Criminal law – Data protection. Section 55(2) of the Data Protection Act 1998 imposed no more than an evidential burden of proof on a defendant and an essential component of the offence did not exist if any of s 55(2)(a)-(d) was shown. Accordingly, the Court of Appeal, Criminal Division, allowed the defendant's appeal against three counts of unlawfully obtaining personal data and quashed the convictions.