicta make it clear that irrespective of its precise subject
matter, information can be private because of the way it is stored; because of the way the claimant treated it. By storing or
transmitting material in a diary, on a personal digital device or on an inaccessible messaging system, the individual sends a clear
socially-endorsed signal that it is not for public consumption. Ignoring the signals, the courts say, is unacceptable.
Courts have made it clear that this dislike of surreptitious filming is based on the fact that the subject is deliberately prevented
from taking steps to avoid the camera’s gaze. In R. v Broadcasting Standards Commission Ex p. British Broadcasting
Corporation , for example, Lord Woolf M.R. said that clandestine filming in the public area of an electronic goods store could
add an "additional ingredient" to a privacy claim under broadcasting standards regulation because it "prevents those who are
being filmed from taking any action to prevent what they are doing being filmed". 87 This reasoning is entirely consistent
with the privacy signals principle. If, as is being argued here, privacy signals provide one of two key routes to establishing a
reasonable expectation of privacy protection, it follows that hiding the fact that observation is occurring—and hence that such
privacy signals are necessary—will have a seriously detrimental impact on an individual’s privacy rights. As the philosopher
Stanley Benn has said, the observed person "may be in a fool’s paradise or a fool’s hell; either way, [the observer] is making
a fool of him". 88
"the exercise of balancing art.8 and art.10 may begin when the person publishing the information knows or ought to know that
there is a reasonable expectation that the information in question will be kept confidential. *L.Q.R. 671 "
The privacy signals principle—and its relationship with the societal attitudes principle—helps explain when a defendant will
be assumed to know that the claimant had a reasonable expectation of privacy protection and when actual knowledge will be
required.
The framework set out in this article makes it clear, first, that there are two situations in which knowledge of the claimant’s
reasonable expectations of privacy protection should be assumed. The first situation is where the activity or information in
question is something which reasonable people would regard as private; in other words, where the first of the two principles
discussed in this article is satisfied. A defendant ought to know, for example, that in the absence of indications to the contrary,
the claimant would regard the appearance of his or her naked body or health information as private. It follows that if the claimant
is arguing that something is private because reasonable people would regard it as so (i.e. under the first part of the two-part
framework) then the defendant’s knowledge is unlikely to be an issue. Secondly, to return to privacy signals, a defendant will be
assumed to know that there are certain physical and behavioural signals which society expects will be respected. A defendant
ought to know, for example, that storing something on a personal mobile phone, entering a changing room or covering one’s
body with clothing are strong socially-endorsed signals that observation is unwelcome. As a result, he or she will be assumed
to know about privacy expectations which are founded upon those signals.
Things are different, however, if a claimant is relying on his or her use of privacy signals to establish a reasonable expectation of
privacy protection in respect of material which most people would be happy to share. The defendant in these types of situations
should be liable for breaching the claimant’s privacy only if he or she actually knew, or should have found out, about the signals
in question. Consider, for example, dissemination of an image of the uncovered head of a man who usually wears a turban.
If the publisher disseminated the image knowing that the claimant usually wore the head covering then, on the basis of the
privacy signals principle, the claimant might well be able to establish a reasonable expectation of privacy in respect of the
image. But if the defendant published the image without knowing (or having any reason to know) that the claimant usually wore
the turban, it would be unreasonable to impose privacy liability upon the defendant. Given that, in the absence of indications
to the contrary, exposure of the head is acceptable in modern British society, the defendant would have no reason to know that
the claimant desired privacy in the circumstances in question.90 As the Court of Appeal said in the breach of confidence case
of Napier v Pressdram :
"Freedom to report the truth … would be unduly eroded if the law of confidentiality were to prevent a person from reporting
facts which a reasonable person in his position would not perceive to be confidential". 91
The same principle, it is suggested, should apply in the misuse of private information tort. *L.Q.R. 672
Defendants should, however, be required to make appropriate enquiries about the circumstances in which images or information
which have been passed to them by third parties were obtained.92 It should not be good enough to adopt a "no questions asked"
policy if the usual practices of the third party (or some other consideration) made it clear that questions in fact needed to be asked.
