{"id":1088,"date":"2024-01-12T10:58:59","date_gmt":"2024-01-12T14:58:59","guid":{"rendered":"https:\/\/blogs.duanemorris.com\/classactiondefense\/?p=1088"},"modified":"2024-01-12T10:58:59","modified_gmt":"2024-01-12T14:58:59","slug":"dmcar-trend-2-privacy-class-actions-gained-momentum-increasing-in-number-and-sophistication","status":"publish","type":"post","link":"https:\/\/blogs.duanemorris.com\/classactiondefense\/2024\/01\/12\/dmcar-trend-2-privacy-class-actions-gained-momentum-increasing-in-number-and-sophistication\/","title":{"rendered":"DMCAR Trend #2 \u2013 Privacy Class Actions Gained Momentum, Increasing In Number And Sophistication"},"content":{"rendered":"<p><a href=\"http:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2024\/01\/T2-cover.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1075\" src=\"http:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2024\/01\/T2-cover.png\" alt=\"\" width=\"1600\" height=\"900\" srcset=\"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2024\/01\/T2-cover.png 1600w, https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2024\/01\/T2-cover-300x169.png 300w, https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2024\/01\/T2-cover-1024x576.png 1024w, https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2024\/01\/T2-cover-768x432.png 768w, https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2024\/01\/T2-cover-1536x864.png 1536w\" sizes=\"auto, (max-width: 767px) 89vw, (max-width: 1000px) 54vw, (max-width: 1071px) 543px, 580px\" \/><\/a><br \/>\n<strong>By Gerald L. Maatman, Jr. and Jennifer A. Riley<\/strong><\/p>\n<p><strong><em>Duane Morris Takeaway:<\/em><\/strong><em> Continuing with the top trends in class action litigation over the past year as we recognized in the Duane Morris Class Action Review \u2013 2024, today we are discussing Trend #2. Trend # 2 focuses on class action litigation in the privacy space, which has generated a multitude of filings as it continues its reign as the hottest area of growth in terms of activity by the plaintiffs\u2019 class action bar. <\/em><\/p>\n<p>In today\u2019s video blog, Duane Morris partner Jennifer Riley discusses the rise in privacy class actions under the Illinois Biometric Information Privacy Act (BIPA) in 2023, the impact of two seminal Illinois Supreme Court rulings on the application of the BIPA, and other privacy areas heating up in the class action arena.<\/p>\n<p><iframe loading=\"lazy\" title=\"DMCAR Trend #2 \u2013 Privacy Class Actions Gained Momentum, Increasing In Number And Sophistication\" width=\"525\" height=\"295\" src=\"https:\/\/www.youtube.com\/embed\/YcKMiVto1e8?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe><\/p>\n<p><strong>Trend #2 \u2013 Privacy Class Actions Gained Momentum, Increasing In Number And Sophistication<\/strong><\/p>\n<p>1.\u00a0\u00a0\u00a0 Illinois Biometric Information Privacy Act Claims<\/p>\n<p>In 2023, the Illinois Biometric Privacy Act (BIPA) continued to fuel a swell of class action litigation. Its technical requirements, coupled with stiff statutory penalties and fee-shifting, provided a recipe for increased filings and hefty settlement demands from the plaintiffs\u2019 class action bar.<\/p>\n<p>Enacted in 2008, the BIPA regulates the collection, use, and handling of biometric identifiers and information by private entities. Subject to limited exceptions, the BIPA generally prohibits the collection or use of an individual\u2019s biometric identifiers and biometric information without notice, written consent, and a publicly-available retention and destruction schedule.<\/p>\n<p>In terms of lawsuit filings, for nearly a decade following enactment of the BIPA, activity under the statute was largely dormant.<\/p>\n<p>Plaintiffs filed an average of approximately two total lawsuits filed per year from 2008 through 2016. Those numbers grew exponentially in 2017 and 2018 and then spiked as the plaintiffs\u2019 class action bar filed a surge of class action lawsuits.<\/p>\n<p>In 2022, companies saw more than five times as many class action lawsuit filings for alleged violations of the BIPA than they saw in 2018, and more than the number of class action lawsuit filings that they saw from 2008 through 2018 combined.<\/p>\n<p>Filings continued to accelerate in 2023, prompted by two rulings from the Illinois Supreme Court that increased the opportunity for recovery of damages under the BIPA.<\/p>\n<p>In 2023, the Illinois Supreme Court issued two seminal decisions that increased the opportunity for recovery of damages under the BIPA. On February 2, 2023, the Illinois Supreme Court issued its ruling in <em>Tims v. Black Horse Carriers<\/em>, 2023 IL 127801 (Feb. 2, 2023), and held that a five-year statute of limitations applies to claims under the BIPA. Perhaps even more significantly, on February 17, 2023, the Illinois Supreme Court issued its ruling in\u00a0<em>Cothron, et al. v. White Castle System, Inc.