Watermark hook R Click here to go to Main Contents etratLmtd•Sz:26mx16m•Dt:Arl6 07•Tm:15:9 Time: • 2017 6, April Date: • 156mm x 246mm Size: • Limited Letterpart

Cyber Security: Law and Practice

Dean Armstrong QC 2 Bedford Row Chambers

Dan Hyde Penningtons Manches LLP

Sam Thomas 2 Bedford Row Chambers

Letterpart Ltd • Typeset in XML • Division: CDACA_plm_03_TitlePage • Sequential 1 L Watermark hook Click here to go to Main Contents etratLmtd•Sz:26mx16m•Dt:Arl6 07•Tm:15:9 Time: • 2017 6, April Date: • 156mm x 246mm Size: • Limited Letterpart

Published by LexisNexis LexisNexis Regus Terrace Floor Castlemead Lower Castle Street Bristol BS1 3AG Whilst the publishers and the author have taken every care in preparing the material included in this work, any statements made as to the legal or other implications of particular transactions are made in good faith purely for general guidance and cannot be regarded as a substitute for professional advice. Consequently, no liability can be accepted for loss or expense incurred as a result of relying in particular circumstances on statements made in this work. © RELX (UK) Limited, trading as LexisNexis 2017 All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any way or by any means, including photocopying or recording, without the written permission of the copyright holder, application for which should be addressed to the publisher. Crown Copyright material is reproduced with kind permission of the Controller of Her Majesty’s Stationery Office. British Library Cataloguing-in-Publication Data A catalogue record for this book is available from the British Library. ISBN 9 78178 473345 2

Typeset by Letterpart Limited, Caterham on the Hill, Surrey CR3 5XL Printed in Great Britain by Hobbs the Printers Limited, Totton, Hampshire SO40 3WX

Letterpart Ltd • Typeset in XML • Division: CDACA_plm_04_ImprintPage • Sequential 1 Watermark hook R Click here to go to Main Contents etratLmtd•Sz:26mx16m•Dt:Arl6 07•Tm:15:11 Time: • 2017 6, April Date: • 156mm x 246mm Size: • Limited Letterpart

CONTENTS

Preface vii Table of Cases xv Table of Statutes xxi Table of Statutory Instruments xxvii Table of European Materials xxix

Part 1 The Legal Framework Chapter 1 Cyber Crime 3 The offences 3 Offences under the Computer Misuse Act 1990 4 Unauthorised access to a computer (s 1) 6 Unauthorised access with intent to commit further offences (s 2) 9 Unauthorised acts with intent to impair the operation of a computer (s 3) 10 Making, adapting, supplying or offering to supply an article (s 3A) 13 Unauthorised acts causing or creating the risk of serious damage (s 3ZA) 15 Defences 17 Territorial scope 17 Inchoate offences 21 Nationality 23 Law enforcement officers 23 Serious crime prevention orders 24 Sentencing 24 R v Mangham 24 R v Martin 26 Fraud 27 Fraud Act 2006 28 False or offensive social media profiles 31 Data use offences 32 Data Protection Act 1998 32 Failure to register as a data controller 34 Unlawfully obtaining or disclosing personal data 35 Enforcement 36

Letterpart Ltd • Typeset in XML • Division: CDACA_Contents-citi • Sequential 1 L Watermark hook Click here to go to Main Contents etratLmtd•Sz:26mx16m•Dt:Arl6 07•Tm:15:11 Time: • 2017 6, April Date: • 156mm x 246mm Size: • Limited Letterpart

x Cyber Security: Law and Practice

Improper use of networks 38 Dishonestly obtaining electronic communications services (ss 125–126) 39 Improper use of public electronic communications network (s 127) 40 Chambers v DPP 41 The Guidelines on Prosecuting Cases involving Communications sent via Social Media 43 Cyberstalking 44 Malicious Communications Act 1988 45 Revenge pornography 48

Chapter 2 Civil Liability under the Data Protection Act 1998 53 Liability for personal data 53 Data Protection Act 1998 – an overview 53 Definition of key terms (s 1) 54 The data protection principles (s 4) 54 The first principle – ‘data must be processed fairly and lawfully’ 55 The second principle – ‘data must be obtained only for one or more specified purpose’ 56 The third principle – ‘personal data shall be adequate, relevant and not excessive’ 56 The fourth principle – ‘personal data shall be accurate and, where necessary, kept up to date’ 57 The fifth principle – ‘personal data shall not be kept for longer than is necessary’ 57 The sixth principle – ‘personal data shall be processed in accordance with the rights of data subjects under this Act’ 58 The seventh principle – appropriate technical and organisational measures to secure personal data 58 The eighth principle – data not be transferred outside the EEA unless that country ensures an adequate level of protection for the processing of personal data 59 Application of the Act (s 5) 60 Right of access to personal data (s 7) 61 Enforced subject access request (s 56) 63 Right to prevent processing likely to cause damage or distress (s 10) 64 Rights in relation to automated decision making (s 12) 66 Compensation for breach (s 13) 66

