RSS FEEDSRecent Posts
- (Don’t) Send in the Drones
- Utah Becomes Second State to Adopt a Safe Harbor for Compliance with a Written Cybersecurity Program
- Requirements for Businesses under Virginia’s New Consumer Data Protection Act
- Putting M.D. Anderson in Context: Unpacking the 5th Circuit Dismissal of HIPAA Penalties
- Eleventh Circuit Joins Courts That Have Declined to Find Standing Based on Alleged Substantial Risk of Identity Theft Resulting From a Data Breach
- U.S. Department of Commerce Proposed Restrictions to Secure the IT Supply Chain
- Ransomware On the Rise: Unwary Victims May Pay Twice
- Federal U.S. Autonomous Vehicle Bill Would Update Safety Standards and Require Detailed Privacy and Cybersecurity Plans
- Transactional Components of Telehealth Contracts
- In the Wake of Schrems II: US Government’s White Paper Aims to Assist Confused Companies, Push Back on “Wild West” Privacy Characterization
The Article III analysis for BIPA claims takes a new turn
Last month, the Seventh Circuit issued a highly anticipated ruling concerning Article III standing for claims brought under the Illinois Biometric Information Privacy Act (BIPA).
According to the three-judge Panel led by Chief Judge Wood, a violation of section 15(b)—which concerns obtaining informed written consent from biometric data subjects—leads to a concrete and particularized injury that supports Article III standing.
However, a claim brought under section 15(a) for failure to make publicly available a biometric data retention policy does not confer Article III standing because "the duty to disclose under section 15(a) is owed to the public generally, not to particular persons whose biometric information the entity collects."
Not only will this opinion directly impact the removal and standing analysis for BIPA claims—since most BIPA lawsuits include claims for violations of both sections 15(a) and (b)—but it also raises compliance questions now that the Seventh Circuit has weighed in on the meaning of "publicly available" under the Act.
On May 19, 2020, Compass Group USA, Inc. filed a petition for rehearing en banc, arguing that (1) the Panel’s decision created an inter-Circuit split and (2) “[s]ection 15(a) confers private rights, the denial of which creates a concrete injury.”
We will continue to monitor this lawsuit and provide updates here.
