Mealey's Data Privacy : Mealey's : Legal News & Analysis

Mealey's Data Privacy

April 02, 2024
Microsoft, ChatGPT Say Class Suit’s UCL, Privacy Claims Over ChatGPT Training Fail

SAN FRANCISCO — Imposing liability on companies that used information posted to the internet by “hundreds of millions of Americans” to train artificial intelligence would be unprecedented, and the plaintiffs in a putative class action have not shown that the alleged conduct violated underlying laws required for California unfair competition law (UCL) claims or that that they incurred an injury as required to proceed with those and other claims, Microsoft and OpenAI entities argue in reply briefs filed in California federal court in support of dismissal.
April 01, 2024
Delaware Judge Tosses Insurers’ Subrogation Suits Arising From Ransomware Attack

WILMINGTON, Del. — A Delaware judge dismissed insurers’ subrogation lawsuits seeking recovery from an application service provider for the amount they paid to their nonprofit insureds for investigative and remediation steps arising from a ransomware attack, finding that the fact that the data breach occurred and the nonprofits incurred expenses alone is not sufficient to state a claim under the policies.
March 21, 2024
COMMENTARY: AI Raises Stakes Across Cybersecurity And Disputes Landscape

By Lorenzo Grillo
March 27, 2024
Spyware Suit Judge Partly Denies Issuing Letter Rogatory On Canadian Lab

OAKLAND, Calif. — An Israeli spyware firm that is fending off computer fraud and trespass allegations by WhatsApp Inc. saw its motion to issue a letter rogatory on a third-party Canadian watchdog lab partly denied March 26 by a California federal judge who deemed some of the information sought to be duplicative of discovery already received from the plaintiff.
March 27, 2024
Insurer Has No Duty To Defend DPPA Violation Suit, N.C. High Court Affirms

RALEIGH, N.C. — The North Carolina Supreme Court affirmed an appeals court’s finding that an insurer has no duty to defend its law firm insured against an underlying lawsuit alleging that the firm violated the Driver's Privacy Protection Act of 1994 (DPPA) by using “protected personal information” without consent in connection with advertisements for legal services.
March 26, 2024
Suit Accusing Ford Of Eavesdropping, Intercepting Text Messages Dismissed

SAN DIEGO — A putative class action against Ford Motor Co. under the California Invasion of Privacy Act (CIPA) was dismissed, with a California federal judge finding that the plaintiff did not establish that the automaker engaged in aiding and abetting a spyware company in the collection and distribution of customers’ information from Ford’s online chat feature, with the judge also holding that some of the allegedly violated portions of the statute do not apply to the modern technology at issue.
March 22, 2024
HHS Defends Rule Barring Health Providers’ Use Of Tracking Tech Under HIPAA

FORT WORTH, Texas — Two U.S. Department of Health and Human Services officials on March 21 asked a Texas federal court to grant them summary judgment on four health care plaintiffs’ claims that a recently released bulletin violates the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or the Administrative Procedure Act (APA), explaining that the bulletin properly served as a reminder to health care providers that the use of certain third-party website technologies violates HIPAA’s privacy protections by sharing users’ individually identifiable health information (IIHI).
March 20, 2024
Meta Appeals Injunction Denial Over FTC Changes To $5 Billion Consent Order

WASHINGTON, D.C. — One day after a federal judge denied Meta Platforms Inc. (formerly Facebook Inc.) injunctive relief in its quest to prevent the Federal Trade Commission from revising a 2020 $5 billion consent order that settled a privacy investigation by the commission, the social network operator filed a notice of appeal with the District of Columbia Circuit U.S. Court of Appeals, seeking relief from the injunction denial.
March 19, 2024
Plaintiffs Fire Back In UCL, Copyright Case Involving Google AI Training Data

SAN FRANCISCO — Individuals enjoy a property right in their personal information, and a complaint alleges unlawful and unfair conduct sufficiently enough for claims under all three prongs of the California unfair competition law (UCL), plaintiffs in a copyright and privacy class action accusing Google LLC of “wide-scale data theft” in the training of its artificial intelligence tell a federal court in opposing dismissal.
March 18, 2024
California AirTag Stalking Victims’ Claims Against Apple May Proceed, Judge Says

SAN FRANCISCO — A California federal judge on March 15 denied Apple Inc.’s motion to dismiss negligence and strict product liability claims brought against it by three plaintiffs who claim that they were stalked in California through the use of Apple’s AirTag devices but dismissed claims brought by 35 other plaintiffs, writing in a second order that the claims brought by out-of-state plaintiffs were insufficiently pleaded.
March 18, 2024
GM, OnStar, Lexis Sued For Collecting, Sharing Drivers’ Data

WEST PALM BEACH, Fla. — A Florida man, who claims that his driving data was collected and shared without his knowledge or consent brings putative class claims under the Fair Credit Reporting Act (FCRA), as well as Florida consumer and privacy law, asserting that the inaccurate information negatively impacted his ability to obtain car insurance.
March 18, 2024
Patients Seek To Centralize Data Breach Suits Against Health Care Firm In Tennessee

WASHINGTON, D.C. — Four plaintiffs who separately filed putative negligence class actions against a health care provider that recently experienced a data breach filed a motion to transfer and consolidate their suits along with others filed against the same defendant in Tennessee federal court.
March 12, 2024
After A Few Tries, $37.5M Settlement Of Meta Tracking Class Action Gets Final OK

