Operation Motorman
27. We turn now to Operation Motorman, an
investigation undertaken by the Information Commissioner's Office
into apparent offences under data protection legislation. The
operation centred upon the activities of a particular private
investigator, Stephen Whittamore, at whose home were discovered
numerous records of transactions involving data illegally obtained
from British Telecom, DVLA and the Police National Computer. The
Information Commissioner published a report in May 2006What
price privacy?which noted that the primary documentation
seized at the premises included correspondence (such as invoices)
between the private investigator and "many of the better-known
national newspapers [...] and magazines". In almost every
case, the individual journalist seeking the information was named
in the correspondence.[31]
A follow-up report (What price privacy now?), published
in December 2006, included a table showing the publications concerned
and the number of transactions linked to journalists working for
each publication. The table includes weekday and Sunday tabloids,
Sunday broadsheets and high-circulation weekly magazines and is
reproduced overleaf.[32]
Source: What price privacy now? Information Commissioner's
Office, December 2006, HC 36,page 9.
28. Operation Motorman did not, however, lead
to high-profile convictions. Parallel investigations by the police
led to charges of corruption against four people: these took precedence
over the Operation Motorman cases. Some convictions were secured,
both for corruption and for data protection offences, but the
court was able to impose nothing stronger than a conditional discharge
"because of sentencing in a connected but separate case".
The Information Commissioner's Office described this as "a
great disappointment", especially as it "seemed to underplay
the seriousness of the offences under section 55" of the
Data Protection Act.[33]
Because of the seriousness of this case, we asked the Information
Commissioner for supplementary evidence about the prosecutions,
which is printed with the written evidence in this volume. As
a consequence of the light sentence, counsel advised the Information
Commissioner that it would not be in the public interest to proceed
with further prosecutions, for instance against journalists named
in the correspondence discovered at the investigator's house,
and that to do so would "attract severe criticism within
the court system".[34]
The Information Commissioner's Office, despite having in its possession
what the Commissioner called "hard prima facie evidence"
of invoices to newspaper proprietors, accepted counsel's advice.
29. Whereas the actions of Clive Goodman and Glenn
Mulcaire resulted in custodial sentences and were widely denounced
throughout the industry, there has been rather less sign of concern
from within the industry at the possibility that journalists might
have systematically obtained information illegally through the
transactions uncovered by Operation Motorman. The Newspaper
Publishers' Association, the Scottish Newspaper Publishers' Association,
the Newspaper Society, the Scottish Daily Newspaper Society, the
Periodical Publishers Association and the Society of Editors made
a combined response to the Information Commissioner's recommendations
in What price privacy?, stressing that they took the issues
reported in the report very seriously and agreeing to disseminate
the report's findings and the Commissioner's guidance on the terms
of the Data Protection Act to their members.[35]
The Press Complaints Commission published a guidance note and
agreed to reiterate the message that journalists had to act within
the law (such as the Data Protection Act). [36]
30. The Information Commissioner said, however, that
he was "a little disappointed that there was not a more strident
denunciation of the activity" by the Press Complaints Commission.[37]
He had proposed to the Editors' Code Committee that the Code should
be amended so that it would specify that it was unacceptable either
to obtain information about an individual's private life without
their consent by payment to a third party or by impersonation
or subterfuge, or to pay an intermediary to supply any information
which was, or which must have been, obtained by such means. In
its submission to this inquiry, which predated the consideration
of the Information Commissioner's proposal, the Code Committee
suggested that the proposed wording seemed to go beyond the law
by treating the obtaining of any private information, not just
protected data (as defined under the Data Protection Act 1998)
as a breach of the Code. The Code Committee also noted the implication
that payment should be a determining factor, and it questioned
whether an intrusion of privacy would be any the less had payment
not been made.[38] The
Code Committee has since considered and rejected the Information
