Third Circuit Affirms Dismissal Of Session Replay Code Class Action Because The Collection Of Anonymized Information Does Not Constitute A Concrete Injury Necessary To Confer Article III Standing

By Gerald L. Maatman, Jr., Justin Donoho, and Hayley Ryan

Duane Morris Takeaways:  On May 26, 2026, in Smidga, et al. v. Spirit Airlines, Inc., No. 24-1757, 2026 WL 1470137 (3d Cir. May 26, 2026), the U.S. Court of Appeals for the Third Circuit affirmed a federal district court’s dismissal of a class action alleging that the defendant’s use of session replay code, a form of website analytics technology, violated federal and state privacy laws.  Relying on its prior decision in Cook v. GameStop, Inc., 148 F.4th 153 (3d Cir. 2025), the Third Circuit held that the three named plaintiffs lacked standing because there were no allegations of embarrassment or humiliation, plaintiffs voluntarily provided the information on the defendant’s website, the information allegedly collected was anonymized, and, in any event, most people “understand that what we do on the Internet is not completely private.” Id. at *2. Accordingly, the Third Circuit concluded that plaintiffs failed to allege a concrete injury to their privacy interests sufficient to confer Article III standing. Id. at *1.

This ruling reinforces the growing trend among federal courts requiring plaintiffs to plausibly allege that the collected data was personally identifiable and obtained without authorization in order to establish a concrete privacy injury.

Background

Many companies embed session replay code and other similar software, such as Google Analytics and the Meta Pixel, into their websites to conduct website analytics and/or targeted advertising.  All of these various technologies capture users’ browsing behaviors and cryptographically transmit this data to algorithms residing on the software providers’ servers.  Upon entry into the algorithm, this data is typically anonymized, aggregated, and not alleged to have been viewed or accessible by any human.  Plaintiffs across the country have filed multitudes of class actions challenging these various website analytics and advertising practices under federal and state privacy laws, targeting companies in virtually every industry, including healthcare, retail, education, and consumer products.  Some cases have resulted in multimillion-dollar settlements, others have been dismissed, and the vast majority remain undecided.  In these session replay and other data privacy class actions, the central question is often whether the specific data captured is sufficiently sensitive or personally identifying to establish a cognizable legal injury.

In Smidga, three named plaintiffs sued the defendant airline, alleging that session replay code embedded on its website recorded users’ interactions with the website in real time, including “text entries, mouse clicks, and geolocation.” Id. at *1.  Plaintiffs asserted claims under the Pennsylvania and Maryland Wiretap Acts, the California Invasion of Privacy Act, California’s Unfair Competition Law, and several other state and common law causes of action. Id. at *1 n.2.

All three plaintiffs visited defendant’s website to browse flights. Only one plaintiff ultimately purchased tickets and entered the names, addresses, and ages of herself and her children while doing so.  Id. at *1.

The defendant moved to dismiss for lack of Article III standing under Federal Rule of Civil Procedure 12(b)(1) or, alternatively, for failure to state a claim under Federal Rule of Civil Procedure 12(b)(6).  In support of its Rule 12(b)(1) arguments, the defendant submitted a declaration from its Senior Vice President and Chief Information Officer disputing plaintiffs’ allegations that the session replay code collected personal information and explaining that any data collected was “not traceable to any specific [w]ebsite user.”  Id. at *1.

The District Court granted the motion to dismiss for lack of standing, finding that the plaintiffs failed to establish an injury-in-fact sufficient to confer Article III standing, while also granting plaintiffs leave to seek jurisdictional discovery and amend the complaint again. Id. When plaintiffs took no further action, the District Court dismissed the complaint with prejudice, and plaintiffs appealed.

The Third Circuit’s Decision

The Third Circuit affirmed dismissal of the complaint but modified the District Court’s order so that the dismissal would be without prejudice. Id.

After observing that its recent decision in Cook v. GameStop, Inc., 148 F.4th 153 (3d Cir. 2025), “plainly resolve[d]” plaintiffs’ standing challenge, the Third Circuit “briefly explain[ed]” why plaintiffs failed to establish a concrete injury sufficient to confer Article III standing. Id. at *2.

First, the Third Circuit held that the alleged harm did not share a “close relationship” to the comparator torts of disclosure of private information or intrusion upon seclusion. Id.  With respect to public disclosure of private information, the Third Circuit explained that the two non-purchasing plaintiffsdid not allege that the defendant collected any personal information. Although the purchasing plaintiff entered personal information while using the website, the Third Circuit noted that the tort of public disclosure of private facts requires allegations of resulting embarrassment or humiliation, which were absent from the complaint.  Id

The Third Circuit similarly concluded that plaintiffs failed to state an analogous intrusion upon seclusion injury. Such a claim requires allegations that the defendant intentionally intruded upon plaintiffs’ “private affairs or concerns.” Id. The Third Circuit determined that standard was not satisfied because plaintiffs voluntarily provided the information, the allegedly collected information was anonymized, and, in any event, most people “understand that what we do on the Internet is not completely private.” Id.

Second, the Third Circuit rejected plaintiffs’ argument that bare violations alone confer standing, concluding that the argument misconstrued Third Circuit precedent and the U.S. Supreme Court’s holding in TransUnion LLC v. Ramirez, 594 U.S. 413, 426–27 (2021). Id. at *2.

Third, the Third Circuit reasoned that it was “hard-pressed to find that a de facto invasion of privacy exists where a website makes no express promise to refrain from collecting site visitors’ information.” Id. at *3. As explained in Cook, “there is a material difference between an allegation that a website merely failed to ask for visitors’ consent to data collection and an allegation that a website expressly promised it would not collect information but secretly did so anyway.” Id. The complaint contained no allegations that the defendant made such a promise.

The Third Circuit also rejected plaintiffs’ challenge to the District Court’s consideration of the declaration submitted in support of the defendant’s Rule 12(b)(1) motion to dismiss. The Third Circuit emphasized that plaintiffs failed to request discovery to respond to the defendant’s factual challenge despite being given the opportunity to do so, and it agreed that plaintiffs’ “boilerplate averments” alone could not rebut the defendant’s external evidence. Id. at *3.

Accordingly, the Third Circuit affirmed the District Court’s dismissal order for lack of Article III standing but modified the dismissal to be without prejudice.

Implications For Companies

Smidga reinforces that plaintiffs challenging the use of common website analytics and advertising technology must, at a minimum, plausibly allege that the technology collected and disclosed personally identifying information, rather than anonymized, aggregated web-browsing data cryptographically transmitted to software providers’ servers and not viewable or accessible by any human.  Moreover, alleging the collection and disclosure of PII via functionally internal session replay technology may or may not confer standing, depending on the jurisdiction one is in, as we blogged about earlier this month (here).

For companies facing session replay and other data privacy class actions in federal court, Article III standing remains a significant threshold defense that should be evaluated throughout the litigation, while balancing the possibility that claims may continue in state court.

The Class Action Weekly Wire – Episode 149: Key Class Action Trends In The Insurance Industry

Duane Morris Takeaway: This week’s episode features Duane Morris partners Jerry Maatman and Jessica La Londe and associate Ryan Garippo with their discussion of Duane Morris’ Insurance Class Action Review, highlighting several trends and developments shaping class action litigation in this industry.

Check out today’s episode and subscribe to our show from your preferred podcast platform: Spotify, Amazon Music, Apple Podcasts, Podcast Index, Tune In, Listen Notes, iHeartRadio, Deezer, and YouTube.