SAN FRANCISCO — After receiving assurances that the plaintiffs in a Facebook location-tracking class action had taken care of his latest concern over a $37.5 million settlement of privacy claims against the social network’s owner Meta Platforms Inc., a California federal judge on March 11 finally granted final approval of the settlement after a year and a half of tweaks and revisions to it.
March 11, 2024
Covington Client Dismisses D.C. Circuit Appeal Of SEC Disclosure Order

WASHINGTON, D.C. — More than eight months after a judge ordered Covington & Burling LLP to identify for the Securities and Exchange Commission seven of its clients whose information had been compromised in a cybersecurity attack, one of those clients, proceeding pseudonymously, on March 11 filed a stipulation voluntarily dismissing his appeal to the District of Columbia Circuit U.S. Court of Appeals of that ruling.
March 08, 2024
DOJ, ACLUF Settle Social Media Monitoring FOIA Row For $240,000 In Fees, Costs

OAKLAND, Calif. — After almost two years of conferring, filing status reports and submitting documents, the American Civil Liberties Union Foundation (ACLUF) and several government agencies jointly filed a stipulation and proposed order of dismissal in California federal court, under which they agree to end a five-year-old Freedom of Information Act (FOIA) dispute with the payment of $240,000 in attorney fees and costs by the U.S. Department of Justice (DOJ) and other agencies.
March 07, 2024
MyPillow CEO Tells High Court Phone, Data Seizure Warrant Violated 4th Amendment

WASHINGTON, D.C. — MyPillow Inc. Chief Executive Officer Michael J. Lindell has filed a petition for certiorari, asking the U.S. Supreme Court to find that a warrant used by the Federal Bureau of Investigation to seize his iPhone and all the data on it violated the Fourth Amendment to the U.S. Constitution because it did not state with particularity that data to be seized.
March 06, 2024
9th Circuit: Google Didn’t Deceive Android Users By Gathering App, OS Data

SAN FRANCISCO — A Ninth Circuit U.S. Court of Appeals panel on March 5 affirmed the dismissal of two smartphone users’ fraud, unfair competition and breach of contract claims against Google LLC for collecting data on third-party app usage via its Android operating system (OS), finding that Google adequately disclosed its collection of consumer data across both Google apps and third-party apps using its OS.
March 06, 2024
9th Circuit Affirms Final Settlement Of $90 Million Facebook Tracking MDL

SAN FRANCISCO — More than a year after a trial court granted final approval to the $90 million settlement of a multidistrict litigation over the alleged tracking of Facebook users’ online activity by Meta Platforms Inc. (formerly Facebook Inc.), a Ninth Circuit U.S. Court of Appeals panel affirmed the settlement, finding no abuse of discretion and rejecting three objectors’ suggested settlement fund of $1.24 trillion as “unreasonable.”
February 21, 2024
COMMENTARY: The AI Governance Challenge For Privacy And Data Risks

By Robert Grosvenor and Sam Lowe
February 29, 2024
Canadian Lab Opposes Israeli Firm’s Discovery Efforts In WhatsApp Spyware Row

OAKLAND, Calif. — A nonparty Canadian lab that focuses on “digital espionage” filed a motion in California federal court on Feb. 28, seeking to specially appear in the computer fraud lawsuit between WhatsApp Inc. and NSO Group Technologies Limited for the purpose of opposing NSO’s motion to serve it with a letter rogatory to obtain “sweeping discovery” that it contends is “almost exclusively unrelated to the claims and defenses” in the case.
February 20, 2024
Israeli Firm Seeks Discovery From Canadian Research Lab In Spyware Suit

OAKLAND, Calif.— With competing motions to compel pending in its computer fraud dispute with WhatsApp Inc., Israeli surveillance technology company NSO Group Technologies Limited asked a California federal court to issue a letter rogatory requesting a Canadian court to compel discovery from a Toronto-based research laboratory that aided WhatsApp in the present suit.
February 28, 2024
Dating App User, Bumble Say Settlement Reached In Biometric Data Collection Case

CHICAGO — A dating application user and the companies associated with the operation of that app filed a joint status report in a federal court in Illinois stating that a settlement in principle has been reached in a putative class complaint alleging violation of the Illinois Biometric Information Privacy Act (BIPA) by collecting, storing and using users’ data.
February 28, 2024
Initial OK Given To $2.45 Million Settlement Of Debt Collector Data Breach Suit

SEATTLE — Two months after the proposed settlement of a class action over the 2022 breach of a debt collector’s network was sent back for some fine-tuning, a Washington federal judge granted a renewed motion for preliminary approval of a $2.45 million agreement, finding that the parties cured ambiguous language in its scope of release and sufficiently identified the range of attorney fees and costs amounts sought.
February 27, 2024
AI Interview Company Can’t Escape Illinois Biometric Law Class Action

CHICAGO — The use of a company’s artificial intelligence-based virtual interview program within Illinois gives jurisdiction over the case and the allegations fall within the purview of Illinois law governing biometric data, a federal judge in Illinois said Feb. 26, dismissing only claims that the company profited from the sale of such data.
February 26, 2024
Class Complaint Accuses Labcorp Of Sending Protected Health Info To Google

PHILADELPHIA — Two patients of Laboratory Corporation of America Holdings (Labcorp) filed a class complaint unsealed Feb. 23 by a federal judge in Pennsylvania, accusing the health care company of intercepting individually identifiable health information from its website users and sending the information to Google, which analyzes the data, matches the information to individuals and then shares its analysis with Labcorp.