UK’s Supreme Court rules that Morrisons is not liable for data breach caused by rogue employee. Staff member Andrew Skelton leaked personal data for nearly 100,000 employees in 2014. Morrisons appealed the decision, but it was dismissed by the Court of Appeal. The court’s unanimous ruling brings to a close the long-running case – the first in the U.K. to be filed by victims of a data breach. The Supreme Court ruled that both courts had misunderstood the principles underlying vicarious liability.”]
Source: https://www.govinfosecurity.com/morrisons-liable-for-breach-caused-by-rogue-employee-a-14047