February 6, 2025

Employment law protections for Greencore employees affected by data breach

The Greencore data breach left many employees wondering what their rights were when it comes to data protection and compensation. The good news is, under UK employment law, workers are entitled to fair treatment when their personal data is compromised.

How does data breach law protect workers?

Under UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, employers have a legal duty to:

Protect employee data using secure systems.
Respond quickly to breaches.
Provide clear and timely notifications to affected staff.

If an employer fails to do this, affected employees may have legal grounds for compensation.

What are your rights if your data was exposed?

Employers must prove they took reasonable steps to protect your data. If your employer fails to protect your personal information, you have the right to:

1. Seek compensation for emotional distress

You do not need to prove financial loss to make a claim. You can claim for stress and anxiety caused by the loss of privacy.

2. Claim for financial losses

If your personal details were used fraudulently, you may be eligible to claim for direct financial damages.

Your right to make a claim without fear of reprisal

One concern many employees have when making a data breach compensation claim is whether it could negatively affect their job or future employment. Some may worry about losing their job, being treated unfairly, or facing retaliation from their employer.

However, UK employment law provides strong protections for workers who make legitimate legal claims, including those related to data protection failures.

You cannot be fired for making a data breach claim

Under UK employment law, you have a legal right to bring a claim against your employer if they have failed to protect your data.

It is unlawful for an employer to dismiss an employee simply because they have exercised their right to seek compensation.
If an employer terminates your contract as a direct result of your claim, this could constitute unfair dismissal, giving you the right to take legal action.
You may also have a case for constructive dismissal if you are pressured or forced to leave your role due to retaliation.

You are protected from discrimination or retaliation

If you make a data breach claim against your employer, they cannot legally treat you unfairly as a result. This includes:

Blocking promotions or career progression because of your claim.
Reducing your hours, salary, or benefits as a form of punishment.
Creating a hostile work environment to pressure you into dropping the claim.

If an employer takes any of these actions against you, they could be in breach of employment law, giving you grounds for further legal action.

Making a claim is your legal right

Bringing a data breach claim is not a personal attack on your employer – it is a legal right designed to ensure companies handle sensitive data responsibly. Employers have a duty of care to protect your personal information, and if they fail to do so, they must be held accountable.

How to make a claim against Greencore

If you worked at Greencore when the breach occurred, you may be entitled to compensation for: