UK Supreme Court says employer not liable for data breach by a disgruntled employee

The U.K.’s top court ruled that a British supermarket can’t be held responsible for a data breach by a disgruntled employee who leaked personal details of thousands of staff members online.

The Supreme Court concluded that the Court of Appeal had misunderstood the principles governing vicarious liability in their previous judgments in the case. This decision sets aside a significant liability risk which had arisen following the previous decisions in the case.

Source: Morrisons Wins U.K. Supreme Court Ruling Over 2014 Data Breach – Bloomberg