Various Claimants v Wm Morrison Supermarkets plc

Various Claimants v Wm Morrison Supermarkets plc
CourtUK Supreme Court
Decided1 April 2020
Citations[2020] UKSC 12, [2020] AC 989

Various Claimants v Wm Morrison Supermarkets plc is an English tort law case heard in the Supreme Court, concerning vicarious liability in English law. It was the first data breach class action in the UK.[1]

Background

In 2017, 9,263 current and former employees sued Morrisons after their personal payroll data was leaked by Andrew Skelton, an internal auditor employed by the supermarket chain, who had a grudge.[2] In 2013 he had a job of collating payroll data for external auditors, KPMG, and secretly copied it onto a USB stick. He uploaded it from a pay as you go phone to a file sharing website. This was a misuse of private information, breach of confidence and breach of the Data Protection Act 1998.[3] In 2015, Skelton was found guilty of and jailed for fraud, securing unauthorised access to computer material and disclosing personal data.[1] In response to the 2017 claim, Judge Langstaff found Morrisons vicariously liable for Skelton's actions in the High Court.[1] The case then went before the Court of Appeal in 2018 and was dismissed as the judges, Lord Justice Bean and Lord Justice Flaux, held Skelton’s conduct was closely connected to his employment.[2][4]

Judgment

In 2020, a panel of five judges at the Supreme Court allowed an appeal and held Morrisons was not liable for Skelton's actions as his actions of publishing the data did not come under his "field of activities", and Morrisons would not have to pay compensation to the 100,000 affected employees.[5][6][7]

See also

References

  1. 1 2 3 "Morrisons data leak: Supermarket liable for staff details breach". BBC News. 1 December 2017. Retrieved 9 April 2026.
  2. 1 2 McKeown, Jeremy (2 April 2020). "WM Morrison Supermarkets plc v Various Claimants – Supreme Court clarifies the test for vicarious liability". 12 King's Bench Walk. Retrieved 9 April 2026.
  3. ↑ D Nolan and K Oliphant, Lunney & Oliphant's Tort Law: Text and Materials (7th edn OUP 2023) ch 14, 862
  4. ↑ WM Morrison Supermarkets Plc v Various Claimants [2018] EWCA Civ 2339, 22 October 2018, retrieved 9 April 2026
  5. ↑ "Morrisons staff lose payout bid in Supreme Court data leak case". BBC News. 1 April 2020. Retrieved 9 April 2026.
  6. ↑ "Morrisons Wins Supreme Court Appeal Over Vicarious Liability For Data Breach". Winston & Strawn - Morrisons Wins Supreme Court Appeal Over Vicarious Liability For Data Breach. Retrieved 9 April 2026.
  7. ↑ WM Morrison Supermarkets plc v Various Claimants [2020] UKSC 12, 1 April 2020, retrieved 9 April 2026