On the face of it organisations were just made liable for nefarious data doings of any nasty individual they might have had the misfortune to employ…or nice employees who just mess up. […]