Chapter 3 Civil Liability and Redress 69 Deceit 69 Breach of trust 70 Dishonest assistance 71 Conversion 72 Trespass 73

Letterpart Ltd • Typeset in XML • Division: CDACA_Contents-citi • Sequential 2 Watermark hook R Click here to go to Main Contents etratLmtd•Sz:26mx16m•Dt:Arl6 07•Tm:15:11 Time: • 2017 6, April Date: • 156mm x 246mm Size: • Limited Letterpart

Contents xi

Conspiracy 73 ‘Unlawful means conspiracy’ 74 ‘Lawful means conspiracy’ 74 Liability to third parties 75 Directors’ duties 75 Consumer rights 77

Chapter 4 Cyber Property 79 Introduction 79 Misuse of private information 80 Misuse of private information in a cyber context 82 Jurisdiction 83 Data Protection Act 1998 83 Damages 85 Interception of telecommunications 86 Compulsion to provide private information 88 The Freedom of Information Act 2000 89

Chapter 5 Employer Liability and Protection 91 Introduction 91 Confidential information 92 Crowson Fabrics Ltd v Rider 94 Brandeaux Advisers (UK) Ltd v Chadwick 97 Pintorex Ltd v Keyvanfar 98 Protecting confidential information 99 Trade secrets 101 The Trade Secrets Directive 101 Copyright 102 The Software Directive 102 Copyright, Designs and Patents Act 1988 104 Navitaire v Easyjet 106 Nova Productions Ltd v Mazooma Games Ltd 109 SAS Institute Inc v World Programming Ltd 110 Databases 112 Copyright and Rights in Databases Regulations 1997, Part III 114 Databases to protect software 115 Cantor Gaming Ltd v GameAccount Global Ltd 115 Navitaire v Easyjet 116 Flogas Britain Ltd v Calor Gas Ltd 117 Employer liability 119 Direct liability 119 Vicarious liability 120 Directors’ liability 121 Employer measures, systems and procedures 124 Cyber terms of use and the employee contract 124 Practical measures 126

Letterpart Ltd • Typeset in XML • Division: CDACA_Contents-citi • Sequential 3 L Watermark hook Click here to go to Main Contents etratLmtd•Sz:26mx16m•Dt:Arl6 07•Tm:15:11 Time: • 2017 6, April Date: • 156mm x 246mm Size: • Limited Letterpart

xii Cyber Security: Law and Practice

Disciplinary procedures 126

Chapter 6 Commercial Espionage 129 Introduction 129 Intelligence Services Act 1994 130 State immunity 131 Computer Misuse Act 1990 132 Oxford v Moss 133 Statutory provisions 134 Trade marks 134 Trade Mark Directive 136 Trade Mark Regulation 137 Internet and trade marks 139 Copyright, Designs and Patents Act 1988 141 Patents 142 Difference between trade marks and patents 143 Common law 144 Passing off 144 Passing off and cyber squatting 147 Passing off and trade marks 149 International/European approach 150

Chapter 7 Control Mechanisms for Embedded Devices 153 Introduction 153 Technical protection 154 Awareness of threats to embedded systems 154 External threats 155 Internal threats 156 Access control 157 Copy control 159 The legal and regulatory context 160 The Copyright Directive 160 Mens rea 163 The Software Directive 164 Mens rea 165 Conditional Access Directive 165 Mens rea 166 Copyright, Designs and Patents Act 1988 166 Circumvention of technical devices applied to computer programs (s 296) 167 Circumvention of technological measures (ss 296Z–296ZG) 168 Unauthorised decoders: s 297A 169 European Union Agency for Network and Information Security 170 Protection through litigation 171 Copyright 172 Digital Economy Act 2010 173

Letterpart Ltd • Typeset in XML • Division: CDACA_Contents-citi • Sequential 4 Watermark hook R Click here to go to Main Contents etratLmtd•Sz:26mx16m•Dt:Arl6 07•Tm:15:11 Time: • 2017 6, April Date: • 156mm x 246mm Size: • Limited Letterpart

Contents xiii

Patents 178 The commercial approach 178 British Phonographic Industry Ltd v Mechanical-Copyright Protection Society Ltd 180

Part 2 Responding to a Data Breach Chapter 8 Responding to a Data Breach 185 Introduction 185 The data security breach 185 Notification 187 Legal remedies 188 Risk-based approach 190

