Federal Judge Endorses Novel Pleading Strategy and Denies LinkedIn's Motion to Dismiss.
Developments In Previous Breach Cases
Judge Davila’s decision has potentially wide-ranging effects for data breach suits, because the judge endorsed a new strategy that is likely to be popular with plaintiffs’ attorneys in analogous suits.
In prior breach cases, plaintiffs have experienced repeated setbacks while attempting to demonstrate the requirements of standing — and thus survive the defendant’s motion to dismiss. Many previous data breach lawsuits have been dismissed on standing grounds when the plaintiffs were unable to demonstrate that the breach led to the misuse of the plaintiffs’ personal or financial data.
Responding to these setbacks, plaintiffs’ attorneys have largely abandoned the argument that the threat of data misuse was sufficient to confer standing.
The Successful “Deceptive Labeling” Analogy
Companies increasingly include assurances about the strength of their data security measures in their privacy policies. Judge Davila’s ruling may provide plaintiffs’ attorneys a blueprint for successfully defeating a defendant’s arguments that the plaintiffs lack standing.
Some experts, however, caution that Judge Davila’s reasoning may be less successful in other jurisdictions, citing the strength of California’s unfair competition statute and the sense that California is more sympathetic to plaintiffs’ privacy claims than other jurisdictions.
Yet other states have similar false labeling restrictions, and these jurisdictions are ripe candidates for the proliferation of the pleading tactic that Judge Davila found persuasive.
Potential Strategies for Defeating the “Deceptive Labeling” Argument
Companies are advised—in light of these recent developments — to carefully consider each and every word in their privacy policies. Ensuring that privacy policies accurately reflect the company’s practices will improve companies’ chances of defeating the “deceptive labeling” argument that succeeded in California.
The case is Szpyrka v. Linkedin Corp., 5:12-cv-03088, U.S. District Court for the Northern District of California.