The first thing to ask when applying the framework set out in this article to a particular set of facts is whether reasonable people
would agree that the claimant should be protected against the exposure of the information or material in question, i.e. whether
the societal-attitudes principle is satisfied. This includes consideration of whether the information or activity falls into one or
more of the established categories of usually-private information and if so, into how many and how squarely. Once that question
has been answered—and regardless of the conclusion—decision-makers turn to determine what, if any, signals the claimant
gave that he or she regarded the information or activity in question as private. If there were socially-recognised signals used
—if, for example, the claimant went into his or her house, used a private email account, or held up a hand to the camera—
then this will provide an independent ground for establishing a reasonable expectation of privacy protection. Thus, even if
the societal-attitudes principle was not established, the claimant would still have a prima facie privacy claim. Alternatively,
if the societal-attitudes principle was established, the claimant’s reliance on socially-recognised signals would strengthen his
or her reasonable expectation of privacy protection. The converse might also apply—the fact that a claimant plainly signalled
that he or she did not regard the matter in question as private (for example, by removing his or her clothes in a public place
or voluntarily publishing intimate personal information) would usually weaken a reasonable expectation of privacy protection
which would otherwise be recognised.
In the most straightforward cases, the result of both the societal and claimant-focused enquiries will point in the same direction.
If, for example, the claim concerned the widespread dissemination of a surreptitiously-taken video of the claimant in the shower
then reasonable people’s attitudes to the subject matter of the film (i.e. the appearance of the nude physical body) and the
claimant’s *L.Q.R. 673 physical and behavioural signals in respect of it (going into the bathroom and closing the door) would
strongly support the recognition of a reasonable expectation of privacy protection. The fact that the breach took a particularly
intrusive form—dissemination of a recording which allowed others to see the claimant’s naked body for themselves—would
strengthen this conclusion. Conversely, a person would have very limited expectations of privacy protection if he or she chose to
blog publicly (relevant to signals about access) about anodyne events in his or her life (relevant to the nature of the information
or activity).
In other situations, one or other of the two questions will assume greater importance. For example, if a defendant uploaded to
the internet footage of a couple willingly engaging in sexual activity on a busy public street, the nature of the activity would be
all-important. Given that the couple had voluntarily dispensed with the physical and behavioural barriers people usually rely on
to keep such activity from view, only the inherently private nature of sexual activity (combined with the particularly intrusive
nature of the publicity) could support any privacy claim.93 Conversely, if a hacker intercepts your voicemails but only hears
you telling your flatmate what time you will be home from work then, because it is anodyne, the nature of the information
would not support a reasonable expectation of privacy protection claim. Rather, it is the hacker’s disregard for the privacy of
your voicemail—for your signals that outside access was unwelcome—that lies at the heart of your reasonable expectation of
privacy protection.94 The claimant’s privacy signals are therefore vital to establishing liability.
This hacker example is relatively straightforward but often the assessment of the impact of the claimant’s privacy signals will
be more complex. Consider, for example, a YouTube clip showing a woman relieving herself behind the bushes in a remote
public place. The nature of the activity is once again important here. Because this is an activity which reasonable people regard
as private, the woman’s claim under the first limb of the framework would be strong (particularly in respect of such widespread
dissemination of a visual recording). But a nuanced consideration of barriers is also needed to ensure that the relative weakness
of the claimant’s privacy signals (i.e. ducking behind a bush rather than using a toilet cubicle) did not undermine her privacy
expectations when it should not. Two factors would be relevant here. First, although the claimant’s privacy signals were not as
strong as if she had entered a toilet cubicle or used the bathroom at home, the act of ducking behind a bush was nonetheless
a clear physical and behavioural signal that she did not wish to be observed. Secondly, voluntariness must be considered. If
there was no toilet available to the claimant then her failure to use one should carry limited weight; as discussed above, the fact
that a claimant does something in public should be seen as a privacy-eschewing signal only if she actually had some choice
in the matter. *L.Q.R. 674
Finally, it should be acknowledged that the relationship between the signals principle and societal-attitudes principle is more
complex where the subject of the privacy intrusion is a child or an adult lacking capacity. Two questions immediately arise:
whose signals, if anyone’s, do we rely on in these situations and what should the law do if a parent or caregiver courts publicity
for the incompetent individual? Full consideration of these issues is beyond the scope of this article but one option would be
to hold that the signals principle can operate to expand privacy rights in these situations but not to take them away. So, whilst
a caregiver’s attempts to prevent the media from filming an unconscious person as he or she was moved into an ambulance
might strengthen the patient’s reasonable expectation of privacy protection, an invitation from that same caregiver to film and
broadcast the patient unconscious in hospital would not reduce his or her privacy rights. The patient in the second scenario
would have a reasonable expectation of privacy protection by virtue of the societal-attitudes principle (since most reasonable
people would think that a person lying unconscious in hospital should be protected from filming) and the caregiver should not
be able to undermine that. This same approach could perhaps also be applied to parents raising their children in the public eye.