<\/em>, 2023 IL 1280004 (Feb. 17, 2023), and held that a claim accrues under the BIPA each time a company collects or discloses biometric information.<\/p>\n<p>These rulings have far-reaching implications. Together, they have the potential to increase monetary damages in BIPA class actions in an exponential manner, especially in the employment context, where employees might scan in and out of work multiple times per day across more than 200 workdays days per year.<\/p>\n<p>In the wake of these rulings, class action filings more than doubled. From January 1, 2023, to the ruling in <em>Cothron<\/em>, plaintiffs filed approximately 61 lawsuits in Illinois state and federal courts alleging violations of the BIPA.<\/p>\n<p>By contrast, in the same period of time following the ruling, plaintiffs filed 150 lawsuits in Illinois state and federal courts, representing an increase of 71%.<\/p>\n<p>Below is a chart outlining this litigation spike:<\/p>\n<p><a href=\"http:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2024\/01\/BIPA-2023.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1089\" src=\"http:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2024\/01\/BIPA-2023.png\" alt=\"\" width=\"624\" height=\"432\" srcset=\"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2024\/01\/BIPA-2023.png 624w, https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2024\/01\/BIPA-2023-300x208.png 300w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><\/a><\/p>\n<p>Throughout the remainder of 2023, lawsuit filings continued to grow in number and sophistication as they targeted more advanced and innovative technologies. Given the five-year statute of limitations, and the potential for enhanced monetary penalties, we anticipate that filings and settlement numbers in BIPA litigation will continue to expand.<\/p>\n<p>2.\u00a0\u00a0\u00a0 Other Sources Of Privacy Class Actions<\/p>\n<p>Various provisions of state privacy, anti-surveillance, and wiretap statutes have had a similar impact, fueling creativity by the plaintiffs\u2019 class action bar as it looks to apply many pre-existing laws to challenge the use of innovative and novel technologies that companies use to collect information about consumers and their online activities.<\/p>\n<p>Over the past year, plaintiffs have filed a barrage of class action lawsuits under the federal Video Privacy Protection Act (VPPA). Congress originally passed the VPPA in 1988 to prevent the wrongful disclosure of video tape sale and rental records. Plaintiffs have filed lawsuits under the VPPA against companies that offer video content on their websites.<\/p>\n<p>The VPPA prohibits a \u201cvideo tape service provider\u201d from knowingly disclosing personally identifiable information concerning any consumer of such provider.\u201d 18 U.S.C. \u00a7 2710(b)(1). The statute defines a \u201cvideo tape service provider\u201d to include any person \u201cengaged in business, or affecting interstate or foreign commerce, of rental, sale, or delivery of prerecorded video cassette tapes or similar audio-visual materials.\u201d 18 U.S.C. \u00a7 2710(a)(4).<\/p>\n<p>Some courts have construed \u201csimilar audio-visual materials\u201d broadly, generally concluding that its definition encompasses streaming video delivered electronically. Plaintiffs allege that companies that maintain videos on their websites and deploy pixel tracking tools violate the VPPA because their websites track the videos that visitors watch and share the viewing data with third parties.<\/p>\n<p>The VPPA provides for damages up to $2,500 per violation in addition to costs and attorneys\u2019 fees for successful litigants, making it an attractive source of filings for the plaintiffs\u2019 class action bar. Indeed, plaintiffs have initiated more than 137 class actions under the VPPA over the past year.<\/p>\n<p><a href=\"http:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2024\/01\/VPPA-By-Year.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1090\" src=\"http:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2024\/01\/VPPA-By-Year.png\" alt=\"\" width=\"624\" height=\"432\" srcset=\"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2024\/01\/VPPA-By-Year.png 624w, https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2024\/01\/VPPA-By-Year-300x208.png 300w\" sizes=\"auto, (max-width: 624px) 100vw, 624px\" \/><\/a><\/p>\n<p>Similarly, state wiretapping and anti-surveillance laws are continuing to generate filings by enterprising plaintiffs\u2019 lawyers. Plaintiffs have initiated class actions against companies that use third-party software to track user activity on their webpages, or to create and record transcripts of conversations conducted via chat features, based on the theory that such practices potentially violate electronic interception provisions of various state laws.