Mealey's Data Privacy

  • August 27, 2026

    Judge Approves $17B Settlement In Meta Social Media Addiction MDL

    OAKLAND, Calif. — In a California federal court multidistrict litigation and a related case, a California federal judge on Aug. 26 approved a proposed consent judgment by numerous states and Meta Platforms Inc. that includes settlement payments of approximately $17 billion that Meta agrees to pay to resolve claims against it by 47 states, the District of Columbia and three U.S. territories alleging that Meta designed Facebook and Instagram to addict youth and misrepresented the platforms’ risks.

  • August 26, 2026

    Split High Court Stays Injunction On Trump Voter Data And Mail Ballot Directive

    WASHINGTON, D.C. — A divided Supreme Court stayed an injunction issued in a Massachusetts federal court that barred the Trump administration from implementing provisions of an executive order in 24 states and the District of Columbia that directs the creation of state-specific citizenship lists and changes to the administration of mail-in ballots for the November 2026 elections, ruling that the government is likely to succeed in showing that states challenging the order are doing so prematurely because they lack Article III standing and that leaving the injunction in place would irreparably harm the government by interfering with Executive Branch operations.

  • August 26, 2026

    Some Claims Dismissed In Class Action Case Against Otter.ai Over Privacy Concerns

    SAN FRANCISCO — A California federal judge partially dismissed claims brought against Otter.ai Inc. by individuals who argue that the company does not obtain prior consent of all participants in a virtual meeting before its Notetaker transcription function is engaged to record a conversation, ruling that the plaintiffs failed to sufficiently plead unauthorized computer access, and as to several plaintiffs, a reasonable expectation of privacy, but allowed claims predicated on real-time interception, third-party eavesdropping and collection of biometric voice data to proceed.

  • August 26, 2026

    Final Approval Granted To Health Provider-Funded $2.52M Class Action Settlement

    ST. LOUIS — A Missouri state judge granted final approval to a $2,525,000 settlement between a healthcare provider and a class of individuals whose personally identifying information and health data were disclosed when the provider fell victim to a 2025 cyberattack.

  • August 26, 2026

    OpenAI Dismissal Motion Denied As Moot After ChatGPT User Files Amended Complaint

    SAN DIEGO — A California federal judge denied as moot OpenAI Global LLC’s motion to dismiss a class action complaint after a user of ChatGPT filed an amended complaint in which she alleges that OpenAI improperly disclosed ChatGPT users’ conversation information to third parties without obtaining user consent.

  • August 25, 2026

    States, D.C. Can’t Enjoin 4 USDA SNAP Data Suits Despite Issue Overlap

    SAN FRANCISCO — A California federal judge declined to enjoin the U.S. Department of Agriculture (USDA) and the Department of Justice (DOJ) from bringing four separate suits seeking the personal data of Supplemental Nutrition Assistance Program (SNAP) benefit recipients in Kentucky, Michigan, Minnesota and Pennsylvania, holding that although the cases overlap with the present action brought by 21 states and the District of Columbia, the Food and Nutrition Act requires that enforcement actions be brought where each state agency is located.

  • August 20, 2026

    Mass. Judge Enjoins Trump Postal Service Mail Ballot Directive For 2026 Elections

    BOSTON — A Massachusetts federal judge enjoined the U.S. Postal Service (USPS) from implementing President Donald Trump’s executive order on mail-in and absentee ballots for the Nov. 3 midterm election and any earlier federal election, finding that voter advocacy groups are likely to succeed on their separation of powers and ultra vires claims because Section 3 of the order directs the executive branch to regulate federal elections despite the Constitution’s allocation of election administration authority to the states and Congress.

  • August 19, 2026

    United States Appeals Dismissal Of Suit Seeking Colorado’s Unredacted Voter List

    DENVER — The United States appealed to the 10th Circuit U.S. Court of Appeals a Colorado federal judge’s dismissal of its lawsuit seeking the state’s unredacted statewide voter registration list, after the judge held that the list is not a “‘record’” subject to production under Title III of the Civil Rights Act of 1960.

