Gunnar Assmy - stock.adobe.com

ICO complaint seeks answers from prosecutors over deleted Assange emails

An Italian journalist has complained to the data protection watchdog after the Crown Prosecution Service gave conflicting explanations over its deletion of key emails on WikiLeaks founder Julian Assange

The Crown Prosecution Service (CPS) is facing fresh pressure to explain why it deleted key emails exchanged with Swedish prosecutors over WikiLeaks founder Julian Assange.

A lawyer representing an Italian investigative journalist has complained to the Information Commissioner’s Office that the CPS has given inconsistent explanations for deleting the emails with the Swedes in 2014.

The complaint calls for the CPS to disclose all documentation and correspondence about its email deletion policy. It also calls for the CPS to release original documents, including metadata.

The CPS is currently representing the US prosecutors in the UK courts as Assange faces extradition to the US over charges under the US Espionage Act and the Computer Fraud and Abuse Act, after publishing sensitive US documents on WikiLeaks.

Investigative journalist Stefania Maurizi filed the complaint after the prosecution service released new information this year that appears at odds with claims made over the past six years about its email deletion policy.

“It is perturbing that a public body stated something to the commissioner, from 2018 to 2022, in the strongest and clearest terms, but which it now claims was entirely wrong,” the complaint states.

Maurizi, a journalist working for newspaper Il Fatto Quotidiano, said the deleted emails cover at least the period between 2010 and 2013, when the CPS, under former director of public prosecutions Keir Starmer, was making some of the “most crucial” decisions on the Assange case.

Assange, who has overseen a series of controversial leaks on WikiLeaks, including confidential US diplomatic cables and documents on the wars in Iraq and Afghanistan, was wanted for questioning by Sweden as part of a preliminary investigation into rape allegations. Sweden dropped the case in May 2017.

The CPS, which represented Swedish authorities in UK courts after Sweden issued a European arrest warrant in November 2010 and initiated extradition proceedings against Assange, exchanged multiple emails with Swedish prosecutors.

CPS’s role

Maurizi, who has worked as a media partner of WikiLeaks since 2009, has obtained emails from the Swedish Prosecution Authority (SPA) that show the CPS played an influential role in Sweden’s decision to attempt to extradite Assange in 2010.

One email from a lawyer in the CPS’s extradition unit to a Swedish colleague on 25 January 2011, first reported in l’Espresso, stated: “My earlier advice remains, that in my view, it would not be prudent for the Swedish authorities to try to interview the defendant in the UK.”

The same email disclosed by the Crown Prosecution Service was redacted.

The WikiLeaks founder, who is being held in Belmarsh high-security prison in south-east London, is awaiting the outcome of an appeal against his extradition to face charges in the US following a High Court decision in June 2023.

The 52-year-old faces 18 charges, including 17 under the US Espionage Act 1917 and one under the Computer Fraud and Abuse Act. He faces a jail sentence of up to 175 years for publishing government cables leaked by Chelsea Manning, a former US Army soldier turned whistleblower, in 2010-11.

Press freedom groups argue the US case against Assange is likely to set a precedent that would put journalists reporting on national security matters at risk worldwide.

Trevor Timm, co-founder of the Freedom of the Press Foundation (FPF), giving evidence during an extradition hearing in 2020, told the Old Bailey the case poses extreme danger to journalists if it’s allowed to go ahead. “This would criminalise every reporter who received a secret document whether they asked for it or not,” he told the court.

FOIA battle

Maurizi has been fighting a long-running battle with the CPS under the Freedom of Information Act (FOIA) for correspondence between UK prosecutors and Sweden, the US and Ecuador over the Assange case since 2015.

The CPS disclosed it had deleted one of its lawyers’ email accounts after Maurizi identified a series of gaps in more than 330 pages of correspondence released by the CPS under the Freedom of Information Act in October 2017, including the lack of any correspondence from the CPS beyond the end of January 2014.

Maurizi’s legal representative asked the CPS to review its records and to either release further records or explain why it was credible that the CPS and the SPA had remained silent during periods when there were significant developments in the legal case against Assange.

In a subsequent witness statement, legal manager Mohammed Cheema said the CPS was aware that Sweden had released correspondence that had not been disclosed by the CPS itself, but had been unable to find the relevant material in its own files.

Cheema also disclosed that the CPS had deleted the account of lawyer Paul Close, who liaised with Sweden over the Assange case when he retired in March 2014, and was unable to recover any data associated with the account.

