Today the Supreme Court allowed an appeal in Morrisons v Various Claimants[1], a significant judgment addressing the extent of an employer’s liability for data breaches maliciously committed by an employee. The Supreme Court held that: The earlier judgments of the High Court and Court of Appeal had misunderstood the principles governing vicarious liability. In particular, […]

Two recent cases involving data protection have recently been in the spotlight.  In WM Morrisons Supermarkets PLC v Various Claimants, the Court of Appeal dismissed Morrisons’ appeal against the High Court’s decision that Morrisons was vicariously liable for the deliberate disclosure by an employee of his co-workers’ personal data on the internet. Unless there is