The Supreme Court has handed down its long-awaited judgement in the case of WM Morrison Supermarkets Plc (Morrisons) v. Various Claimants, a case which has been ongoing since 2017. It reached a significant (and possibly controversial) decision on vicarious liability. In doing so, it overturned the decision of the Court of Appeal and held that an employer is not normally vicariously liable for a data breach deliberately committed by a rogue employee.