Chapter 9 Investigating Incidents and Powers of Investigators 191 Introduction 191 Powers of authorities 192 The investigating authorities 192 The relevant powers 193 Data Retention and Investigatory Powers Act 2014 196 Investigatory Powers Act 2016 199 Oversight 202 New provisions 203 Regulation of Investigatory Powers Act 2000 (RIPA 2000) and interception of communications 204 The Investigatory Powers Tribunal 208 SFO section 2 powers 210 The Intelligence Services Act 1994 213 Obtaining of warrants 215 Pre-arrest 216 Post-arrest 216 Specific premises 221 All premises warrant 221 Protected materials 222 Legally privileged material 222 Excluded material 223 Special procedure material 223

Part 3 Litigation, Evidence and Remedies Chapter 10 Remedial Steps and Mitigating the Loss 231 Introduction 231 Remedial steps 232 Injunctions in cases of copyright infringement 233

Letterpart Ltd • Typeset in XML • Division: CDACA_Contents-citi • Sequential 5 L Watermark hook Click here to go to Main Contents etratLmtd•Sz:26mx16m•Dt:Arl6 07•Tm:15:11 Time: • 2017 6, April Date: • 156mm x 246mm Size: • Limited Letterpart

xiv Cyber Security: Law and Practice

Stop and desist notices: Data Protection Act 1998 236 Where the s 10 notices do not apply 236 Who or what is a data controller? 237 What must the data controller do upon receipt of a s 10 notice? 237 What if damage has already been suffered? 238 Who to approach? 238 Criminal prosecutions 238 Computer Misuse Act 1990 239 Data Protection Act 1998: the criminal offences 240 Unlawful obtaining etc of personal data (s 55(1)) 240 Practical steps 241

Chapter 11 Litigating and Rules of Evidence 245 Introduction 245 Good Practice Guide for Computer Based Electronic Evidence 246 Practical issues facing law enforcement and other officials in evidence gathering in computer and electronic storage devices cases 247 Significant distinction between ‘directed’ and ‘intrusive surveillance’ 249 Jurisdictional issues and ‘forum shopping’ 251 Locus of the perpetrator 251 Wintersteiger AG v Products 4U Sondermaschinenbau GmbH 252 Evidence obtained abroad – general principles including letters of request 253 Obtaining evidence from abroad 253 Evidence obtained illegally – general principles 255

Part 4 The Future Chapter 12 The Legal Environment post-Brexit 259 The effect of Brexit 259 The immediate future 259 The medium term 260 Practical steps 260 Different interconnectivity models 261 Where does that leave GDPR? 262 Jurisdiction 264 How extensive are the new proposals? 265 What can be done now to ensure that the transition to compliance with the GDPR or UK equivalent is as smooth as possible? 269 Directive on Security of Network and Information Systems (NIS Directive) 269

Index 273

Letterpart Ltd • Typeset in XML • Division: CDACA_Contents-citi • Sequential 6 Watermark hook R Click here to go to Main Contents etratLmtd•Sz:26mx16m•Dt:Arl6 07•Tm:15:9 Time: • 2017 6, April Date: • 156mm x 246mm Size: • Limited Letterpart

TABLE OF CASES

References are to paragraph numbers.

A-G’s Reference (No 140 of 2004) sub nom Barry Saul Dickinson [2004] EWCA Crim 3525 1.108, 10.62 Alcom v Republic of Colombia [1984] AC 580 6.13 Allfiled UK Ltd v Eltis and others [2015] EWHC 1300 Ch 8.27 Altimo Holdings and Investment Ltd v Kyrgyz Mobil Tel Ltd [2012] 1 WLR 1804 4.14 Amann v Switzerland (2000) 30 EHRR 843 9.20 American Cyanamid v Ethicon Ltd (No 1) [1975] AC 396 8.18, 8.21, 8.22, 8.26, 8.27 Amnesty International Ltd v Security Service (2015) UKIPTrib 13132-H 9.64 Atkins v DPP [2000] 1 WLR 1427, [2000] 2 All ER 425, [2000] 2 Cr App R 248, (2000) 97(13) LSG 42, (2000) 144 SJLB 148, The Times, March 16, 2000, The Independent, April 17, 2000 1.82

