Privacy and misuse of private information
Modern privacy law protects autonomy through a disciplined balance between confidentiality and expression.
Overview
Misuse of private information is now the principal English civil wrong protecting personal privacy. It is not a general tort of being offended by publicity, nor a simple extension of defamation. It protects the claimant’s interest in controlling access to information about private life, subject always to the competing constitutional value of freedom of expression. For Durham first-year Tort, this topic is best understood as the point at which private law, public law and legal method meet. The cause of action was developed by the courts under the influence of the Human Rights Act 1998, especially Articles 8 and 10 of the European Convention on Human Rights. It is therefore a useful consolidation topic after negligence, nuisance, trespass and defamation: it asks not merely whether the defendant has caused loss, but whether private law should vindicate a personality interest against another private actor.
The label matters. English law has not adopted a broad, free-standing tort of invasion of privacy. The orthodox modern claim is misuse of private information, formerly derived from breach of confidence but now a distinct cause of action. The claimant must first show that the information attracted a reasonable expectation of privacy. If that threshold is crossed, the court balances the claimant’s Article 8 interest against the defendant’s Article 10 interest. Neither has automatic precedence. The balancing exercise is fact-sensitive and intensely contextual. A photograph, medical fact, sexual detail, family information, criminal investigation, or location data may all attract protection; but protection may be displaced by a sufficient public interest in publication.
The topic sits beside, but must not be confused with, defamation. Defamation protects reputation against false or damaging statements. Misuse of private information usually concerns true information whose publication is objectionable because it is private. A defendant who publishes accurate medical information about a celebrity may face a privacy claim even though no defamatory sting arises. Conversely, a false allegation may be defamatory but not necessarily private. There may also be overlap with data protection, harassment, breach of confidence, copyright, and equitable remedies, but an exam answer should identify the specific interest being protected.
Remedies are also distinctive. Injunctions are prominent because once private information is published, confidentiality may be irretrievably lost. The Human Rights Act 1998, section 12, imposes special constraints where relief affects freedom of expression, particularly interim injunctions restraining publication before trial. Damages may compensate distress, loss of autonomy and reputational or commercial effects, but privacy litigation is often preventive.
For Durham assessment, the best answers avoid treating the cases as a list of celebrity disputes. The doctrinal structure is simple; the difficulty lies in application. Identify the information precisely. Ask who already knew it, how it was obtained, how intrusive publication would be, whether the claimant is a child or public figure, and what public interest is actually served. Do not equate public curiosity with public interest. Do not assume that because a person is famous, their private life is public property. Equally, do not assume that Article 8 always defeats journalism. The law is a structured conflict between two constitutional rights, mediated through a private law cause of action.
Historical context
English law long resisted recognising a general right of privacy. Nineteenth- and twentieth-century cases protected privacy only indirectly, through trespass, nuisance, defamation, copyright, breach of confidence, malicious falsehood, passing off, contract or employment duties. A claimant whose photograph was taken without consent, whose private conversation was reported, or whose domestic life was exposed could recover only if the facts fitted one of those established categories. This piecemeal approach reflected common law caution about open-ended personality rights and concern for press freedom.
The older equitable action for breach of confidence was the critical bridge. Traditionally, it required information with the necessary quality of confidence, imparted in circumstances importing an obligation of confidence, and unauthorised use to the detriment of the confider. That structure worked well for commercial secrets and intimate disclosures within relationships. It worked less comfortably where a newspaper obtained private information without any direct relationship with the claimant. The modern law therefore moved from confidentiality as a relational obligation towards privacy as an objective character of information.
The European Convention on Human Rights provided the constitutional impetus. Article 8 protects private and family life, home and correspondence. Article 10 protects freedom of expression. Before the Human Rights Act 1998, the Convention did not operate directly as domestic law, though it could influence interpretation. After the Act, courts as public authorities had to act compatibly with Convention rights. The central question became how a court should decide a private dispute between claimant and newspaper where both parties relied on Convention values. The answer was indirect horizontal effect: the court develops and applies the common law consistently with Convention rights, without converting every private actor into a public authority.