<\/p>\n<p>The plaintiffs\u2019 bar grounded these claims in the electronic interception provisions of wiretap statutes like the California Invasion of Privacy Act, the Pennsylvania Wiretapping and Electronic Surveillance Act, and the Florida Security of Communications Act, among other laws, which generally prohibit the unauthorized interception of communications transmitted electronically.<\/p>\n<p>The plaintiffs\u2019 bar has targeted technologies that track a user\u2019s interactions with the website (<em>e.g.<\/em>, clicking, scrolling, swiping, hovering and typing) and create a recording of those interactions and inputs through session replay software.<\/p>\n<p>It also has attacked coding tools that create and store transcripts of conversations with users in a website\u2019s chat feature. Plaintiffs generally allege that recording users\u2019 interactions with a website and sending that recording to a third party for analysis without their consent is an illegal invasion of their privacy. Over the past year, these lawsuits met mixed results.<\/p>\n<p>During 2023, federal district courts in California ruled on the initial round of \u201cchatbot\u201d cases filed under the California Invasion of Privacy Act (CIPA) and several responded with skepticism. Courts granted motions to dismiss on various grounds finding, among other things, that the statutory provisions at issue do not apply to communications over the internet, see,<em> e.g.,<\/em> <em>Licea, et al. v. American Eagle Outfitters, Inc.<\/em>, 2023 WL 2469630, at *5-6 (C.D. Cal. Mar. 7, 2023); a party cannot \u201ceavesdrop\u201d on its own conversation, <em>see id.<\/em> at *7-8; <em>Licea, et al. v. Cinmar, LLC<\/em>, 2023 WL 2415592, at *7-8 (C.D. Cal. Mar. 7, 2023); or that allegations that a defendant used the code embedded in a chat program to \u201charvest valuable data\u201d were too vague and conclusory to state a claim. See,<em> e.g., Cody, et al. v. Boscov\u2019s, Inc.<\/em>, 2023 WL 2338302, at *2 (C.D. Cal. Mar. 2, 2023).<\/p>\n<p>Other courts denied motions to dismiss similar claims. See,<em> e.g., Valenzuela, et al. v. Nationwide Mutual Insurance Co.<\/em>, 2023 WL 5266033, at *4-10 (C.D. Cal. Aug. 14, 2023); <em>D\u2019Angelo, et al. v. Penny OpCo, LLC, <\/em>2023 WL 7006793, at *2-4, *8-9 (S.D. Cal. Oct. 24, 2023).<\/p>\n<p>These rulings contribute to a patchwork quilt of decisions in this space. Given the stakes, we do not anticipate that this initial round of decisions will spell the death knell for suits attacking session replay or chatbot suits, many of which remain in the pipeline before various courts. Instead, we anticipate that plaintiffs will respond with additional creativity as they attempt to plead around these potential issues and identify new technologies at which to target their claims.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>By Gerald L. Maatman, Jr. and Jennifer A. Riley Duane Morris Takeaway: Continuing with the top trends in class action litigation over the past year as we recognized in the Duane Morris Class Action Review \u2013 2024, today we are discussing Trend #2. Trend # 2 focuses on class action litigation in the privacy space, &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/blogs.duanemorris.com\/classactiondefense\/2024\/01\/12\/dmcar-trend-2-privacy-class-actions-gained-momentum-increasing-in-number-and-sophistication\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;DMCAR Trend #2 \u2013 Privacy Class Actions Gained Momentum, Increasing In Number And Sophistication&#8221;<\/span><\/a><\/p>\n","protected":false},"author":575,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[106],"tags":[],"ppma_author":[7,9],"class_list":["post-1088","post","type-post","status-publish","format-standard","hentry","category-duane-morris-class-action-review"],"authors":[{"term_id":7,"user_id":575,"is_guest":0,"slug":"gmaatman","display_name":"Gerald L. Maatman, Jr.","avatar_url":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2022\/09\/maatmangerald-100x100.jpg","0":null,"1":"","2":"","3":"","4":"","5":"","6":"","7":"","8":""},{"term_id":9,"user_id":576,"is_guest":0,"slug":"jariley","display_name":"Jennifer A. Riley","avatar_url":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-content\/uploads\/sites\/56\/2023\/08\/rileyjennifer-100x100.jpg","0":null,"1":"","2":"","3":"","4":"","5":"","6":"","7":"","8":""}],"_links":{"self":[{"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/posts\/1088","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/users\/575"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/comments?post=1088"}],"version-history":[{"count":0,"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/posts\/1088\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/media?parent=1088"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/categories?post=1088"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/tags?post=1088"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/classactiondefense\/wp-json\/wp\/v2\/ppma_author?post=1088"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}