The Court of Appeal allowed the appeal on grounds 1, 3 and 5, and dismissed it on grounds 2 and 4.
Ground 1 succeeded: the legal framework left too broad a discretion over where AFR Locate could be used and who could be placed on a watchlist, so the interference with Article 8 rights was not 'in accordance with the law'. Ground 3 succeeded: the data protection impact assessment was deficient because it was written on the basis that Article 8 was not infringed. Ground 5 succeeded: the force had not taken reasonable steps to enquire whether the software was biased on race or sex grounds, breaching the public sector equality duty.