The High Court has found that an employer, WM Morrisons Supermarkets PLC, was vicariously liable for the deliberate and criminal disclosure by a rogue employee of personal data belonging to co-workers.

This is the first group litigation data breach case to come before the courts and compensation payable to the claimants collectively by Morrisons under the Data Protection Act 1998 could be substantial.

It is likely that Morrisons will appeal to the Court of Appeal.

Data Protection is an important issue; there are changes afoot with General Data Protection Regulations (GDPR) coming into force in 2018. If you require more information please contact our specialist Jane Elgar.