CCPA provides plaintiffs with a private right of action to pursue statutory damages following data security breaches that impact certain sensitive categories of personal information and are caused by a business’s failure to institute reasonable and appropriate security.
In the UK and the US indicate two clear categories of data claims: invasion of privacy cases and data breach cases. In the case of an invasion of privacy, a consumer’s personal data is allegedly misused by the provider of a service or product that collects the data.
The Plaintiffs in In re Plaid Inc. Privacy Litig. previously alleged that Plaid has exploited its position as middleman to obtain app users’ banking login credentials and use that information to access and sell transaction histories, in the absence of app users’ consent.
During 2021, 23 states introduced some form of all-encompassing data privacy legislation to address the absence of federal privacy laws, with only two becoming law: Virginia and Colorado. This Review is a four-part series exploring proposed 2021 state privacy legislation.