Can a misleading newspaper article breach data protection law even if it is not defamatory?

In my previous blog about defamation based on a photograph or headline alone, I looked at Dale Vince’s unsuccessful libel claim against Associated Newspapers. The Court of Appeal has now considered the same newspaper articles from a different angle in Vince v Associated Newspapers Ltd [2026] EWCA Civ 899. Its judgment matters to anyone whose name or image has been presented by the media in a misleading way: an article may not be defamatory when read from beginning to end, but the way personal data is used can still be unfair under the UK GDPR.

The dispute arose after the Daily Mail and Mail+ placed photographs of Mr Vince directly beneath headlines about Labour repaying money to a “sex pest” or “sex harassment” donor. The donor referred to by the headline was another person. Although the body of the article made that clear, the Court accepted that many casual readers would see only the headline and pictures and could wrongly believe they referred to Mr Vince. The Court of Appeal allowed his appeal and awarded summary judgment on liability for unfair processing, with damages to be assessed.

What this judgment means for people affected by misleading media coverage

The decision provides an important route to redress where a newspaper’s use of a name, photograph, headline or caption creates a damaging impression, even though the full article avoids a defamatory meaning. It does not make every confusing headline a data protection breach, but it confirms that presentation, context, reasonable expectations and actual harm all matter.

Can I bring a data protection claim as well as (or instead of) suing for defamation?

Yes. Defamation and data protection are separate causes of action, even where both arise from the same publication and the alleged harm is partly reputational.

Defamation asks whether a publication, read according to the rules of defamation law, bears a defamatory meaning and has caused or is likely to cause serious harm. A data protection claim can instead ask whether personal data, such as a person’s name or photograph, was processed lawfully and fairly. Article 5(1)(a) of the UK GDPR requires personal data to be processed “lawfully, fairly and in a transparent manner”, while Article 82 provides a right to compensation where an infringement causes material or non-material damage.

The Court stressed that such a claim is available in principle against a newspaper. However, it is not a way to avoid the requirements of defamation law simply by giving the same complaint a different label. The claimant must identify a genuine breach of data protection law and establish recoverable damage.

How is this different from suing for defamation?

The important difference is the legal question being asked.

In defamation, the court determines the meaning conveyed by the publication to the ordinary reasonable reader. Under the rule in Charleston v News Group Newspapers Ltd, a claimant cannot normally isolate a headline, photograph or caption and ignore the clarifying text. The publication must be read as a whole. Mr Vince’s defamation claim therefore failed because the full article made clear that the sexual harassment allegation concerned somebody else.

Fair processing is broader and depends on context. It involves an objective balance between the interests of the individual, the publisher and the public. The person’s reasonable expectations, the purpose and manner of the processing, whether it was proportionate and the harm caused may all be relevant. Crucially, the Court held that this test does not automatically inherit the Charleston “read it as a whole” approach: the same article that defeats a defamation claim can still amount to unfair processing, because many readers never get past the headline and photograph.

For newspapers, the Editors’ Code of Practice was especially important. It requires the press to take care not to publish inaccurate, misleading or distorted information or images, including headlines that are not supported by the text. That obligation is not confined to whether every sentence is technically accurate. A presentation can still be misleading and unfair. Nor could the journalism exemption in the Data Protection Act 2018 rescue the publisher here: the Editors’ Code still had to be factored in and a misleading juxtaposition is difficult to characterise as being in the public interest.

How do courts decide if a photo or headline was unfair?

The Court of Appeal declined to create a single test for every unfair processing case. Fairness is highly dependent on context. A practical assessment should consider:

The distinction between accuracy under Article 5(1)(d) and fairness under Article 5(1)(a) is crucial. The two are assessed separately and satisfying one does not satisfy the other.

What if my case has already been through court once?

It is possible to pursue a second claim, but it is risky. The court can strike out a second claim as an abuse of process where a claimant is really just trying to relitigate what should have been raised first, though the court looks at the whole picture rather than applying a fixed rule. Mr Vince’s claim survived, it was early, genuinely novel and backed by new advice, but the first-instance judge struck it out as an abuse of process and it took an appeal to reinstate it. Anyone with overlapping defamation, privacy and data protection claims should get advice early, so every option is considered together from the outset to avoid a strike out or a near miss.

Can I win without a full trial?

Yes, where the evidence shows that the publisher has no real prospect of successfully defending liability and there is no other compelling reason for a trial. Summary judgment is a decision made without a full trial because the outcome on liability is sufficiently clear.

In this case, the Court of Appeal held that Associated Newspapers had no real prospect of defending the claim and the parties had agreed that liability could be decided without a trial. Judgment was entered for Mr Vince, leaving the amount of damages to be assessed.

That result turned on the evidence in this case. Open questions remain about whether harm must always be proved, whether harm is compensable and whether Mr Vince had sufficiently established distress. Anyone considering a claim will still need evidence of the publication, the processing complained of and the loss or harm caused.

Next steps

If inaccurate or misleading media coverage has affected you or your business, acting quickly can improve the chances of preserving evidence, seeking a correction or removal, limiting damage and identifying the right legal claim. Kevin Modiri is a Partner at Nelsons Solicitors and specialises in privacy claims, data protection and defamation. Nelsons can advise on urgent steps, complaints to publishers or regulators and claims for compensation where appropriate.