‘In Vidal-Hall v Google [2015] EWCA Civ 311 the Court of Appeal held that damages claims under section 13 of the Data Protection Act 1998 (DPA) can be brought on the basis of distress alone, without monetary loss. Since that decision there has much speculation that a major data breach could lead to distress-based claims against the data controller by a large class of individuals. Even if each individual claim was modest (in the hundreds or low thousands of pounds) the aggregate liability could be substantial.’
Panopticon, 6th December 2017
Source: panopticonblog.com
