Judgment was handed down in the important case of Various Claimants v Wm Morrison Supermarket Plc (2017) concerning criminal misuse of data by an employee, a timely case given the upcoming enforcement date of the GDPR, under which the frequency of employee group actions is expected to increase.