Is an employer liable for deliberate data breaches by a disgruntled employee?


2nd April 2020

Employment expert Vicky Schollar has written an article, which was first published in HR Magazine on 2 April, looking at a recent case that focused on liability for data breaches.

The Supreme Court found that an employer isn’t liable for deliberate data breaches by a disgruntled employee. The case related to an employee of Morrisons, Andrew Skelton, who had intentionally leaked the personal data of thousands of his colleagues and whether Morrisons should be held vicariously liable for his actions.

To minimise the risk of such a breach and to protect their organisation, employers should ensure they have a clear and up-to-date Data Protection Policy, Staff Privacy Notice and Appropriate Policy Document.

Read the article in full here.

Enjoy That? You Might Like These:


articles

21 August
According to the Department for Work and Pensions (DWP) there are around 700,000 disabled people currently not in work but who want to work. Disabled people face higher barriers getting... Read More

articles

14 August
In April 2025, the Supreme Court held that the legal definitions of “woman”, “man” and “sex” in the Equality Act 2010 refer to biological sex. A transgender woman with a... Read More

articles

12 August
The Court of Appeal recently upheld the decisions of the Employment Tribunal and Employment Appeal Tribunal that a senior social worker suffered direct race discrimination when she was subject to... Read More