In a recent judgment, FKJ v RVT and others [2023] EWHC 3 the English High Court refused to strike out a misuse of private information (‘MPI’) claim taken by a former employee against their employer. The claim related to the use of the employee’s personal WhatsApp messages by her employer in defending a claim that she had taken against them that she had been subjected to sexual harassment over the course of her employment and was unfairly dismissed. The employer produced and relied on an enormous bundle of her private WhatsApp messages to undermine the employee’s credibility. The employer had retained 18,000 WhatsApp messages containing day-to-day information about multiple aspects of the employee’s life as well as intimate messages to her partner. The employee’s claim before the Employment Tribunal was ultimately unsuccessful but she initiated a MPI claim in relation to the employer’s possession of her private messages.

In the MPI claim, the employee questioned the provenance of the WhatsApp messages, which included complete chat histories with her partner and best friend. The message log spanned over several years of her employment and extended to chats following termination of her employment. The employee alleged that the employer had hacked into WhatsApp Web and obtained access to all her WhatsApp messages. The employer defended its possession and use of the messages on the basis that one portion had been found as downloads on the employee’s work laptop after she left the firm and another portion had been provided to the firm by an ‘anonymous source’.

The MPI claim, the Court indicated, was unlikely to face significant problems if it moved to full hearing. Key factors underpinning this provisional conclusion were the absence of an explanation from the employer as to how the WhatsApp messages would lose their private character by being downloaded to a work laptop and the absence of a justification for the retention or use of the messages particularly in light of their limited probative value (only 20 of 18,000 messages were deemed to be strictly probative of an issue in the employment claim). In particular, the judgment questioned the retention of the messages and failure to notify the employee when they were found, given their obviously private character (and the absence of any proceedings in issue at the time). The Court characterised the employer’s actions as a “very serious breach of her private information” and the fact that the employment tribunal hearing was held in public escalated the gravity of the breach. While no award of damages has been made at the date of writing, the Court indicated that damages would factor in the claimant’s loss of control of her private information and the distress caused by the employer’s use and dissemination of it.

While data protection was not considered in the judgment, the question marks raised over the retention and use of the messages could point to issues for the employer in identifying an appropriate legal basis for its processing activities, which include the review, use in litigation and retention of the entirety of the WhatsApp messages in its possession.

The Court emphasised that private information does not lose its character merely because it is downloaded to a work laptop. The judgment draws a clear line between company information and private information even where both are held on employer’s electronic devices. It also highlights restrictions on subsequent use of private information and the potential unintended consequences for employers in doing so, such as defending an MPI claim. The judgment provides a timely reminder for employers on the need for caution when seeking to rely on or use an employee’s private information, particularly in the context of a dispute.