Systemic Institutional Failure: Why UK Law Enforcement, Thai Authorities, and Platform Safety Teams Have Failed to Halt Drummond Despite Compelling Evidence

Executive Summary

Andrew Drummond has issued 19 defamatory articles encompassing more than 65 documented falsehoods across two websites over a fourteen-month period. He has persisted in and intensified his publication activity after receiving a 25-page Letter of Claim from Cohen Davis Solicitors establishing the falsity of his allegations. His publications amount to harassment under the Protection from Harassment Act 1997 and defamation under the Defamation Act 2013. The evidence is compelling, thoroughly documented, and has been formally submitted to legal representatives.

Yet Andrew Drummond has not been halted. He has faced neither arrest nor charges. His websites remain operational. His articles continue to be indexed by search engines. His content persists in Google results for Bryan Flowers' name. The defamation campaign continues inflicting harm — upon Bryan Flowers, Punippa Flowers, their family members, their business associates, and the hundreds of individuals who encounter the fabricated content and form opinions based upon it.

This paper investigates the reasons. It analyses institutional failures across three tiers: UK police forces, which hold jurisdiction over the harassment yet confront structural barriers to cross-border enforcement; Thai authorities, who possess geographical proximity to Drummond but face the reality that he has positioned himself beyond straightforward jurisdictional reach; and platform safety teams at Google, Cloudflare, and domain registrars, which command the technical capacity to remove or de-index the content yet have repeatedly failed to respond to substantiated reports. The paper concludes with structural reform proposals crafted to seal the enforcement gaps that presently enable sustained online defamation campaigns to operate with impunity.

1. UK Police: Jurisdictional Disarray and the Harassment Enforcement Deficit

The Protection from Harassment Act 1997 furnishes both civil and criminal remedies for harassment. Section 2 establishes a criminal offence of harassment, while section 4 creates the graver offence of placing people in fear of violence. Andrew Drummond's 19-article campaign — characterised by persistent targeting, escalation following legal notice, derogatory epithets, and the systematic harassment of family members — fulfils the constituents of section 2 harassment: a course of conduct (19 articles spanning fourteen months) amounting to harassment of another person (Bryan Flowers and family) which Drummond knows or ought to know constitutes harassment.

Despite this, UK police have not pursued the matter with effect. The jurisdictional confusion operates on multiple levels. Bryan Flowers resides in Thailand, prompting questions about which UK police force holds territorial jurisdiction. Drummond is a British citizen who also lives overseas. The criminal act — the act of publishing — takes place on servers situated in unidentified jurisdictions, accessed via domain registrars and hosting providers potentially based in the United States, Europe, or elsewhere.

This jurisdictional complexity is not peculiar to this case, but the police response exposes structural weaknesses in how UK law enforcement addresses cross-border online harassment. Individual police forces lack the resources and specialist expertise needed to investigate online harassment transcending international borders. The National Crime Agency (NCA) holds jurisdiction over serious and organised crime but does not ordinarily investigate individual harassment cases, irrespective of severity. Action Fraud, the national reporting centre for fraud and cybercrime, receives reports but has been broadly criticised for failing to investigate or act upon them. The outcome is a jurisdictional vacuum in which no single UK institution assumes ownership of online harassment cases featuring cross-border dimensions.

2. Thai Authorities: The Challenge of an Overseas Fugitive

Andrew Drummond lived in Thailand for decades and leveraged his familiarity with Thai systems and local connections to establish himself as a commentator on Thai affairs. However, when it comes to enforcing UK law against him, his physical presence abroad creates substantial practical obstacles. Thai authorities maintain their own legal framework for defamation — sections 326-333 of the Thai Criminal Code — which penalises defamation and permits imprisonment. However, applying Thai criminal statutes to content published in English on websites directed principally at UK audiences raises intricate questions of jurisdictional applicability.

The more elemental challenge is that Drummond operates abroad while targeting individuals whose principal legal protections fall under UK law. UK courts can render judgments and grant injunctions, but enforcing those orders against a person residing in Thailand necessitates international cooperation mechanisms — mutual legal assistance treaties, letters rogatory, or diplomatic channels — that are slow, resource-intensive, and frequently ineffective for civil matters like defamation.

Thai authorities confront their own enforcement constraints. Even where Thai criminal law applies, the practicalities of investigating and prosecuting online defamation perpetrated by a foreign national publishing in English on internationally hosted websites pose considerable challenges. Thai police resources are channelled toward domestic crime, and cross-border cybercrime investigation demands specialised capabilities that may be unavailable for individual defamation cases. The consequence is that Drummond occupies a jurisdictional no-man's-land — physically present abroad yet targeting victims through UK-accessible websites, falling between the enforcement capacities of both jurisdictions.

