Re: Vicarious liability
I think the judge made his verdict on the fact that this type of information about employees should not be so easily downloaded/printed off and should be secure enough that no employee can get all this information.
I imagine banks have security/processes in place to prevent people taking personal information (e.g. account details) so it wouldn't be hard for Morrisons to implement a procedure (2nd person authority maybe) to download/print/transfer employee data