Episode Transcript

Jerry Maatman: Welcome to our listeners. Thank you for being here on our weekly podcast, the Class Action Weekly Wire. I’m Jerry Maatman, a partner at Duane Morris, and joining me today are my colleagues, Jessica La Londe and Ryan Garippo. Jessica is a partner in both our San Francisco and Seattle offices, a team lead for the Duane Morris Insurance/Reinsurance Industry Group, and co-chair of the firm’s Insurance Division of the Trial Practice Group. Ryan is an associate here in our Chicago office, and a member of the Class Action Defense Team. Thanks so much to both of you for joining us today on the podcast.

Jessica La Londe: It’s really great to be here, thank you so much.

Ryan Garippo: Thanks, Jerry.

Jerry: Today on the podcast, we’re discussing the publication of a brand-new desk reference called the Insurance Class Action Review – 2026. Listeners can find this e-book and resource on our blog, the Duane Morris Class Action Defense Blog. Jessica, can you tell our listeners a bit about this desk reference?

Jessica: Yeah, absolutely, Jerry, thank you so much, and I’ll also note that it has been linked to on our insurance blog page as well. So, this release is Duane Morris’ sixth class action publication this year that has an industry focus. The Insurance Class Action Review is intended to and does analyze the key rulings and developments in 2025 from all sorts of different areas of the class action landscape that impact companies in the insurance industry, and it provides insights into evolving and emerging trends. We are hopeful that the insurance companies that we work with and insurance companies out there in the industry benefit from this resource to help them see what their potential class action risks are out there, and to aid them, in addition, in their compliance with laws and standards.

Jerry: Well, class action litigation sure is on the rise in many industries, certainly a truism in the insurance industry. What’s driving that trend in this sector?

Ryan: Well, Jerry, it’s really a combination of old risks and new ones. Class actions have been and are now still one of the most powerful procedural tools in the American legal system. There are really few mechanisms that can shape liability in the way that a class action claim can. So, for example, a single claim that might otherwise involve limited damages can suddenly expand into thousands, sometimes millions of dollars, both for policyholders and for a variety of other consumers, that the policyholders insure. So that reality has really fundamentally changed the way that litigation environment operates for insurers.

Jessica: And I’ll just jump in and note that the kinds of claims that we’re seeing continues to grow, in the class action world in general, and as it pertains to the insurance industry. So lots of folks might be aware that historically, insurers have dealt with class action on various topics – commonly premium calculations, underwriting practices, claims handling practices – but now we’re seeing a whole bunch of new categories that are affecting insurance companies and the insurance industries. Those include some of the up-and-coming issues, like data privacy breaches, artificial intelligence, underwriting models, cybersecurity issues, and even, as we’ve seen, climate-related coverage disputes.

Ryan: Yeah, and really that expansion reflects how much the insurance industry itself has changed. Insurers now operate in an environment where virtually every business practice can create exposure across a broad customer base, and as a result, the industry occupies a uniquely complicated position legally, because insurance products touch nearly every aspect of American life, yet the policies themselves are highly technical and highly regulated.

Jerry: Well, that description sure gives us some definitions in this space and shows that insurance-related disputes rarely involve just one body of law. Seems like you’re dealing with contract interpretation, state insurance regulations, consumer protection statutes, privacy laws, administrative guidance, and many differing standards across multiple jurisdictions. It’s truly a patchwork quilt. That complexity certainly creates a fertile ground for class-wide and collective-wide litigation strategies initiated by the plaintiff’s bar.

Jessica: Okay, that’s very true, and it’s probably a surprise to no one that plaintiffs’ lawyers are increasingly sophisticated when they’re navigating all these different areas of law. We’re continuing to see plaintiffs’ efforts to certify nationwide and multi-state classes, even in areas where state law variations historically pose major obstacles, because there can be state variations in all these types of regulations and laws, but we are seeing these combined and collective efforts across states. But the upside is that the insurance industry is not without its tools. Insurers are responding themselves with more advanced defense strategies, including things like arbitration provisions, class action waivers, data governance protocols, and improvements in claims administration systems themselves.

Jerry: I think there’s also somewhat of a catch-22 there. Technology has changed the equation and litigation outcomes significantly, and over the last decade, insurers in particular have undergone major digital transformation initiatives in terms of collecting and processing enormous amounts of consumer-related data, which creates both efficiency, but also introduces a bit of risk into the equation.

Jessica: That is very true, and just like insurance companies are underwriting risks that their policyholders are facing on all these issues, they themselves are facing these issues. So, cybersecurity and privacy-related class actions are, of course, a major area of exposure now. And regulators and plaintiffs’ firms are really scrutinizing how insurers are gathering, storing, sharing, and securing all this personal information that is part of what they do every single day. And because insurance companies maintain such highly sensitive financial and health-related data, just one single incident can quickly snowball and escalate into what we’re seeing as large-scale litigation on these issues.

Jerry: Well, the data analytics that our group collects and publishes on an annual basis showed these attributes of the space in terms of more class actions being filed last year than any year before, and settlements were higher than in any other year in the history of American jurisprudence. So, you’re layering these external economic pressures and factors, catastrophic weather events, inflationary pressures, rising healthcare costs, labor market changes – all putting pressures on insurers’ pricing methodologies and claims practices.

Ryan: Yeah, that’s completely right, Jerry, and that combination has created a litigation landscape that is more dynamic and consequential than at any other point in the industry’s history. Every day, we’re litigating questions surrounding fairness, transparency, and the economic responsibility, through the class action mechanism itself, and these issues are of real consequence for insurers.

Jerry: I was saying earlier, you learned the plaintiffs’ bar is nothing if not inventive and innovative, and certainly the future of insurance-related class action litigation is likely to be shaped by many of these forces that extend well beyond traditional coverage disputes, things like artificial intelligence, climate risks, digital surveillance technologies, ESG initiatives, mass arbitration tactics, and expanding consumer protections are all reshaping class action litigation.

Ryan: Yeah, Jerry, and these developments are all happening simultaneously. There are courts, regulators, consumers, even the insurance industry itself, which are attempting to effectively negotiate these evolving standards in real time. So, you know, getting out in front of these issues and making strategic planning efforts is critically important for not only corporate defendants, but more specifically as to insurers.

Jerry: I had an insurance executive share with me that these sorts of risks are just enormous, because the outcome of a class action lawsuit can be not only financially devastating for a company, but also impair its reputation, create disruption to its operations, and have regulatory consequences.

Jessica: That is very true, and everyone knows that insurance companies are well aware of their reputation in the market, and bad news and being in the headlines certainly draws regulators’ attention, so that’s something that insurance companies want to avoid getting on that list. And it’s why insurance companies need to approach class action defense from a very big picture perspective. We look at things like the successful defense strategies that require coordination, across legal, compliance, cybersecurity, operations, claims administration, executive leadership, all facets of an insurance company’s operation. And it’s no longer enough to just kind of try to tackle these cases one at a time, as they come.

Jerry: Those factors underscore the purpose and the motivation behind the creation of the Duane Morris Insurance Class Action Review, and in terms of developing this resource for our clients in the insurance industry. The goal is to create a practical desk reference for corporate counsel and industry professionals who are increasingly having to confront these sophisticated and challenging class action risks.

Ryan: Yeah, Jerry, and it’s those risks and these trends that really reinforce the need for this kind of resource. There are rulings involving class action, litigation in the insurance industry every single day, and they’ve remained very steady for over the last, over the past several years. But we really have started to see a noticeable uptick in activity during 2025. We’d expect that to continue into 2026.

Jerry: Well, from a prognostication standpoint, this suggests the area is only going to continue to grow in importance, moving forward for the insurance industry.

Jessica: I think that’s definitely right. I do think class actions are going to continue to be one of the primary ways through which major questions are resolved in upcoming years – questions like insurance practices, consumer protection, technology, and economic accountability.

