Is an employer liable for deliberate data breaches by a disgruntled employee?


2nd April 2020

Employment expert Vicky Schollar has written an article, which was first published in HR Magazine on 2 April, looking at a recent case that focused on liability for data breaches.

The Supreme Court found that an employer isn’t liable for deliberate data breaches by a disgruntled employee. The case related to an employee of Morrisons, Andrew Skelton, who had intentionally leaked the personal data of thousands of his colleagues and whether Morrisons should be held vicariously liable for his actions.

To minimise the risk of such a breach and to protect their organisation, employers should ensure they have a clear and up-to-date Data Protection Policy, Staff Privacy Notice and Appropriate Policy Document.

Read the article in full here.

Enjoy That? You Might Like These:


articles

30 April
The Finance Act 2026 received royal assent on 18 March 2026 and introduced favourable reforms to Enterprise Management Incentive (EMI) rules from 6 April 2026 but less favourable reforms to... Read More

guides

27 March
The Employment Law Handy Fact Card 2026/27 from Blake Morgan Read our brand new handy fact card. April is the usual month for increases in a wide range of statutory... Read More

articles

26 March
April is the usual month for increases in a wide range of statutory rates and limits. This year is no exception. However, April 2026 also sees the implementation of many... Read More