When companies are hit with cybersecurity incidents, class action privacy litigation often follows. However, claimants in these kinds of cases face a threshold challenge of showing they have suffered a sufficient “injury in fact” to establish that they have standing to assert their claims. The following guest post, written by Paul Ferrillo, Kristine Argentine, Emily Dorner, and Alexandra Drury of the Seyfarth Shaw law firm, provides a survey of the current state of play for the standing requirements in this type of litigation. I would like to thank the authors for allowing me to publish their article as a guest post on this site. I welcome guest post submissions from responsible authors on topics of interest to this blog’s readers. Please contact me directly if you would like to submit a guest post. Here is the authors’ article. 
Continue Reading Guest Post: First There was Litigation; And Then There Was Standing

spokeoIn a closely-watched case, the U.S. Supreme Court held that to establish standing to sue, a claimant who alleged that inaccurate information on the Spokeo website about him violated the Fair Credit Reporting Act must show that the supposed FCRA violation caused him “concrete” harm. Defense-side advocates had hoped that the Court would strike down the plaintiffs’ claims in the case and help stem the flow of proliferating “no injury” class action litigation under the FCRA and other federal statutes such as the TCPA and the ADA. However, the Court’s did not strike down the plaintiffs’ claim, but instead remanded the case for the Ninth Circuit to determine whether or not the claimant’s allegations met the “concrete harm” requirements to establish standing.  Though the holding is narrow, there is language in the Court’s opinion that may prove helpful for defendants in other cases. A copy of the Court’s May 16, 2016 opinion in Spokeo, Inc. v. Robins can be found here.
Continue Reading U.S. Supreme Court: To Establish Standing, Statutory Claimant Must Allege “Concrete” Injury