Remove author andrew-morrison
article thumbnail

UK Supreme Court Rules Morrisons Not Vicariously Liable for Malicious Data Breach by Employee

Data Matters

Case: WM Morrison Supermarkets plc v Various Claimants [2020] UKSC 12. In this case the employee had committed acts to further a personal vendetta rather than any objective of the employer, and there was no close connection between the acts of the employee and those that he was authorized to perform.

article thumbnail

Morrisons heads to the Supreme Court over data breach

IT Governance

The Supreme Court has given Morrisons permission to appeal a ruling that found the supermarket liable for a data breach caused by a malicious insider. Morrisons argued that it wasn’t responsible for Skelton’s actions and that it had taken all the necessary precautions to secure employees’ data. Does Morrisons stand a chance?

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

UK Supreme Court Gives Morrisons Permission to Appeal Data Breach Class Action

Hunton Privacy

On October 22, 2018, the UK Court of Appeal upheld the High Court’s decision that VM Morrison Supermarkets PLC (“Morrisons”) was vicariously liable for a data breach caused by a disgruntled former employee, despite Morrisons being cleared of any wrongdoing ( VM Morrison Supermarkets PLC v Various Claimants ). Background.

article thumbnail

Rare recovery in a complex ransomware case: Major NetWalker arrest leads to significant asset seizure

Data Protection Report

Ordinarily, assets seized in a criminal investigation are forfeited to authorities 30 days after sentencing, unless a party can make an application under Criminal Code s. 1] NRF’s insurer client was represented by Andrew McCoomb and Tyler Morrison of Norton Rose Fulbright Canada’s Toronto office in this matter.

article thumbnail

High Court finds Morrisons liable for 2014 data breach

IT Governance

Morrisons is responsible for a data breach caused by a malicious insider, the High Court has ruled. Morrisons is both the victim – having been awarded £170,000 in compensation against Skelton – and vicariously liable. They are Morrisons checkout staff, shelf stackers, factory workers – ordinary people doing their jobs.

article thumbnail

UK: Supreme Court judgment in Morrisons – employer not vicariously liable for data breach

DLA Piper Privacy Matters

Today the Supreme Court allowed an appeal in Morrisons v Various Claimants1, a significant judgment addressing the extent of an employers’ liability for data breaches maliciously committed by an employee. Today, the Supreme Court upheld Morrisons’ appeal, finding that it was not vicariously liable for the criminal acts of Mr Skelton.

article thumbnail

UK: How real is the threat of data protection group litigation in the UK?

DLA Piper Privacy Matters

Morrisons #2 Court of Appeal. The Court of Appeal delivered its decision in the case of WM Morrisons Supermarkets Plc v Various Claimants ([2018] EWCA Civ 2339) in October, dismissing Morrisons’ appeal against an earlier decision from 2017 finding the supermarket vicariously liable for the actions of a former employee, Andrew Skelton.