From News

Full judgment in Morrisons breach of confidence/vicarious liability case - Various Claimants v Wm Morrison Supermarket Plc [QBD] 01.12.17 (Unreported)

In an action for breach of the Data Protection Act 1998, breach of confidence and misuse of private information, an employer was vicariously liable for the actions of an employee who had disclosed the personal information of around 100,000 colleagues on the internet. While the disclosure had taken place outside working hours and from the employee's personal computer, adopting the broad and evaluative approach in Mohamud v Wm Morrison Supermarkets Plc, there was a sufficient connection between the position in which he had been employed and his wrongful conduct to make it right for the employer to be liable.

Link to judgment
Data controllers can be responsible for data breaches by rogue employees (Brodies IP & Technology Blog 01.12.17)
Category: Data Protection » Employment; Security. Keyword(s): Breach of confidence; Vicarious liability. Area(s) of law: Employment; Public Sector; Technology and Information; Litigation; DP & Cybersecurity.
Source: [2017] EWHC 3113 (QB).

View original article