CCPA Class Action Lawsuits Are Coming. Are You Ready?
March 23, 2020 —
Daniel Schneider & Jeffrey Dennis – Newmeyer DillionThe only certainties in life used to be death and taxes. In 2020, it would be safe to add California Consumer Privacy Act (CCPA) class actions to that "distinguished" list. On February 3, Barnes v. Hanna Andersson, LLC, N.D. Cal., Case No. 20-cv-00812, was filed in the Northern District of California, setting in motion the certainty that CCPA class actions are on their way, if not already here.* Filed on behalf of all California residents, the Barnes complaint alleges that between September and November 2019, clothing retailer Hanna Andersson and Salesforce, its online payment services provider, failed to properly safeguard the personally identifiably information (PII) of its customers after hackers stole customers' private information and posted it to the dark web for sale.
What You Need to Know
- Under the CCPA, a data breach is any unauthorized access, theft or disclosure of a consumer's non-encrypted and non-redacted personal information that results from a company's failure to implement and maintain "reasonable" security procedures and practices. Here, the complaint alleges that the defendants failed to maintain reasonable security procedures and practices in order to protect the consumers' PII.
- Although the CCPA is largely viewed as new law related to California consumers' privacy rights (and placement of subsequent obligations to companies doing business in California), the CCPA includes potentially draconian damages for a data breach permitted by unreasonable cybersecurity. Under the new law, an individual need not show any actual harm caused by a data breach, yet he/she may seek statutory fines of up to $750 per incident per individual in the event of a breach. Plaintiffs estimate that at least 10,000 California residents could have been affected by this breach, thereby exposing defendants to up to $7.5 million dollars in damages if proven true.
- There exists a duty to monitor and ensure that third party organizations are properly safeguarding a company's data. During the course of the investigation into the breach, it was discovered that the Salesforce ecommerce platform was infected with malware which allowed the hackers to steal consumers' PII from Hanna Andersson's website.
- The CCPA went into effect on January 1, 2020, yet enforcement by the California Attorney General is not allowed until July 2020. However, no such delay is required for private litigation under the data breach portion of the CCPA. Interestingly, although the complaint alleges that the data breach occurred in 2019, the court could choose to apply the CCPA but that is still yet to be determined.
While Barnes may be the first class action lawsuit to mention violation of the CCPA, it certainly will not be the last. In fact, numerous class actions lawsuits have been filed in the new year which either mention the CCPA or utilize CCPA-like language to style particular claims. As such, it is evident that the Plaintiffs' bar sees the CCPA as a potential for extensive class action litigation. Expect to see an ongoing deluge of class action litigation in California under the data breach portions of the CCPA. In addition, although the Barnes' plaintiffs may not be able to invoke the CCPA due to the data breach occurring in 2019 (before the CCPA took affect), Barnes serves as a stark reminder that implementing and maintaining reasonable data security is vital to defend a business against CCPA claims. Newmeyer Dillion can assist companies analyze their cyber risk profile, and provide access to experienced forensic teams which can ensure reasonable security exists in your organization.
*While Barnes does not yet expressly state a cause of action under the CCPA, relying upon violations of the California Unfair Competition Law in its place, we anticipate that an amendment will soon be filed to include a CCPA claim.
Daniel Schneider is a Partner in Newmeyer Dillion's Privacy & Data Security group. Focused on advocating on behalf of clients when cyber threats inevitably happen, Dan also advises on best practices to help protect the company and mitigate future concerns. Dan can be reached at daniel.schneider@ndlf.com.
Jeff Dennis (CIPP/US) is the Head of the firm's Privacy & Data Security practice. Jeff works with the firm's clients on cyber-related issues, including contractual and insurance opportunities to lessen their risk. For more information on how Jeff can help, contact him at jeff.dennis@ndlf.com.
About Newmeyer Dillion
For 35 years, Newmeyer Dillion has delivered creative and outstanding legal solutions and trial results that achieve client objectives in diverse industries. With over 70 attorneys working as a cohesive team to represent clients in all aspects of business, employment, real estate, environmental/land use, privacy & data security and insurance law, Newmeyer Dillion delivers holistic and integrated legal services tailored to propel each client's success and bottom line. Headquartered in Newport Beach, California, with offices in Walnut Creek, California and Las Vegas, Nevada, Newmeyer Dillion attorneys are recognized by The Best Lawyers in America©, and Super Lawyers as top tier and some of the best lawyers in California and Nevada, and have been given Martindale-Hubbell Peer Review's AV Preeminent® highest rating. For additional information, call 949.854.7000 or visit www.newmeyerdillion.com.