  • August 18, 2026

    Web Users Ask Judge To Reconsider Dismissal Of Class Action Suit

    NEW YORK — The plaintiffs in a consolidated action against the operators of an AI-powered marketing and consumer data platform told a New York federal judge that they intend to seek reconsideration of a ruling that dismissed their complaint; in that ruling, the judge held that the plaintiffs lacked standing under Article III of the U.S. Constitution because they failed to plausibly allege a concrete injury from the operators’ alleged collection and monetization of their email addresses, device information and browser information.

  • August 17, 2026

    Split 9th Circuit Gives DOJ Win In Gender-Affirming Care Subpoena Dispute

    SEATTLE — Giving the U.S. Department of Justice (DOJ) a victory on an issue that is the focus of numerous lawsuits, the Ninth Circuit U.S. Court of Appeals on Aug. 14 issued a 2-1 ruling reversing quashal of an administrative subpoena for patient medical and communications data from a gender-affirming care provider and remanding for further proceedings; the majority concluded that the provider “has not met its heavy burden of showing that the subpoena was issued for an improper purpose,” and the dissenter said, “That the President may lawfully voice policy opposition to a practice does not mean the DOJ can exceed its statutory authority and issue pretextual subpoenas to put a company out of business.”

  • August 17, 2026

    Supreme Court Denies Verizon’s Limited Rehearing Petition In FCC Forfeiture Case

    WASHINGTON, D.C. — The U.S. Supreme Court on Aug. 17 denied Verizon Communications Inc.’s petition for rehearing seeking to modify the court’s disposition from affirmance to affirmance with a remand as to Verizon only following the court’s holding that the Federal Communications Commission’s forfeiture orders do not violate the Seventh Amendment to the U.S. Constitution in consolidated cases in which Verizon and AT&T Inc. asserted constitutional challenges to the FCC’s enforcement of monetary forfeitures under the Communications Act.

  • August 14, 2026

    Judge: Some Insurance-Related Documents Must Be Produced In BIPA Class Action

    EAST ST. LOUIS, Ill. — Partly granting a request to compel production of insurance-related documents in a class action that concerns the Illinois Biometric Information Privacy Act (BIPA), an Illinois federal judge ruled after in camera review that some of the documents “are not subject to any privilege” and must be produced but others “need not be produced” because they are not relevant.

  • August 13, 2026

    $325K Settlement Given Final Approval, Resolving Data Breach Claims

    WILMINGTON, Del. — A Delaware federal judge granted final approval to a $325,000 cash settlement to resolve seven claims brought on behalf of a nationwide class by an individual victim of a data breach through which thousands of individuals’ personally identifying information (PII) held by a financial services firm was disclosed.

  • August 12, 2026

    Pennsylvania Judge Gives Final Approval To $2.5M Data Breach Settlement

    HARRISBURG, Pa. — A Pennsylvania judge granted final approval of a settlement to resolve a data privacy class action arising from a 2024 cyberattack, in which a public sector union will pay up to $2.5 million for claims, credit monitoring, settlement administration, attorney fees and service awards.

  • August 12, 2026

    States, D.C., Governors Fight Federal Disclosure Of Benefits Recipient Data

    TAMPA, Fla. — Twenty-two states, the District of Columbia and two state governors seek declaratory and injunctive relief in a District of Columbia federal court after the Administration for Children and Families (ACF) issued a notice authorizing its disclosure of sensitive personal information, including Social Security numbers and immigration status, for Temporary Assistance for Needy Families (TANF) recipients for alleged oversight purposes.

  • August 11, 2026

    Only Negligence Claim Survives Dismissal In Casino Ransomware Attack Case

    PHILADELPHIA — Philadelphia casino owners accused of failing to protect employees’ and customers’ personally identifiable information (PII) following a ransomware attack have been plausibly accused of negligence but haven’t been shown to be liable for the data breach, a federal judge in Pennsylvania ruled, largely granting the owners’ motion to dismiss the putative class complaint.

