Mealey's Data Privacy : Mealey's : Legal News & Analysis

Mealey's Data Privacy

February 20, 2024
Israeli Firm Seeks Discovery From Canadian Research Lab In Spyware Suit

OAKLAND, Calif.— With competing motions to compel pending in its computer fraud dispute with WhatsApp Inc., Israeli surveillance technology company NSO Group Technologies Limited asked a California federal court to issue a letter rogatory requesting a Canadian court to compel discovery from a Toronto-based research laboratory that aided WhatsApp in the present suit.
February 28, 2024
Dating App User, Bumble Say Settlement Reached In Biometric Data Collection Case

CHICAGO — A dating application user and the companies associated with the operation of that app filed a joint status report in a federal court in Illinois stating that a settlement in principle has been reached in a putative class complaint alleging violation of the Illinois Biometric Information Privacy Act (BIPA) by collecting, storing and using users’ data.
February 28, 2024
Initial OK Given To $2.45 Million Settlement Of Debt Collector Data Breach Suit

SEATTLE — Two months after the proposed settlement of a class action over the 2022 breach of a debt collector’s network was sent back for some fine-tuning, a Washington federal judge granted a renewed motion for preliminary approval of a $2.45 million agreement, finding that the parties cured ambiguous language in its scope of release and sufficiently identified the range of attorney fees and costs amounts sought.
February 27, 2024
AI Interview Company Can’t Escape Illinois Biometric Law Class Action

CHICAGO — The use of a company’s artificial intelligence-based virtual interview program within Illinois gives jurisdiction over the case and the allegations fall within the purview of Illinois law governing biometric data, a federal judge in Illinois said Feb. 26, dismissing only claims that the company profited from the sale of such data.
February 26, 2024
Class Complaint Accuses Labcorp Of Sending Protected Health Info To Google

PHILADELPHIA — Two patients of Laboratory Corporation of America Holdings (Labcorp) filed a class complaint unsealed Feb. 23 by a federal judge in Pennsylvania, accusing the health care company of intercepting individually identifiable health information from its website users and sending the information to Google, which analyzes the data, matches the information to individuals and then shares its analysis with Labcorp.
February 23, 2024
Kroger Pharmacy Customers Dismiss Consolidated Data-Sharing Class Suits

CINCINNATI — Customers of an Ohio supermarket chain whose two putative class complaints alleging that the installation and use of a tracking pixel on the chain’s pharmacy website to collect and share confidential patient information were consolidated in January filed a notice on Feb. 22 of voluntary dismissal without prejudice pursuant to Federal Rule of Civil Procedure 41(A)(i).
February 21, 2024
4 More Suits Consolidated In Fortra File Transfer Data Breach MDL

MIAMI — One week after consolidating 46 putative class actions related to more than 100 data breaches attributed to hackers’ exploitation of vulnerabilities in file-transfer software, the Judicial Panel on Multidistrict Litigation (JPMDL) consolidated four more related suits with the others in the multidistrict litigation in Florida federal court.
February 20, 2024
Google Says UCL, Other Claims In AI Training Lawsuit Fail

SAN FRANCISCO — Vague allegations and hypothetical damages involving the scraping of websites and other sources for data used in the training of artificial intelligence cannot form the basis of California unfair competition law (UCL) and other claims because the potential usage was adequately disclosed and individuals lack a privacy interest in information they themselves publicly disclosed, Google LLC tells a federal judge in California in seeking dismissal.
February 20, 2024
Home Depot Customer Sues Over Use Of Google AI To Access, Record Phone Calls

LOS ANGELES — In a putative class action filed in California federal court, a Los Angeles man alleges that The Home Depot Inc. violated California’s Invasion of Privacy Act (CIPA) by using an artificial intelligence product from Google Inc. to listen to, analyze and record customers’ phone calls without their knowledge or consent.
February 16, 2024
7th Circuit: Minors Not Bound By Arbitration Clause In Ancestry.Com Privacy Suit

CHICAGO — Affirming a trial court’s denial of a motion by Ancestry.com DNA LLC to compel arbitration of a putative genetic privacy class action against it, a Seventh Circuit U.S. Court of Appeals panel on Feb. 15 found that because the minor plaintiffs were not signatories to the terms and conditions on Ancestry’s website, they were not bound by the arbitration provision to which their guardians agreed.
February 15, 2024
RICO Claim Tossed From Suit Alleging App Captures Data With Cyberpirated Marks

SACRAMENTO, Calif. — A federal judge in California denied arbitration and dismissed a Racketeering Influenced and Corrupt Organizations (RICO) Act claim from a putative class complaint accusing a software company of collecting and selling personal data from a budgeting application for smartphones and of using cyberpirated trademarks and other information to entice users to enter their banking information but permitted the app user’s remaining claims under Utah and California law to proceed.
February 15, 2024
Meta Asks D.C. Circuit To Enjoin FTC From Modifying $5 Billion Privacy Judgment

WASHINGTON, D.C. — In a reply brief supporting its motion for an injunction pending appeal, Meta Platforms Inc. (formerly Facebook Inc.) asks the District of Columbia Circuit U.S. Court of Appeals to stop the Federal Trade Commission from reopening a 2020 $5 billion privacy settlement while it pursues an appeal of a trial court ruling, arguing that the commission does not have jurisdiction to unilaterally revise the stipulated order in that case.
February 14, 2024
Reconsideration Of Partial Dismissal Of Website Data Collection Claims Sought

