Data protection – Data retention and investigatory powers. The appeal of the appellant Morrisons supermarket company (M) failed, in a case where it had been found vicariously liable for the actions of an employee (S) who had disclosed confidential data relating to the claimant employees of M. The Court of Appeal, Civil Division, held that the Data Protection Act 1998 did not exclude the application of vicarious liability or the application of causes of action for misuse of private information and breach of confidence and/or the imposition of vicarious liability for breaches of the same. Further, the judge had not erred in holding that the wrongful acts of S had occurred during the course of his employment and, accordingly, that M had been vicariously liable for those wrongful acts.