Commercial update: Data protection breaches – Employers’ liability

5th November 2018

Is common law doctrine of vicarious liability of an employer for its employee’s misuse of private information excluded by the DPA? And secondly, can an employer be vicariously liable for the employee’s acts away from the workplace? Nicole Bollard analyses the Court of Appeals recent decision in W M Morrison Supermarkets plc v Various Claimants [2018] EWCA Civ 2339.