Is an employer liable for deliberate data breaches by a disgruntled employee?
Employment expert Vicky Schollar has written an article, which was first published in HR Magazine on 2 April, looking at a recent case that focused on liability for data breaches.
The Supreme Court found that an employer isn’t liable for deliberate data breaches by a disgruntled employee. The case related to an employee of Morrisons, Andrew Skelton, who had intentionally leaked the personal data of thousands of his colleagues and whether Morrisons should be held vicariously liable for his actions.
To minimise the risk of such a breach and to protect their organisation, employers should ensure they have a clear and up-to-date Data Protection Policy, Staff Privacy Notice and Appropriate Policy Document.
Read the article in full here.
Share:
Enjoy That? You Might Like These:
articles
15 October
The Government is making further changes to the rules to implement the measures outlined in the Immigration White Paper published in May 2025. Here is what you need to know... Read Morearticles
14 October
There has been a recent Employment Appeal Tribunal case, Marshall v McPherson [2025] EAT 100, which has highlighted the proper approach to the concept of the “last straw” in constructive... Read More