Is an employer liable for deliberate data breaches by a disgruntled employee?


2nd April 2020

Employment expert Vicky Schollar has written an article, which was first published in HR Magazine on 2 April, looking at a recent case that focused on liability for data breaches.

The Supreme Court found that an employer isn’t liable for deliberate data breaches by a disgruntled employee. The case related to an employee of Morrisons, Andrew Skelton, who had intentionally leaked the personal data of thousands of his colleagues and whether Morrisons should be held vicariously liable for his actions.

To minimise the risk of such a breach and to protect their organisation, employers should ensure they have a clear and up-to-date Data Protection Policy, Staff Privacy Notice and Appropriate Policy Document.

Read the article in full here.

Enjoy That? You Might Like These:


newsletters

4 February
Welcome to our Winter edition of the newsletter. As can be seen from our recent Looking ahead to 2026 there is no let-up in the pace of employment law developments.... Read More

articles

29 January
In a recent judgment, the Court of Appeal have confirmed that Coastguard Rescue Officers (“CROs”) who attend emergency call outs for the Maritime and Coastguard Agency (“MCA”) are workers rather... Read More

articles

22 January
Women represented by the GMB Union, have secured more than £1 billion in settlements following long‑running campaigns addressing systemic pay inequalities in female‑dominated roles across UK local authorities. These cases... Read More