VII. Conclusion
So, the two-part conceptualisation offered in this article provides a principled way to answer the most important question
in any privacy claim: when will an activity or information be private. The basis for this framework lies in two hitherto
unarticulated principles embedded within English misuse of private information case law. The first is concerned with the
attitudes of reasonable people to the matter in question, the second with the claimant’s own privacy signals. Once recognised,
these principles provide the tools needed to analyse any potential misuse of private information claim and indeed, the application
of the reasonable expectation of privacy test in a variety of other contexts. This in turn helps us move towards more predictable
and conceptually robust ways of determining what is private both in English misuse of private information case law and beyond.
N.A. Moreham
Footnotes
1 Weller v Associated
Newspapers Ltd [2015] EWCA
Civ 1176; [2016] 1 W.L.R.
1541 at [58].
2 [2004] UKHL 22; [2004] 2
A.C. 457 at [21]. See also
Baroness Hale at [134] and
Lord Hope at [96]. Versions
of the reasonable expectation
of privacy test are relied on
to determine liability under
privacy torts in New Zealand,
Canada and the United States
(see Moreham and Warby
(eds), The Law of Privacy and
the Media, 3rd edn (Oxford:
Oxford University Press,
2016), Ch.3).
3 See e.g., Campbell [2004]
2 A.C. 457 at [134] per
Baroness Hale.
4 [2008] EWCA Civ 446;
[2009] Ch. 481 at [36]. This
approach has been endorsed
many times since, including
by the Supreme Court in the
recent case of Re JR38 [2015]
UKSC 42; [2016] A.C. 1131
at [98]. The factors which the
courts apply to the reasonable
expectation of privacy test do
sometimes operate as a kind
of checklist of factors: see
e.g., AMP v Persons Unknown
[2011] EWHC 3454 (TCC);
[2011] Info. T.L.R. 25 at [27].
5 See Pt V below.
6 See Moreham, "Privacy in the
Common Law" (2005) 121
L.Q.R. 628 at 644–645.
7 Barendt would prefer the
approach taken under
the Data Protection Act
1998 of defining "personal
information" expansively to
the one being advocated here:
see, Barendt, "‘A Reasonable
Expectation of Privacy’:
A Coherent or Redundant
Concept?" in Kenyon (ed.),
Comparative Defamation and
Privacy Law (Cambridge:
Cambridge University Press,
2016), at pp.111–114.
8 Other commentators agree.
See Hughes, "A Behavioural
Understanding of Privacy and
its Implications for Privacy
Law" (2012) 75 M.L.R. 806 at
828 (regarding the defendant’s
purpose) and Barendt, "‘A
Reasonable Expectation of
Privacy’: A Coherent or
Redundant Concept?" in
Comparative Defamation
and Privacy Law (2016),
at pp.108–110 (regarding
attributes of the claimant). On
the attributes of the claimant,
see also Ferdinand v MGN
Ltd [2011] EWHC 2454 (QB)
at [56].
9 Barendt agrees. He argues that
the reasonable expectation
of privacy test has become
a "formula" or "ritual
incantation" which, rather than
doing serious analytical work,
operates as the statement
of a conclusion (Barendt,
"‘A Reasonable Expectation
of Privacy’: A Coherent or
Redundant Concept?" in
Comparative Defamation and
Privacy Law (2016), at pp.110
and 114). Unlike this author,
however, Barendt believes that
the test should be abandoned.
10 Campbell v MGN Ltd [2004]
2 A.C. 457 at [24] (emphasis
added).
11 Weller v Associated
Newspapers Ltd [2016] 1
W.L.R. 1541 at [20] (emphasis
added).
