Articles Posted in Consumer Law

In recent years, online transactions, such as activities on social media networks, have exposed personal privacy to greater risks. With so much personal information available over the Internet, it is increasingly important to be aware of the applicable laws, so that your privacy is better enforced and protected. The risks can include identity theft, and data, medical, financial, or workplace breaches.

In the United States, there are overarching federal privacy laws that apply to the states. Also, each state has its own privacy laws. In general, the states can provide greater privacy protection than federal laws, but they cannot provide less protection. Privacy right violations can lead to both civil and criminal penalties, depending on the extent of the violation and the applicable laws.

What are the applicable privacy laws in California?

Tort litigation, unlike criminal litigation, involves civil wrongs committed against a party or entity–such as a corporation. A plaintiff must demonstrate in court that the defendant is liable for plaintiff’s damages to be successful in a tort case. Mass tort litigation involves very much the same concepts except the number of plaintiffs and defendants is different. Specifically, mass tort litigation involves large numbers of plaintiffs who have suffered an injury at the hands of the same defendant, or group of defendants.

What Is Mass Tort Litigation?

Mass tort litigation involves a single wrongful act that results in harm to several victims. These types of cases involve many plaintiffs, who are all suing defendants for the wrongful act. Generally, mass tort litigation involves cases where a large group of plaintiffs are injured by defective drugs, or defective products. Cases dealing with defective drugs, or pharmaceutical claims, deal with medical products that have caused injury to consumers. These cases include both over-the-counter and doctor prescribed drugs. Alternatively, defective product cases involve consumer product claims where plaintiffs have sustained injuries, or even died, from defective products. Courts must grant permission for parties to proceed with mass tort litigation. Courts will look to see how many plaintiffs are involved, how far these consumers are located from one another, whether there are similar injuries among the plaintiffs, and whether the injuries come from a common cause or product. This last factor is necessary for a mass tort case. Otherwise, courts balance the other three factors to determine whether a case is properly deemed mass tort litigation.

Class action lawsuits are a staple in the American court system. The notion that there is strength in numbers is shown in the extraordinarily large settlements that come from these cases. In recent years, there has been a significant increase in class action suits involving internet-based companies (e.g., Facebook, Google, Tumblr, Instagram, or MySpace).

As consumers spend more time on the Internet, sharing their work, preferences, and private information, there is a growing potential for internet law violations. Since numerous consumers engage in same or similar activities, e.g., use email to send/receive information, a single violation implicates the rights of a large group of consumers. In turn, this sparks a class action suit.

How Are Class Action Lawsuits Different From Other Suits?

On December 19, 2013, Target issued a statement confirming a major security breach. According to the statement, approximately 40 million customers were at risk for identity theft because of the breach. Hackers had gained access to customer information, including their names, credit card numbers, debit card numbers, card expiration dates, and security codes. This incident brought light to the ongoing threat of identify theft for customers who use credit or debit cards to make purchases, either in stores or online. With this growing threat, consumers need to take care to protect themselves against potential attacks.

What Is the Extent of the Target Security Breach?

According to Target’s investigations, the hackers began accessing customer information from before Thanksgiving until mid-December. With the information they stole, which is stored on a card’s magnetic strip, the hackers could have made purchases all around the world. Indeed, hackers can also use this information to create new credit or debit cards. Although, there is no evidence the hackers also stole pin numbers, but if they had, they could have withdrawn money from customers’ bank accounts. The United States Secret Service is looking into this massive security breach. In the past, federal and state authorities have held companies liable, even issuing fines, if investigations reveal that a company did not take adequate steps to protect customer information. Analysts predict that here Target may have to spend over $100 million in legal costs to fix the security breach. Costs will increase even more if it’s forced to reimburse credit card companies for fraudulent purchases. However, in the meantime, Target’s first priority has been to act quickly to secure and protect customer information. Although, they have not reached any conclusions, initial investigations suggest the breach could have come entirely from outside hackers, or it could have been achieved with help from its employees. Either way, this level of a security breach suggests that it reached deep within the corporation.

