Georgia Supreme Court Clarifies There Is No Duty to Safeguard Personal Information from a Data Breach

The Georgia Court of Appeals recently reaffirmed its prior conclusion that there is no duty to safeguard personal information under Georgia law.  In McConnell v. Ga. Dep’t of Labor, --- S.E.2d ----, 2018 WL 2173252 (Ga. App. May 11, 2018), the Court of Appeals addressed whether a plaintiff whose social security number and other personal identifying information (“PII”) had allegedly been negligently disclosed by an employee of the Georgia Department of Labor stated a negligence claim in connection with the unauthorized disclosure. In urging that the Court of Appeals should recognize such [...] Read more

The post Georgia Court of Appeals Reaffirms Lack of Duty to Safeguard Personal Information appeared first on Alston & Bird Privacy Blog.

Third-party forensic investigations performed at the direction of counsel are part-and-parcel of virtually every data breach.  There has been little case law, however, directly addressing the extent to which the attorney-client privilege and/or work product doctrine protects those forensic investigations from disclosure.  Last week, the Central District of California held that, under the specific facts at issue, that information is indeed protected by at least the attorney work product doctrine. In In re Experian Data Breach Litigation, 15-1592 (C.D. Cal. May 18, 2017), the Court considered [...] Read more

The post Court Holds Forensic Investigator’s Report is Protected from Disclosure appeared first on Alston & Bird Privacy & Data Security Blog.