‘Organisations that hold and process personal data have already had to contemplate the prospect of €20 million fines for not matching up to the requirements of the GDPR. Now the Court of Appeal has given a ruling that presents another type of exposure risk where personal data is concerned. Upholding a High Court decision given in November 2017, this second ruling confirms that an employer can be liable for the actions of a rogue employee in exposing the private information of thousands of other members of staff.’
Technology Law Update, 26th October 2018
Source: www.technology-law-blog.co.uk
