January 21, 2022

Volume XII, Number 21

Advertisement
Advertisement

January 20, 2022

Subscribe to Latest Legal News and Analysis

January 19, 2022

Subscribe to Latest Legal News and Analysis

January 18, 2022

Subscribe to Latest Legal News and Analysis

Walmart CCPA Class Action Litigation Update: Will Plaintiff’s Claims Get Kicked by Court?

As readers of CPW know, the Lavarious Gardiner v. Walmart Inc. et al. case is unusual.  Back in July 2020, Plaintiff filed a class action complaint against Walmart alleging that Walmart suffered a data breach which was never disclosed.  As evidence of the breach, Plaintiff presented claims that the personal information associated with his Walmart account had been discovered on the dark web and presented the results of security scans performed on Walmart’s website, which allegedly showed certain vulnerabilities.  In other words, Plaintiff filed suit on the supposition that Walmart’s systems had been breached, which Walmart denies.  Plaintiff’s complaint included a claim under the California Consumer Privacy Act (“CCPA”), in addition to other California privacy and consumer protection statutes.

CPW has previously covered Walmart’s Motion to Dismiss Plaintiff’s Complaint filed on December 12, 2020.  This post is an update now that Plaintiff and Walmart have both submitted additional briefing to the court regarding whether the case should proceed past the pleadings stage.

Walmart had argued that Plaintiff’s CCPA claim failed because the complaint did not allege when the purported breach occurred, which makes it impossible to determine if the CCPA even applies. [Note: The CCPA expressly provides that it is not operative until January 1, 2020, and it contains no express language establishing that it applies retroactively.]  In response to Walmart’s Motion, Plaintiff argued that the alleged data breach is ongoing and cannot identify specific dates that Walmart’s system was breached.  Additionally, Plaintiff asserted that his CCPA claim should survive dismissal because: (1) by pleading his data is presently for sale on the dark web, Plaintiff adequately plead information sufficient to invoke the CCPA and (2) Plaintiff additionally adequately pled loss of his “personal information” as defined in the statute.

In Walmart’s Reply, it first reiterated that the CCPA does not apply retroactively and Plaintiff must show that the alleged breach occurred after the CCPA was effective January 1, 2020.  Walmart then argued that Plaintiffs filed this lawsuit on the “mere suspicion” that Walmart’s network was breached but did not offer any concrete proof of the alleged breach.  Additionally, Walmart disputed Plaintiff’s contention that he was not required to allege a specific date that the data breach occurred.  As a result of these deficiencies, Walmart asserted that Plaintiff did not meet his burden in pleading sufficient information to show that the CCPA even applied to the litigation in the first place.

Even assuming the CCPA applies here, Walmart also argued that Plaintiff’s injuries are not cognizable; and thus, Plaintiff did not meet his burden in pleading damages and injury in his UCL, negligence, and contract claims merely because he cancelled the payment card(s) in question.  Responding to Plaintiff’s alleged injuries, Walmart claimed that Plaintiff’s information is not compensable, Plaintiff’s out of pocket expenses are self-inflicted, Plaintiff’s benefit of the bargain theory fails, and Plaintiff foreclosed any possible future risk of harm because he closed or modified his financial accounts as a result of the alleged breach.

A hearing is scheduled on the motion pending before the court for March 05, 2021.  CPW will be there to cover additional developments as they occur, particularly in regards to how the court rules on Plaintiff’s CCPA claim.  Stay tuned.

© Copyright 2022 Squire Patton Boggs (US) LLPNational Law Review, Volume XI, Number 43
Advertisement
Advertisement
Advertisement
Advertisement
Advertisement
Advertisement

About this Author

Associate

Katie Sharpless is a member of the Litigation Practice. She advises companies on complex business disputes.

Prior to joining the firm, Katie served as Judicial Extern to the Honorable Michael H. Simon, United States District Court, in Portland, Oregon. She also was a Submissions Editor and an Associate Editor on the Environmental Law Review. Katie also served as a research assistant, conducting extensive research on family separation and DACA litigation. She also helped draft articles, essays and book chapters on immigration law.

415-954-0254
Kristin L. Bryan Litigation Attorney Squire Patton Boggs Cleveland, OH & New York, NY
Senior Associate

Kristin Bryan is a litigator experienced in the efficient resolution of contract, commercial and complex business disputes, including multidistrict litigation and putative class actions, in courts nationwide.

She has successfully represented Fortune 15 clients in high-stakes cases involving a wide range of subject matters.

As a natural extension of her experience litigating data privacy disputes, Kristin is also experienced in providing business-oriented privacy advice to a wide range of clients, with a particular focus on companies handling customers’ personal data. In this...

216-479-8070
Advertisement
Advertisement
Advertisement