- 1798.100 – Consumers right to receive information on privacy practices and access information
- 1798.105 – Consumers right to deletion
- 1798.110 – Information required to be provided as part of an access request
- 1798.115 – Consumers right to receive information about onward disclosures
- 1798.120 – Consumer right to prohibit the sale of their information
- 1798.125 – Price discrimination based upon the exercise of the opt-out right
June 04, 2021
USDC Eastern District of California
Camacho, by and through her minor child T.C., et al.
Putative class action against a healthcare technology company and specialty pharmacy benefits manager. Defendant is alleged to have failed to protect customers' personal health information and personal identifiable information, including first and last name, date of birth, and prescription information. On or about May 5, 2021, Plaintiff was notified of alleged data breach in which T.C.'s personal health information and personal identifiable information had been improperly accessed by unauthorized third parties. The alleged data breach occurred on February 6, 2021. Complaint alleges a violation of the CCPA §§ 1798.100 et seq: failure to exercise reasonable care and implement adequate security measures sufficient to protect the personal identifiable information and personal health information of the plaintiff's minor child and Class members. Plaintiffs also bring various claims for negligence (also incorporating the CCPA), negligence per se (also incorporating the CCPA), breach of confidence, breach of express contract, breach of implied contract, intrusion upon seclusion, CA's Unfair Competition Law (Cal. Bus. & Prof. Code § 17200, et seq.) (also incorporating the CCPA), CA's Customer Records Act (Cal. Civ. Code §§ 1798.80, et seq.) and request for a declaratory judgment and injunctive relief.