Commissioner's proposal, but it drafted an alternative wording
which has since been ratified by the PCC and which will come into
effect from 1 August 2007. While the Code Committee was in no
doubt that illegal trading in confidential information and engaging
in misrepresentation or subterfuge via agents or intermediaries
was already covered by the Code, the new wording of Clause 10
makes it explicit.[39]
31. We raised the issue of the transactions listed
in the table in What price privacy now? with representatives
of some of the publications identified. Mr Esser, Executive Managing
Editor of the Daily Mail, claimed that "very vigorous
moves" had been made by the paper since the Information Commissioner
had published his findings "to make sure that our daily practice
conforms with the Data Protection Act".[40]
Mr Duffy, speaking on behalf of the Mirror Group, also stressed
the efforts which had been made to reinforce their journalists'
understanding of the gravity of breaches of data protection legislation
and of the Code of Practice.[41]
But there was little or no sign of any real effort being made
to investigate the detail of individual transactions between journalists
and the private investigator concerned. Mr Esser told us that
all journalists at the Daily Mail had been asked whether
or not they had employed the services of the investigator at the
centre of Operation Motorman, and if so, for what reason.[42]
According to Mr Esser, many of the journalists were no longer
working for the paper and there was "no way in which they
can remember what happened five years ago"; he said that
all 400 of the Daily Mail's journalists had been asked
if they employed the services of this agency and that those that
could remember had given assurances that they were seeking information
which was in the public domain.[43]
Both Mr Esser and Mr Duffy maintained that they would be able
to pursue more rigorous inquiries if the Information Commissioner
were to provide them with details of the names of the journalists
involved and the invoices or details of transactions.[44]
While this may be the case, we find Mr Esser's evidence difficult
to believe.
32. The press in general, and evidence from the representatives
of the Daily Mirror and the Daily Mail in particular,
pointed out that the evidence collected by Operation Motorman
did not necessarily establish any breach of the law or of
the Code of Practice by journalists and that the transactions
involved might have been specifically to obtain information in
the public interest.[45]
The Press Complaints Commission also cast doubt upon the value
of the evidence presented, describing the list of publications
and journalists in What price privacy now? as "impressive-sounding
but superficial".[46]
The Commission Chairman told us that he had invited the Information
Commissioner to provide more details about the 305 cases listed
in the report but that the Information Commissioner was not willing
to do so.[47] When we
raised this issue with the Information Commissioner, he told us
that he and his staff "do not feel able to identify the individual
journalists in fairness to those journalists" as they had
not been prosecuted, and that "to bandy their names around
in public or to their employers" would not be acceptable.
He also acknowledged that the focus of the prosecutions had been
upon the middlemen rather than the journalists. [48]
33. We are not convinced that the Information
Commissioner should feel debarred from releasing to their own
employers the names of individual journalists identified in invoices
obtained under Operation Motorman. In any case, we do not see
the Information Commissioner's decision as a valid defence for
newspaper editors, some of whom seem to have made minimal effort
to establish whether their employees had obtained information
illegally (or whether they had done so ostensibly in the public
interest but without having secured the necessary authority).
The fact that an agency which was regularly accessing databases
illegally was being used by journalists throughout the industry,
without any apparent questioning from editors, is very worrying.
We find claims that all of the transactions involving journalists
were for the obtaining of information through legal means to be
incredible and it is a matter of great concern that the industry
has not taken this more seriously. The lack of any prosecutions
or convictions of journalists is no defence. One of the principal
arguments for self regulation is that it is more effective than
statutory controls. If the industry is not prepared to act unless
a breach of the law is shown to have occurred already then the
whole justification for self-regulation is seriously undermined.
If self-regulation is to continue to command confidence and support,
editors will need to be seen to be pro-active in investigating
any potential breach of the Code of Practice.
