British case offers guidance on nuances of employer liability

Decision involving Morrison’s supermarkets sheds light on extent to which employers can be held responsible for data breaches by employees acting in bad faith

Morrisons supermarket chain in Britain was at the centre of a data breach case recently

A recent decision issued by the British Supreme Court, in a case involving various claimants and Morrisons supermarkets, provides useful guidance on when an employer can be vicariously liable for a data breach resulting from the theft and disclosure of employee data by a disgruntled staff member.

Morrisons operates a chain of supermarkets in Britain, and employed Andrew Skelton on its internal audit team. In July 2013, Skelton received a verbal warning after disciplinary proceedings ...