Feeds:
Posts
Comments

Posts Tagged ‘data privacy’

I’m pleased to announce that I’ll be chairing the Fourth Annual ABA Regional CLE Program on Class Actions and Mass Torts, to be held on June 16, 2017 at the offices of the Bar Association of San Francisco.  This year’s program features four presentations on hot topics in class action and mass tort litigation from an expert group of practitioners, academics, in-house counsel, and judges.  See below for summaries of the four presentations, and click the link below to see the full brochure and to register.  Hope to see you there!

CLICK HERE TO REGISTER

Discovery Following the 2015 Federal Rules Amendments: What Does Proportionality Mean in the Class Action and Mass Tort Contexts?

It’s been about a year and a half since the amended Federal Rules of Civil Procedure went into effect, including amendments relating to proportionality governing both the scope discovery under Rule 26(b)(1) and preservation of potentially relevant ESI. But have the new rules changed the discovery available and relative obligations in class actions, mass torts, and other complex matters? This panel will review the purposes underlying the 2015 Amendments and how the law has been developing so far, and it will offer insights into best practices in expanding or limiting discovery in the class action and mass tort contexts.

Killer Class Actions or Endangered Species?

The United States Supreme Court has in recent years addressed an unprecedented number of issues related to class actions, ranging from “no injury” class actions to “trial by formula.” The panel of experienced class action practitioners will discuss the changing class action landscape and the potential lasting impact.

The Use of Expert Evidence in Class Actions: Effective Strategies and Pitfalls

The importance of expert testimony in class actions continues to increase, for example in connection with measuring class wide effects and satisfying class certification gate-keeping threshold questions. Topics to be discussed include 1) use of surveys in consumer class actions, when they are effective and how they can influence a case; 2) what can be learned from rare successful challenges about the utility of Daubert challenges in class action cases; 3) the challenges associated with the increasing technical requirements for class certification and implications of the importance of expert evidence on cases; 4) lessons learned and experience working with experts in class action matters.

Big Brother, Information Privacy, and Class Actions: How Big Data and Social Media are Changing the Class Action Landscape

Almost everyone has a smart phone these days, even your grandparents have social media accounts, and the amount of personal information that is generated about the average consumer on a daily basis is astronomical and growing exponentially. This panel will explore ways in which the emergence of big data and social media are impacting consumer class actions. Topics to be discussed include 1) consumer class actions that may arise from companies’ collection, use, or transfer of large amounts of consumer data; 2) changing attitudes on privacy of consumer data in the age of social media; and 3) the benefits and pitfalls of using social media and internet advertising in class action notice programs.

Read Full Post »

My firm, BakerHostetler, has recently released two excellent resources for those interested in recent trends in the areas of class actions and data privacy (including, of course, recent trends in data privacy class actions!).

The 2016 Class Action Year-End Review summarizes trends in class action procedure generally and recent developments in a variety of different subject matter areas.

The  2017 Data Security Incident Response Report “highlights the critical need for senior executives in all industries to understand and be ready to tackle the legal and business risks associated with cyberthreats and to have enterprisewide tactics in place to address intrusions before they happen.”  See Full Explanatory Article Here.  In addition to other useful content, the report includes statistic on trends in class actions arising out of large data breach incidents.

Be sure to check both of them out.

 

 

Read Full Post »

Along with Angela Sabbe of Navigant Consulting, I recently participated in an ABA “Sound Advice” podcast discussing recent trends in data privacy class action settlements.  Members can access the podcast by clicking the link below.  If you aren’t already a member of the ABA section of litigation, you can join by clicking this link.  You’ll get access to this podcast and other useful materials to help supplement your professional development.

http://www.americanbar.org/publications/litigation-committees/class-actions/audio.html

Read Full Post »

I authored a recent article on developments in data privacy class actions, which was published late last week as part of a year-in-review series on BakerHostetler’s Data Privacy Monitor.  For my article, titled 5 Big Developments in Privacy Class Actions in 2015, and 3 to Look for in 2016 and for other great content on data privacy issues, including class action developments, be sure to check out www.dataprivacymonitor.com.

