Misleading publications: Court of Appeal opens the door to data protection remedies

In Vince v. Associated Newspapers Ltd [2026] EWCA Civ 899, the Court of Appeal held that the presentation of a misleading headline and image can amount to unfair processing of personal data under the UK GDPR, even where a libel claim would otherwise fail. Joanne Elieli and Daniel Bishop examine the decision and what it means for publishers and other online content creators in an article for PLC Magazine.
 

Introduction

For the first time, a newspaper publisher has been held liable for the unfair processing of personal data in respect of a news article where a libel claim arising from the same publication had already failed. The Court of Appeal’s decision in Vince v Associated Newspapers Ltd marks a significant development in the relationship between defamation law and data protection ([2026] EWCA Civ 899). It establishes that misleading editorial presentation may constitute unfair processing under Article 5(1)(a) of the retained EU law version of the General Data Protection Regulation (2016/679/EU) (UK GDPR) (Article 5(1)(a)), giving rise to a potential compensation claim under Article 82 of the UK GDPR (Article 82), even where the publication, read as a whole, is not defamatory (see box “Defamation claim”).
 

The relevant issue

The Daily Mail published an article under the headline “Labour repays £100,000 to ‘sex harassment’ donor”, accompanied by photographs of the prominent entrepreneur and environmental campaigner, Dale Vince. Mr Vince was not the donor accused of sexual harassment and the body of the article made that clear. Mr Vince’s complaint was that the juxtaposition of his image with the headline created a false and damaging impression that he was the donor referred to. The online version was amended within approximately an hour of publication, but his complaint also concerned the print publication and its continued availability.
 

Assessing fairness

The central issue in Vince was whether the fairness requirement in Article 5(1)(a) should be assessed through the same approach required by Charleston v News Group Newspapers Ltd ([1995] 2 AC 65). The High Court concluded that approach should apply ([2025] EWHC 1411 (KB)). However, the Court of Appeal disagreed.

The Court of Appeal accepted that fairness under the UK GDPR is context dependent and requires a careful balancing exercise involving the competing interests of the data subject, the controller, freedom of expression and the public interest. The court rejected the automatic importation of the rule in Charleston into the requirement of fairness under Article 5(1)(a). It said that fairness under the UK GDPR is an autonomous concept and cannot simply be equated with the law of defamation.

 
In this context, the court drew a crucial distinction between inaccurate content and misleading presentation. A publication may not be inaccurate when read in full but can still be unfair processing because of the misleading way in which the data has been presented. In Vince, the juxtaposition of the headline and photos created a misleading impression, even though the article, taken as a whole, made clear that Mr Vince was not the donor accused of sexual harassment.
 

Editorial presentation

The significance of this outcome lies in the court’s focus on how the article was presented to its audience. The court was prepared to proceed on the basis that many readers do not read beyond headlines and pictures, and therefore cannot be assumed to have absorbed both the misleading content and the clarifying material in the full article. This approach sits uneasily with, but does not displace, the rule in Charleston in defamation claims.
 

IPSO Editors’ Code of Practice

The court held that the Independent Press Standards Organisation’s Editors’ Code of Practice (the Code) was a relevant privacy code to which the court should have regard when conducting the Article 5 fairness assessment, including in light of:

+ Section 12 of the Human Rights Act 1998, which applies if a court is considering whether to grant any relief which, if granted, might affect the exercise of the right to freedom of expression.

+ The approach in Sicri v Associated Newspapers Ltd, in which the High Court upheld a claim for misuse of private information against a newspaper publisher ([2020] EWHC 3541 (QB)).

Clause 1 of the Code requires publishers to take care not to publish inaccurate, misleading or distorted information or images, including headlines that are not supported by the text. The court considered the Code to be a material factor in the balancing exercise between data protection rights and the right to freedom of expression.

In the context of Mr Vince’s claim, the court concluded that Associated Newspapers (as publisher of the Daily Mail) had failed to take adequate care to avoid publishing the misleading information, and that the headline next to the photo would have misled many casual readers, who would encounter the headline and photos without reading the text.
 

The journalism exemption

The court also held that the special purposes exemption in Schedule 2 to the Data Protection Act 2018, insofar as it is relied on for journalistic purposes, could not assist Associated Newspapers on these facts.

The special purposes exemption requires there to be a reasonable belief on the part of the publisher that the publication is in the public interest. In assessing whether the publisher held this reasonable belief, the exemption requires the publisher to have regard to the Code.

As the misleading presentation was avoidable and because Associated Newspapers had failed to take adequate care to avoid it, the court held that Associated Newspapers could not reasonably have believed that publishing the article in the form that it did was in the public interest.
 

A new avenue in media litigation

The court granted summary judgment for Mr Vince on liability and ordered damages to be assessed. Associated Newspapers accepted that Mr Vince had suffered some material damage. That left open important questions about the assessment of compensation, including the extent to which distress or reputational harm may be recoverable as non-material damage under Article 82.

The court described the claim as novel, noting that the parties had not identified any previous successful unfair processing claim against a newspaper on comparable facts. Although the court also considered abuse of process arguments arising from the earlier defamation proceedings, it ultimately allowed the UK GDPR claim to proceed and granted summary judgment for Mr Vince on liability. Given the broader significance of the decision, and its potential to avoid some of the hurdles associated libel claims, this is unlikely to remain an isolated case.

Claimants whose libel claims may ordinarily be defeated by the rule in Charleston may, in appropriate cases, now consider whether the presentation of their personal data was fair, even if the publication as a whole was not defamatory.

The court was careful to emphasise that fairness under Article 5(1)(a) is context-specific and declined to formulate a universal test. However, the decision does establish that a publication that is not defamatory may still amount to the unfair processing of personal data through a misleading combination of headlines, images and other editorial techniques.

The rule in Charleston may still defeat a libel claim but it will not necessarily defeat a data protection claim based on unfair processing. The court has therefore opened a distinct, and potentially significant, new avenue in the world of media law litigation.
 

Practical takeaways

Vince will have implications far beyond newspapers, particularly in the age of “click-bait” where headlines, thumbnails, previews and other forms of editorial presentation are all used to increase engagement with digital content. The court’s reasoning may also have wider relevance beyond traditional newspapers, including to online publishers, bloggers, influencers and podcasters whose headlines, thumbnails, captions or promotional extracts process personal data about identifiable individuals.

Publishers and online content creators should not assume that an accurate body of text will cure a misleading headline, image, caption or preview. Where personal data is presented in a way that may mislead a substantial group of casual readers, there may be exposure under the UK GDPR even if a defamation claim would fail. Editorial teams should therefore test the overall presentation of content, not just the literal accuracy of the article, particularly where allegations of misconduct are placed near photos or other identifiers of individuals.

This article first appeared in the September 2026 issue of PLC Magazine: http://uk.practicallaw.com/resources/uk-publications/plc-magazine