Jerry: Well, thank you, Jessica and Ryan, for joining us on this week’s podcast. Listeners, remember to stop by both the Class Action Defense Blog and the Insurance Blog for a free copy of our new e-book and publication, the Insurance Class Action Review – 2026. Thanks for tuning in.

Ryan: Thanks, Jerry, always a pleasure to be on the podcast.

Jessica: Thank you so much, Jerry, and thanks to everyone for listening.

U.S. Supreme Court Delivers Arbitration Exemption To Last-Mile Local Drivers

By Gerald L. Maatman, Jr., Jennifer A. Riley, Eden Anderson, Rebecca Bjork, Ryan T. Garippo, and Olga A. Romadin

Duane Morris Takeaways:  On May 28, 2026, in Flowers Foods, Inc. v. Brock, 2026 WL 1485669 (U.S. May 28, 2026), and in a much-anticipated ruling following a grant of certiorari from the 10th Circuit’s decision in Brock v. Flowers Foods, Inc., 121 F. 4th 753 (10th Cir. 2024), Justice Neil Gorsuch authored a unanimous opinion for the U.S. Supreme Court that affirmed the applicability of the Federal Arbitration Act (the “FAA”) transportation worker exemption for “last-mile” delivery drivers. Today’s opinion builds on the Supreme Court’s prior decisions in Southwest Airlines Company v. Saxon, 596 U.S. 450 (2022), and Bissonnette v. LePage Bakeries Park Street, LLC, 601 U.S. 246 (2024, to expand the FAA exemption for transportation workers seeking to bypass arbitration.  The decision has significant implications for companies who employ delivery drivers and the logistics industry generally, and will play an important factor in re-shaping the arena of class and collective action litigation.

Case Background

Angelo Brock, a Denver-based delivery franchisee who had purchased distribution rights to baked goods produced by Flowers Foods, Inc. (known as a “last-mile” delivery driver), brought a putative class and collective action in a Colorado federal district court alleging that Flowers Foods had underpaid its franchisees in violation of the Fair Labor Standards Act (“FLSA”) and state laws.  Id. at *2.  “Brock picks up [Flowers Foods’] products from a warehouse in Colorado and delivers them to local stores, all without leaving the State.”  Id.  He also signed an arbitration agreement.  Id.  As a result, Flowers Foods filed a motion to compel arbitration under the terms of the agreement that it entered into with its franchisees, which the district court denied, citing 9 U.S.C. § 1., which exempts workers engaged in interstate commerce, and is commonly known as the FAA’s transportation worker exemption.  Id.

In denying Flowers Foods’ motion, the district court concluded that Brock fell within the ‘‘transportation worker exemption” of § 1 of the FAA, which exempts transportation workers who engaged in interstate commerce from arbitration.  Thus, even though Brock did not cross state lines, the district court reasoned that he had engaged in the transportation of the company’s products – which were created outside of the state – because he delivered those products in Colorado.  Id.  As a result, the district court declined to compel arbitration.  Id.

Following an appeal of that decision by Flowers Foods, which argued that a worker who does not leave the state, like Brock, does not qualify for the exemption, the 10th Circuit affirmed the district court’s decision based on its determination that Brock’s “intrastate route formed a constituent part of the . . .  interstate journey” of the cross-border delivery of Flowers Foods’s products.  Id.  Flowers Foods then sought review from the U.S. Supreme Court. 

The U.S. Supreme Court granted Flowers Foods’ petition for writ of certiorari and sought to answer the question of whether a worker can fall under the “transportation worker exemption” for interstate workers under § 1 of the FAA if they neither cross state lines nor interact with vehicles that do.  Id. at *3.

The Supreme Court Decision

In a unanimous decision, Justice Neil M. Gorsuch authored the 8-page opinion of the U.S. Supreme Court that affirmed the 10th Circuit’s ruling and held that “transportation workers” are exempt from the reach of the FAA, citing the statutory text, historical use, and U.S. Supreme Court precedent.

The Supreme Court cited its three recent decisions addressing § 1 of the FAA, including New Prime Inc. v. Oliveira, 586 U.S. 105 (2019), Southwest Airlines Company v. Saxon, 596 U.S. 450 (2022), and Bissonnette v. LePage Bakeries Park Street., LLC, 601 U.S. 246 (2024), to reject Flowers Food’s argument that in order to qualify for the exemption, a worker must cross state lines or engage with a vehicle that does.  Id.  Based on the statutory text, the Supreme Court found nothing in the language of the FAA requiring crossing state lines or interacting with a vehicle that does so.   Under the definition for “interstate commerce” provided by Black’s Law Dictionary, the Supreme Court further noted, the transportation of goods between states includes intrastate activity. Id. 

The Supreme Court also cited historic use of “interstate commerce” by referencing case law from the 19th and early 20th centuries, including discussing a case concerning steamship transportation of goods called The Daniel Ball, 10 Wall. 557 (1871), where the Supreme Court had found that a steamer that operated in one state without direct contact with other vessels transporting the goods into other states was found to engage in interstate transportation because the goods were destined for other states. Id. at *4.

Further, the Supreme Court rejected Flowers Foods’ argument that prior precedent was erroneously based on the U.S. Constitution’s Commerce Clause, and not the FAA.  The Supreme Court noted that the similarity in the language between the Clause and § 1 were “probative” of the common conception of the meaning of the term used by both at the time that the FAA was enacted. Id. 

Finally, the Supreme Court declined to find that the distribution agreement between Flowers Foods and Brock was relevant to the analysis.  The Supreme Court did not find any significance to the fact that the agreement was signed by Brock’s independent company, and thus affirmed the judgment of the 10th Circuit by expanding the transportation worker exemption to individuals who do not travel to other states or come into contact with vehicles that do.  Id. at *5.

Implications For Employers

As we predicted in a previous post in October 2025 (here – blog post), the Supreme Court’s decision is highly significant for logistics companies and deliver driver employees.  This decision further expands the “transportation worker exemption” to make it much more difficult for employers to compel arbitration in class and collective actions brought by workers in transportation and transportation-adjacent positions. The U.S. Supreme Court’s decision, which was designed to prevent an analysis that hinges on “game of tag” with vehicles engaged interstate commerce, now has the potential to sweep in a wide variety of workers whose conduct is only tangentially related to movement of a company’s products across state lines.

Despite this blow to employers’ arbitration defenses, there are still some arguments for companies to assert in order to maintain their arbitration programs.  By its own terms, the Supreme Court’s opinion is limited to whether § 1 requires a bright line rule that workers who “never cross[] state lines and never interact[] with vehicles that do” are outside of the FAA exemption and does not opine on whether a worker could be so attenuated from interstate commerce that they fall outside the scope of the exemption.  Further, some arbitration agreements may be enforceable under state law and, therefore, the choice of law provisions in those these agreements will likely be the difference maker in whether a class action will survive a motion to compel arbitration or not.  As a result, corporate counsel – particularly in the logistics industry – should follow the developments in this space closely, because their arbitration programs are under siege and a new wave of class actions is likely headed for their organizations.

North Carolina Federal Court Highlights “Severe And Pervasive” Requirement Under Title VII In Denying Partial Motion To Dismiss A Pattern or Practice Claim Brought By The EEOC

By Gerald L. Maatman, Jr., Denis I. Yavorskiy, and Andrew P. Quay

Duane Morris Takeaways: On May 19, 2026, in EEOC v. Recovery Innovations, Inc. d/b/a RI Int’l, No. 25-CV-767, 2026 U.S. Dist. LEXIS 110782 (E.D.N.C. May 19, 2026), Judge Terrence W. Boyle of the U.S. District Court for the Eastern District of North Carolina denied a partial motion to dismiss a Title VII pattern or practice claims after finding that the EEOC’s complaint properly pled “severe or pervasive” harassment and sufficiently described a group of similarly aggrieved female employees.  Id. at *4, 5.  Judge Boyle held that alleged unwelcome conduct from a supervisor who supervised “at least some of the” allegedly injured workers was “sufficiently severe or pervasive” and that the universe of alleged victims was sufficiently described without identifying the alleged victims.  Id. 

