Mealey's Data Privacy
-
January 26, 2024
Federal Judge Consolidates 2 Data-Sharing Class Suits By Kroger Pharmacy Customers
CINCINNATI — A federal judge in Ohio granted an unopposed motion to consolidate two putative class complaints accusing a supermarket chain of installing and using a tracking pixel on its pharmacy website to collect and share confidential patient information.
-
January 25, 2024
Judge: Google Waived Right To Compel Arbitration In Digital Assistant Privacy Row
SAN JOSE, Calif. — Conducting a totality of the circumstances review, a California federal judge concluded that Google LLC waived its right to seek arbitration of putative class claims over alleged eavesdropping by the Google Assistant (GA) app, denying the defendant’s motion to compel arbitration, which was filed after four years of “substantial motion practice,” discovery and class certification.
-
January 24, 2024
Meta Denied Injunction Of FTC Proceedings Over Revised Privacy Judgment
WASHINGTON, D.C. — Concluding that Meta Platforms Inc. (formerly known as Facebook Inc.) did “not attempt to show a likelihood of success on the merits” of its appeal over the Federal Trade Commission’s authority to reopen and revise a $5 billion privacy consent judgment, a District of Columbia federal judge declined to grant to the social network operator’s motion to enjoin the commission’s proceedings during the appeals process.
-
January 23, 2024
WhatsApp, NSO Defend Discovery Requests In Spyware Dispute
OAKLAND, Calif. — WhatsApp Inc. asks a California federal court to order defendant NSO Group Technologies Limited to submit documents related to all the different types of spyware that the Israeli company used to spy on its users in a reply brief supporting its motion to compel discovery responses, while the defendant maintains that it is entitled to information about the company that aided the plaintiff in its investigation related to the claimed surveillance of WhatsApp users.
-
January 22, 2024
Consolidated Mr. Cooper Data Breach Plaintiffs To Submit Proposed Deadlines
DALLAS — Eight days after 20 putative class actions over a data breach experienced by Mr. Cooper Group Inc. were consolidated in Texas federal court, the judge granted the mortgage servicer’s motion for relief from the impending deadline for it to respond to the complaint against it, directing the parties to submit an agreed-upon schedule with proposed deadlines for filing motions, an amended complaint and other items.
-
January 18, 2024
Partial Dismissal Granted In Class Suit Over Papa John’s Website Data Collection
SAN DIEGO — A federal judge in California partially granted a pizza franchisor’s motion to dismiss a putative class complaint alleging violations of the California Invasion of Privacy Act (CIPA) through the alleged interception and collection of users’ data on a pizza ordering webpage, finding that the lead plaintiff failed to show that there were telephone communications at issue or that there was an imminent threat of harm in the future.
-
January 12, 2024
Hospital Personnel Must Produce Some Documents In Surveillance Lawsuit
SAN DIEGO — A couple who successfully defended themselves against a hospital’s reports of child abuse and neglect are entitled to records of their daughter’s treatment and communications related to the purportedly invasive surveillance of the family undertaken by the hospital, a California federal magistrate judge found, partly granting the plaintiffs’ motion to compel additional responses from two of the hospital’s personnel who were involved in the surveillance.
-
January 10, 2024
Plaintiffs Amend Claims Accusing Google Of Data ‘Theft’ To Train AI Chatbot
SAN FRANCISCO — A group of previously anonymous putative class action plaintiffs filed an amended complaint in California federal court identifying themselves as a New York Times bestselling author and several users of Google LLC services, all now accusing Google of “data theft” and violation of California’s unfair competition law (UCL), copyright laws and other statutes by using their data to train its artificial intelligence chatbot known as “Bard.”
-
January 09, 2024
23andMe Faces Potential MDL After Breach Of 6.9M Customers’ Data
SAN FRANCISCO — Two consumers filed a complaint in California federal court accusing 23andMe Inc. of violating California’s unfair competition law (UCL) after the genetic testing company revealed that ancestral records for roughly 6.9 million customers were hacked and being sold online. The breach is the subject of more than 30 lawsuits that the company is asking the Judicial Panel on Multidistrict Litigation (JPMDL) to consolidate.
-
January 08, 2024
Supreme Court Won’t Hear X’s Challenge To Gag Order Over Government Surveillance
WASHINGTON, D.C. — With a denial of its petition for certiorari on Jan. 8, X Corp. (formerly Twitter Inc.) lost its bid to have the U.S. Supreme Court consider its assertion that not being permitted to publicize its compelled involvement with the Federal Bureau of Investigation’s domestic surveillance program violated its First Amendment rights.
-
January 03, 2024
Google Browsing History Data Suit Stayed While Settlement Is Finalized
SAN JOSE, Calif. — Two days after Google LLC and the plaintiffs suing it for the surreptitious interception and collection of their internet browsing history jointly filed notice of a preliminary settlement of privacy and unfair competition claims, a California federal judge granted the parties’ request to stay the case and vacate a pending trial date while they finalize the agreement.
-
January 03, 2024
Federal Judge: No Jurisdiction Over Class Wiretapping Claims Against Website
BALTIMORE — A federal judge in Maryland granted dismissal of a putative class complaint accusing a website of wiretapping visitors’ electronic communications in violation of Maryland’s statutory and common law, finding that the Mayland woman who brought the complaint failed to show that she suffered a concrete injury or that any of the alleged violations exposed her to an increased risk of identity theft.
-
December 21, 2023
Mortgagors Suing Over Data Theft May Seek Only Declaratory, Injunctive Relief
MIAMI — A federal judge in Florida largely granted a motion to dismiss by loan servicers whose data was accessed and personally identifiable information (PII) was stolen, permitting the mortgagors to proceed only with their final claim for declaratory judgment and injunctive relief.