The decisive development came in the early 2000s. In Campbell v MGN Ltd, the House of Lords accepted that publication of details and photographs relating to Naomi Campbell’s drug addiction treatment engaged a reasonable expectation of privacy. The action was still described through the language of confidence, but the underlying shift was unmistakable. The duty no longer depended on a confidential relationship in the old sense. It arose because the information was private and publication would interfere with Article 8 interests unless justified by Article 10.
Douglas v Hello! Ltd further illustrated the mixed origins of the action. The dispute concerned unauthorised photographs of a celebrity wedding. The case contained both privacy and commercial confidentiality elements, because authorised photographs had been sold to another magazine. It showed that the same factual matrix may involve personal dignity, confidentiality, and economic exploitation of exclusivity. Later authority clarified that misuse of private information is distinct from breach of confidence, though historically related.
The jurisprudence then expanded beyond celebrity claimants. Murray v Express Newspapers protected, at least at the threshold stage, the privacy interests of JK Rowling’s young child photographed in a public street. Weller v Associated Newspapers did likewise for the children of a musician. Mosley v News Group Newspapers concerned sexual conduct, rejecting a claimed public interest in moral exposure. PJS v News Group Newspapers demonstrated the complexity of injunctions in the internet age, where information may circulate abroad or online before domestic proceedings conclude. ZXC v Bloomberg confirmed that, as a legitimate starting point, a person under criminal investigation before charge has a reasonable expectation of privacy in information relating to that investigation.
The historical lesson is that English privacy law is judge-made, Convention-influenced, and incremental. It is not a codified privacy statute. That gives the law flexibility but also produces uncertainty. The courts proceed by asking whether the claimant’s privacy interest is sufficiently engaged, and then whether the defendant’s expression interest justifies publication. The doctrine is therefore a study in modern common law technique: adapting an old equitable form to contemporary social and technological conditions while maintaining constitutional sensitivity.
Key principles
The modern claim has two stages. First, did the claimant have a reasonable expectation of privacy in respect of the information? Secondly, if so, does the claimant’s Article 8 interest outweigh the defendant’s Article 10 interest, or vice versa? This structure should govern every problem answer.
At stage one, the court identifies the information and asks whether, viewed objectively, it falls within a protected sphere of private life. The question is not simply whether the claimant subjectively wanted secrecy. A reasonable expectation of privacy depends on all the circumstances. Relevant factors include the claimant’s attributes, the nature of the activity, the place where it occurred, the purpose and manner of obtaining the information, the extent to which it was already in the public domain, the effect of publication, and whether the claimant is a child. The inquiry is contextual, not categorical. Medical treatment, sexual life, family relationships, grief, children’s lives, confidential communications and pre-charge criminal investigations are strong candidates. Public professional conduct, hypocrisy relevant to public claims, or information voluntarily exposed may be weaker.
The claimant need not prove falsity. Indeed, the privacy claim usually assumes truth. The wrong lies in publication or use of private information, not reputational inaccuracy. This distinguishes misuse of private information from defamation. Nor must the claimant show a pre-existing confidential relationship with the defendant. That is the legacy of breach of confidence, but it is no longer a strict requirement. A photographer, journalist or broadcaster may misuse information even where it was obtained from observation or a third-party leak.
The concept of a reasonable expectation also has a normative dimension. The court asks whether privacy is something the law should protect in the circumstances. A person in a public place can still have privacy if the information disclosed is intimate, the claimant is vulnerable, or the publication adds an intrusive dimension not present in ordinary observation. Conversely, conduct in private may be publishable if it exposes serious wrongdoing or matters of real public concern.
Statutory framework
There is no Privacy Act creating a comprehensive domestic tort. The statutory foundation is the Human Rights Act 1998, which incorporates Convention rights into domestic adjudication and obliges courts, as public authorities, to act compatibly with those rights. Misuse of private information is a common law cause of action developed under that statutory and constitutional influence.
Pro unlocks every section in full — doctrinal analysis, academic-debate, worked-essay walkthroughs, and exam traps — plus all practice questions and PDF export for revision.
