CURRENT MONTH (September 2020)
Data Privacy
Dunkin’ and NY AG Resolve Breach Claims
By Sara Beth A.R. Kohut, Young Conaway Stargatt & Taylor, LLP
The New York Attorney General and Dunkin’ Brands, Inc., recently reached a settlement to resolve a New York state court complaint that Dunkin’ violated state consumer protection and data breach laws in connection with incidents in 2015 and 2018 that compromised the data relating to thousands of Dunkin’s rewards program members. New York v. Dunkin’ Brands, Inc., No. 451787/2019 (NY Supr. Ct.). Dunkin’ has agreed to maintain a comprehensive security program that includes reasonable measures to protect against brute force attacks. The company also must promptly investigate suspicious events and notify customers when their accounts are logged into by unauthorized third parties, reset their passwords, and refund amounts to rewards cards that were subject to unauthorized use. Dunkin’ also will pay $650,000 in penalties and costs to the state.
Ninth Circuit Criticizes NSA Surveillance But Upholds Use
By Sara Beth A.R. Kohut, Young Conaway Stargatt & Taylor, LLP
A three-member panel of the U.S. Court of Appeals for the Ninth Circuit unanimously held that collection of telephone metadata on millions of Americans by the National Security Agency violated the Foreign Intelligence Surveillance Act. U.S. v. Moalin, No. 13-50572 (9th Cir. Sept. 2, 2020). Additionally, the data collection, which Edward Snowden made public in 2013, potentially violated the Fourth Amendment of the U.S. Constitution. The opinion came out of an appeal brought by four Somalis who had immigrated to California and were convicted of supporting terrorist groups based on their phone data that was collected pursuant to electronic surveillance. Despite its legal conclusions, the Court of Appeals went on to affirm the defendants’ convictions, declining to suppress the evidence and finding the jury verdict was supported.
