and this is where the grey area starts.
As has been mentioned here and in previous articles about this, the crux is whether he had access he abused or was there a gap he took advantage of. If the first he is wholly to blame, if the second then Morrisons have to share the blame. The difference between the two is mostly semantics unless there is a piece of paper (or the electronic equivalent) which says that he may/may not make offline copies of data.
Biting the hand that feeds IT
