Can employers be vicariously liable for data breaches of their employees?Posted in : Seamus Says - Employment Law Discussion on 9 November 2018
Scott: The Morrisons case, it seems extreme now, the way that vicarious liability has moved in just the last two years really, and both of them to do with Morrisons. But the Court of Appeal recently held in Morrison Supermarkets against various claimants that employers can be vicariously liable for harm caused by the criminal activities of their employees in relation to data breaches. This was a rogue accountant who put stuff on the internet and put—I think it was 100,000 records of staff members.
Seamus: That's right. It was a case from 2014. The accountant was Andrew Skelton. He was a senior IT auditor within Morrisons. He posted files containing the personal data of just shy of, it's
Already a subscriber?
Click here to login and access the full article.Log in now to read the full article
Don't miss out, start your free trial today!
Are you fully aware of the benefits of Legal-Island's Employment Law Update Service? We help hundreds of people like you understand how the latest changes in employment law impact on your business.
Help understand the ramifications of each important case from NI, GB and Europe
24/7 access to all the content in the Legal Island Vault for research case law and HR issues
Ensure your organisation’s policies and procedures are fully compliant with NI law
Receive free preliminary advice on workplace issues from the employment team at Worthingtons Solicitors
More on Data Protection & Freedom of Information
- Can an employer refuse a request from an unsuccessful job applicant to delete any of their data in its possession as it may be necessary for the defence of legal claims?
- If employees willingly provide personal email addresses at the start of their employment and their personal email addresses were used to contact them while they worked from home during the Coronavirus Lockdown, is this a breach of data protection?
- Can we ask staff to let us know if they have been vaccinated, and can we keep a record of this?
- Does the chief executive have the right to view sensitive personal data without an employee’s consent?
- Data Protection Implications of Selling From the UK into the EU after Brexit
The information in this article is provided as part of Legal-Island's Employment Law Hub. We regret we are not able to respond to requests for specific legal or HR queries and recommend that professional advice is obtained before relying on information supplied anywhere within this article.