As an unfortunate consequence of the Internet’s expansion and usage of social media networks, online users are vulnerable to attacks in the form of cyberstalking, cyberharassment, and cyberbullying. In an effort to restore online safety, the California Legislature has imposed certain laws to provide protection to the victims.

What Remedies are Available in Cyberstalking Cases?

Cyberstalking is a form of online harassment, with the unique requirement of repeated and ongoing behavior. The remedies available to victims of cyberstalking first depend on whether the defendant’s conduct was civil or criminal in nature. Under California Civil Code section 1708.7, civil “cyberstalking” consists of a pattern of behavior that intends to “follow, alarm, or harass” the plaintiff, causing a reasonable fear for safety. A plaintiff may also be able to seek remedies if the reasonable fear for safety was for his or her immediate family members (e.g. parent, child, or spouse). To constitute cyberstalking, the pattern of behavior must take place over electronic equipment, such as telephones, computers, fax machines, or pagers. In these cases, the victims may collect financial damages, including punitive damages (e.g. a financial “punishment” to deter similar behavior in the future). Additionally, a victim of cyberstalking may ask the court to issue an injunction or temporary restraining order, which includes a court order preventing the defendant from contacting the victim in the future.

According to changes to the Telephone Consumer Protection Act (“TCPA”), which went into effect on October 16, 2013, telemarketers must now obtain prior express consent before contacting a consumer’s wireless or landline telephone numbers using automated telephone dialing systems. Do you list your wireless telephone number for your contact information with credit card companies, banks, or utility providers? Do you receive unsolicited phone calls on your wireless telephone number regarding promotions or billing information? Are you concerned with protecting your identity and privacy? Are you a company that uses telemarketing calls to solicit customers and increase your business? If you answered “yes” to any of these questions, the latest changes to the TCPA may affect you. Please contact us today to speak with an attorney who can explain how these new amendments will alter your telephone communication privacy settings and responsibilities.

What are the New Requirements Under the Amendments to the TCPA?

Pursuant to the provisions of the new amendments, to obtain prior express consent, telemarketers must have consent in writing. Under the federal Electronic Signatures In Global and National Commerce Act (“ESIGN”), digital signatures that comply with the standards of the act will count as sufficient consent in writing. Next, the consent must specifically refer to the telephone number that the consumer authorizes as a point of contact for future telemarketing calls. Additionally, the written consent must clearly state that the consumer authorizes telemarketers to use prerecorded messages and automated telephone dialing systems in future communications. Finally, if a consumer is required to provide this consent in order to purchase any goods or services, then the consent is not valid. All four factors must be satisfied in order to have valid consent under the TCPA.

Cyber criminals are very skilled in singling out vulnerable targets for online schemes. For instance, senior citizens are ideal candidates for cyber fraud or Internet fraud because they are more likely to have large amounts of money saved up, and they tend to have better credit, making schemes more profitable for criminals. If you are a senior citizen, or you know of an elder consumer who was a victim of Internet fraud, please contact us today to discuss available legal remedies and protections.

Why Are Senior Citizens Ideal Targets for Internet Fraud?

Older American citizens are often not familiar with the methods available to report fraud. Also, they are hesitant to report fraud because they are worried their relatives will decide they are no longer able to handle their own finances. Unfortunately, failure to report cyber crime immediately leads to a loss of evidence, and makes it very easy for cyber criminals to disappear without a trace. Furthermore, the more time that passes between the crime and prosecution, the more details and evidence are lost to memory. Cyber criminals depend on elder citizens’ weakened memory because the loss of evidence also prevents effective prosecution, and cyber criminals are able to walk away without punishment.

