In WM Morrison Supermarkets plc v Various claimants, the Supreme Court held that the employer is not vicariously liable for an employee's deliberate personal data breach because the employee was not engaged in furthering his employer's business but was pursuing "a personal vendetta".
A model policy to comply with the obligation to have an appropriate policy document in place when processing special category personal data and criminal records data. The policy complies with the General Data Protection Regulation (GDPR).
A model policy to inform employees of the reasons for the use of tracking and telematics devices in your organisation's vehicles, the type of data collected and the way in which it is processed.
In López Ribalda and others v Spain, the European Court of Human Rights held that Spanish shop workers' right to privacy was not violated when a supermarket secretly installed hidden cameras to monitor employee thefts.