Misuse of private information UK: claims and damages

Your private information should remain private. When it is accessed, shared, or published without justification, the law provides protection. In the UK, the tort of misuse of private information allows you to take action if your privacy has been unlawfully violated. Whether it involves medical data, financial details, or intimate images, you may be entitled to compensation and legal remedies. In many cases, the guidance of an experienced litigation solicitor can be essential in protecting your rights, securing urgent remedies, and pursuing compensation effectively.

Quick answer: What is misuse of private information?

• It occurs when private information is used or disclosed without lawful justification.
• It protects highly personal data (health, finances, relationships, images).
• You can claim even without financial loss (distress alone is sufficient).
• It is a common law tort, not a specific statute.

If your private information has been exposed or misused, don’t wait. A specialist litigation solicitor can act quickly to stop further disclosure and secure compensation.

What is the tort of misuse of private information in UK law?

The tort of misuse of private information is a judge-made legal claim developed to protect privacy under Article 8 of the European Convention on Human Rights.

To succeed, courts apply a two-stage test:

1. Reasonable expectation of privacy: Would a reasonable person consider the information private?
2. Balancing exercise: Does your right to privacy outweigh the other party’s right to freedom of expression?

This framework is now the primary route for privacy claims in the UK, particularly in cases involving media exposure or personal data misuse.

Misuse of private information vs breach of confidence: what’s the difference?

Although related, these claims are legally distinct.

Misuse of private information:

• Focuses on the private nature of the information
• No relationship required
• Commonly used against media, employers, or third parties

Breach of confidence:

• Focuses on a relationship of trust (e.g. doctor–patient)
• Requires an obligation of confidentiality
• Traditionally used for professional or commercial secrets

In practice, solicitors often plead both claims together to maximise protection.

What counts as private information and common misuse examples

To bring a claim, you must show that the information had a reasonable expectation of privacy. Courts assess this based on several key factors:

• Nature of the information (medical, sexual, financial = highly protected)
• Context (private setting vs public exposure)
• Whether consent was given
• Personal characteristics (children receive stronger protection)

If you have already shared the information publicly, your expectation of privacy may be reduced.

Common misuse of personal information examples

Typical situations that may amount to misuse include:

• Medical records accessed or disclosed without justification
• Private photos or videos published without consent
• Employers sharing sensitive employee information
• Intimate images shared online (“revenge porn”)
• Media exposing private life details without genuine public interest

The key requirement is active misuse (e.g. disclosure or publication). Mere poor data security is usually handled under data protection law, not this tort.

How to prove misuse of private information

To succeed in a claim, you must provide clear evidence that your private information was misused and caused harm.

Key evidence includes:

• Proof of disclosure or publication: Screenshots, links, emails, or witness statements showing how the information was shared.
• Nature of the information: Evidence that the content was private (e.g. medical records, personal messages).
• Lack of consent: Messages or records showing you did not authorise the disclosure.
• Impact on you: Evidence of distress, reputational harm, or financial loss (e.g. medical notes, employer impact, therapy records).
• Timeline of events: When the misuse occurred and how long the information remained accessible.

Courts assess both the intrusiveness of the disclosure and the real impact on your life.

When should you take legal action for misuse of private information?

Not every privacy breach leads to a strong legal claim. Legal action is usually appropriate where the misuse is serious, unjustified, or ongoing.

You should consider taking action if:

• Your private information has been published or shared without consent
• The disclosure has caused distress, reputational harm, or financial loss
• The information is highly sensitive (e.g. medical, sexual, financial)
• The misuse is ongoing or likely to be repeated
• The other party refuses to remove the content or resolve the issue

Remedies and compensation for misuse of private information

If your private information has been misused, courts can grant both urgent protections and financial compensation, depending on the severity of the breach.

Available remedies

• Injunctions: Urgent court orders to stop or prevent publication
• Damages: Financial compensation for harm suffered
• Account of profits: Recovery of profits made from the misuse
• Content removal: Orders requiring deletion or restriction of access

In urgent situations, especially involving media or online publication, immediate legal action may be necessary to obtain an injunction and prevent further harm.

Compensation: what can you claim?

Damages are awarded based on the impact of the breach. You may claim for:

• Material damage: Financial losses (e.g. loss of income, fraud)
• Non-material damage: Distress, anxiety, reputational harm
• Loss of control: Compensation for losing control over your private information

Typical compensation ranges:

• Minor breaches: £750 – £1,500
• Serious intrusions: £10,000 – £50,000+
• Severe or prolonged cases: £100,000+

Courts increasingly recognise that emotional distress alone is enough to justify compensation.

Time limits for misuse of private information claims

Strict legal deadlines apply and missing them can prevent you from bringing a claim.

• 6 years: Standard limitation period for most claims
• 1 year: Common for media and publication-related cases
• 3 years: If claiming psychological injury

The applicable deadline depends on the nature of your case, particularly whether it involves publication or personal harm.

FAQs

What is misuse of personal information? It is the unlawful use or disclosure of private information that interferes with your right to privacy under UK law, even if no financial loss occurs.

Can I claim compensation for misuse of private information? Yes. You can claim compensation if your private information was misused and caused distress, reputational harm, or financial loss.

How much compensation can I get for misuse of private information? Compensation typically ranges from £750 for minor breaches to £50,000+ for serious intrusions, depending on the severity and impact.

What counts as private information in UK law? Information is considered private if a reasonable person would expect it to remain confidential, such as medical records, financial details, or intimate aspects of personal life.

Can I take legal action even if the information is true? Yes. A claim can still succeed if the information is private and its disclosure was unjustified, even if it is factually accurate.

This guide provides general information on UK law only and is not legal advice; outcomes depend on your specific circumstances, so you should seek advice from a qualified solicitor before taking action.

Misuse of private information gives you a clear legal path to protect your privacy and seek compensation. By understanding your rights, acting promptly, and gathering evidence, you can hold those responsible accountable and prevent further harm to your personal life and reputation.

Your privacy deserves protection

If your private information has been misused, a specialist litigation solicitor from Qredible’s network can help you assess your case, protect your rights, and take appropriate legal action.

NEXT STEPS:

• Preserve evidence immediately: Take screenshots, save URLs, messages, and any proof of publication or sharing before content is removed.
• Limit further exposure: Request removal of the content and avoid engaging publicly, which could worsen the situation or weaken your position.
• Seek early legal advice: A specialist privacy solicitor can assess your case quickly and advise on urgent steps such as injunctions or compensation claims.