Automotive Data Company Loses Fight for an Injunction Against New Consumer Privacy Statute

Robinson+Cole Data Privacy + Security Insider

Automotive data and software company CDK Global LLC (CDK),  filed suit in 2019 against the Arizona Attorney General in the U.S. District Court for the District of Arizona seeking an injunction against a new law from taking effect.

The new law increased privacy protections for consumers whose data are collected by car dealers and prevents database providers (such as CDK) from limiting access to dealer data by dealer-authorized third parties. The law also requires providers to create a standardized framework to facilitate such access. This law is similar to the Massachusetts “right to repair” law that we wrote about last year.

The U.S. District Court denied CDK’s request for injunctive relief and this week the Ninth Circuit Court of Appeals affirmed that decision.

In its appeal, CDK argued that Arizona’s law was preempted by the Copyright Act, claiming that the law allows dealers the right to access CDK’s systems and create unlicensed copies of its dealer management system, application programming interfaces, and data compilations. However, the Ninth Circuit disagreed and said that it would be possible for CDK to comply with this law without having to create a new copy of its software for these third-party requests. The Court further reflected that, even if CDK had to create new copies, it had not established that such copies would infringe on its reproduction right.

CDK also argued that the law violates the U.S. Constitution’s contracts clause. However, again, the Ninth Circuit disagreed, holding that CDK did not show that the statute impairs its ability to perform its contracts. The Ninth Circuit also agreed with the district court’s finding that CDK could fulfill its data security obligations while still complying with the statute’s mandate. The Court held that there is “no basis to question the judgment of the Arizona Legislature that the statute promotes the common good through the advancement of consumer privacy and competition.”

[View source.]

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Robinson+Cole Data Privacy + Security Insider | Attorney Advertising

Written by:

Robinson+Cole Data Privacy + Security Insider

Robinson+Cole Data Privacy + Security Insider on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide

This website uses cookies to improve user experience, track anonymous site usage, store authorization tokens and permit sharing on social media networks. By continuing to browse this website you accept the use of cookies. Click here to read more about how we use cookies.