Data Breach, Group Actions, and the criminal insider: the Morrisons case – Panopticon

Posted December 7th, 2017 in appeals, damages, data protection, mental health, news, vicarious liability by sally

‘In Vidal-Hall v Google [2015] EWCA Civ 311 the Court of Appeal held that damages claims under section 13 of the Data Protection Act 1998 (DPA) can be brought on the basis of distress alone, without monetary loss. Since that decision there has much speculation that a major data breach could lead to distress-based claims against the data controller by a large class of individuals. Even if each individual claim was modest (in the hundreds or low thousands of pounds) the aggregate liability could be substantial.’

Full Story

Panopticon, 6th December 2017