0370 270 6000

Employer not responsible for former employee’s data breach

2 April 2020

The long-awaited Supreme Court decision has been published in the case of WM Morrison Supermarkets Plc v Various Claimants.

In 2018, the Court of Appeal found the company vicariously liable for its employee’s actions. An IT Internal Auditor, aggrieved at receiving a disciplinary sanction, copied payroll data of almost 100,000 employees and posted it on a file sharing website. This led to a class action by more than 5,000 employees.

The Supreme Court has now found that the company was not liable for the employee’s actions. His wrongful disclosure was not sufficiently closely connected with his ordinary duties that it could be regarded as being done while the employee was acting in the ordinary course of his employment. His employment simply gave him the opportunity to commit the act, in order to pursue a personal vendetta. This did not mean that the employer should be responsible for it.

The Court of Appeal decision in 2018 attracted a great deal of interest, as it meant that there was little that employers could do to protect themselves. Whilst employers still can be found vicariously liable when an employee is engaged in furthering his or her employer’s business when an act takes place, they will not be found liable where an employee was “on a frolic of their own”. Employers will breathe a sigh of relief as a result.

Related opinions

BMA advises consultants not to accept less than the BMA minimum rate card for extra-contractual work

The BMA is advising all NHS / HSCNI consultants to ensure extra-contractual work is paid at the BMA minimum recommended rate and to decline offers of extra-contractual work that doesn't value them appropriately.

View blog

Rising wages ahead

In the Autumn Statement delivered on 17 November, rises to the National Living Wage and National Minimum Wage rates were announced, to take effect from 1 April 2023.

View blog

World Cup 2022 – how employers can avoid scoring an own goal!

The World Cup kicks off in Qatar on Sunday 20 November 2022, with the final taking place on Sunday 18 December 2022. Undoubtedly, this is a huge sporting event, and many employees will be keen to show their support for their favourite teams. However, due to the time difference, start times for the matches are between 10 a.m. and 7 p.m. UK time, which could have an impact on employers if employees who wish to watch the matches are scheduled to work.

View blog

The vanishing dismissal

Where an employee appeals against their dismissal under a contractual appeal procedure and their appeal is successful, reinstatement to their previous role is automatic and does not require approval or agreement from the employee.

View blog

Mailing list sign up

Select which mailings you would like to receive from us.

Sign up