Is an employer liable for deliberate data breaches by a disgruntled employee?


2nd April 2020

Employment expert Vicky Schollar has written an article, which was first published in HR Magazine on 2 April, looking at a recent case that focused on liability for data breaches.

The Supreme Court found that an employer isn’t liable for deliberate data breaches by a disgruntled employee. The case related to an employee of Morrisons, Andrew Skelton, who had intentionally leaked the personal data of thousands of his colleagues and whether Morrisons should be held vicariously liable for his actions.

To minimise the risk of such a breach and to protect their organisation, employers should ensure they have a clear and up-to-date Data Protection Policy, Staff Privacy Notice and Appropriate Policy Document.

Read the article in full here.

Enjoy That? You Might Like These:


articles

26 February
The Employment Appeal Tribunal (EAT) overturns an Employment Tribunal’s decision to apply a 100% Polkey deduction to an unfair dismissal claim. In this recent judgment, the EAT has overturned an... Read More

events

16 February
Blake Morgan has partnered with the Suzy Lamplugh Trust to run a series of training sessions on making workplaces safer. Read More

articles

16 February
There has been a flurry of recent activity. In the same week, five new consultation papers and an updated timeline for implementation of the Employment Rights Act 2025 were published.... Read More