Not ready for Pro? A free account lets you return here and bookmark the note.
Landmark cases
The landmark cases show the movement from equitable confidence to a distinct privacy action. Campbell v MGN Ltd is the essential starting point. The Mirror was entitled to correct Campbell’s public denial of drug addiction, but the House of Lords held by majority that the additional details and photographs of her Narcotics Anonymous treatment crossed the line. The case illustrates the two-stage structure: reasonable expectation of privacy followed by balancing against expression. It also demonstrates that a publication may be partly justified and partly excessive.
Douglas v Hello! Ltd occupies an intermediate position. The claimants had sold authorised wedding photographs to one magazine, while Hello! published unauthorised photographs. The House of Lords recognised protectable interests, though the commercial and privacy elements were intertwined. The case is valuable because it prevents simplistic statements that privacy protects only distress or dignity. Control over exclusive private occasions may have commercial consequences, but the underlying information can still be private.
Mosley v News Group Newspapers is the leading first-instance authority on sexual privacy and public interest. The News of the World alleged a Nazi-themed sexual orgy. Eady J found no sufficient public interest in publication of the intimate material. The case is important for separating moral disapproval from public interest. Adult sexual conduct, however unconventional, is not publishable merely because readers are curious.
Murray v Express Newspapers and Weller v Associated Newspapers develop the protection of children. Both reject the crude proposition that photography in a public place can never engage privacy. The child’s age, vulnerability, lack of consent, parental conduct and the use to which images are put all matter. These cases are especially useful in problem questions involving paparazzi photographs or children of public figures.
PJS v News Group Newspapers is central on injunctions and the public domain. The Supreme Court continued an injunction despite substantial overseas and internet dissemination. The decision confirms that further domestic publication may still cause additional harm and that privacy interests of a family may survive partial disclosure. It also warns against treating online leakage as a legal trump card for publishers.
ZXC v Bloomberg is the leading modern authority on suspects under criminal investigation. The Supreme Court confirmed a legitimate starting point that a person under investigation before charge has a reasonable expectation of privacy in information relating to that investigation. The case is not absolute: public interest may justify identification in particular circumstances. But it powerfully rejects the assumption that suspicion alone makes identity fair game.
Taken together, the cases require close factual calibration. The strongest answers do not recite outcomes. They ask what information was disclosed, why it was private, what legitimate public interest was advanced, and whether the mode and extent of publication were proportionate.
Doctrinal development
Doctrinally, misuse of private information is a modern common law wrong with equitable ancestry. The older action for breach of confidence protected information communicated in circumstances of confidence. It was relational and obligation-based. The modern action protects information because of its private character. A duty may arise even where the defendant never received the information from the claimant and never promised confidentiality. This shift explains why the courts now speak directly of reasonable expectation of privacy.
Pro unlocks every section in full — doctrinal analysis, academic-debate, worked-essay walkthroughs, and exam traps — plus all practice questions and PDF export for revision.
Not ready for Pro? A free account lets you return here and bookmark the note.
Academic debates
Academic commentary has focused on the conceptual basis of privacy, the legitimacy of judicial development, and the relationship between privacy and expression. The central question is whether misuse of private information is best understood as a dignitary wrong, an autonomy-based wrong, an equitable obligation, or a Convention-driven balancing exercise.
Gavin Phillipson has been influential in analysing the Human Rights Act’s horizontal effect. On this view, the courts do not simply apply Articles 8 and 10 directly between private parties. Rather, they develop the common law so that judicial determination is compatible with Convention values. This explains both the legitimacy and the limits of the new action.
Pro unlocks every section in full — doctrinal analysis, academic-debate, worked-essay walkthroughs, and exam traps — plus all practice questions and PDF export for revision.
Not ready for Pro? A free account lets you return here and bookmark the note.
Comparative perspective
A brief comparative perspective helps explain why English law developed cautiously. In the United States, privacy torts were famously systematised by Prosser into intrusion upon seclusion, public disclosure of private facts, false light, and appropriation of likeness. But US law is constrained by the First Amendment.
