Call 855-808-4530 or email [email protected] to receive your discount on a new subscription.
Most companies doing business in California are well aware of the California Consumer Privacy Act of 2018 (CCPA) and prepared diligently in advance of the law's Jan. 1, 2020 compliance deadline. While compliance certainly is key, even compliant businesses must consider — and prepare for — the eventual onslaught of class action litigation that is coming.
Indeed, at least one data breach class action lawsuit has been filed already that expressly claims a "deprivation of rights" under the CCPA based on the alleged "fail[ure] to maintain reasonable security procedures and practices appropriate to the nature of" personal information maintained by the defendants. Barnes v. Hanna Andersson, LLC, et al., N.D. Cal. Case No. 3:20-cv-00812. While the plaintiff in Barnes does not presently seek damages under the CCPA, she expressly "reserve[s] the right to amend this Complaint as of right" to do so at a later time. The plaintiff's decision not to seek damages under the CCPA likely stems from the retroactivity hurdles she would face, given the data breach "occurred from September 16, 2019 to November 11, 2019," and the relevant provisions of the CCPA are not expressly retroactive. Weinberg v. Valeant Pharm. Int'l, 2017 WL 6543822, at 7 (C.D. Cal. Aug. 10, 2017) ("California statutes apply prospectively unless the Legislature expressly indicates otherwise."). Nonetheless, the allegations highlight the looming threat on the horizon.
As background, the CCPA expands consumer data rights relating to the access to, deletion of, and "sale" of personal information collected by businesses. The CCPA also creates a private right of action that allows for the recovery of statutory damages ranging from $100 to $750 in the event of data breaches, which now are ubiquitous. Accordingly, if a breach affects just 100,000 California customers, the statutory damages quickly multiply, making claims under the CCPA attractive to the plaintiffs' bar.
The plaintiff's bar has formed a cottage industry suing businesses that fall victim to data breaches — and they did so long before the passage of the CCPA. So what is new?
ENJOY UNLIMITED ACCESS TO THE SINGLE SOURCE OF OBJECTIVE LEGAL ANALYSIS, PRACTICAL INSIGHTS, AND NEWS IN ENTERTAINMENT LAW.
Already a have an account? Sign In Now Log In Now
For enterprise-wide or corporate acess, please contact Customer Service at [email protected] or 877-256-2473
This article highlights how copyright law in the United Kingdom differs from U.S. copyright law, and points out differences that may be crucial to entertainment and media businesses familiar with U.S law that are interested in operating in the United Kingdom or under UK law. The article also briefly addresses contrasts in UK and U.S. trademark law.
The Article 8 opt-in election adds an additional layer of complexity to the already labyrinthine rules governing perfection of security interests under the UCC. A lender that is unaware of the nuances created by the opt in (may find its security interest vulnerable to being primed by another party that has taken steps to perfect in a superior manner under the circumstances.
With each successive large-scale cyber attack, it is slowly becoming clear that ransomware attacks are targeting the critical infrastructure of the most powerful country on the planet. Understanding the strategy, and tactics of our opponents, as well as the strategy and the tactics we implement as a response are vital to victory.
In Rockwell v. Despart, the New York Supreme Court, Third Department, recently revisited a recurring question: When may a landowner seek judicial removal of a covenant restricting use of her land?
Possession of real property is a matter of physical fact. Having the right or legal entitlement to possession is not "possession," possession is "the fact of having or holding property in one's power." That power means having physical dominion and control over the property.