4 December 2017Insurance

UK court decision highlights corporate data leak risk

Supermarket chain Wm Morrisons has been found liable for a former employee leaking personal information about almost 100,000 members of staff in what is seen as a landmark case for data risk.

A disgruntled worker had leaked the company’s payroll information online. The UK’s High Court decided in favour of 5,518 former and current Morrisons employees which sued the company after their salaries, national insurance numbers, dates of birth and bank account details were posted online in 2014 and were also sent to a number of newspapers, according to news reports. The Court decided that the company was “vicariously liable” and therefore a claim should go ahead, setting a precedent for businesses which hold data on their staff. It is the first class action over a data leak in the UK.

“This decision is significant in several ways,” said Patrick Cannon, claims manager, Tokio Marine Kiln.

“Firstly, it shows that UK companies can be held vicariously liable for criminal acts committed by their employees in data-breach cases.”

“Secondly, and perhaps more significantly, it highlights that UK courts will allow compensation claims for emotional distress in data breach cases, which is a key difference to what we see in the US, where courts typically only recognise financial losses directly attributable to a data breach.”

The ruling opens the way to potential compensation for the workers, although the supermarket chain said it would appeal against the judgment.

Take part in our reader survey to be in with a chance to win a £3,000 corporate subscription to Intelligent Insurer

More of today's news

Carlou steps down as CEO of Patria Re

CVS to acquire Aetna for $77bn, plans to cut costs

Compre group CEO steps down

Mapfre Q3 nat cat costs exceed €1.1bn, cuts US presence

Alliant hires renewable expert for energy and marine group

Citizens keeps $6.4bn surplus after Irma

Ascent enhances cyber product to address “new wave of exposures”

Don't miss our insurtech email newsletter - sign up today

Already registered?

Login to your account

To request a FREE 2-week trial subscription, please signup.
NOTE - this can take up to 48hrs to be approved.

Two Weeks Free Trial

For multi-user price options, or to check if your company has an existing subscription that we can add you to for FREE, please email Elliot Field at efield@newtonmedia.co.uk or Adrian Tapping at atapping@newtonmedia.co.uk


More on this story

Insurance
14 November 2017   David Roberts, event director at GovNet, organiser of the 16 November Cyber Security Summit and Expo, and co-located GDPR Conference in London previews the event.
Insurance
8 May 2017   If all US businesses had cyber insurance, over $5 billion a year would be lost to the insurance industry from cyber data exfiltration alone, according to catastrophe risk modelling firm RMS.