The decision reinforces the importance of authoritative conduct and the leniency afforded to plaintiffs and the EEOC in bringing pattern or practice claims on behalf of alleged victims of discrimination.

Case Background

Defendant Recovery Innovations operates the Dix Crisis Intervention Center in Jacksonville, North Carolina.  Id. at *1, 2.  The Jacksonville center provides outpatient services for mental health disorders and substance abuse.  Id. at *2.  Recovery Innovations hired Chiara Munna as a “Peer Support Specialist” at the Jacksonville center.  Id.  Munna’s shift supervisor allegedly made “repeated sexual comments to the women under his supervision, touched them sexually, and sent at least two of them unwelcome sexual text messages and photos.”  Id. 

The EEOC filed suit on behalf of Munna and a group of similarly aggrieved female employees, asserting claims for: (1) sex harassment and hostile work environment under Title VII; (2) failure to accommodate under the ADA; (3) discriminatory discharge under the ADA; and (4) ADA record keeping violation under the ADA.  Id.  The Title VII claim is brought on behalf of Munna and “similarly aggrieved women.”  Id.  Recovery Innovations moved to dismiss the Title VII claims on behalf of the group of workers but not those brought on Munna’s behalf individually.  Id.

The complaint alleges that Munna’s shift supervisor “engaged in unwelcome and offensive conduct ‘on nearly every occasion’ the [workers] encountered him,” including repeatedly insisting on “hugging them, elicit[ing] physical contact by impeding their paths or cornering and intimidating them, mak[ing] unwelcome sexual comments,” and sending sexually explicit photos of himself to at least two class members, among other misconduct.  Id. at *4.

The Court’s Analysis

Recovery Innovations raised two arguments in its motion to dismiss.  Its “chief argument” in support of dismissal was that the complaint failed to allege “severe and pervasive” harassment.  Id.  Recovery Innovations’ second argument was that the complaint “insufficiently describes” the group of allegedly injured workers, as it did not provide sufficient notice of “when the harassment occurred or precisely what unwelcome conduct each [worker] suffered.”  Id.  Judge Boyle rejected both of these arguments and denied Recovery Innovations’ partial motion to dismiss the Title VII pattern or practice claims.

First, as to Defendant’s “severe and pervasive” argument, Judge Boyle held that the alleged conduct was “sufficiently severe or pervasive to alter the class members’ conditions of employment” because “‘a supervisor’s power and authority invests his or her harassing conduct with a particularly threatening character.’”  Id. at *4, 5 (quoting Boyer-Liberto v. Fontainebleau Corp., 786 F.3d 264, 278 (4th Cir. 2015)).

Second, as to Defendant’s argument that the complaint insufficiently describes the group of alleged victims, Judge Boyle found that “[a]n EEOC complaint brought on behalf of a [group of victims] is not . . . ‘deficient for failing to identify the numerous alleged victims of discrimination.’”  Id. at *5 (quoting EEOC v. PBM Graphics Inc., 877 F. Supp. 2d 334, 347 (M.D.N.C. 2012)).  In addition, because the complaint alleged that the alleged victims reported the supervisor’s conduct to the facility’s program supervisor, Recovery Innovations received “fair notice” of the “time frame and scope” of the workers at issue. Id.

Having found that the complaint adequately pled “severe or pervasive” harassment and sufficiently described the group of aggrieved female employees, Judge Boyle denied Recovery Innovations’ partial motion to dismiss.  Id.

Implications For Employers

Recovery Innovations shines light on the “severe or pervasive” standard under Title VII when applied to a supervisor’s alleged conduct, as well as the pleading leniency surrounding claims that encompass alleged victims of discrimination.  Corporate counsel should implement and update training for managerial employees regarding sexual misconduct to make every effort to avoid Title VII pattern or practice claims.

Pennsylvania Federal Court Delivers Misjoinder Blow To FedEx Drivers’ Wage And Hour Mass Actions

By Gerald L. Maatman, Jr., Elisabeth Bassani, and Olga A. Romadin

Duane Morris Takeaways: On May 18, 2026, Judge Robert J. Colville of the U.S. District Court for the Western District of Pennsylvania issued an order severing claims of over 14,000 plaintiffs who had alleged violations of the Fair Labor Standards Act (“FLSA”) and state laws in Brannon, et al. v. Federal Express Corp., No. CV 2:24-1128, 2026 WL 1382330 (W.D. Pa. May 18, 2026), Abner, et al. v. Federal Express Corp., No. 2:25-1129, 2026 WL 1382330 (W.D. Pa. May 18, 2026), and Smith, et al. v. Federal Express Corp., No. 2:25-1507, 2026 WL 1382330 (W.D. Pa. May 18, 2026). Following an order to show cause, plaintiffs in each of the three matters filed motions to sever and to transfer venue, which the Court granted, tolling the statute of limitations to permit individual plaintiffs to file individual claims.

Case Background

Three mass actions were filed following voluntary decertification and dismissal by plaintiffs in Claiborne, et al. v. FedEx Ground Package Systems, Inc., No. 2:18-CV-1698 (W.D. Pa.), a conditionally certified class and collective action consisting of over 30,000 opt-ins alleging FLSA overtime violations which had been pending in the Western District of Pennsylvania for almost seven years. Id. at *1. The Court subsequently granted a Motion on Misjoinder, Change of Venue, and Separate Trials, and severed the claims of all plaintiffs in Claiborne, and a related matter entitled Atwood, et al. v. FedEx Ground Package Systems, Inc., No. 2:24-CV-1127 (W.D. Pa.). Id. The Court also issued a Memorandum Order in which it opined that Brannon and Abner were also likely mis-joined, and ordered the plaintiffs in those matters to show cause. Id. In response, the plaintiffs motioned to sever and transfer their claims to appropriate forums, as the court had granted in Claiborne and Atwood, which FedEx opposed. Id.

The Court’s Decision

The Court, including the Smith matter in its opinion due to all three matters being represented by the same law firm, granted the plaintiffs’ motion to sever, and tolled the statute of limitations at 60 days, though it declined to transfer the claims of the thousands of individual plaintiffs to appropriate forums as requested because it determined that doing so would be overly burdensome for the Court and the Clerk’s Office. Id. at *3.

Noting the wide disparity in the numbers of putative plaintiffs in Claiborne and Atwood, which had twelve and two, respectively,and the hundreds and thousands of named plaintiffs in the three matters at issue here, the Court warned that the mass actions had the appearance of “a tactical maneuver around the standard or collective action procedures,” which the plaintiffs were unable to maintain, and the Court found to be improper. Id. at *2.

The Court found, as it had in its prior orders, that the plaintiffs here were mis-joined under Federal Rule of Civil Procedure 20. Id. at *3. Noting that the U.S. District Court for the District of Massachusetts echoed its conclusions on mis-joinder in related cases before it, the Court wrote that its prior conclusions regarding impracticality of litigating the claims in Claiborne and Atwood were equally applicable here in that holding a trial for 14,296 individual plaintiffs with individual issues predominating was “patently untenable.” Id. Further, the Court found that the claims did not arise out of the same transaction, occurrence, or series of transactions or occurrences, as required for joinder under Rule 20, and thus elected to sever the claims. Id.

Finally, the Court determined that the plaintiffs’ severed claims would be continuations of their current cases, and therefore permitted an extension of the tolling period to allow them 60 days to file individual actions in appropriate forums, but cautioned that any further efforts to bring additional mass claims would be “at their own peril.” Id. at *4.

