Is an employer liable for deliberate data breaches by a disgruntled employee?


2nd April 2020

Employment expert Vicky Schollar has written an article, which was first published in HR Magazine on 2 April, looking at a recent case that focused on liability for data breaches.

The Supreme Court found that an employer isn’t liable for deliberate data breaches by a disgruntled employee. The case related to an employee of Morrisons, Andrew Skelton, who had intentionally leaked the personal data of thousands of his colleagues and whether Morrisons should be held vicariously liable for his actions.

To minimise the risk of such a breach and to protect their organisation, employers should ensure they have a clear and up-to-date Data Protection Policy, Staff Privacy Notice and Appropriate Policy Document.

Read the article in full here.

Enjoy That? You Might Like These:


articles

30 June -
The Employment Rights Bill was published on 10 October 2024 and what everyone wants to know is what happens next and when will it be in force? There is a... Read More

articles

26 June -
Although hybrid working remains prevalent, there is increasing scrutiny and shifting employer expectations about the practice. Many organisations are moving towards more structured office attendance by implementing office-working policies. Read More

articles

12 June -
The recently published Employment Appeal Tribunal’s (EAT’s) decision in Hendy Group Ltd v Kennedy [2024] delivers a firm reminder that employers cannot treat the requirement to consider suitable alternative employment... Read More