header-logo header-logo

12 January 2022
Issue: 7962 / Categories: Legal News , Data protection
printer mail-detail

GDPR reaches across the Atlantic

‘Minimal’ activity such as offering subscriptions in the UK is enough to make a US online magazine subject to the General Data Protection Regulations (GDPR), the Court of Appeal has held in a landmark case

In Soriano v Forensic News & Ors [2021] EWCA Civ 1952, the claimant was a British citizen, living in the UK, and the defendants were a Californian online news publication and four journalists, all located in the USA. Businessman Walter Soriano alleged the defendants published articles which breached the Data Protection Act 2018 and GDPR, and constituted harassment, libel and malicious falsehood with the damage being caused in England and Wales where the claimant lives and has his main business.

At issue, however, was whether the courts of England and Wales had jurisdiction and whether the claimant could argue a case under GDPR since the publication was targeted at US readers. The High Court allowed the libel claim and some claims on issue of private information to go ahead but refused permission for claims in data protection, malicious falsehood or harassment.

The Court of Appeal allowed Soriano’s cross-appeal on the GDPR claim but dismissed the defendants’ appeal on libel and malicious falsehood.

Giving the lead judgment, Lord Justice Warby found the publication did have an ‘establishment’ in the EU, satisfying the requirement for ‘territorial scope’ under the GDPR. He said they ‘intended’ to make their output known in the UK and EU and ‘expressly solicited subscriptions… via the Patreon platform. They succeeded in securing three subscriptions in sterling and three in Euros. This may be "minimal" activity but nothing more is required’.

5RB, whose barristers acted for the claimant, said the judgment was the first appellate decision on the territorial reach of the GDPR and would ‘have far-reaching implications for all US media corporations’.

On defamation, it said the judgment was now the ‘definitive authority’ on s 9 of the Defamation Act 2019, which applies to all defendants domiciled outside the UK and is a ‘personal jurisdiction provision, not a subject-matter jurisdiction provision. Parliament has modified common law forum conveniens in a particular way, not introduced a new form of jurisdictional bar’.

Issue: 7962 / Categories: Legal News , Data protection
printer mail-details

MOVERS & SHAKERS

Cripps—Radius Law

Cripps—Radius Law

Commercial and technology practice boosted by team hire

Switalskis—Grimsby

Switalskis—Grimsby

Firm expands with new Grimsby office to serve North East Lincolnshire

Slater Heelis—Will Newman & Lucy Spilsbury

Slater Heelis—Will Newman & Lucy Spilsbury

Property team boosted by two solicitor appointments

NEWS
The Supreme Court has delivered a decisive ruling on termination under the JCT Design & Build form. Writing in NLJ this week, Andrew Singer KC and Jonathan Ward, of Kings Chambers, analyse Providence Building Services v Hexagon Housing Association [2026] UKSC 1, which restores the first-instance decision and curbs contractors’ termination rights for repeated late payment
Secondments, disciplinary procedures and appeal chaos all feature in a quartet of recent rulings. Writing in NLJ this week, Ian Smith, barrister and emeritus professor of employment law at UEA, examines how established principles are being tested in modern disputes
The AI revolution is no longer a distant murmur—it’s at the client’s desk. Writing in NLJ this week, Peter Ambrose, CEO of The Partnership and Legalito, warns that the ‘AI chickens’ have ‘come home to roost’, transforming not just legal practice but the lawyer–client relationship itself
A High Court ruling involving the Longleat estate has exposed the fault line between modern family building and historic trust drafting. Writing in NLJ this week, Charlotte Coyle, director and family law expert at Freeths, examines Cator v Thynn [2026] EWHC 209 (Ch), where trustees sought approval to modernise trusts that retain pre-1970 definitions of ‘child’, ‘grandchild’ and ‘issue’
Fresh proposals to criminalise ‘nudification’ apps, prioritise cyberflashing and non-consensual intimate images, and even ban under-16s from social media have reignited debate over whether the Online Safety Act 2023 (OSA 2023) is fit for purpose. Writing in NLJ this week, Alexander Brown, head of technology, media and telecommunications, and Alexandra Webster, managing associate, Simmons & Simmons, caution against reactive law-making that could undermine the Act’s ‘risk-based and outcomes-focused’ design
back-to-top-scroll