Implications For Employers

For employers with a workforce that may fall under the FLSA, this decision offers practical insight into maintaining a compliant overtime program.

The Court’s decision additionally highlights the proliferation of creative procedural tactics, such as mass actions, undertaken by plaintiffs’ attorneys as a strategic loophole when class and collective actions are otherwise unsuccessful.

The Beard Group’s Class Action Money & Ethics Conference Covers Major Developments And Trends In Class Action Litigation

By Jennifer A. Riley, Greg Tsonis, George J. Schaller, and Ryan T. Garippo

Duane Morris Takeaways: Jennifer A. Riley, Greg Tsonis, George J. Schaller, and Ryan T. Garippo, members of the Duane Morris Class Action Defense Group, recently attended the Beard Group’s Class Action Money & Ethics Conference organized in New York City.  The conference, held on May 21, 2026, hosted hundreds of attendees, covered key trends in class action litigation, and honored several attorneys for their accomplishments in the class action industry.  Jennifer A. Riley of Duane Morris gave the keynote address, and George J. Schaller and Ryan T. Garippo of Duane Morris received awards for their accomplishments as two of 12 Premier Class Action Lawyers Of Tommorow in the United States.

The Conference

At the Class Action Money & Ethics Conference, the Beard Group, Inc. hosts a gathering of the top class action professionals to discuss the hottest topics in class action and multi-plaintiff litigation, including new filings, pre-trial proceedings, settlements, verdicts, and the latest trends in this area of the law.  The Conference featured panelists and attendees who are attorneys on both sides of the bar, judges, as well as other professionals who focus their work on class action litigation.

The Conference features panels that speak on a wide range of topics.  These topics included the use of data analytics and artificial intelligence in class action litigation, mass arbitrations, the trends in data breach and consumer protection litigation, environmental class actions, and more.

The State Of The Industry

Jen Riley, Vice Chair of Duane Morris’s Class Action Defense Team, opened the Conference by presenting the ten latest trends in class action and multi-plaintiff litigation in her keynote speech.  The presentation is based on the findings from the Duane Morris Class Action Review, which is a “one-of-a-kind” publication, that summarizes class action trends and decisions across substantive areas of law.

As Jen Riley explained, in 2025, class action litigation exploded which led to record-breaking settlement figures by a wide margin.  In 2025, the ten largest class action settlements can be aggregated to a total of over $79 billion dollars which were paid from corporate defendants to individuals across the nation.  This trend was driven by high class certification rates, high quantities of class action filings, shifts within the substantive claims that plaintiffs are pursuing and several other variables.  The net effect of these trends was that the class action mechanism served as an effective tool for the plaintiffs’ bar to redistribute wealth at an unprecedented level.

Jen Riley also discussed the shifting landscape with respect to some of the most cutting-edge defenses to defeating class actions.  She discussed the success of corporate defendants in defeating class actions via motions to compel arbitration, and some of the latest case law on arbitrations that is currently being litigated before the U.S. Supreme Court.  In addition, she reviewed the ongoing federal appellate circuit split concerning the standards for when to grant conditional certification (if at all) under the Fair Labor Standards Act and the applicability of the personal jurisdiction defense to the claims of individual class and collective action members.  Jen Riley, providing the keynote address, is pictured below:

Panels On Class Actions And Related Issues

Following Jen Riley’s keynote address, numerous panels followed on the state of class action litigation across various areas of substantive law.  The panels in the morning focused on a wide range of topics.  The first panel discussed the use of data analytics in class action litigation, particularly by plaintiffs’ attorneys, to identify potential defendants to sue and then effectively prosecute their clients’ claims after.  There were also panelists on securities class actions, which helped explain the role that private plaintiffs’ firms have to play during the Trump administration’s control of the U.S. Securities and Exchange Commission.  The morning ended with a discussion of the future of litigation financing and the impact of various state laws on the continued viability of the practice. 

The panels in the afternoon focused largely on consumer class actions and again covered many areas of substantive law.  The afternoon opened with a lively panel on the current state of mass arbitrations, including a conversation regarding the plaintiffs’ bar’s use of arbitration agreements in their engagement letters, and how it impacts their ability to challenge the viability of arbitration agreements in federal and state courts across the country.  There were panels on how the plaintiffs’ bar evaluates claims in data breach cases, as well as the shifting trends in data privacy class actions as a result.  These panels were followed by additional discussions on the impact of multi-district litigation, environmental class actions, and a comparative analysis of global class actions which explained the various ways that plaintiffs are seeking to monetize mass torts and other alleged harms outside of Rule 23’s class action mechanism.  The afternoon concluded with a panel on the scope of consumer protection class actions, including the cutting-edge theories that plaintiffs are pursuing to advance the law in this space, as well as the challenges in identifying plaintiffs to pursue such claims in light of the Eleventh Circuit’s decision that service payments are per se impermissible in class action settlements.

Premier Class Action Lawyers Of Tommorow Award Ceremony

After the panels concluded, there was a reception which was emceed by the Honorable Kathy King, who is a Justice on the Supreme Court in New York County state court.  Justice King gave her concluding remarks on the event and also awarded this year’s Premier Class Action Lawyers Of Tommorow with awards for accomplishments in the class action industry.  The award was provided to twelve attorneys, under the age of 40, who are redefining the frontiers of class action litigation through innovative strategies, landmark victories, and unwavering commitment to justice on both sides of the bar.

This year’s award winners included Ryan Garippo and George Schaller, both of Duane Morris, who were honored to accept their awards from Judge King and the Beard Group.  George and Ryan are pictured below:

California Supreme Court Rules That A Smash-And-Grab Hardware Theft, With No Access To Sensitive Records, Does Not Automatically Result In Multi-Million Or Billion Dollar Liability Under California Privacy Laws

By Gerald L. Maatman, Jr., Jennifer A. Riley, Ryan T. Garippo, and Jamar D. Davis

Duane Morris Takeaways: On May 14, 2026, in J.M. v. Illuminate Education, Inc., No. S286699, 2026 Cal. LEXIS 2657 (May 14, 2026), the California Supreme Court held that the California Court of Appeal decision to deny a demurrer was improper for an incorrect application of privacy laws.  This decision emphasizes why defendants should confirm whether a plaintiff sufficiently pled a cause of action that aligns with the remedies that he or she seeks to recover.  Further, the opinion clarifies that injury under the Confidentiality of Medical Information Act, Cal. Civ. Code § 56, et seq. (“CMIA”) depends on whether the company subjects medical information to a substantial risk of unauthorized use or access, not whether the unauthorized user actually views sensitive data.

Case Background

Illuminate Education, Inc. (“Illuminate”) is a technology company that helps educators determine the academic progression of an individual student, as well as their areas of potential improvement.  The company uses data from individual students, including medical data, to make these determinations.  Illuminate provided its services to the Ventura County Office of Education, under which Plaintiff (a minor) was a student.  Plaintiff provided his medical information to the Ventura County Office of Education, which then provided Plaintiff’s health data to Illuminate.

In 2022, Illuminate became aware of suspicious activity related to its systems.  Illuminate promptly initiated an investigation.  The investigation confirmed an unauthorized user gained access to Illuminate’s records, including students’ medical information.  Illuminate sent a notice to the guardians of the affected students, including Plaintiff, informing them of the scope of the potential disclosure.  The notice made it clear that Illuminate found no evidence that the unauthorized user (or users) was successful in actual or attempted misuse of the data.

