The High Court in London has handed down a judgment establishing that, as a matter of English law, a company can be held vicariously liable in respect of data breaches caused by its employees. This means that a company can be held liable to compensate affected data subjects for loss – including non-pecuniary loss such as upset … Continue reading