 

 

Read Full Post »

HarrisMartin’s Data Breach Litigation Conference: The Coming of Age is scheduled for next Wednesday, March 25, 2015, at the Westin San Diego.  I’ll be speaking on a panel titled Creative Approaches to Settling Data Breach Cases with Ben Barnow of Barnow and Associates, P.C., Chicago.  So, the news this week was very timely that Target has reached a settlement in the consumer class actions arising out of its massive payment card breach.  Because a few clients and colleagues on both sides of the bar have asked for my opinion about the settlement, I thought I’d share a few thoughts here.

Settlements in data breach cases have been fairly rare up to this point, as many data breach cases have met their doom at the pleadings stage due to the inability of plaintiffs to show injury-in-fact sufficient to give them standing.  Payment Card cases have been an exception because there are real financial losses to consumers that can flow naturally from a hacking incident.  Importantly, these losses generally do not include the amount of any fraudulent card transactions because federal law limits consumer liability to $50 and the major card brands go further and impose $0 liability requirements on issuing banks.  However, other incidental losses, such as replacement card fees, interest, finance charges by other companies due to missed payments, to name a few, can result from a payment card breach.  For this reason, claims in several payment card class actions, including Target (Target Order on Motion to Dismiss) have survived motions to dismiss, leading many defendants to settle these cases.  Payment card class actions against Heartland Payment Systems, TJ Maxx, Michaels Stores, and others were all resolved by class-wide settlements.

The Target Settlement has been praised and derided by the mainstream and legal trade media with a host of characterizations ranging from “huge” to “affordable” to “tiny.”  In fact, Target’s settlement is not particularly groundbreaking beyond the media attention that it has garnered.  Instead, it shares many of the features of the payment card settlements that came before it, and it is not significantly different in terms of its cost or in terms of the benefits it would provide to consumers, if finally approved.

Here is a summary of some of the key features of the settlement:

Overall Costs to Target

Claims Fund.  Target is to pay $10M to create a fund to pay consumers who claim certain out-of-pocket losses and time spent in connection with those losses (discussed in more detail below).  The fund is non-reversionary, meaning unclaimed funds don’t go back to the defendant.  Instead, the agreement contemplates that the court will decide who unclaimed funds are to be distributed.  (For a discussion of how courts can deal with unclaimed funds, see this February 2010 CAB post.)

Attorneys’ Fees.  The plaintiffs will request court approval of up to $6.75M in fees.  Target may object to the initial request, but it may not appeal any decision by the trial court to award $6.75M or less.  Target must pay the fees awarded in addition to the $10M fund.

Settlement Expenses.  Target must pay for all settlement administrative expenses in addition to claims fund and fees.  This includes the expenses to provide both published and direct notice of the settlement to affected customers and the costs to administer claims and make payments to claimants if the settlement is finally approved.  For a class size as large as Target’s these costs can easily measure in the millions of dollars.

Total Payment by Target.  So, my guess it that the total payout by Target is likely to be closer to $19M, assuming the full amount of fees are approved.

Settlement Benefits to Consumers 

One of the attachments to the Settlement Agreement is a Distribution Plan that generally outlines the benefits available to claimants.  The Distribution Plan doesn’t itemize every conceivable loss that might qualify for compensation, but it attaches sample claim forms that give more insight into the specific benefits that are contemplated.  Most of the categories of reimbursable losses are similar to those provided for in other payment card settlements.  Here’s a summary, with some comments on each category:

  • Payment for unreimbursed, out-of-pocket expenses, with a $10,000 cap per claim – Note that due to the zero consumer liability rules on fraud losses, combined with the fact that payment card information cannot be used to commit other forms of identity theft, it is extremely unlikely that any individual person will have a claim for an amount near the cap.  If it were otherwise, then the fund would only be sufficient to pay 1000 claims.  Other payment card settlements have included individual caps for the most typical types of expenses, which rarely exceed $200 or so, with a separate fund available for extraordinary claims.  The Target settlement omits this smaller cap, perhaps because experience has shown that it is generally unnecessary to control unreasonable or fraudulent claims.
  • Payment for 2 hours of time at $10/hour associated with each type of actual loss claimed – Payments for time are an interesting feature of payment card settlements.  Because of the zero consumer liability for fraud loss imposed by the card brands, mere lost time and aggravation make up the vast majority of consumer impact in a payment card breach.  However, time and inconvenience are generally not considered injuries for which damages can be recovered, so by agreeing to pay for lost time, the defendant is agreeing to pay for something that the plaintiffs probably couldn’t recover if the case went to trial.  Nonetheless, there is nothing preventing defendants from offering these benefits in a class action settlement setting, and it has become common for defendants to offer payments for lost time.  Because claims for time are susceptible to fraud and abuse and are difficult to document, the amounts available tend to be limited to 1-3 hours.  Based on the sample claim form, the Target settlement seems to allow claims for time spent correcting fraudulent charges, but it doesn’t appear to allow claims for lost time resulting from card replacement (for example, having to change the number on automatic or recurring payments), which is something that affects far more consumers than fraud itself in the aftermath of a payment card breach.  Other payment card settlements have allowed claims for lost time for either fraud or for dealing with replacement card issues.
  • Two different types of claim forms – The settlement contemplates the ability to elect either a documented or undocumented claim.  Documented claims get priority in payment.  From a defendant’s perspective, undocumented claims are problematic, because they are susceptible to fraud and abuse.  From a consumer’s perspective, having to document claims is an added aggravation, on top of the aggravation  of having had to deal with the impact of the breach in the first place.  This structure offers a compromise that permits undocumented claims, but ensures that those claims that are documented will be paid first.

As a practical matter, given the size of the fund, it is likely that there will be plenty of money to pay all documented claims and all plausible undocumented claims.  In fact, in view of past settlements, it is extraordinarily unlikely that the amount of all legitimate claims will get even close to the $10 million available in the fund.  In the Heartland Payment Systems settlement, for example, arising out of an incident that impacted 130 million card holder accounts, the number of claims for reimbursement amounted to a grand total of $1925.  (See Judge Rosenthal’s Order in Heartland Payment Systems).  This miniscule claims amount was due undoubtedly to a lack of public familiarity with Heartland (a payment processor) as a brand and with the incident itself, two things that are certainly not true of Target, and claims rates in other settlements have certainly been higher despite having much smaller numbers of potential class members.  However, various media outlets have quoted a RAND Corporation researcher as estimating that less than $1 million of the $10 million fund will be claimed (see, for example, this article by Jason Abbruzzese at Mashable).

If he’s right, expect a fight ahead on what should happen with the $9M in unclaimed funds which, according to the agreement, “shall be distributed by the Settlement Administrator as directed by the Court.”  Cy pres anyone?

Read Full Post »

BakerHostetler’s 2014 Year-End Review of Class Actions (and what to expect in 2015) was published on February 2, and is available for download at the firm’s website.  This annual summary is a joint effort of numerous attorneys throughout the firm, but for the second year in a row, the 2014 edition was ably edited by Dustin Dow in the firm’s Cleveland Office.

As the title suggests, the 59-page document provides a comprehensive update on the key decisions and trends in a variety of subject matter areas, including consumer protection, insurance, banking, data privacy, antitrust, securities, and labor and employment, as well the latest procedural developments impacting class action practice, both throughout the United States and abroad.

It’s free, so don’t miss it!

Read Full Post »

Anyone still checking this site will have noticed a complete lack of new content lately, which is mostly the result of pure laziness on my part but partially due to the demands of several other writing projects I’ve been working on.  I’m pleased to announce that one of these articles it out, and the folks at Practical Law the Journal have graciously given permission for me to post a reprint here.  Click the following link to view the article, entitled Key Issues in Data Breach Litigation, which is featured in the October 2014 issue.  Please be sure to visit the Practical Law website to learn how to subscribe to more great content on timely legal topics.

Also, speaking of data privacy litigation, I’ll be part of a panel presenting on the topic at the ABA Institute on Class Actions next week in Chicago.  It’s not too late to register.

Read Full Post »

Older Posts »