Scottish Court Holds Non-Compliance With Data Protection Law A Material Breach Of Contract

The Outer House of the Scottish Court of Session held that non compliance with data protection laws amounted to a material breach of contract. In the case of Soccer Savings (Scotland) Limited v Scottish Building Society, [2013] CSOH 51, the court decided that lack of proper registration and unlawful use of a customer database went to the heart of the contract, enabling the innocent party to rescind it.

In Soccer Savings, a Scottish Building Society (SBS) sought to defend its decision to rescind an unsatisfactory contract with a football affinity savings scheme promoter on the basis (among others) that the promoter was in breach by failing to comply with the Data Protection Act 1998 (DPA). The contract required both parties, as data controllers, to use reasonable endeavours to comply with statutory data protection requirements, and to take appropriate technical and organisational measures against unauthorised or unlawful processing of personal data. Meanwhile, the promoter failed to comply with the registration obligations under the DPA, and unlawfully used a customer database belonging to the previous scheme provider.

The court held that while the failure to register was not necessarily a material breach, the unlawful use of the database clearly went to the heart of the agreement. The promoter's plan to fulfil its part of the contract depended on using the database. The constraints of the DPA and the failure of...

To continue reading

Request your trial

VLEX uses login cookies to provide you with a better browsing experience. If you click on 'Accept' or continue browsing this site we consider that you accept our cookie policy. ACCEPT