The Data Protection Society has placed a formal complaint with the European Commission that, ‘Regulation 27’, is incompatible with the European Directive on Data Protection (95/46/EC). The response from DVLA was an extensive Legal Opinion which attempted to show that DVLA complies with the Directive. In fact, in the most part, the Opinion showed what DVLA should do but not, of course, what it actually does in practice.

However, DVLA did manage to hoodwink the European Commission into thinking that this somehow resolved the issue. It didn’t. The issue we placed before the Commission was to ask them to rule on whether, ‘Regulation 27’, was compatible with the Directive NOT whether DVLA complied with the Directive. This is completely irrelevant and is a completely separate issue. We have asked the Commission to address the issue we placed before it and await a response.

Furthermore, we have asked the Commission if all Member States disclose personal data for the same reasons, as the Directive must apply equally across the EU. Once again, the Commission has failed to respond. If most or all Member States refuse to disclose personal data for the reasons given by DVLA, then there is no harmony and the Commission has a duty to ensure all Member States act in the same way.

The Office of the Information Commissioner holds that, ‘Regulation 27’, is law and that DVLA can disclose personal data for any cause which DVLA considers to be reasonable. In practice, this means that personal data will be disclosed for almost any reason.