UK supermarket loses appeal against data breach vicarious liability

The Court of Appeal of England and Wales has held supermarket Morrisons liable for a rogue employee’s leak of thousands of individuals’ personal data – despite arguments that pointed to the enormous burden it would create for innocent employers.