No Harm, Still Foul? Florida Court Approves Data-Breach Class Action Settlement

more+
less-

Data-breach class action suits may have just gained significant traction. On Feb. 28, 2014, the U.S. District Court for the Southern District of Florida approved a first of its kind class action data breach settlement that will pay plaintiffs regardless of whether they were damaged by the breach.
In December 2009, multiple laptops containing unencrypted patient records were stolen from Florida-based health insurer AvMed. Subsequently, several AvMed insured customers whose personal health information was exposed filed a putative class action. The recent court-approved settlement will pay plaintiffs based not on any direct losses or identity theft resulting from the theft, but rather on the premiums they paid to the insurer. AvMed also agreed to pay actual damages for identity theft suffered due to the breach and to increase and improve its internal encryption and security protocols. But the real news here is that this settlement does not require even an allegation of actual harm before plaintiffs can recover monetary damages based on a data breach.
While this settlement may serve as a model for future data-breach class actions, a key factor in this case is that plaintiffs had an ongoing relationship with, and paid insurance premiums to AvMed. Indeed, plaintiffs’ unjust enrichment argument was premised on the idea that their premiums were, in part, paying for data security. In the absence of such a relationship—specifically where a person pays for some future potential need—this case should be distinguishable. Regardless, this settlement serves as a reminder that a lapse in security has the potential to create huge exposure, whether it causes actual harm or not.

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Davis Wright Tremaine LLP | Attorney Advertising

Written by:

more+
less-

Davis Wright Tremaine LLP on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:

Sign up to create your digest using LinkedIn*

*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.
×
Loading...
×
×