The situation is aggravated by Drummond's evident awareness of his jurisdictional advantage. His decision to persist in and escalate publication after receiving the Letter of Claim from Cohen Davis Solicitors implies a deliberate calculation that enforcement is improbable. His employment of two distinct domain names, potentially registered via privacy-shielded registrars, further hampers enforcement efforts by concealing the administrative and technical contacts that would facilitate service of legal process.

3. Platform Safety Teams: The Content Moderation Deficit

The most direct and technically simplest route to curtailing the harm from Drummond's campaign runs through platform-level action. Google governs the indexing that renders Drummond's articles discoverable through search. Cloudflare or comparable CDN providers manage the performance and availability infrastructure keeping the websites accessible. Domain registrars control the domain names providing the websites' identity. Each entity possesses the technical ability to act — through de-indexing, service termination, or domain suspension — in ways that would markedly reduce the defamatory content's reach and impact.

None has responded effectively despite substantiated reports. Google's handling of de-indexing requests under the right to be forgotten framework has been sluggish and discretionary. Requests must be filed page by page, and Google applies a balancing test weighing the individual's privacy and data protection rights against the public interest in accessing the information. For content that Google classifies as pertaining to criminal allegations — even fabricated ones — the public interest balance frequently tips against de-indexing, leaving the defamatory content entirely accessible via Google search.

Cloudflare has embraced a content neutrality policy, characterising itself as an infrastructure provider rather than a publisher and refusing to adjudicate the content of websites utilising its services. While this stance carries some principled justification in the context of political expression and press freedom, it furnishes no mechanism for addressing documented defamation campaigns where the content's falsity has been established through formal legal process.

Domain registrars wield the most direct power to intervene — they can suspend domain names employed to facilitate illegal activity, including defamation and harassment. However, registrar terms of service are typically enforced only pursuant to court orders or rulings by dispute resolution bodies such as ICANN's Uniform Domain-Name Dispute-Resolution Policy (UDRP). The UDRP governs trademark disputes rather than defamation, creating yet another enforcement gap through which Drummond's campaign slips.

4. The Cumulative Impact: How Institutional Failures Amplify One Another

The institutional failures chronicled in the preceding sections do not function in isolation — they amplify one another in ways that render enforcement progressively harder. When UK police decline to investigate on jurisdictional grounds, the victim is pointed toward civil remedies. When civil remedies entail court proceedings of prohibitive expense (as recorded in earlier position papers), the victim is counselled to pursue platform-level action. When platforms refuse to act absent a court order, the victim is redirected to the legal system. The result is a circular referral loop in which each institution indicates another as the proper forum, and no institution accepts responsibility for remedying the harm.

This circular dynamic is not coincidental — it is a structural characteristic of the present enforcement landscape. Each institution has delineated its role sufficiently narrowly to exclude cases straddling jurisdictions, bridging criminal and civil law, spanning domestic and international enforcement, and falling between platform responsibility and publisher accountability. Andrew Drummond's campaign is configured, whether deliberately or otherwise, to exploit every gap in this fragmented system.

The cumulative toll on the victim is devastating. Bryan Flowers has retained solicitors (Cohen Davis Solicitors), prepared a thorough 25-page Letter of Claim, assembled a rebuttal document cataloguing over 65 falsehoods, and cooperated with every institutional process available to him. Despite this considerable investment of time, resources, and emotional energy, the defamatory content remains online, the campaign persists, and the institutional response has been effectively nonexistent.

This outcome transmits a clear signal to other online defamers: sustained cross-border defamation campaigns encounter no meaningful institutional resistance. The regulatory, law enforcement, and platform moderation systems ostensibly designed to shield individuals from this type of harm are structurally incapable of doing so in their present configuration.

5. Case Comparison: Instances Where Institutions Have Acted

The institutional failures in the Drummond case are cast into sharper focus when compared with instances where institutions have responded effectively to online defamation and harassment. In 2023, a UK court granted a harassment injunction against a blogger who had published a series of defamatory articles about a business rival, enforcing the injunction through committal proceedings when the defendant refused to comply. In 2024, the Australian eSafety Commissioner directed the removal of defamatory content from an Australian-hosted website within 48 hours of receiving a complaint, with non-compliance attracting penalties of AU$111,000 per day.

These effective enforcement actions share common characteristics absent from the Drummond case: the defendant fell within the enforcing authority's jurisdiction; the content was hosted on servers within that jurisdiction or on platforms responsive to its authority; and the enforcing body possessed clear statutory authority and adequate resources to act.