-
December 21, 2023
Class Member’s Estate Appeals Attorney Fees Award In T-Mobile Data Breach Suit
ST. LOUIS — Calling an attorney fees award of $78.75 million “preposterously high” for a multidistrict litigation that “lasted less than seven months from filing to settlement,” the estate of a class member who objected to the settlement in the suit over a data breach experienced by T-Mobile US Inc. and T-Mobile USA Inc. (T-Mobile, collectively), urges the Eighth Circuit U.S. Court of Appeals to adopt the “megafund rule” and a lower lodestar multiplier.
-
December 21, 2023
On Remand, YouTube Again Seeks Dismissal Of ‘Fatally Flawed’ Kids Privacy Claims
SAN JOSE, Calif. — On remand to California federal court after the Ninth Circuit U.S. Court of Appeals rejected preemption defenses raised by YouTube LLC and Google LLC in response to putative class claims of privacy violations for the purported collection of minors’ personally identifiable information (PII), the defendants moved to dismiss the minor plaintiffs’ fourth amended complaint (FAC) for failure to state a claim.
-
December 20, 2023
Utah High Court Finds Providing Phone Password Implicates 5th Amendment
SALT LAKE CITY — A suspect’s verbal provision of a password to unlock an encrypted cell phone is a testimonial communication and, therefore, testimony at trial about the suspect’s refusal to provide a password violated his privilege against self-incrimination under the Fifth Amendment to the U.S. Constitution, the Utah Supreme Court ruled, affirming an appeals court’s reversal of a connection based on such testimony.
-
December 20, 2023
FTC Seeks Dismissal Of Meta’s Constitutional Challenges To Its Authority, Actions
WASHINGTON, D.C. — Allegations of unconstitutionality in a declaratory complaint and an accompanying preliminary injunction motion filed by Meta Platforms Inc. (formerly Facebook Inc.) are not legally viable, the Federal Trade Commission says in a combined dismissal motion and opposition to the injunction motion in District of Columbia federal court.
-
December 19, 2023
Class Complaint Accuses Urban Outfitters Of Embedding Trackers In Its Emails
PHILADELPHIA — Urban Outfitters Inc. (UO) violates Arizona law by embedding trackers in its email that record, without consent, if and when marketing emails are opened, an Arizona woman alleges in a class complaint filed in a federal court in Pennsylvania.
-
December 19, 2023
DOJ To High Court: No 1st Amendment Violation In Barring X Corp.’s Report
WASHINGTON, D.C. — A gag order preventing X Corp. (formerly Twitter Inc.) from disclosing certain information regarding its compliance with the Federal Bureau of Investigation’s surveillance program complied with strict scrutiny and did not violate the company’s rights under the First Amendment to the U.S. Constitution, the U.S. Department of Justice (DOJ) tells the U.S. Supreme Court in a brief opposing the social network operator’s petition for certiorari filed on behalf of the federal government.
-
December 15, 2023
Year-Old Class Certification Ruling Filed In Google Assistant Privacy Suit
SAN JOSE, Calif. — Issuing the redacted version of a class certification ruling almost exactly a year after she partly granted the plaintiffs’ certification motion in a consolidated privacy class action over purported eavesdropping by Google LLC’s digital assistant, a California federal judge filed an accompanying order explaining that the delay was due to a clerical error.
-
December 15, 2023
Court ‘Wrongly Expanded’ Electronic Data Exclusion, Home Depot Tells 6th Circuit
CINCINNATI — Home Depot Inc. filed an appellant brief in the Sixth Circuit U.S. Court of Appeals challenging an Ohio federal court’s finding that a commercial general liability insurance policy’s electronic data exclusion bars coverage for the retailer’s losses stemming from a 2014 data breach, arguing that the lower court “wrongly expanded the narrow electronic-data exclusion beyond its natural meaning, based on assumed facts outside the record.”
-
December 13, 2023
9th Circuit Stays Issuance Of Mandate As Facebook Preps Bid For Certiorari
SAN FRANCISCO — After denying a bid from the former Facebook Inc. and certain of its executives for rehearing, the Ninth Circuit U.S. Court of Appeals granted a motion to stay its mandate as Facebook prepares to file a petition for a writ of certiorari to ask the U.S. Supreme Court to consider the Ninth Circuit’s partial revival of a complaint filed by investors accusing Facebook of making misleading statements about data privacy.
-
December 13, 2023
Parties In Fingerprint Putative Class Suit Against Employer Announce Dismissal
EAST ST. LOUIS, Ill. — An employer accused in a federal court in Illinois of violating that state’s Biometric Information Privacy Act (BIPA) by collecting and storing employees’ fingerprints and the son of a deceased employee who brought a putative class complaint filed a joint stipulation of dismissal.
-
December 06, 2023
9th Circuit Rejects Facebook Bid For Rehearing After Revival Of Investors’ Suit
SAN FRANCISCO — A split panel in the Ninth Circuit U.S. Court of Appeals denied a petition for panel and en banc rehearing from the former Facebook Inc. and certain of its executives after the panel revived some of the claims made by investors in a suit against the company alleging that it misled investors about privacy and data protection, finding that the investors had adequately pleaded that news about Cambridge Analytica and a practice known as “whitelisting” had contributed to two stock drops in 2018.
-
December 06, 2023
COMMENTARY: The Seventh Circuit Affirms Landmark BIPA Decision In Illinois
By J. Andrew Moss and Jalen Brown