- 1798.100 – Consumers right to receive information on privacy practices and access information
- 1798.105 – Consumers right to deletion
- 1798.110 – Information required to be provided as part of an access request
- 1798.115 – Consumers right to receive information about onward disclosures
- 1798.120 – Consumer right to prohibit the sale of their information
- 1798.125 – Price discrimination based upon the exercise of the opt-out right
5:21-cv-01708
Date Filed
March 11, 2021
Sector
Case Number
5:21-cv-01708
Court
USDC Northern District of California
Plantiff(s)
Whittaker, et al.
Allegation
Putative class action against a cloud service provider. Defendant is alleged to have failed to properly maintain and store customer PII, resulting in unauthorized access to customer PII. Data breach(es) is/are alleged to have occurred during December 2020 and January 2021.
Complaint alleges a violation of the CCPA § 1798.100 et seq.: failure to implement and maintain sufficient security measures to protect the customers' PII. Plaintiffs also bring various claims for negligence, negligence per se, a third party beneficiary claim, violation of CA's Confidentiality of Medical Information Act (CA Civ. Code §§ 6, et seq.), CA's Unfair and Unlawful Business Practices (§§ 17200, et seq.), request for relief under the Declaratory Judgment Act (28 U.S.C. § 2201 et seq.)