Baden v Société Générale [1993] 1 WLR 509, [1992] 4 All ER 161 3.11 Barlow Clowes v Eurotrust [2005] UKPC 37, [2006] 1 WLR 1476, [2006] 1 All ER 333, [2006] 1 All ER (Comm) 478, [2006] 1 Lloyd’s Rep 225, [2005] WTLR 1453, (2005-06) 8 ITELR 347, (2005) 102(44) LSG 32, [2006]1P&CRDG16 3.12 Beghal v Director of Public Prosecutions [2013] EWHC 2573 (Admin) 9.73 Benkharbouche [2015] 3 WLR 301 4.22 Bodley v Reynolds 115 ER 1066, (1846) 8 QB 779 3.16 Bow Street Metropolitan Stipendiary Magistrate ex p United States (No 2) [2006] EWHC 2256 (Admin), [2007] 1 WLR 1157, [2006] Extradition LR 216, (2006) 103(37) LSG 33, (2006) 156 NLJ 1440, (2006) 150 SJLB 1189, The Times, September 19, 2006 1.14 Brandeaux Advisers (UK) v Chadwick [2010] EWHC 3241 (QB), [2011] IRLR 224 5.04, 5.24, 5.25 Bristol and West Building Society v Mothew (t/a Stapley & Co) [1998] Ch 1, [1997] 2 WLR 436, [1996] 4 All ER 698, CA 3.07 British Phonographic Industry Ltd v Mechanical-Copyright Protection Society Ltd [2008] EMLR 5, (2007) 30(9) IPD 30059 7.109, 7.110 British Telecommunications Plc v One in a Million Ltd [1999] 1 WLR 903, [1998] 4 All ER 476, [1999] ETMR 61, [1997-98] Info TLR 423, [1998] ITCLR 146, [2001] EBLR 2, [1999] FSR 1, [1998] Masons CLR 165, (1998) 95(37) LSG 37, (1998) 148 NLJ 1179, The Times, July 29, 1998, The Independent, July 31, 1998 6.82, 6.88

Calcraft v Guest [1898] 1 QB 759 11.48, 11.49, 11.52 Campbell v MGN Ltd [2004] 2 AC 457 4.07–4.09 Cantor Gaming Ltd v GameAccount Global Ltd [2007] EWHC 1914 (Ch), [2007] ECC 24, [2008] FSR 4, [2007] LLR 591, (2008) 31(1) IPD 31004 5.97–5.101, 5.107 Cartier International AG & Others v British Sky Broadcasting & Others [2014] EWHC 3354 (Ch), [2015] 1 All ER 949, [2015] 1 All ER (Comm) 641, [2015] Bus LR 298, [2015] ETMR 1, [2015] EMLR 10, [2014] Info TLR 17, [2015] RPC 7 10.15–10.17, 10.21–10.23, 10.25, 10.26

Letterpart Ltd • Typeset in XML • Division: CDACA_Tables_x-Case-citi • Sequential 1 L Watermark hook Click here to go to Main Contents etratLmtd•Sz:26mx16m•Dt:Arl6 07•Tm:15:9 Time: • 2017 6, April Date: • 156mm x 246mm Size: • Limited Letterpart

xvi Cyber Security: Law and Practice

Cayne v Global Natural Resources PLC [1984 ] 1 All ER 225 8.27 Challenge Limited v Fletcher Challenge Pty Limited [1982] FSR 1 6.82 Chambers v DPP [2012] EWHC 2157 (Admin), [2013] 1 WLR 1833, [2013] 1 All ER 149, [2013] 1 Cr App R 1, (2012) 176 JP 737, [2012] Info TLR 193, [2012] ACD 114 1.127–1.130, 1.134, 1.144, 1.149 Chief Constable of Lincolnshire v Stubbs [1999] ICR 547, [1999] IRLR 81 5.120 Coco v AN Clark (Engineers) Ltd [1968] FSR 415, [1969] RPC 41 5.31, 5.40 Comic Enterprises Ltd v Twentieth Century Fox Film Corp [2016] EWCA Civ 41, [2016] ECC 24, [2016] ETMR 22, [2016] FSR 30 6.93 Connolly v DPP [2007] EWHC 237 (Admin), [2008] 1 WLR 276, [2007] 2 All ER 1012, [2007] 2 Cr App R 5, [2007] HRLR 17, [2007] Crim LR 729, (2007) 157 NLJ 295, The Times, February 28, 2007 1.146–1.148 Contex Drouzhba Ltd v Wiseman [2007] EWCA Civ 1201, [2008] BCC 301, [2008] 1 BCLC 631, (2007) 157 NLJ 1695, The Times, January 8, 2008 3.02 Coty Germany GmbH v First Note Perfumes NV (C-360/12) [2014] ETMR 49 6.41 Coulson [2013] EWCA Crim 1026, [2014] 1 WLR 1119 4.30 Cowan de Groot Properties Ltd v Eagle Trust Plc [1992] 4 All ER 700, [1991] BCLC 1045 5.129 Coward v Phaestos Ltd [2013] EWHC 1292 (Ch) 7.99, 7.100 Croft v Royal Mail Group Plc, formerly Consignia Plc [2003] EWCA Civ 1045, [2003] ICR 1425, [2003] IRLR 592, [2003] HRLR 34, (2003) 147 SJLB 904, The Times, July 24, 2003 5.121 Crowson v Rider [2007] EWHC 2942 (Ch), [2008] IRLR 288, [2008] FSR 17 5.13–5.23, 5.96

