Is an employer liable for deliberate data breaches by a disgruntled employee?


2nd April 2020

Employment expert Vicky Schollar has written an article, which was first published in HR Magazine on 2 April, looking at a recent case that focused on liability for data breaches.

The Supreme Court found that an employer isn’t liable for deliberate data breaches by a disgruntled employee. The case related to an employee of Morrisons, Andrew Skelton, who had intentionally leaked the personal data of thousands of his colleagues and whether Morrisons should be held vicariously liable for his actions.

To minimise the risk of such a breach and to protect their organisation, employers should ensure they have a clear and up-to-date Data Protection Policy, Staff Privacy Notice and Appropriate Policy Document.

Read the article in full here.

Enjoy That? You Might Like These:


newsletters

15 May -
Welcome to our bumper edition of the Spring newsletter. As can be seen, it has been an extremely busy few months. From the significant Supreme Court judgment about the legal... Read More

articles

15 May -
The Government published its white paper on proposals for the reform of the current Immigration Rules on 12 May 2025. This follows hot on the heels of big changes to... Read More

articles

13 May -
The recent Supreme Court decision in For Women Scotland Ltd v The Scottish Ministers attracted considerable media attention. The Supreme Court held that the legal definitions of “woman”, “man” and... Read More