In WM Morrison Supermarkets plc v Various claimants, the Supreme Court held that the employer is not vicariously liable for an employee's deliberate personal data breach because the employee was not engaged in furthering his employer's business but was pursuing "a personal vendetta".