The High Court recently considered a case where an internal auditor from the supermarket chain Morrisons disclosed payroll data on the Internet relating to about 100,000 of his colleagues following an internal disciplinary process. The auditor was tracked down, charged and sentenced to eight years in prison. But was Morrisons liable to the employees whose information he had leaked?
A recent High Court judgment in a case concerning supermarket chain Morrisons has illustrated how employers may be liable for the wrongful acts of rogue employees. The court held that Morrisons was indirectly liable for the disclosure of personal payroll data by an aggrieved internal auditor, despite the fact that it had upheld its security obligations, on the grounds that the auditor had acted in the course of his employment.