On April 1, 2020, United Kingdom supermarket chain Morrisons won its appeal in the UK Supreme Court regarding whether the company is “vicariously liable” for the actions of an employee who intentionally leaked payroll data for approximately 100,000 staff members.
The UK Supreme Court overturned a lower court ruling which held Morrisons responsible for compensation claims by employees affected by the 2014 data breach, which occurred when former Morrisons internal auditor Andrew Skelton distributed staff payroll data to local newspapers and on the internet.