After the breach, Plaintiff alleges that he received several mail solicitations at an address provided to only the Ventura County Office of Education.  As a result, Plaintiff filed a class action lawsuit alleging that Illuminate, as health care provider, negligently managed the students’ medical records under the CMIA and failed to expediently disclose the data breach to those affected under the Customer Records Act, Cal. Civ. Code § 1798.80, et seq. (“CRA”). 

The trial court sustained Illuminate’s demurrer, without leave to amend, after Plaintiff twice failed to cure deficiencies in his pleadings. The Court of Appeal reversed that decision, holding that the trial court abused its discretion by sustaining the demurrer, because Plaintiff may have been able to cure the defects in his complaint if a different legal analysis was applied.

Following that decision, the California Supreme Court set out to resolve the disagreement.

The California Supreme Court’s Decision

The California Supreme Court’s analysis hinges on its statutory interpretation, involving the plain reading of the statutes and their legislative histories.  Generally, this analysis fell into three distinct categories.

First, Justice Goodwin Liu, writing for the California Supreme Court, reasoned that Plaintiff failed to establish a valid claim under CMIA because he could not allege that Illuminate was a “provider of health care” under California Civil Code section 56.06.  Relying on the text of section 56.06, the Supreme Court explained there are two ways for a business to qualify as a “provider of health care”: (1) a covered business maintains medical records to make the information available to either an individual or a health care provider upon request of the individual or provider; or (2) a covered business makes medical information available for an individual or a health care provider upon request to allow an individual to manage their information, or to help diagnose or treat the individual.

The Supreme Court also confirmed this interpretation by relying on the legislative history of the statutes.  The Supreme Court observed that the legislative history confirmed that the legislature was concerned with  situations where diabetics used a data platform to record glucose levels, or where people with hypertension used platforms to track their blood pressure.  Relying on the legislative history, the Supreme Court observed that Plaintiff never alleged that Illuminate created a repository of student records that allowed the students to create their own records, or to access and share those records at their discretion.  Instead, Plaintiff asserted that Illuminate stored medical information to help educators monitor, evaluate, and address student needs.  As a result, Illuminate was not a “provider of health care,” because it did not make medical records available upon request of the individual or provider.

The Supreme Court also quickly addressed Plaintiff’s inability to satisfy the alternative method for determining whether Illuminate is a “provider of health care” because Plaintiff never alleged that Illuminate “provides medical information to health care providers or individuals for diagnosis and treatment of an individual.”  Illuminate Education, 2026 Cal. LEXIS 2657, at *12.  As a result, and after quickly dispensing with a few other arguments, the Supreme Court concluded that Illuminate was not a “provider of health care” under the CMIA.

Second, in addition to analyzing whether Illuminate was a “provider of health care,” the Supreme Court also determined whether Plaintiff had alleged sufficient injury to state a claim under the CMIA.  The Supreme Court disagreed with Illuminate’s argument that injury requires an unauthorized person to view medical data, and ruled that a plaintiff alleges injury by claiming that the medical information was exposed to “a significant risk of unauthorized access or use.”  Id. at *29.

The CMIA requires covered entities to “preserve[] the confidentiality” of medical information.  Cal. Civ. Code § 56.101(a).  The Supreme Court stated that “confidentiality” requires “keeping information private or secret” and clarified that this obligation applies regardless of whether an unauthorized party actually views the data. Illuminate Education, 2026 Cal. LEXIS 2657, at *26. (“[W]e reject the rule that no breach of confidentiality has occurred until medical information is actually viewed by an unauthorized person.”).  Instead, the determination of whether a covered entity failed to preserve the confidentiality of data depends on a factor-based analysis that considers the “form, duration, and extent of the data breach, as well as any mitigation efforts by the covered entity.” Id. at *30. Thus, a plaintiff need not allege that his or her data was “actually viewed” by a third party, because that person is “unlikely to know what an unauthorized party has done with their data unless they suffer actual damage” and instead “[a]ll relevant circumstances must be considered” when determining whether confidentiality was breached.  Id.

Third, for the CRA claim, the Supreme Court ruled that Plaintiff did not state a cause of action against Illuminate because Plaintiff was not a customer within the meaning of the statute.  To bring suit under the CRA, a plaintiff must establish that he or she is a “customer” within the meaning of the statute.  Boorstein v. CBS Interactive, Inc., 222 Cal. App. 4th 456, 467 (2013).  A customer is “an individual who provides personal information to a business for the purpose of purchasing or leasing a product or obtaining a service from the business.” Cal. Civ. Code § 1798.80(c).  Here, the Supreme Court found that Plaintiff never alleged that he provided any personal information to Illuminate to purchase or lease a product, or obtain a service from Illuminate.  The Supreme Court observed that the Ventura County Office of Education purchased Illuminate’s services and provided the student information, not Plaintiff. Moreover, the Supreme Court disregarded Plaintiff’s argument that he was the “ultimate” customer of Illuminate because the CRA “does not authorize suit by all consumers or beneficiaries; it authorizes a civil action for an injured ’customer.’” Id. at *32.

In the end, the Supreme Court reversed the judgment of the Court of Appeal and remanded the matter for further proceedings.

Implications For Companies

This decision emphasizes the importance of ensuring that a plaintiff has sufficiently pled all causes of action asserted.  When the CMIA or CRA are involved, companies must consider whether they are, in fact, a covered entity in order to determine whether they are subject to the statutes’ reach.

Further,  to assert injury under the CMIA for a data breach claim, the analysis hinges on the risk of unauthorized use, not what an unauthorized user is able to do with the data.  Thus, it is imperative that companies take all reasonable steps to retain the confidentiality of sensitive records, making an extra effort to ensure that hardware is secure.

For CRA claims, companies need to pay special attention to which entities solicit or contract for their services as attention to these details can potentially thwart a potential CRA claim.

In short, organizations that use such medical data, and operate in California, should take note of this decision because it impacts their defenses both positively and negatively going forward.

Announcing The New Duane Morris Higher Education Class Action Review – 2026!

By Gerald L. Maatman, Jr. and Jennifer A. Riley

Duane Morris Takeaway: We are proud to announce the release of the first-ever Higher Education Class Action Review – 2026, a comprehensive examination of the rapidly evolving world of litigation involving colleges and universities.

Class action lawsuits against colleges and universities have multiplied in both frequency and complexity over the last several decades. What began as isolated disputes involving admissions practices or employment discrimination has evolved into a broad spectrum of high-stakes litigation touching nearly every aspect of institutional operations. Institutions now confront class claims involving tuition and fee refunds, antitrust allegations, Title IX compliance, financial aid practices, student privacy, labor and employment disputes, disability accommodations, consumer protection statutes, data breaches, and the use of emerging educational technologies.

The COVID-19 pandemic accelerated many of these trends, producing an unprecedented wave of litigation that tested the contractual, fiduciary, and ethical obligations universities owe to students, faculty, and employees alike. At the same time, plaintiffs’ attorneys increasingly recognized that educational institutions possess the precise characteristics that make them attractive targets for aggregate litigation: substantial assets, expansive data systems, and policies affecting large populations.

As a result, colleges and universities now operate in an environment where a single institutional decision can trigger nationwide claims involving thousands of individuals and expose institutions to extraordinary legal and reputational risk.

Yet higher education remains unlike any other industry. Universities occupy a unique legal and cultural space shaped by academic freedom, shared governance, nonprofit missions, constitutional obligations, and public trust. Courts are often tasked with balancing these longstanding traditions against modern doctrines of consumer protection, employment law, privacy regulation, and mass tort procedure.

The Higher Education Class Action Review – 2026 explores the procedural frameworks governing class certification, the substantive legal theories most frequently asserted against educational institutions, and the strategic considerations that shape litigation outcomes. Designed for attorneys, university counsel, administrators, policymakers, academics, and risk management professionals, the book provides a detailed roadmap for understanding the rapidly expanding role of class action litigation in education.

