On 22 October 2018, the Court of Appeal dismissed the supermarket chain’s appeal in the case of Various Claimants v WM Morrison Supermarkets PLC [2018] EWCA Civ 2339, where Morrisons had been held vicariously liable at first instance for a mass data breach caused by the criminal act of a rogue employee (see our blog about that decision here). Continue reading