UK supermarket found responsible for actions of rogue employee

摘要

The UK High Court has handed down its judgment in the first ever group litigation data breach case to come before the courts. The Court was looking at whether the defendant data controller, Morrisons supermarket, was either directly or vicariously liable for the malicious actions of a rogue employee who had taken payroll data relating to some 100,000 employees and published it online. It found that, despite having been entirely innocent of the misuse, Morrisons was in principle liable to compensate all the claimants in the group.