The Higher Education Class Action Review – 2026 offers readers a timely and authoritative guide to one of the most consequential developments in modern education law. Get your eBook copy today!

Stay tuned to the Class Action Weekly Wire for more news and information about the Higher Education Class Action Review – 2026.

Third Circuit Holds That Unauthorized Collection Of Credit Card Information Via Session Replay Code Confers Article III Standing, Creating Split Of Authority

By Gerald L. Maatman, Jr., Justin Donoho, and Hayley Ryan

Duane Morris Takeaways: On May 11, 2026, in In Re BPS Direct, LLC; Cabela’s, LLC Wiretapping Litigation, No. 23-3235, 2026 WL 1280969 (3d Cir. May 11, 2026), the U.S. Court of Appeals for the Third Circuit reversed a federal district court’s dismissal of a class action alleging that defendants’ use of session replay code, a form of website analytics technology, violated federal and state privacy laws. The Third Circuit held that two plaintiffs who made purchases on the defendants’ websites had standing to sue because the session replay code collected their credit card information without consent, an alleged injury the Third Circuit deemed analogous to the common law tort intrusion upon seclusion. Id. at *6-7.

This ruling is significant in that it shows that in class actions seeking millions (or billions) in dollars in statutory damages under federal and state data privacy laws for alleged use of session replay code, the Third Circuit has distinguished itself from California District Courts, which have held that there is no reasonable expectation of privacy in credit card information collected by session replay code.  Companies operating in the Third Circuit should take note as the legal risk of session replay code has meaningfully shifted in that jurisdiction. 

Background

Many companies embed their websites with session replay code and other similar software such as Google Analytics and the Meta Pixel in order to perform website analytics and/or targeted advertising. All of these various technologies capture users’ browsing behaviors and cryptographically transmit this data to algorithms residing on the software providers’ servers.  Upon entry into the algorithm, this data is typically anonymized, aggregated, and not alleged to have been viewed or accessible by any human.  In addition, session replay code (unlike other website analytics and advertising technologies) is typically alleged to record and store “videos” of “all mouse movements, clicks, scrolls, zooms, window resizes, keystrokes, [and] text entries,” so that the session replay provider can provide that information back to the company “in a format that [the company] can use for its business purposes.” Id. at *1, 5. Plaintiffs across the country have filed multitudes of class actions challenging these various website analytics and advertising practices under federal and state privacy laws, targeting companies in virtually every industry, including healthcare, retail, education, and consumer products.  Some cases have resulted in multimillion-dollar settlements, others have been dismissed, and the vast majority remain undecided.  In these session replay and other data privacy class actions, the central question is often whether the specific data captured is sufficiently sensitive or personally identifying to establish a cognizable legal injury.

In In re BPS Direct, LLC, eight named plaintiffs sued the defendant retailers, alleging that session replay code embedded on their websites captured users’ interactions, including “mouse clicks and movements, keystrokes, search terms, substantive information inputted …, pages and content viewed …, scroll movement[s], and copy and paste actions.” Id. at *2.  Plaintiffs asserted claims under the federal Wiretap Act, 18 U.S.C. § 2510 et seq., and the Computer Fraud and Abuse Act, 18 U.S.C. § 1030 et seq., along with several state and common law causes of action. Id.

The plaintiffs fell into two groups. Two plaintiffs made purchases on the defendants’ websites and entered his or her “name, address, and payment and billing information” into text fields. Id. The remaining six plaintiffs browsed the websites without making purchases and did not enter any personally identifying information while browsing the websites.  Id.

Defendants moved to dismiss for lack of Article III standing under Federal Rule of Civil Procedure 12(b)(1) and for failure to state a claim under Federal Rule of Civil Procedure 12(b)(6).  The District Court granted the motion, dismissing the non-purchasing plaintiffs’ claims with prejudice, finding that, after two attempts, they could not establish concrete harm “because they did not make purchases on the Websites or engage in any activity prompting their browsers to send highly sensitive personal information such as medical diagnosis information or financial data from banks or credit cards.” 705 F. Supp. 3d 333, 367 (E.D. Pa. 2023).  The claims of the two purchasing plaintiffs were dismissed without prejudice. Id. Rather than amend, those two plaintiffs filed a notice of intent to stand on their allegations, and all eight plaintiffs appealed.  2026 WL 1280969, at *2-3.

The Third Circuit’s Decision

The Third Circuit reversed the dismissal of the purchasing plaintiffs’ claims and modified the dismissal of the non-purchasing plaintiffs’ claims from with prejudice to without prejudice.  Id. at *1. 

The Third Circuit analyzed standing under two analogous common law torts: (1) public disclosure of private facts, and (2) intrusion upon seclusion. It held that none of the plaintiffs had standing under the first theory.  As to the non-purchasing plaintiffs, their browsing data was neither sensitive nor personally identifiable. As to the purchasing plaintiffs, their information was not publicly disclosed.  Id. at *4-5.

The Third Circuit held that only the two purchasing plaintiffs had standing under the intrusion upon seclusion theory. Id. at *3.  Under that common law tort, “[o]ne who intentionally intrudes, physically or otherwise, upon the solitude or seclusion of another or his private affairs or concerns, is subject to liability to the other for invasion of his privacy, if the intrusion would be highly offensive to a reasonable person.” Id. at *5 (citing Restatement (Second) of Torts § 652B (1977)). The Third Circuit concluded that the two purchasing plaintiffs had entered “personal or sensitive” information – specifically their “complete credit card or debit card numbers” – when making purchases on the defendants’ websites. Id. at *7. The Third Circuit reasoned that “[j]ust as media consumption is sensitive and historically private, so is a person’s complete credit card or debit card number.” Id.

Accordingly, the Third Circuit held that these two plaintiffs had standing based on their allegations that defendants embedded session replay code in their websites, allowing third-party adtech providers to “surreptitiously record their billing and payment information absent consent.” Id.

Implications For Companies

This ruling puts the Third Circuit at odds with California District Courts, which have reached the opposite conclusion in two session replay cases. See Thomas v. Papa Johns Int’l, Inc., 2024 WL 2060140, at *5 (S.D. Cal. May 8, 2024) (plaintiff’s “name, address, credit card number(s), and billing information” collected via session replay is “not information over which society is prepared to recognize a reasonable expectation of privacy”); Saleh v. Nike, Inc., 562 F. Supp. 3d 503, 525 (C.D. Cal. 2021) (collection via session replay of a website user’s “payment card information, including card number, expiration date, and CCV code” without consent was insufficient to constitute an invasion of privacy).

In the Third Circuit, session replay is no longer just an analytics tool – it carries significant legal risk for website operators.  Companies facing session replay class actions in the Third Circuit should shift their litigation strategy accordingly and consider moving beyond standing arguments, including demonstrating that plaintiffs cannot meet their burden of proof on the elements of the claims asserted.

Given the volume of session replay and similar litigation pending nationwide and the significant statutory damages at stake, this decision warrants close attention from any company whose website uses session replay code or similar technologies.

The Class Action Weekly Wire – Episode 148: Class Action Litigation In The Energy Industry

Duane Morris Takeaway: This week’s episode features Duane Morris partners Jerry Maatman and Brad Thompson with their discussion of Duane Morris’ Energy, Oil, & Gas Class Action Review, highlighting several trends and developments shaping class action litigation in this industry.

Check out today’s episode and subscribe to our show from your preferred podcast platform: Spotify, Amazon Music, Apple Podcasts, Podcast Index, Tune In, Listen Notes, iHeartRadio, Deezer, and YouTube.