Department of Health v Information Commissioner EA/2008/0018, 18 November 2008 5.39 Dickinson (Barry Saul) [2004] EWCA Crim 3525 10.62 Digital Rights Ireland Ltd v Minister for Communications, Marine and Natural Resources (C-293/12) [2014] 3 WLR 1607 9.17, 9.21, 9.28–9.30, 9.32 Direct Line Group v Direct Line Estate Agency Ltd [1997] FSR 374 6.82 Donohue v Armco Inc [2001] UKHL 64 11.27–11.29 DPP v Bignell [1998] 1 Cr App R 1, (1997) 161 JP 541, [1997-98] Info TLR 168, [1998] ITCLR 33, [1998] Masons CLR Rep 141, [1998] Crim LR 53, (1997) 161 JPN 698, (1997) 161 JPN 770, The Times, June 6, 1997, The Independent, May 21, 1997 1.11–1.15 DPP v Lennon [2006] EWHC 1201 (Admin), (2006) 170 JP 532, [2006] Info TLR 311, (2006) 170 JPN 934, (2006) 150 SJLB 667 1.25 Dubai Aluminium v Al Alawi [1999] 1 WLR 1964, [1999] 1 All ER 703, [1999] 1 All ER (Comm) 1, [1999] 1 Lloyd’s Rep 478, The Times, January 6, 1999, The Independent, December 21, 1998 11.50, 11.52 Durant v Financial Services Authority [2003] EWCA Civ 1746, [2004] FSR 28, The Times, January 2, 2004 2.30, 2.31, 10.31

EC (Disclosure of Material), Re [1996] 2 FLR 123 9.74

Faccenda Chicken Ltd v Fowler, Fowler v Faccenda Chicken Ltd [1987] Ch 117, [1986] 3 WLR 288, [1986] ICR 297, CA, [1985] 1 All ER 724, [1984] ICR 589, [1984] IRLR 61 5.09 Flogas Britain Ltd v Calor Gas Ltd [2013] EWHC 3060 (Ch), [2014] FSR 34 5.104–5.107 Football Association Premier League Ltd v QC Leisure (C-403/08) and Murphy v Media Protection Services Ltd (C-429/08) [2012] Bus LR 1321 7.69 FSS Travel & Leisure Systems Ltd v Johnson [1998] IRLR 382, [1999] ITCLR 218, [1999] FSR 505, CA 5.08

Glaxo plc v Glaxowellcome Ltd [1996] FSR 388 6.82

Letterpart Ltd • Typeset in XML • Division: CDACA_Tables_x-Case-citi • Sequential 2 Watermark hook R Click here to go to Main Contents etratLmtd•Sz:26mx16m•Dt:Arl6 07•Tm:15:9 Time: • 2017 6, April Date: • 156mm x 246mm Size: • Limited Letterpart

Table of Cases xvii

Global Projects v Citigroup & Others [2005] EWHC 2663 (Ch), [2006] FSR 39 6.82–6.86

Halliday v Creation Consumer Finance Ltd [2013] EWCA Civ 333, [2013] 3 CMLR 4, [2013] Info TLR 351 2.55, 2.56, 4.23 Harman v Burge [2014] EWHC 2836 (IPEC) 6.90 Herbert Morris Ltd v Saxelby [1916] 1 AC 688 5.38 HFC Bank Plc v HSBC Bank Plc (formerly Midland Bank Plc) [2000] FSR 176, (1999) 22(12) IPD 22119, The Times, September 28, 1999, on appeal [2000] CPLR 197 6.73–6.75 HTC Corporation v Gemalto SA [2013] EWHC 1876 (Pat), [2014] RPC 9 6.62, 7.102

Imerman v Tchenguiz [2010] EWCA Civ 908, [2011] Fam 116, [2011] 2 WLR 592, [2011] 1 All ER 555, [2010] 2 FLR 814, [2010] 3 FCR 371, [2010] Fam Law 1177, (2010) 154(30) SJLB 32, The Times, September 2, 2010 11.51 Infopaq International A/S v Danske Dagblades Forening [2009] ECR I-6569, [2009] ECDR 16 5.83 Irvine v Talksport Ltd, Nos 1 and 2 [2003] EWCA Civ 423, [2003] 2 All ER 881, [2003] 2 All ER (Comm) 141, [2003] EMLR 26, [2003] FSR 35, (2003) 26(5) IPD 26029, (2003) 147 SJLB 421, The Independent, April 4, 2003 6.78

JP Morgan Chase Bank National Association v Director of the Serious Fraud Office [2012] EWHC 1674 (Admin) 11.42