Read the court decisionRead the full story...Reprinted courtesy of
COVID-19 Impacts on Subcontractor Default Insurance and Ripple Effects
April 20, 2020 —
Smith CurrieSubcontractor default insurance (“SDI”) may be described as an alternative to bonding subcontractors. SDI is first-party insurance that compensates the general contractor insured in the event a covered subcontractor fails to fulfill its contractual obligations. Under SDI policies, general contractor insureds are obligated to develop and implement rigorous subcontractor prequalification procedures.
Basic questions and answers about how SDI might come into play and impact the construction industry in response to COVID-19 follow:
Who may make a claim on an SDI policy?
The general contractor may make a claim. An Owner may make a claim if the general contractor becomes insolvent in many cases. Subcontractors may not make claims on SDI policies.
Read the court decisionRead the full story...Reprinted courtesy of
Smith CurrieThe Smith Currie firm may be contacted at
info@smithcurrie.com
Homeowner Sues Brick Manufacturer for Spalling Bricks
October 22, 2013 —
CDJ STAFFA Columbia, South Carolina homeowner has sued Kinney Brick Co., alleging that the bricks used in his home were defective and are now crumbling. The lawsuit alleges that the manufacturer and the distributor were both aware that the bricks would retain moisture and crumble.
Read the court decisionRead the full story...Reprinted courtesy of
Commencing of the Statute of Repose for Construction Defects
November 08, 2021 —
David Adelstein - Florida Construction Legal UpdatesFlorida has a ten-year statute of repose which applies predominantly to construction defect claims. This can be found in Florida Statute s. 95.11(3)(c). After ten years, any rights relative to a construction defect claim are time-barred. However, the statute of repose date has been watered down and can be made to be more of a factual question due to the lack of objectivity as to the date that starts the ten-year repose clock. The watering down of the statute of repose date benefits parties asserting construction defect claims provided they strategically appreciate the question of fact that can be created when up against the statute of repose. Stated differently, when up against the clock to assert a construction defect claim, strategically develop those facts, evidence, and arguments to maximize creating a question of fact as to when the statute of repose clock commenced. Conversely, as a defendant sued for construction defects, you want to maximize the facts, evidence, and arguments to fully establish the date the statute of repose clock had to commence for purposes of a statute of repose defense.
The recent opinion in Spring Isle Community Association, Inc. v. Herme Enterprises, Inc., 46 Fla. L. Weekly D2306b (Fla. 5th DCA 2021) demonstrates the factual question associated with the clock that starts the statute of repose date. This factual question is created by Florida Statute s. 95.11(3)(c) that provides:
[T]he action [founded on the design, planning, or construction of an improvement to real property] must be commenced within 10 years after the date of actual possession by the owner, the date of the issuance of a certificate of occupancy, the date of abandonment of construction if not completed, or the date of completion or termination of the contract between the professional engineer, registered architect, or licensed contractor and his or her employer, whichever date is latest.
Spring Isle Community Association, supra. (Note, see also current s. 95.11(3)(c) version in effect per hyperlink above.)
Read the court decisionRead the full story...Reprinted courtesy of
David Adelstein, Kirwin Norris, P.A.Mr. Adelstein may be contacted at
dma@kirwinnorris.com
Manufacturer of Asbestos-Free Product May Still Be Liable for Asbestos Related Injuries
July 30, 2015 —
Kristian B. Moriarty, R. Bryan Martin and Lee Marshall – Haight Brown & Bonesteel LLPIn Sherman v. Hennessy Industries, Inc. (No. B252566, filed June 18, 2015), the Court of Appeal, Second District, reversed a trial court’s grant of summary judgment in favor of a manufacturer of a brake grinding machine. The Court cited an exception to the general rule that manufacturers may not be held liable, under a strict products liability theory, where the plaintiff’s injuries arise from other products that are used in conjunction with the defendant’s product.
Plaintiff and appellant, Michael Sherman, was an automobile mechanic from 1962 to 1977. Mr. Sherman alleged that during this period he used an arcing machine, which abraded brake linings by means of sand paper moving at high speeds. Sherman alleged the machine released asbestos dust, which he then brought home, exposing his wife Debra Sherman to asbestos. Ms. Sherman developed mesothelioma and passed away from exposure to the asbestos dust carried home by her husband.
Reprinted courtesy of
Kristian B. Moriarty,
R. Bryan Martin and
Lee Marshall of Haight Brown & Bonesteel LLP
Mr. Moriarty may be contacted at kmoriarty@hbblaw.com
Mr. Martin may be contacted at bmartin@hbblaw.com
Mr. Marshall may be contacted at lmarshall@hbblaw.com
Read the court decisionRead the full story...Reprinted courtesy of
Your Bad Faith Jury Instruction Against an Insurer is Important
March 09, 2020 —
David Adelstein - Florida Construction Legal UpdatesA statutory bad faith claim against an insurer is derived from Florida Statute s.
