Is an employer liable for deliberate data breaches by a disgruntled employee?
Employment expert Vicky Schollar has written an article, which was first published in HR Magazine on 2 April, looking at a recent case that focused on liability for data breaches.
The Supreme Court found that an employer isn’t liable for deliberate data breaches by a disgruntled employee. The case related to an employee of Morrisons, Andrew Skelton, who had intentionally leaked the personal data of thousands of his colleagues and whether Morrisons should be held vicariously liable for his actions.
To minimise the risk of such a breach and to protect their organisation, employers should ensure they have a clear and up-to-date Data Protection Policy, Staff Privacy Notice and Appropriate Policy Document.
Read the article in full here.
Share:
Enjoy That? You Might Like These:
articles
10 March
The threshold for triggering collective redundancy obligations is the focus of one of two consultation papers published on 26 February. The other examines the protection from detriments for taking industrial... Read Morearticles
10 March
February 2026 has seen the publication of seven consultation papers and an updated timeline for implementation of the Employment Rights Act 2025. Following five at the beginning of the month,... Read Morearticles
4 March
Acas recently published the results of its survey where employers and employees were asked which three changes in the Employment Rights Act 2025 would have the biggest impact in their... Read More