Kabushiki Kaisha Sony Computer Entertainment Inc v Ball (Application for Summary Judgment) [2004] EWHC 1738 (Ch), [2005] ECC 24, [2004] ECDR 33, [2004] Info TLR 350, [2005] FSR 9, (2004) 27(8) IPD 27086, (2004) 101(39) LSG 34, The Times, October 21, 2004, The Independent, October 11, 2004 7.62 Kuwait Airways v Iraqi Airways 2000] 2 All ER (Comm) 360, (2000) 97(23) LSG 44, The Times, May 31, 2000 6.11

L-R (Children) [2013] EWCA Civ 1129 9.74, 9.75 Leander v Sweden (1987) 9 EHRR 433 9.20 Leisure Ltd v Poleplus Ltd [2015] EWHC 841 (IPEC) 6.89 Leno Merken BV v Hagelkruis Beheer BV (C-149/11) [2013] Bus LR 928, [2013] ETMR 16 6.46–6.48, 6.50 Lloyd Schuhfabrik Meyer & Co GmbH v Klijsen Handel BV, C-342/97, [1999] ECR I-3819, [1999] 2 CMLR 1343, [1999] All ER (EC) 587, [1999] CEC 285, [1999] ETMR 690, [2000] FSR 77, (1999) 22(11) IPD 22111, The Times, June 30, 1999 6.45 Lonrho Plc v Fayed [1992] 1 AC 448, [1991] 3 All ER 303, [1991] 3 WLR 188, [1991] BCLC 779, [1991] BCC 641, (1991) The Times, 5 July, 135 Sol Jo LB 68 3.25 Ludsin Overseas Limited v ECO3 Capital Ltd [2013] EWCA Civ 413 3.02

Marks & Spencer Plc v One In A Million Ltd [1998] FSR 265 6.87 Media CAT Ltd v Adams [2011] EWPCC 6, [2011] FSR 28 7.86 Mikhael Anatolyevich Trushin v National Crime Agency [2014] EWHC 3551 (Admin) 1.94, 2.47 Mitchell v Dali [2005] EWCA Civ 720 6.12 Murphy v Media Protection Services Ltd (C-429/08) and Football Association Premier League Ltd v QC Leisure (C-403/08) [2012] Bus LR 1321 7.69

Navitaire v Easyjet [2005] EWHC 282 (Ch), [2006] RPC 4 5.63, 5.65–5.71, 5.80, 5.102, 5.109

Letterpart Ltd • Typeset in XML • Division: CDACA_Tables_x-Case-citi • Sequential 3 L Watermark hook Click here to go to Main Contents etratLmtd•Sz:26mx16m•Dt:Arl6 07•Tm:15:9 Time: • 2017 6, April Date: • 156mm x 246mm Size: • Limited Letterpart

xviii Cyber Security: Law and Practice

News Group Newspapers Ltd v Commissioner of Police of the Metropolis [2016] 2 All ER 483 9.65–9.67 NML Capital Limited (Appellant) v Republic of Argentina (Respondent) [2011] UKSC 31, [2011] 2 AC 495, [2011] 3 WLR 273, [2011] 4 All ER 1191, [2012] 1 All ER (Comm) 1081, [2011] 2 Lloyd’s Rep 628, [2011] 2 CLC 373, 9 ALR Int’l 595, (2011) 155(27) SJLB 39, The Times, July 8, 2011 6.14 Norman Kark Publications Ltd v Odhams Press Ltd [1962] 1 WLR 380, [1962] 1 All ER 636, [1962] RPC 163, (1962) 106 SJ 195 6.93 Nova Productions Ltd v Mazooma Games Ltd [2007] EWCA Civ 219, [2007] Bus LR 1032, [2007] ECC 21, [2007] ECDR 6, [2007] EMLR 14, [2007] Info TLR 15, [2007] RPC 25, (2007) 30(5) IPD 30032, The Times, April 5, 2007 5.72–5.74

OBG Ltd v Allan; Douglas v Hello! Ltd (No 3); Mainstream Properties Ltd v Young [2007] UKHR 21, [2008] AC 1 4.10 Oxford v Moss (1979) 68 Cr App R 1183 6.17–6.22

Payton & Co Ltd v Snelling, Lampard & Co Ltd [1901] AC 308 6.80 Peek v Gurney (1873) LR 6 HL 377, 43 LJ Ch 19, 22 WR 29 3.02 Pintorex Ltd v Keyvanfar [2013] EWPCC 36 5.27–5.29, 5.118 Prudential Assurance Co Limited v Newman Industries Limited (No2) [1982] Ch 204 CA 3.21