“We searched electronic records and found that all data associated with Paul Close’s account was deleted when he retired and cannot be recovered,” he wrote.

“If there ever existed further emails (beyond the ones we have identified) between Paul Close and the SPA… they were not printed off and filed by Paul Close and the electronic copies were deleted when he retired and are no longer in the possession of the CPS,” he added.

During cross-examination, Cheema accepted that it was impossible to know how much material could have been deleted if Close had not printed them off.

“When the CPS disclosed correspondence to me, there were obvious gaps. For example, there was almost no correspondence over the period when Assange took refuge in the embassy or received asylum,” Maurizi told Computer Weekly.

“After I queried this and the CPS did further searches, the deletion of the email account came to light, as detailed in Mr Cheema’s evidence,” she added.

The prosecution service has maintained for six years that its policy at the time was to suspend staff’s email accounts when they retired and then delete the accounts after three months.

But during a Freedom of Information (FOI) tribunal in January this year, a witness disclosed for the first time that he had seen “desk instructions” that stated staff emails would be deleted 30 days after someone retired from the CPS.

A tribunal ruling in Maurizi’s favour in June 2023 led the CPS to disclose an email referring to its “leavers policy” and a copy of its “leavers process policy document” for the first time.

Unanswered questions

Maurizi said the CPS had provided no explanation for its failure to disclose details of its leavers policy during the previous six years of FOI litigation.

“If this was the document regulating the general working practice for disabling and deleting personal email accounts of CPS staff after they retired, how is it possible that no one at the CPS knew of this document or provided it to us?” she said.

“This is not the only mystery. After stating consistently for the last five years that the deletion of emails was conducted three months after the CPS lawyer, Paul Close, retired, the CPS now states that the deletion of emails was done 30 days after Close retired.”

Maurizi argues in her complaint to the ICO that it’s in the public interest for the CPS to release the email and the leavers policy document in their original format with the accompanying metadata that could explain how widely the document was circulated.

“Metadata is also information held by the public authority which is relevant to the request,” the complaint states. “Given the history of this request, the metadata is particularly relevant.”

The complaint also argues that the CPS should disclose information to explain why it changed its previous position that the agreed process was to delete emails after 30 days.

“There must have been a basis or bases on which the CPS made these unequivocal and confident statements, verified by a number of statements of truth,” it said.

Read more about the FOIA and Julian Assange

The leavers policy document reveals that the CPS staff leaving process generates a series of automatic emails between the IT service desk and managers when CPS staff retire.

Maurizi’s legal advisor argues that, had the CPS released the document when it was first requested, it would have been possible to request copies of the automated emails under the Freedom of Information Act.

However, nine years after the CPS deleted Close’s email account, it’s unclear whether the CPS has copies.

Maurizi said the CPS had failed to answer questions about its handling of the Assange case throughout her long-running FOIA litigation.

“I have tried to investigate the role of the Crown Prosecution Service in the case through FOIA requests to the Crown Prosecution Service since 2015,” she said. “Unfortunately, the Crown Prosecution Service has never properly come clean about some of its questionable decisions on the case and, as my FOIA litigation has revealed, it has destroyed key documents.”

Estelle Dehon, the barrister at Cornerstone Barristers who is representing Maurizi, told Computer Weekly the CPS had frequently denied it held documents, only to release them at a later date. “Stefania Maurizi’s FOIA requests show that, since 2017, almost every time that she has pushed back when the CPS said it did not hold documents, further searches revealed that it did hold relevant and disclosable information,” she said.

CPS says no relevant emails deleted

A CPS spokesperson said the prosecution agency held no information to suggest that any files “relevant to this case”, including emails sent and received by CPS lawyers, were deleted.

“It is policy that all emails relating to case work should be saved to the relevant case files in our case management system,” the spokesperson said.

“Our processes also mean when a person leaves the CPS, their account and email data is automatically deleted after 30 days and no longer accessible. The deletion of emails relates only to an employee’s personal work email account and does not include case-specific correspondence,” the spokesperson added.

The CPS said that where it had been able to make disclosures to Maurizi under the FOI Act, the CPS has done so.

Maurizi said: “It makes no sense that the CPS now states that it holds no information suggesting emails were deleted, given that it must still hold copies of Mr Cheema’s evidence and all the correspondence with us about the deletion of Mr Close’s email account.”

If his appeal fails, Assange is expected to appeal to the European Court of Human Rights.

This article was updated with a response from the CPS and other additional information

Read more on Privacy and data protection

CIO
Security
Networking
Data Center
Data Management
Close