The answer to many questions is an online search away. However, online searches are not free of all consequences. Indeed, search engines can track and store a user’s search history and even sell this personal information to third parties for profit. What someone types into a search bar then becomes part of a permanent link tied to that Internet Protocol (“IP”) address. This certainly raises several concerns regarding online and individual privacy. In a highly digitized era, this affects anyone with Internet access, a computer, and even a cellphone.

What are the Main Concerns of Search Engine Privacy?

Search engines track personal information using users’ search history, including a user’s IP address, search terms, name, and location. Websites, such as Google and Yahoo, can then use this information for their marketing, or they can sell users’ search history to marketing firms. Online search history generates an impression of the user, which the public can then use to its advantage–e.g., for criminal investigations, employment opportunities, and to fuel personal disputes. Public opinion in this area strongly disfavors this level of surveillance. As a result, websites have begun to compete in terms of which search engine provides the greater privacy protection. Efforts to improve search engine privacy consider, among other standards, how long a search engine stores user information, how a search engine deletes such information, whether the search engine engages in behavioral targeting (i.e. whether a site uses search history to provide targeted advertisements), and whether the search engine uses profile information to manipulate advertisements. Based on a recent survey by CNet, only Ask.com does not record search terms. Outside the circle of the large search engines, sites such as ixquick.com allege that they do not record IP addresses when users conduct searches through their website. According to the survey, Google also does not engage in behavioral targeting.

The Federal Trade Commission proposed a revision to the federal Children’s Online Privacy Protection Act (“COPPA”), which became effective as of July 1, 2013. As the FTC and state attorneys become increasingly stricter with online child protection standards, this rule will mean that online activity will be monitored more closely for inappropriate material. Indeed, this new rule has expanded what inappropriate material entails. Do you have a child with access to the internet? Are you a business entity that collects user information over the internet for marketing purposes? In both cases, this new rule may apply to your activities.

What Does the New Rule Add to COPPA?

First, the new rule substantially expands the meaning of “personal information.” Prior to this revision, personal information applied to an online user’s name, physical address, email address, telephone number, and social security number. However, the revision expands this category to include significantly more information. Online contact information will now include identifiers for instant messaging, Voice over Internet Protocol (VoIP), and video chat users. Additionally, online screen names will now be considered “contact information” because such information may be used to locate minors on the web. To this same effect, any online information that can help locate the physical address of a minor will constitute “personal information.” This information will include photographs, videos, and audio files that contain a child’s picture or voice. It will also include information such as an Internet Protocol address (“IP address”) or mobile device identification names, since they can help locate users as well. Indeed, any information that configures with geographic locations, such as street names and cities, will constitute “personal information.” The rule also limits the extent to which companies that gather “personal information” from minors can share this information with third parties.

A buyer who has ever committed to a wrong purchase knows the nagging feeling that accompanies the realization that committing to the purchase of a product was entirely unnecessary. Often informally referred to as “Buyer’s Remorse,” this feeling of extreme regret usually accompanies very expensive purchases, such as automobiles or real estate. Recognizing that consumers do not always make the soundest purchases, the California legislature has provided state laws that give consumers the right to cancel certain contracts after a short period of time (i.e., cooling-off period) if those contracts fall under the Buyer’s Remorse exception.

What Types of Contracts Fall Under the Buyer’s Remorse Exception?

Whether or not a contract falls under the Buyer’s Remorse exception is entirely up to the governing law in a jurisdiction. For example, California does not provide a cancellation period for automobile sales and leases. Unless a specific dealership or lease agreement provides otherwise, buyers do not have the option to cancel an automobile sale or lease without first showing legal cause. In looking to determine whether a buyer may cancel a contract after a showing of legal cause, courts will often look for instances of fraud, undue influence, illegality, or a breach of a duty. However, under California Civil Code section 1689.6(a), buyers maintain the right to cancel a contract from door-to-door sales within three days. The intent of this statute is to protect buyers from overly ambitious salespeople and give buyers the opportunity to reflect on their purchases without the overbearing presence of the salesperson.