Illinois Appellate Court does not see virtual eyeglass try-on feature as exempted by BIPA’s health care exclusion
9/16/24
By: Donald Patrick Eckler and Charlotte Meltzer
When an individual tries on non-prescription glasses using virtual software that captures some biometric information, are they a “patient in a health care setting” such that the service provider cannot be liable under …
Summer cyber & privacy round-up
9/9/24
By: Nicholas Jajko
2024 has been another busy year for data privacy regulation, bringing the passage of privacy laws in seven new states (New Jersey, Kentucky, Maryland, Nebraska, New Hampshire, and Rhode Island). Other developments are also worth spotlighting for …
Data Privacy Litigation Trends (and Common Defense Strategies) Part 2: Attack of the mass arbitrations
7/23/24
By: Danielle A. Ocampo
Plaintiffs are using a company’s website arbitration clauses in the Terms of Service to launch mass arbitration attacks. As a result, even where companies want to waive arbitration to litigate and dismiss the class, they are …
Eleventh Circuit rejects $35 million robocall class action settlement
7/10/24
By: Matthew N. Foree
The U.S. Court of Appeals for the Eleventh Circuit recently rejected a class action settlement based on a number of errors in approving the settlement in the District Court below. See Drazen v. GoDaddy.com, LLC, …
Tennessee raises the bar on data breach class actions
7/10/24
By: Matthew P. Delfino, Curt M. Graham, and Justin J. Boron
In response to a growing number of data breach class action lawsuits, Tennessee has enacted Public Chapter 991, which redefines the standards applicable to these cases. Specifically, …
The private right of action in privacy laws: Comparing Vermont to California
6/25/24
By: Justin J. Boron, Matt P. Delfino, and Danielle A. Ocampo
In recent years, a number of states have passed privacy laws, including Montana, Maryland, Tennessee, Kentucky, and many others. The Vermont legislature followed suit with the Vermont …
General contractor responsible for payment, even when subcontractor is hacked
6/13/24
By: Matthew P. Delfino and Jason M. Pannu
As the quantity and complexity of cyber threats continues to increase across various industries, a recent case from the U.S. District Court in Maryland highlights some of the security risks particular to …
Cyber-Rx: Prescribing treatment for the cyber-security infirmity of the healthcare industry
5/22/24
By: Alexander A. Schindler
In February of 2024, Change Healthcare, one of the world’s largest healthcare payment processing companies (accounting for an estimated 15 billion transactions worldwide) announced that it was the victim of a cyber-attack that compromised the medical …
Vermont data privacy law to allow consumers to sue companies for violating broad range of privacy rules
5/21/24
By: Courtney M. Knight, Esq.
On May 10, 2024, Vermont’s legislature passed a comprehensive data privacy law that exposes companies to consumer litigation not just for data breaches, but also any violation of consumer data privacy rights under the statute. …
Why data holders and service providers need to be aware of the American Privacy Rights Act (“APRA”) and its compliance requirements
5/6/24
By: Thomas Livingston
Recently, the Chair of the U.S. House Committee on Energy and Commerce along with the Senate Committee Chair announced a new piece of data privacy legislation entitled the American Privacy Rights Act (the “APRA”) that has garnered …
Kentucky joins the biometric trend – new statute unlikely to result in civil litigation, but businesses and nonprofits should still prepare
4/24/24
By: Curt M. Graham and Barry M. Miller
The Commonwealth of Kentucky—the 15th state admitted to the United States—is now the 15th state to pass a bill protecting biometric and other consumer data.
But the statute provides that Kentucky’s Attorney …
AI class action knocks on California court’s door
4/10/24
By: Danielle A. Ocampo
The first Artificial Intelligence (AI) class action litigation in California courts was filed in Alameda Superior Court on March 28, 2024. The class filed a complaint against Blue Shield of California, one of the largest medical …