The law as a deterrent
34. The Information Commissioner recommended in What
price privacy? that a custodial penalty should be available
for offences of obtaining, disclosing or procuring information
unlawfully under section 55 of the Data Protection Act 1998. His
rationale for doing so was that the seriousness of the offence
needed to be underlined by a sentence which carried a greater
deterrent effect, and he noted that a similar offence of unlawful
disclosure of confidential information under the Identity Cards
Act 2006 attracted a potential custodial sentence.[49]
35. The Department for Constitutional Affairs took
up the Commissioner's proposal and launched a consultation in
July 2006, inviting views on whether a custodial sentence should
be introduced. This resulted in 63 submissions, the majority of
which were in favour,[50]
although the print media industry in general was opposed (as was
the Press Complaints Commission), citing fears that a custodial
sentence would "chill investigative journalism" and
that journalists would not be able to rely upon a public interest
defence as it was not always possible to prove that a public interest
had existed at the outset of an inquiry.[51]
The Information Commissioner, however, told us that "any
serious investigation which can be remotely justified as being
in the public interest will not be deterred or chilled by this
law", and he suggested that any responsible journalist who
was contemplating paying for or obtaining information could simply
make a file note stating that he or she was obtaining the information
for specified public interest reasons and that "that would
be a very strong piece of paper to wave in the face of any commissioner
investigating and possibly prosecuting later".[52]
When the DCA published the conclusions of its consultation in
February 2007, it announced that it intended to go ahead with
the reform and bring forward the necessary legislation when an
opportunity arose in Parliament.[53]
We note that the Ministry of Justice has taken that opportunity,
by including relevant provisions in the Criminal Justice and Immigration
Bill presented to Parliament on 26 June 2007.
36. We believe that sufficient safeguards exist
to protect legitimate investigative journalism and do not believe
that the introduction of custodial sentences for offences under
section 55 of the Data Protection Act 1998 would have the chilling
effect claimed by the press. Given the evidence that breaches
of the Act have not been treated with the seriousness which they
warrant, we therefore support the decision of the DCA, and subsequently
the Ministry of Justice, to introduce the necessary legislation.
17 See paragraph 7 of this Report Back
18
Qq 36 and 38 Back
19
Ev 24 and 28 Back
20
Q 56 Back
21
Ev 32 and Q 85 Back
22
Ev 49 Back
23
Ev 63 Back
24
Q 91 Back
25
See New Guidelines on subterfuge and news-gathering on
the Press Complaints Commission website:http://www.pcc.org.uk Back
26
Q 90 Back
27
See New Guidelines on subterfuge and news-gathering on
the Press Complaints Commission website: http://www.pcc.org.uk Back
28
Q 106 Back
29
Q 145 Back
30
Ev 32 Back
31
What price privacy?, House
of Commons Paper 1056, Session 2005-06, paragraph 5.6 Back
32
What price privacy now?,
House of Commons Paper 36, Session 2006-07, page 9. Back
33
What price privacy?, paragraphs
6.7 and 6.8 Back
34
Q 41 Back
35
What price privacy now?,
page 22 Back
36
Qq 44 and 159; Ev 61 Back
37
Q 44 Back
38
Ev 28-9 Back
39
See Editors' Code of Practice Committee Press Notice 27 June 2007 Back
40
Q 114; see also Q 129 Back
41
Q 122 Back
42
Qq 126, 128 and 130 Back
43
Qq 119 and 129 Back
44
Qq 123-4 Back
45
See for example Editors' Code Committee Ev 28; Society of Editors
Ev 30; Mr Esser Q 120 Back
46
Ev 62 Back
47
Q 159 Back
48
Q 169 Back
49
What price privacy?, paragraphs
7.6-7.8 Back
50
Increasing penalties for deliberate and wilful misuse of personal
data, consultation paper
issued by the Department for Constitutional Affairs, CP 9/06.
The DCA issued its response on 7 February 2007. Back
51
Editors' Code Committee Ev 28; Press Complaints Commission Ev
62. See also NUJ, Ev 12 Back
52
Q 49 Back
53
Ev 89 Back