624.155. A bad faith claim against a first party insurer, such as a property insurer, must be statutory. Check out the hyperlink of the statute, but a party must first file a Civil Remedy Notice identifying the statutory violations to preserve the statutory bad faith claim giving the insurer an opportunity to cure.
In a noteworthy case, Cooper v. Federated National Insurance Company, 44 Fla. L. Weekly D2961a (Fla. 5th DCA 2019), the Fifth District Court of Appeal dealt with the jury instruction for an insured’s statutory bad faith claim against their property insurer. The insured filed a bad faith claim predicated on the property insurer violating the provisions of Florida Statute s.
626.9541(1)(i)3, which involves unfair claim settlement practices. The insured had a jury trial and submitted a proposed jury instruction regarding bad faith that tracked the very essence of their bad faith claim and was modeled after s. 626.9541(1)(i)(3). The trial court, however, denied this jury instruction, instead adopting a standard jury instruction for bad faith. The jury returned a verdict in favor of the property insurer and the insured appealed arguing it was reversible error for the trial court NOT to present to the jury their bad faith jury instruction. The Fifth District agreed and ordered a new trial finding that the trial court’s failure to present the jury instruction amounted to a miscarriage of justice.
Read the court decisionRead the full story...Reprinted courtesy of
David Adelstein, Kirwin Norris, P.A.Mr. Adelstein may be contacted at
dma@kirwinnorris.com
Commercial Construction Lenders Rejoice: The Pennsylvania Legislature Provides a Statutory fix for the “Kessler” Decision
July 16, 2014 —
Thomas C. Rogers – White and Williams LLPIn May 2012, the Pennsylvania Superior Court rendered its now infamous “Kessler” decision. The Kessler decision resulted in fundamental changes in the operation of the Pennsylvania Mechanics Lien Act as it applied to construction loans where the visible commencement of work on the project commenced before the recordation of the construction loan’s open-end mortgage.
Essentially, the Kessler decision held that if the visible commence of work on the project began prior to the recording of the open-end mortgage and any loan advances were made other than for what are commonly considered “hard construction” costs, then any unpaid contractors and subcontractors who later filed mechanics’ liens would have their liens take priority over the lien of all of the construction loan advances.
Subsequent to the Kessler decision, both the lending and title insurance communities in Pennsylvania have struggled mightily to structure deals around the problems created by Kessler and to provide lenders with title insurance coverage for construction loans when work commenced before the recordation of the open-end mortgage.
Read the court decisionRead the full story...Reprinted courtesy of
Thomas C. Rogers, White and Williams LLPMr. Rogers may be contacted at
rogerst@whiteandwilliams.com
Common Law Indemnification - A Primer
April 12, 2021 —
Brian F. Mark - Hurwitz & Fine, P.C.“Common law indemnification is generally available ‘in favor of one who is held responsible solely by operation of law because of his relationship to the wrongdoer.’” McCarthy v. Turner Constr., Inc., 17 N.Y.3d 369, 375 (2011), quoting Mas v. Two Bridges Assocs., 75 N.Y.2d 680, 690 (1990).
What is Common Law Indemnification and Who Can Assert it?
Indemnification, in general terms, is the right of one party to shift a loss to another and may be based upon an express contract or an implied obligation. Bellevue S. Assoc. v. HRH Constr. Corp., 78 N.Y.2d 282 (1991). Based on a separate duty owed the indemnitee by the indemnitor, common law indemnification, or implied indemnification, permits one who was compelled to pay for the wrong of another to recover from the wrongdoer the damages paid to the injured party. D’Ambrosio v. City of New York, 55 N.Y.2d 454, 460 (1982); Curreri v. Heritage Prop. Inv. Trust, Inc., 48 A.D.3d 505, 507 (2d Dept. 2008).
The premise of common law indemnification is vicarious liability, defined as “liability that a supervisory party (such as an employer) bears for the actionable conduct of a subordinate or associate (such as an employee) based on the relationship between the two parties” Black’s Law Dictionary (11th ed. 2019). Common law indemnification “reflects an inherent fairness as to which party should be held liable for indemnity.” McCarthy, 17 N.Y.3d at 375. It is a restitution concept which permits shifting the loss because, to fail to do so, would result in the unjust enrichment of one party at the expense of the other. Mas, 75 N.Y.2d at 680, 690; Kingsbrook Jewish Medical Center v. Islam, 172 A.D.3d 1342, 1343 (2d Dept. 2019).
Read the court decisionRead the full story...Reprinted courtesy of
Brian F. Mark, Hurwitz & Fine, P.C.Mr. Mark may be contacted at
bfm@hurwitzfine.com