SAN DIEGO — Papa John’s International Inc. filed a motion for reconsideration in a federal court in California after a judge partially granted its motion to dismiss a putative class complaint alleging violations of the California Invasion of Privacy Act (CIPA) through the alleged interception and collection of users’ data on a pizza-ordering webpage, in light of the ruling in Briskin v. Shopify.
February 12, 2024
Google Tells 9th Circuit Chrome Users Consented To Data Collection, Use

SAN FRANCISCO — In a Feb. 9 appellee brief, Google LLC explains to the Ninth Circuit U.S. Court of Appeals that the parties alleging privacy violations related to the purported collection and sharing of their personally identifiable information (PII) through the Chrome web browser “undisputedly agreed” to its privacy policy and related agreements “that describe the precise data collection and use” of which they complain, asking that the trial court ruling that disposed of all their claims be affirmed.
February 02, 2024
Insured Seeks Coverage For Claims It Violated BIPA By Using Biometric Time Clocks

CHICAGO — An insured filed a breach of contract lawsuit in an Illinois federal court, seeking a declaration as to coverage for an underlying putative class lawsuit alleging that it violated the Illinois Biometric Privacy Act (BIPA) by using biometric time clocks to track employee working hours.
January 30, 2024
Judge Denies Meta’s Dismissal Motion In Pixel Privacy Suit, Deems Harm Claims OK

SAN FRANCISCO — A group of Facebook users adequately amended their claims after a partial dismissal ruling, a California federal judge ruled Jan. 29, denying Meta Platforms Inc.’s renewed motion to dismiss privacy claims related to its purported collection of users’ protected health information (PHI).
January 30, 2024
5th Circuit: Texas Drone Regulations Don’t Violate 1st Amendment

NEW ORLEANS — In a revised opinion issued after a grant of partial rehearing, a Fifth Circuit U.S. Court of Appeals panel ruled that a Texas law that places certain restrictions on the use of drones does not violate the First Amendment to the U.S. Constitution because the no-fly restrictions at issue have nothing to do with speech or expression and because the state has a significant interest in protecting its citizens’ privacy rights.
January 29, 2024
Planned Parenthood’s $6M Data Breach Class Settlement Preliminarily Approved

LOS ANGELES — A California judge granted preliminary approval of a $6 million settlement to be paid by Planned Parenthood Los Angeles (PPLA) to settle a consolidated class complaint accusing the reproductive health care provider of failing to protect patients’ personally identifiable information (PII) and protected health information (PHI) from being accessed and stolen.
January 26, 2024
Federal Judge Consolidates 2 Data-Sharing Class Suits By Kroger Pharmacy Customers

CINCINNATI — A federal judge in Ohio granted an unopposed motion to consolidate two putative class complaints accusing a supermarket chain of installing and using a tracking pixel on its pharmacy website to collect and share confidential patient information.
January 25, 2024
Judge: Google Waived Right To Compel Arbitration In Digital Assistant Privacy Row

SAN JOSE, Calif. — Conducting a totality of the circumstances review, a California federal judge concluded that Google LLC waived its right to seek arbitration of putative class claims over alleged eavesdropping by the Google Assistant (GA) app, denying the defendant’s motion to compel arbitration, which was filed after four years of “substantial motion practice,” discovery and class certification.
January 24, 2024
Meta Denied Injunction Of FTC Proceedings Over Revised Privacy Judgment

WASHINGTON, D.C. — Concluding that Meta Platforms Inc. (formerly known as Facebook Inc.) did “not attempt to show a likelihood of success on the merits” of its appeal over the Federal Trade Commission’s authority to reopen and revise a $5 billion privacy consent judgment, a District of Columbia federal judge declined to grant to the social network operator’s motion to enjoin the commission’s proceedings during the appeals process.
January 23, 2024
WhatsApp, NSO Defend Discovery Requests In Spyware Dispute

OAKLAND, Calif. — WhatsApp Inc. asks a California federal court to order defendant NSO Group Technologies Limited to submit documents related to all the different types of spyware that the Israeli company used to spy on its users in a reply brief supporting its motion to compel discovery responses, while the defendant maintains that it is entitled to information about the company that aided the plaintiff in its investigation related to the claimed surveillance of WhatsApp users.
January 22, 2024
Consolidated Mr. Cooper Data Breach Plaintiffs To Submit Proposed Deadlines

DALLAS — Eight days after 20 putative class actions over a data breach experienced by Mr. Cooper Group Inc. were consolidated in Texas federal court, the judge granted the mortgage servicer’s motion for relief from the impending deadline for it to respond to the complaint against it, directing the parties to submit an agreed-upon schedule with proposed deadlines for filing motions, an amended complaint and other items.
January 18, 2024
Partial Dismissal Granted In Class Suit Over Papa John’s Website Data Collection

SAN DIEGO — A federal judge in California partially granted a pizza franchisor’s motion to dismiss a putative class complaint alleging violations of the California Invasion of Privacy Act (CIPA) through the alleged interception and collection of users’ data on a pizza ordering webpage, finding that the lead plaintiff failed to show that there were telephone communications at issue or that there was an imminent threat of harm in the future.
January 12, 2024
Hospital Personnel Must Produce Some Documents In Surveillance Lawsuit

SAN DIEGO — A couple who successfully defended themselves against a hospital’s reports of child abuse and neglect are entitled to records of their daughter’s treatment and communications related to the purportedly invasive surveillance of the family undertaken by the hospital, a California federal magistrate judge found, partly granting the plaintiffs’ motion to compel additional responses from two of the hospital’s personnel who were involved in the surveillance.