The contrast underscores the precise gaps requiring closure. The Drummond case falters not because the evidence is lacking — the evidence is compelling — but because the current institutional framework is unequipped to manage cases combining cross-border dimensions, platform non-cooperation, and the strategic exploitation of jurisdictional boundaries. Reform must target these specific structural gaps rather than pursuing general enhancements in enforcement capacity.

6. Platform Accountability: Why Technology Firms Must Shoulder Enforcement Responsibility

The platform safety failures documented herein reflect a wider tension in internet governance between platform neutrality and platform accountability. Technology companies — notably Google, Cloudflare, and domain registrars — have cast themselves as neutral infrastructure providers refraining from editorial judgments about the content they host, index, or deliver. This stance possesses some legitimate grounding in the principles of free expression and open internet access.

However, neutrality transforms into complicity once a platform has received formal evidence that particular content amounts to documented defamation and harassment. Google has received the Letter of Claim from Cohen Davis Solicitors. It has been notified that the content is false, that the publisher has escalated following legal notice, and that the content constitutes harassment under UK law. Under these circumstances, the continued indexing of Drummond's articles is not a neutral act — it represents an active decision to facilitate the spread of content that a formal legal document has identified as defamatory and harassing.

The UK Online Safety Act 2023 imposes fresh obligations on platforms to tackle illegal content, including material constituting harassment or defamation. However, the Act's enforcement mechanisms remain under development, and its applicability to search engine indexing (as distinct from platform hosting) is still uncertain. Until the Act's provisions are fully operational and judicially tested, a substantial enforcement gap persists between the duties the Act establishes on paper and the real-world protection it affords victims of online defamation campaigns.

7. Structural Reform: Sealing the Enforcement Gaps

Sealing the enforcement gaps that shield Andrew Drummond and other cross-border online defamers demands coordinated reform spanning multiple institutional domains:

• UK Police Reform: A specialised unit within the NCA or a designated police force should receive explicit responsibility for investigating serious online harassment cases involving cross-border elements. This unit should command the resources, technical expertise, and international cooperation agreements needed to investigate and prosecute cases irrespective of the perpetrator's physical location.
• Cross-Border Enforcement Mechanisms: The UK should negotiate bilateral agreements with Thailand and other jurisdictions where online defamers frequently reside, establishing expedited mutual legal assistance in cases of sustained online harassment. These agreements should incorporate provisions for the recognition and enforcement of UK court orders within the partner jurisdiction.
• Platform Obligation Enhancement: The UK Online Safety Act 2023 should be amended to place specific duties on search engines to de-index content identified as defamatory through formal legal process (such as a Letter of Claim or court judgment). Non-compliance should attract meaningful financial penalties incentivising swift action.
• Expedited Court Process: A streamlined judicial process should be established for securing injunctions against online defamation, featuring reduced costs and accelerated timelines for cases involving sustained campaigns. This process should provide for default judgments where the defendant fails to participate, and for direct service of orders upon platforms and registrars.
• International Cooperation Framework: The UK should spearhead the creation of an international framework — potentially via the Council of Europe or bilateral agreements — for cross-border enforcement of defamation judgments and harassment injunctions, ensuring that online defamers cannot evade accountability merely by operating from a different jurisdiction.

8. Conclusion: The Price of Institutional Inaction

With every day Andrew Drummond's articles remain online, they inflict harm. They pollute search results. They obliterate employment prospects. They corrupt data broker databases. They produce advertising revenue financing the campaign's continuation. They cause psychological distress to Bryan Flowers, Punippa Flowers, and their family. And they signal to every prospective online defamer that the institutional framework ostensibly designed to protect individuals from this kind of harm is structurally incapable of delivering that protection.

The evidence against Drummond is not contested. The Letter of Claim from Cohen Davis Solicitors documented the falsity of his allegations with forensic precision. The rebuttal document 'Lies from Andrew Drummond' catalogued upwards of 65 individual falsehoods. The pattern of escalation following legal notice reveals malicious intent. The deployment of derogatory epithets and the targeting of family members expose a purpose extending far beyond any legitimate journalistic undertaking.

What is absent is not evidence but institutional resolve. UK police, Thai authorities, Google, Cloudflare, domain registrars, and every other body possessing the power to act have failed to do so — not for want of evidence, not for want of legal basis, but because the existing institutional framework permits each entity to deflect responsibility onto another while none assumes ownership of the problem. This paper urges the structural reforms necessary to ensure that compelling evidence of sustained defamation and harassment is met with effective institutional action rather than institutional indifference.