Episode Transcript

Jerry Maatman: Welcome to our listeners! Thank you for being here for our weekly podcast, the Class Action Weekly Wire. I’m Jerry Maatman, a partner at Duane Morris, and I’m pleased that joining me today is my colleague and partner, Brad Thompson, who is a head of the Duane Morris Energy Industry Group. Welcome to our podcast today, Brad.

Brad Thompson: Thanks, Jerry. Happy to be here.

Jerry: Today on the podcast, we’re discussing the publication of a new desk reference in our brand-new e-book, The Duane Morris Energy, Oil, & Gas Class Action Review. Listeners can find the e-book on our blog, the Duane Morris Class Action Defense Blog. Brad, can you tell our listeners a bit about the review?

Brad: Sure thing, Jerry. So, Duane Morris has now released the fifth in a series of industry-focused class action publications, and this particular publication analyzes key-related rulings and developments from 2025 and significant legal decisions and trends that are impacting the class action space in the energy industry for 2026. We hope that companies and employers will benefit from this resource in compliance with these ever-evolving laws and standards.

Jerry: It seems the global energy landscape in 2025 underwent a significant transformation. Oil and gas companies, of course, continue to play a foundational role in industrial development and economic growth, but they’re ever increasingly coming under scrutiny from regulators, investors, consumers, and plaintiffs’ lawyers. How do you see, Brad, the tide turning in the class action space in this industry?

Brad: Yeah, Jerry, we certainly live in interesting times, to put it mildly, and this is an especially important topic right now. The litigation environment around energy companies has changed dramatically over the last several years, both in terms of its scope and complexity, and I think one thing that stands out today is that these lawsuits are no longer limited to what were traditional disputes over, maybe, contracts, like supply agreements or perhaps kind of isolated contamination events, or explosions, and those sorts of lawsuits.

And I think, Jerry, as demand for energy generally continues to rise globally, and those commodity prices continue to climb, I think we should expect that energy companies will find their earnings increasingly subject to class action attention and attacks, and so these cases are becoming broader, more ambitious, and historically, many energy-related lawsuits that focused on, again, those more localized environmental issues, or perhaps royalty disputes or commercial disagreements are expanding.

What we saw in 2025 is that plaintiffs are advancing claims that are tied to more long-term environmental impacts, these alleged failures to disclose climate-related risks. Of course, these just broader theories about corporate responsibility in general, and in many respects, I think these suits are attempting to address issues that more traditionally were viewed more as policy questions, particularly within the energy policy discussion and debate, rather than purely litigation questions as we’re seeing now.

Jerry: In my practice of defending companies and class actions for over four decades, what I’m seeing is a migration of very talented plaintiffs’ lawyers that follow the money, and the cases increase in size, they’re worth more, and what I saw in 2025 was a migration of these talented lawyers into the energy space, such that, we’re seeing kind of new theories, new lawyers in the space, and much bigger cases. What is your sense in terms of your dealing with your clients in the industry space in terms of that phenomenon?

Brad: Yeah, I think we should expect that migration, to use your term, will continue, and judges are increasingly confronting questions that are extraordinarily complex, both from a legal perspective, but also from a scientific perspective. You know, by way of example, how should liability be apportioned for something like environmental effects that may have developed over many decades involved a very complicated chain of title, countless entities and numerous individuals. In those scenarios, what type of climate risk disclosure is legally sufficient? To what extent can private litigation be used as some kind of mechanism to potentially drive systemic or policy change in such a global industry? These are certainly not easy questions, and courts across jurisdictions are certainly approaching them differently.

Jerry: In terms of the analytics that we study, we saw in 2025 as compared to 2024, a growth by about 10-15% in the filings of class actions nationwide. Is it your sense in the oil and gas industry that we’re going to see an increase in the activity in terms of the filing of class action lawsuits that challenge the industry?

Brad: Yeah, going back to your earlier point, Jerry, about kind of following the money, I think, again, you know, we live in interesting global times, and these energy industry issues will continue to be at the forefront of geopolitical focus. And so, first of all, there’s going to be kind of inherently a heightened public awareness surrounding climate and environmental issues – so oil and gas companies will certainly be at the center of that focus. And moreover, investors, regulators are increasingly demanding more transparency regarding sustainability practices, things like climate-related risk, exposure. Plaintiff firms are becoming increasingly sophisticated in identifying large-scale theories that can support class treatment, or at least class theories with increasingly larger damage model theories, so at the same time, scientific modeling and data analytics have become much more advanced – which plaintiffs often use to support their causation theories and damages models. So, you know, whether these new and emerging theories ultimately succeed, certainly another question, but they are shaping litigation strategy in 2026.

Jerry: Talking about the defense side of the V in these cases, given that the stakes are so enormous, what do you see in terms of selection of defense and how defenses are crafted and engineered in the industry?

Brad: Sure. The outcome of a class action can be significant, potentially devastating for a company – not only financially, but reputationally, operationally. And that’s why corporate defendants have to approach these cases from a broader vantage point, not just in a litigation vacuum. A successful defense strategy today has to be thoughtful, multifaceted. It’s probably no longer enough to just narrowly focus on a single procedural issue or an isolated factual dispute, and companies to have coordinated strategies that involve not just litigation defense, but also regulatory compliance, internal governance, public disclosures, there’s insurance considerations, and sometimes crisis management response type considerations as well, so I think early case assessment is critical, because that key class certification decision can dramatically alter the trajectory of these cases.

Jerry: I’ve always thought the M.O. of the plaintiffs’ bar was to find the client, file the lawsuit, certify it, and then monetize it. And that class certification, obviously, is the holy grail when it comes to class actions, and that once a case is certified, it has weight, the plaintiffs’ attorney has leverage. So, in terms of the oil and gas and energy industry, what are your thoughts with respect to the importance of class certification?

Brad: Oh, extremely important. These energy-related cases, as you know, Jerry, often involve highly individualized facts. There’s a variety of regulatory frameworks, both at the state and the federal level, and multifaceted, complicated causation-type questions and issues. And so those issues can create significant hurdles for plaintiffs that are trying to establish those key factors, like commonality and predominance under those class action standards.

Jerry: It sounds like, then, from a holistic defense perspective, that these sorts of complexities certainly require careful planning, engagement of experts to assist very early on in the litigation, and that these lawsuits are basically shaping the future of energy law more broadly.

Brad: Yeah, Jerry, I think that’s exactly what’s happening, and these cases are going to influence, and are already influencing, how energy companies think about things like risk management, environmental disclosures, governance structures, and their long-term business planning. And we’re also seeing litigation become a part of just this broader energy transition conversation globally. And as our world moves towards more energy from all sources, which of course includes alternative or renewable energy sources, traditional energy companies are also navigating these enormous legal and commercial pressures simultaneously.

Jerry: Well, that brings us back conveniently to close the loop in terms of the purpose behind this resource, and why it’s so timely for clients in the energy space.

Brad: Yeah, exactly. I mean, the goal here was to create a practical and comprehensive desk reference guide for corporate counsel, energy industry professionals that are facing these increasingly complex challenges, and we wanted to provide a clear understanding of the various legal theories that are driving the current litigation and class action climate, and the broader implications for the future of energy law.

Jerry: Well, I concur. The field is rapidly evolving, so companies can be helped by a resource like this from both a strategic and practical sense. Listeners, of course, can download a copy for free of the e-book on the Class Action Defense Blog. Well, thank you, Brad, for being here today, and thank you, loyal listeners, for tuning in.

Brad: Thanks so much for having me, Jerry. It was great to be here. Really appreciate it.

© 2009- Duane Morris LLP. Duane Morris is a registered service mark of Duane Morris LLP.

The opinions expressed on this blog are those of the author and are not to be construed as legal advice.

Proudly powered by WordPress