What legal responsibilities does a company have to keep your data secure?

M&S, and the Co-op are picking up the pieces after their systems were hacked.

The cyber criminals claim to have the private information of 20 million people who signed up to Co-op's membership scheme, but the firm have not confirmed that number. The Co-op says the breach did not include members’ passwords, bank or credit card details. However, experts say seemingly innocent information can be used to commit fraud or identity theft.

Companies aren’t the only target; on Monday this week, the Ministry of Justice revealed that the Legal Aid Agency was also hacked in April.

So can you sue if your private data is stolen in this way? And if you're the employee who clicked on a hacker's dodgy link in an email, how liable are you for any losses that occur?

Also on the programme:

Presenter: Joelle Grogan

Contributors