Expertise and advice so you're always one step ahead - sign up to receive the latest legal updates, events & seminar news
HomeInsights & thinkingJust Eat in the spotlight after delivery driver uses customer data to send inappropriate texts
Just Eat in the spotlight after delivery driver uses customer data to send inappropriate texts
19 January 2018
Just Eat are under the spotlight for a delivery driver using customer data to send inappropriate texts to a female customer. It is possible that the driver’s use of a customer’s personal data in this way will be determined to be a breach of the Data Protection Act.
To hear further comment on this story tune into BBC Radio Gloucestershire to listen to our head of employment law, Matthew Clayton’s interview.Click here to be taken to BBC Radio Glos iPlayer (listen in from 2:08:13).
The issue of whether an employer can be held to be vicariously liable for an employee breaching data protection legislation was recently considered in Various Claimants v WM Morrisons Supermarkets PLC. The High Court was asked to determine if Morrisons was liable for a senior manager disclosing the personal information of around 100,000 colleagues online. (He also sent the information to three newspapers).
For an employer to be held liable for an act of its employee, there must be a sufficient connection between the employee’s employment and the wrongful conduct. Very often the court will look at factors such as whether the wrongful conduct occurred in the course of the employee’s employment. In the Morrisons case, the High Court held that it was liable for the act of the senior manager because it occurred in the normal course of his employment – this was despite his act being carried out on his own computer and outside of working hours. The court also held that Morrisons had itself breached the Data Protection Act by failing to organise the deletion of the data from the manager’s computer. (Morrisons have been granted the right to appeal this decision).
Whether Just Eat will be subject to further action following the driver using its customer’s details in this way, is at the time of writing unknown, but at the very least it is likely to warrant further investigation both by Just Eat internally and by the Information Commissioner.
Matthew heads our employment team. Matthew trained and worked at a City of London law firm. He handles the full range of employment law issues with specialisms in complex staff restructurings and employment issues concerning business transfers. Matthew is recommended by independent legal directory Chambers and Partners which describes him as ‘solutions-focused’ and ‘a solid and respected practitioner noted for his technical abilities’.
Disclaimer: All legal information is correct at the time of publication but please be aware that laws may change over time. This article contains general legal information but should not be relied upon as legal advice. Please seek professional legal advice about your specific situation - contact us; we’d be delighted to help.
The new Labour government has scrapped the Conservative bill that gives workers the right to request a predictable working pattern, in favour of stronger, more certain working hours. As well…
Changes to the Transfer of Undertakings (Protection of Employment) Regulations 2006 (TUPE) are now in effect for transfers taking place on or after 1 July 2024. The new rules relating…
The new ‘Tipping Act’ will come into force on 1 October 2024. The new Employment (Allocation of Tips) Act 2023 – also known as the Tipping Act – is to…
By clicking Accept you are agreeing to the use of all cookies which will allow us to provide you with the most relevant experience when visiting or re-visiting this website. This means that your personal preferences will be remembered when you use this website. You can change your consent or choose specific settings by clicking "Cookie Settings". By clicking "Reject All" we will not use any non-essential cookies. Essential cookies will still be used for the website to function properly. Please see our cookie policy and privacy notice for more information about how we process your personal data.
Our website uses cookies to improve your experience while you navigate through our website. Out of these cookies, the cookies that are categorised as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyse and understand how you use our website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies but it may affect your browsing experience on our website. You can find our cookie policy here.
Necessary cookies are absolutely essential for our website to function and enable core functionality such as security and accessibility. These cookies do not store any personal information. You can block these cookies by changing your browser settings, but this may affect how the website functions.
Functional cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features.
Cookie
Duration
Description
__cf_bm
30 minutes
This cookie, set by Cloudflare, is used to support Cloudflare Bot Management.
mgref
1 year
This cookie is set by Eventbrite to deliver content tailored to the end user's interests and improve content creation. It is also used for event-booking purposes.
yt-player-headers-readable
never
The yt-player-headers-readable cookie is used by YouTube to store user preferences related to video playback and interface, enhancing the user's viewing experience.
yt-remote-cast-installed
session
The yt-remote-cast-installed cookie is used to store the user's video player preferences using embedded YouTube video.
yt-remote-connected-devices
never
YouTube sets this cookie to store the user's video preferences using embedded YouTube videos.
yt-remote-device-id
never
YouTube sets this cookie to store the user's video preferences using embedded YouTube videos.
yt-remote-fast-check-period
session
The yt-remote-fast-check-period cookie is used by YouTube to store the user's video player preferences for embedded YouTube videos.
yt-remote-session-app
session
The yt-remote-session-app cookie is used by YouTube to store user preferences and information about the interface of the embedded YouTube video player.
yt-remote-session-name
session
The yt-remote-session-name cookie is used by YouTube to store the user's video player preferences using embedded YouTube video.
ytidb::LAST_RESULT_ENTRY_KEY
never
The cookie ytidb::LAST_RESULT_ENTRY_KEY is used by YouTube to store the last search result entry that was clicked by the user. This information is used to improve the user experience by providing more relevant search results in the future.
Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.
Cookie
Duration
Description
_ga
2 years
The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors.
_gat
1 minute
This cookie is installed by Google Universal Analytics to restrain request rate and thus limit the collection of data on high traffic sites.
_gid
1 day
Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website's performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously.
_s
1 year
This cookie is associated with Shopify's analytics suite.
G
1 year
Cookie used to facilitate the translation into the preferred language of the visitor.
vuid
2 years
Vimeo installs this cookie to collect tracking information by setting a unique ID to embed videos to the website.
Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.
Cookie
Duration
Description
VISITOR_INFO1_LIVE
6 months
YouTube sets this cookie to measure bandwidth, determining whether the user gets the new or old player interface.
VISITOR_PRIVACY_METADATA
6 months
YouTube sets this cookie to store the user's cookie consent state for the current domain.
YSC
session
Youtube sets this cookie to track the views of embedded videos on Youtube pages.