12 Murray v Express Newspapers
Plc [2009] Ch. 481 at [39]
(emphasis added).
13 955 P.2d 469 (Cal.1998) at
490.
14 Schulman 955 P.2d 469
(Cal.1998) at 490.
15 [2012] UKSC 62; [2013] 2
A.C. 93 at [19] (emphasis
added). Although this
statement is in fact probably
an oblique reference to social
mores in respect of CCTV
recording, taken at face value,
it could be taken to mean that
one cannot have a reasonable
expectation of privacy in
respect of it simply because it
is so common.
16 See further, Moreham,
"Privacy in the Common
Law" (2005) 121 L.Q.R.
628 at 647 and "Recognising
privacy in England and New
Zealand: Campbell v MGN
Ltd [2004] UKHL 22 and
Hosking v Runting" [2004]
C.L.J. 555 at 557; and Hughes,
"A Behavioural Understanding
of Privacy and its Implications
for Privacy Law" (2012) 75
M.L.R. 806 at 814.
17 Although it is beyond the
scope of this article, questions
need to be asked about the
majority’s view that the
reasonable expectation of
privacy test should be relied
on to determine whether a
an enforceable obligation to
him in that respect". See, in a
similar vein, Creation Records
v News Group Newspapers
Ltd [1997] EWHC 370 (Ch);
[1997] E.M.L.R. 444 at
455 and Axon v Ministry of
Defence and News Group
Newspapers Ltd [2016]
EWHC 787 (QB); [2016]
E.M.L.R. 20 at [64(k)].
45 See Hughes, "A Behavioural
Understanding of Privacy and
its Implications for Privacy
Law" (2012) 75 M.L.R. 806 at
812.
46 See further, The Law of
Privacy and the Media (2016),
Ch.10.
47 Attorney General v Guardian
Newspapers Ltd [1990] 1 A.C.
109 at 281; [1988] 3 All E.R.
545 at 658.
48 [1997] E.M.L.R. 444 at 455.
49 [1994] E.M.L.R 134 at 148.
50 Tchenguiz v Imerman [2010]
EWCA Civ 908; [2011] Fam.
116 at [69].
51 [2001] Q.B. 967 at 988;
[2001] 2 All E.R. 289 at 307
(emphasis added). See also
[2001] Q.B. 967 at 1012 (per
Keene L.J.). In Campbell v
MGN Ltd [2004] 2 A.C. 457
at [134], Baroness Hale melds
this idea with the reasonable
expectation of privacy test,
observing that the breach
of confidence action had
developed to a point where
"the exercise of balancing
art.8 and art.10 may begin
when the person publishing
the information knows or
ought to know that there is a
reasonable expectation that the
information in question will be
kept confidential". See also,
A v B Plc [2003] Q.B. 195 at
[11(ix)]) and Douglas v Hello!
Ltd (No.3) [2006] Q.B. 125 at
[82], [100] and [120].
52 Tchenguiz v Imerman [2011]
Fam. 116 at [67].
53 [2006] EWCA Civ 1776;
[2008] Ch. 57 at [36]. Also,
in Browne v Associated
Newspapers Ltd [2008] 1
Q.B. 103 at [33], the Court
of Appeal said it does not
automatically follow from the
fact that a piece of information
is "trivial" that a person cannot
have a reasonable expectation
of privacy in respect of it;
instead, that question "requires
a detailed examination of all
the circumstances on a case by
case basis. The circumstances
include the nature of the
information itself and the
www.dailymail.co.uk/news/
article-3465215/Married-
City-lawyer-51-sex-street-
prominent-barrister-outside-
Waterloo-station-peak-rush-
hour.htm. As Eady J. said in
CC v AB [2006] EWHC 3083
(QB); [2007] E.M.L.R. 11 at
[39], "Sometimes … The court
will recognise the legitimate
expectation of privacy, not
on the basis of the means by
which the information was
imparted, but rather because of
the nature of the information
itself." See also Hosking v
Runting [2005] 1 N.Z.L.R. 1
at [249] where Tipping J. says
that a reasonable expectation
of privacy in the material in
question "can arise from the
nature of the information or
material or the circumstances
in which the defendant came
into possession of it, or both".
94 The relatively trivial nature of
the information would go to
remedy.