Pro unlocks every section in full — doctrinal analysis, academic-debate, worked-essay walkthroughs, and exam traps — plus all practice questions and PDF export for revision.
Not ready for Pro? A free account lets you return here and bookmark the note.
Worked tutorial essay
Question: The English action for misuse of private information has achieved an acceptable balance between personal autonomy and freedom of expression. Discuss.
A strong answer should resist both easy celebration and easy condemnation. Misuse of private information has undoubtedly created meaningful protection for personal autonomy where the older common law was deficient. Yet the balance remains unstable because the action is judge-made, highly fact-sensitive, and dependent on proportionality assessments which may be difficult to predict. The better view is that the modern law has achieved a principled structure, though not complete certainty.
The starting point is historical. English law did not recognise a general tort of privacy. Claimants had to rely on indirect actions such as breach of confidence, trespass, nuisance, copyright or defamation. Those actions protected privacy only incidentally. Defamation, for example, protects reputation against damaging statements; it does not help where the information is true but intimate. Trespass protects bodily integrity and land, not unwanted publicity. Breach of confidence was more promising, but its traditional form required a confidential relationship or circumstances importing confidence. That was ill-suited to intrusive journalism, paparazzi photography and third-party leaks.
The Human Rights Act 1998 enabled the courts to reshape the common law. Article 8 protects private and family life; Article 10 protects freedom of expression. The courts, as public authorities, must act compatibly with both. The result is not direct liability under the Convention between private parties, but common law development through Convention values. This is constitutionally significant. It avoids the fiction that newspapers are themselves bound by the Human Rights Act as public authorities, while ensuring that a court does not determine private litigation in a way inconsistent with Convention rights.
Pro unlocks every section in full — doctrinal analysis, academic-debate, worked-essay walkthroughs, and exam traps — plus all practice questions and PDF export for revision.
Not ready for Pro? A free account lets you return here and bookmark the note.
Common exam traps
First, do not call the action a general tort of invasion of privacy. English law recognises misuse of private information as a distinct cause of action. The distinction matters because liability depends on identifying private information and misuse, not merely offensive intrusion.
Pro unlocks every section in full — doctrinal analysis, academic-debate, worked-essay walkthroughs, and exam traps — plus all practice questions and PDF export for revision.
Not ready for Pro? A free account lets you return here and bookmark the note.
Practice questions
See practice questions section below.
Further reading
See further reading section below.
Diagrams
Use this sequence in problem questions: define the information before balancing rights.
Practice questions
State the two-stage test for misuse of private information and explain why it is not the same as defamation.
Why is section 12 of the Human Rights Act 1998 important in privacy cases?
Further reading
- Michael A Jones and others, Clerk & Lindsell on Torts 24th edn, Sweet & Maxwell, 2023, chs on privacy and breach of confidence
- James Goudkamp and Donal Nolan, Winfield and Jolowicz on Tort 20th edn, Sweet & Maxwell, 2020, ch on misuse of private information
- Simon Deakin, Angus Johnston and Basil Markesinis, Markesinis and Deakin’s Tort Law 8th edn, Oxford University Press, 2019
- Gavin Phillipson, Transforming Breach of Confidence? Towards a Common Law Right of Privacy under the Human Rights Act (2003) 66 MLR 726
- NA Moreham, Privacy in the Common Law: A Doctrinal and Theoretical Analysis (2005) 121 LQR 628
- Eric Barendt, Privacy and the Press (2004) 63 CLJ 169
- Robert Stevens, Why There Will Never Be an English Common Law Privacy Tort in Andrew Robertson and Tang Hang Wu (eds), The Goals of Private Law (Hart 2009)
- Campbell v MGN Ltd [2004] UKHL 22, [2004] 2 AC 457link
- ZXC v Bloomberg LP [2022] UKSC 5, [2022] AC 1158link
Want the rest of the canon?
Get the free “50 Must-Know Cases for UK Law Exams” guide plus weekly study tips, sent to your inbox.