Although a recent U.K. Supreme Court decision was a victory for limited corporate liability, lawyers say upcoming cases will fully frame the approach courts will take to data breach litigation in the country.

On April 1, the U.K. Supreme Court reversed a lower court’s ruling that found supermarket chain Morrisions vicariously liable for the 2014 breach of nearly 100,000 employees’ data after a disgruntled employee uploaded workers’ personal information online. Vicarious liability is U.K. common law that extends liability to a company for an employee’s actions.