R (British Sky Broadcasting Ltd) v Central Criminal Court [2014] UKSC 17, [2014] AC 885 9.110, 9.113 R (British Telecommunications Plc) v Secretary of State for Business, Innovation and Skills [2011] EWHC 1021 (Admin), [2011] 3 CMLR 5, [2011] Eu LR 817, [2011] ECDR 16, [2011] Info TLR 127, [2011] ACD 75, (2011) 108(18) LSG 18, (2011) 155(17) SJLB 31 7.89, 7.91, 7.93 R (Davis and others) v Secretary of State for the Home Department [2015] EWHC 2092 (Admin) 9.28 R (Ntl Group Ltd) v Crown Court at Ipswich [2002] EWHC 1585 (Admin) 4.30 R (S) v Chief Constable of the British Transport Police [2013] EWHC 2189 (Admin) 9.117–9.120 R (Tchenguiz) v Director of the Serious Fraud Office [2013] 1 WLR 1634 9.107 R v Chief Constable of Lancashire ex p Parker [1993] QB 577 9.104 R v Cunningham [1957] 2 QB 396, [1957] 3 WLR 76, [1957] 2 All ER 412, (1957) 41 Cr App R 155, (1957) 121 JP 451, [1957] Crim LR 326, (1957) 101 SJ 503 1.47 R v Director of the Serious Fraud Office ex p Smith [1993] AC 1 9.69–9.72 R v Ellames [1974] 1 WLR 1391, [1974] 3 All ER 130, (1974) 60 Cr App R 7, [1974] Crim LR 554, (1974) 118 SJ 578 1.85, 1.88 R v Gilham [2009] EWCA Crim 2293, [2010] ECDR 5, [2010] Lloyd’s Rep FC 89, [2009] Info TLR 171, [2010] LLR 641, [2010] Crim LR 407, The Times, January 12, 2010 7.98 R v Gold & Schifreen [1988] AC 1063, [1988] 2 WLR 984, [1988] 2 All ER 186, (1988) 87 Cr App R 257, (1988) 152 JP 445, [1988] Crim LR 437, (1988) 152 JPN 478, (1988) 85(19) LSG 38, (1988) 138 NLJ Rep 117, (1988) 132 SJ 624 1.03, 1.76 R v Harden [1963] 1 QB 8, [1962] 2 WLR 553, [1962] 1 All ER 286, (1962) 46 Cr App R 90, (1962) 126 JP 130, (1962) 106 SJ 264, The Times, December 20, 1961 11.39 R v Hardy [2002] EWCA Crim 3012 11.19 R v Leonard [2012] EWCA Crim 277, [2012] 2 Cr App R 12 1.82 R v Mangham [2012] EWCA Crim 973 [2012] EWCA Crim 973, [2013] 1 Cr App R (S) 11 1.65–1.70 R v Martin [2013] EWCA Crim 1420, [2014] 1 Cr App R (S) 63 1.65, 1.71–1.75 R v Padellec [2012] EWCA Crim 1956 4.35

Letterpart Ltd • Typeset in XML • Division: CDACA_Tables_x-Case-citi • Sequential 4 Watermark hook R Click here to go to Main Contents etratLmtd•Sz:26mx16m•Dt:Arl6 07•Tm:15:9 Time: • 2017 6, April Date: • 156mm x 246mm Size: • Limited Letterpart

Table of Cases xix

R v Porter [2006] EWCA Crim 560, [2006] 1 WLR 2633, [2007] 2 All ER 625, [2006] 2 Cr App R 25, [2006] Crim LR 748, (2006) 103(14) LSG 28, The Times, June 21, 2006 1.82 R v S [2008] EWCA Crim 2177 4.34, 9.67 R v Sakalauskas [2013] EWCA Crim 2278, [2014] 1 WLR 1204, [2014] 1 All ER 1231, [2014] 2 Cr App R 11, (2014) 178 JP 30 1.85 Reckitt & Colman Products Ltd v Borden Inc [1990] 1 WLR 491, [1990] 1 All ER 873, [1990] RPC 341, (1990) 134 SJ 784, The Times, February 9, 1990, The Independent, March 13, 1990, The Guardian, February 13, 1990 6.70–6.72, 6.80 Reddaway v Banham [1896] AC 199, (1896) 13 RPC 218 6.80 Royal Brunei Airlines Sdn Bhd v Tan (Philip Kok Ming) [1995] 2 AC 378, [1995] 3 WLR 64, [1995] 3 All ER 97, PC 5.129