  • August 07, 2026

    $3.3 Million Settlement Resolving Health Data Breach Given Final Approval

    LAS VEGAS — A Nevada federal judge granted final approval of a $3.3 million settlement resolving data breach claims against a dental care provider one day after allowing negligence and unjust enrichment claims to proceed against the dental care provider’s management services provider.

  • August 07, 2026

    Reconsideration Denied After Dismissal Of Case Over OPM ‘Test’ Emails To Workers

    WASHINGTON, D.C. — A federal judge in the District of Columbia denied a motion by federal workers to reconsider dismissal of a putative class lawsuit that alleged that the Office of Personnel Management (OPM) failed to conduct and publish a privacy impact assessment (PIA) before purportedly sending out “test” emails the workers claimed were being used to collect information on them, opining that Federal Rule of Civil Procedure 60(b)(2) doesn’t “permit do-overs” for newly discovered evidence when that evidence could have been discovered “with a modicum of diligence and where that ‘evidence’ is, in any event, cumulative, duplicative, or of only marginal relevance.”

  • August 06, 2026

    2nd Circuit Says Customer Data Law Unconstitutional In Row With DoorDash, Grubhub

    NEW YORK — The Second Circuit U.S. Court of Appeals on Aug. 5 affirmed a lower court’s grant of summary judgment to DoorDash, Portier and Grubhub in their quest to halt enforcement of a New York City law that would require food delivery services to provide customer data to restaurants, finding that the law violates the First Amendment to the U.S. Constitution.

  • August 04, 2026

    Request For Protective Order, Sanctions Denied For Lack Of Improper Disclosure

    KANSAS CITY, Kan. — A Kansas federal magistrate judge denied an anonymous plaintiff-intervenor’s motion for a protective order, sanctions and counsel disqualification in a workplace sexual harassment and retaliation action, ruling that the claim that counsel for the owner and operator of more than 50 Burger King restaurants used a deposition subpoena to obtain a treating provider’s affidavit disclosing protected mental health information was unsupported by evidence of improper disclosure.

  • August 03, 2026

    Judge: Business Exclusion Bars Coverage For Negligence, Invasion Of Privacy Suit

    HARTFORD, Conn.— A federal judge in Connecticut on July 31 granted a homeowners insurer’s motion for summary judgment in its lawsuit disputing coverage for an underlying negligence and invasion of privacy lawsuit alleging that the insured misused her clinical social worker credentials to access patient healthcare information that was in a hospital’s electronic patient database, holding that the business exclusion bars coverage.

  • August 03, 2026

    Judge Says Data-Sharing Class Claims Sufficiently Pleaded Against Shopify

    OAKLAND, Calif. — Finding that new allegations in a consumer’s third amended complaint resolved previously identified deficiencies, a California federal judge denied Shopify Inc.’s motion to dismiss a putative class action against it for allegedly collecting customer data to create and sell individualized profiles in violation of California privacy laws and the state’s unfair competition law (UCL).

  • July 31, 2026

    Grok Deepfake Plaintiffs May Proceed Anonymously, Judge Says

    SAN JOSE, Calif. — Plaintiffs may proceed anonymously in their proposed class action alleging that users of the Grok artificial intelligence platform created fake images of them either naked or in compromising positions, a federal judge in California said July 30.

  • July 30, 2026

    Certification Of 3 Proposed Classes Denied In Data Collection Class Action

    LOS ANGELES — A California federal judge denied class certification to two web users who sought to represent three proposed classes in a consolidated class action lawsuit against an advertiser, holding that the web users failed to establish that their claims were typical across two of the classes, failed to satisfy the predominance requirement and suffered from Article III standing issues.

  • July 29, 2026

    New York Federal Judge Finds Fair Use Showing Too Weak To Quash DMCA Subpoena

    NEW YORK — A New York federal judge denied an anonymous website operator’s motion to quash a Digital Millennium Copyright Act (DMCA) subpoena seeking identifying information from an internet services company, finding that the copyright holder presented a concrete infringement claim and sought information necessary to identify and sue the operator.