Reports & recommendations

In conjunction with the repeal of those procedural provisions, consideration should be given to the desirability of including in the Data Protection Act 1998 a provision to the effect that, in considering the exercise of any powers in relation to the media or other publishers, the Information Commissioner's Office should have special regard to the obligation in law to balance the public interest in freedom of expression alongside the public interest in upholding the data protection regime.

Specific provision should be made to the effect that, in considering the exercise of any of its powers in relation to the media or other publishers, the Information Commissioner's Office must have regard to the application to a data controller of any relevant system of regulation or standards enforcement which is contained in or recognised by statute.

The opportunity should be taken to consider amending the Data Protection Act 1998 formally to reconstitute the Information Commissioner's Office as an Information Commission, led by a Board of Commissioners with suitable expertise drawn from the worlds of regulation, public administration, law and business, and active consideration should be given in that context to the desirability of including on the Board a Commissioner from the media sector.

On the basis that the provisions of s77-78 of the Criminal Justice and Immigration Act 2008 are brought into effect, so that increased sentencing powers are available for breaches of s55 of the Data Protection Act 1998, the Secretary of State for Justice should use the power vested in him by s124(1)(a)(i) of the Coroners and Justice Act 2009 to invite the Sentencing Council of England and Wales to prepare guidelines in relation to data protection offences (including computer misuse).

There should be a review of damages generally available for breach of data protection, privacy, breach of confidence or any other media-related torts, to ensure proportionate compensation including for non-pecuniary loss (all referable to the duration, extent and gravity of the contravention).

The Civil Justice Council should consider the level of damages in privacy, breach of confidence and data protection cases, being prepared to take evidence (from the Information Commissioner, the media and others) and thereafter to make recommendations on the appropriate level of damages for distress in such cases. How the matter is then taken forward will ultimately be for the courts to consider.

The Report of the Law Commission on Aggravated, Exemplary and Restitutionary Damages should be adopted in relation to its recommendations that legislation should provide that: (a) aggravated damages should only be awarded to compensate for mental distress and should have no punitive element; (b) exemplary damages should be retained (although re-titled as punitive damages).

As a first step, political leaders should reflect constructively on the merits of publishing on behalf of their party a statement setting out, for the public, an explanation of the approach they propose to take as a matter of party policy in conducting relationships with the press.

The suggestions that I have made in the direction of greater transparency about meetings and contacts should be considered not just as a future project but as an immediate need, not least in relation to interactions relevant to any consideration of this Report.