S v DPP [2008] EWHC 438 (Admin), [2008] 1 WLR 2847, [2008] ACD 46 1.91, 1.92 S&D Property Investments Ltd v Nisbet [2009] EWHC 1726 5.119 SAS Institute Inc v World Programming Ltd [2010] EWHC 1829 (Ch), [2010] ECDR 15, [2010] Info TLR 157, [2011] RPC 1 5.76–5.83, 5.139 Secretary of State for the Home Department v Davis [2015] EWCA Civ 1185 9.21, 9.22 Secretary of State for the Home Department v Rehman [2001] UKHL 47, [2003] 1 AC 153 9.78–9.80 Seixo v Provezende (1865–66) LR 1 Ch App 192 6.69 Sofa Workshop Ltd v Sofaworks Ltd [2015] EWHC 1773 (IPEC), [2015] ECC 25, [2015] ETMR 37, [2016] FSR 3 6.50 Starbucks (HK) Ltd v British Sky Broadcasting Group Plc [2015] UKSC 31, [2015] 1 WLR 2628, [2015] 3 All ER 469, [2015] ECC 19, [2015] ETMR 31, [2015] FSR 29, The Times, May 28, 2015 6.76 Summers (Daniel) unreported 2012 (Crown Ct (Kingston)) 10.60

Tele2 Sverige AB v Post- och telestyrelsen; Secretary of State for the Home Department v Watson and others (2016) C-203/15 C-698/15, ECLI:EU:C:2016:970, [2016] All ER (D) 107 (Dec) 9.31–9.35 Tesco Supermarkets Ltd v Nattrass [1972] AC 153, [1971] 2 All ER 127, [1971] 2 WLR 1166, 69 LGR 403, 115 SJ 285, HL, reversing [1971] 1 QB 133, [1970] 3 All ER 357, [1970] 3 WLR 572, 68 LGR 722, 114 SJ 664, DC 5.112, 5.116 Thomas Marshall (Exports) Ltd v Guinle [1979] Ch 227, [1978] 3 WLR 116, [1978] ICR 905 5.11, 5.20 Total Network SL v HMRC [2008] UKHL 19, [2008] 1 AC 1174, [2008] 2 All ER 413, [2008] 2 WLR 711, [2008] STC 644, (2008) The Times, 13 March, [2008] BPIR 699 3.22 Twentieth Century Film Corporation v Newzbin Limited [2010] EWHC 608 (Ch), [2010] ECC 13, [2010] ECDR 8, [2010] EMLR 17, [2010] FSR 21, (2010) 154(14) SJLB 30, [2011] Bus LR D49 7.97 Twinsectra Ltd v Yardley [2002] UKHL 12, [2002] 2 AC 164, [2002] 2 WLR 802, [2002] 2 All ER 377, [2002] PNLR 30, [2002] WTLR 423, [2002] 38 EG 204 (CS), (2002) 99(19) LSG 32, (2002) 152 NLJ 469, (2002) 146 SJLB 84, [2002] NPC 47, The Times, March 25, 2002 3.12

Vestergaard Frandsen v Bestnet [2013] UKSC 31, [2013] 1 WLR 1556, [2013] 4 All ER 781, [2013] ICR 981, [2013] IRLR 654, [2013] EMLR 24, [2013] RPC 33, (2013) 157(21) SJLB 31, (2013) The Times, June 20 5.122–5.128 Vestergaard Frandsen v Bestnet Europe Ltd [2009] EWHC 1456 Ch 8.23–8.26 Vidal-Hall et al v Google [2015] EWCA Civ 311, [2015] 3 WLR 409, [2016] 2 All ER 337, [2015] CP Rep 28, [2015] 1 CLC 526, [2015] 3 CMLR 2, [2015] EMLR 15, [2015] FSR 25 2.57, 2.58, 4.11, 4.12, 4.15, 4.21, 4.22, 4.24

Letterpart Ltd • Typeset in XML • Division: CDACA_Tables_x-Case-citi • Sequential 5 L Watermark hook Click here to go to Main Contents etratLmtd•Sz:26mx16m•Dt:Arl6 07•Tm:15:9 Time: • 2017 6, April Date: • 156mm x 246mm Size: • Limited Letterpart

xx Cyber Security: Law and Practice

Wainwright v Home Office [2004] 2 AC 406 4.05 Waters v Commissioner of Police of the Metropolis [1997] ICR 1073, [1997] IRLR 589, (1997) The Times, July 21, CA, [1995] ICR 510, [1995] IRLR 531, EAT 5.120 Wintersteiger AG v Products 4U Sondermaschinenbau GmbH, C-523/10 [2013] Bus LR 150, [2013] CEC 15, [2012] ETMR 31, [2012] ILPr 23, (2012) The Times, July 31 6.101, 11.35

Zezev and Yarimaka v Governor of HM Prison Brixton [2002] EWHC 589 (Admin), [2002] 2 Cr App R 33, [2003] Info TLR 163, [2002] Crim LR 648 1.27–1.29

Letterpart Ltd • Typeset in XML • Division: CDACA_Tables_x-Case-citi • Sequential 6