It has often been said that information is power. The corollary is also true. The control and retention of information and unnecessary secrecy assists those in power to remain in power. In many western democracies, certainly in the UK and the USA, access to information has been freed up by law. In the UK there are primarily two pieces of legislation that allow the public to gain information held by public authorities. Personal data can be obtained under the authority of the Data Protection Act. Information from public bodies can be obtained under the authority of the Freedom of Information Act.
There is no Freedom of Information Act in Gibraltar. There is a Data Protection Act in Gibraltar. The lack of a Freedom of Information Act is a further democratic deficit that exists in Gibraltar. It leaves the government, public service and other public authorities free to handle and manage information in a manner best suited to protect itself rather than the public, which it serves. This can result in manipulation of information that that can lead to a regressive state. It is a secretive system of government that does not sit well in a democracy and in this age of communication technology.
What is worse is a cynical introduction of legislation intended to undo lack of information and secrecy. I have complained in my previous article that the GSD proposals for parliamentary reform (none of it is electoral reform although new press releases disingenuously refers to them as such) are lacking; not just because of their content, but also because on reading the detail, they give with one hand and take away with the other. This is exactly what the GSD Government has done when it enacted the Data Protection Act, specifically as regards the manner in which requests for information for personal data are handled.
The Data Protection Commissioner ("Commissioner"), who administers the Data Protection Act, is the Gibraltar Regulatory Authority ("GRA"). This is a grand sounding organisation giving the impression of independence redolent of checks and balances. The reality is very diffferent, whilst it is described as a corporation sole, it is not a corporation at all in the sense that it does not have a commission or board or council to govern it independently or independent non-executive directors. What it is , essentially, is one person, presently Paul Canessa, who is appointed and described as the "Chief Executive Officer" ("CEO"). The CEO is empowered to conduct the affairs of the GRA and to exercise and perform such powers, duties as may be vested in the GRA.
Let us analyse the GRA. The CEO (and so the GRA) is appointed by the Chief Minister. The CEO can be removed, on appropriate grounds (but not subject to any system of statutory appeal so there would only be resort to the expensive remedy of Judicial Review in the Supreme Court against removal) by the Chief Minister. Funding of the GRA comes from Parliament. I will repeat my constant criticism that the Government benches of and so Parliament in Gibraltar is controlled by the executive arm of government and so, in the end, the Chief Minister. In addition the GRA has to have regard, under the Act, to government policy (we all know that means the policy of the Chief Minister). We should, however, be thankful for small mercies, no member of Parliament can be the GRA. It is this that the Act establishing it considers provides "independence".
The whole point of having a Data Protection Act under which personal data can be obtained from public bodies is that one should have the right or discretion to obtain information on request exercised by an independent body. I wonder how independent the GRA can be seen to be in light of the peculiarities that I have highlighted? One should remember that what is important is perception as well as reality. It is not enough to claim independence if, objectively analysed, the system has glaring deficiencies indicative that such independence can be compromised. The archetypal example of this is the length that established international organisations and rules go to ensure objective safeguards intended to guarantee the independence of the judiciary, which are in large measure included in our own Constitution.
The system can be said to have failed if anyone is left with the feeling that he has been let down in the application of the Data Protection Act. I am in that position on the subject of the refusal by the Commissioner (the GRA) to provide me with a copy of the letter about me that the Chief Minister wrote to the Chairman of the Financial Services Commissioner.
Initially the Commissioner refused to admit the existence of the letter at all. I pointed out to him that the Chairman of the FSC had admitted to me that the letter existed. The Chairman had indicated to me also that the Chief Minister's letter was critical of me. In reply to a suggestion by me, at a social gathering, that I may not seek re-appointment to the FSC for a third term, he replied words to the effect that if I saw the contents of the Chief Minister's letter this was probably a wise decision. Only then was the Commissioner forced to admit to its existence. He has also been forced to admit that it is personal data and so subject to disclosure under the Data Protection Act. His admission takes the form that he justifies non-disclosure under an exemption, for the exemption to apply the letter must constitute personal data. I consider and have pointed out to him that the exemption he relies on is inapplicable. He has not answered my arguments and my last letter to the Commissioner remains unanswered, as does my request to the Chief Minister for him to give me a copy of this letter.
You may ask why I have not pursued the issue further, if I consider the reasons for refusal to be inappropriate? The answer is simple first, non-disclosure already says a lot and secondly the recourse against such a decision is an appeal to the Magistrates Court and thereafter to the Supreme Court. As a lawyer I know the costs in time (neither of which I am prepared to waste) and money and risk in costs of doing that. I am not prepared to risk my hard earned cash on taking such steps, when what is happening, the refusal of disclosure, so obviously leads to suspicion of what the contents of the Chief Minister's letter might be. The cost in itself, I add quickly, is, through no fault of the court service or the judiciary, another, in my opinion, a barrier, to access by citizens to information and personal data.
In the UK the equivalent body that administers both the Data Protection Act and the Freedom of Information Act is an objectively independent Information Commissioner. There is also a Tribunal to which one can appeal against decisions made by him. Appeals to Tribunals is a much cheaper and more accessible process. It is only after the Tribunal has determined an appeal that the more complex and expensive court system comes into play. There is an appeal on points of law to the courts from the Tribunal. All in all a more independent, transparent and less costly system by which citizens can obtain personal data (under the UK's Data Protection Act) and wider information (under the UK's Freedom of Information Act) should there be an initial refusal by the Information Commissioner.
The moral of the story is that, in Gibraltar, it is not enough to have introduced the Data Protection Act. It is not enough to introduce, in the future, the Freedom of Information Act. It is essential to introduce it and change the procedure under the Data Protection Act. Changed in a a manner that they work and are seen to work independently, transparently and cheaply. They should be seen thus both at the initial stage before the Commissioner (who should be capable of being seen as objectively independent) and with a cheap first appeal to an administrative tribunal with simple procedures. This will make these Acts truly effective to provide a proper democratic check and balance on the government and the administration.
It is time that our politicians to stop treating the electorate with disdain and attributed to it a modicum of intelligence. Stop giving with one hand and taking away with the other, and be fair and reasonable. There is a moment when people react. We may not have reached it in Gibraltar but it is being reached in more and more countries, not only in the Middle East and North Africa but also in Europe, have a look at Greece and Spain.