Employer Liable for Employee’s Disclosure of Personal Data

The High Court has found that an employer, Wm Morrisons Supermarkets PLC, was vicariously liable for the deliberate and criminal disclosure of co-workers’ personal data by a rogue employee.

This is the first group litigation data breach case to come before the courts and compensation payable to the claimants by Morrisons under the Data Protection Act 1998 could be substantial.

The judgment raises interesting points on vicarious liability and data protection.

Morrisons has indicated that it will appeal the Judgement. (Various claimants v Wm Morrisons Supermarket PLC [2017] EWHC3113 (QB).)