A New Dawn: California's "Shine the Light" Law Suddenly Illuminating California Courts
Consumer Advertising Law Blog
It's time for companies to dust off their privacy and employee training policies. In the last 3 months, the same plaintiff's counsel has filed 10 nearly-identical class action lawsuits against various corporations alleging violations of California's "Shine the Light" law, Cal. Civ. Code § 1798.83 ("Act"). And there is no indication that this trend is abating: the last case was filed only two weeks ago. The decisions in these cases will make for particularly interesting studies, because since the Act became effective seven years ago, no court has issued an opinion interpreting any of its provisions.
The Act applies to companies with more than 20 employees that have, within the past year, disclosed the personal information of California customers to third parties for direct marking purposes. The Act does not restrain this sharing, but instead requires companies to disclose certain information about it. If a company fails to comply, and a customer is injured, the customer may recover a civil penalty of up to $500 per violation, and up to $3,000 per willful, intentional, or reckless violation. The Act does not define what constitutes consumer injury, and this is a central point of disagreement in the suits that have been filed. Finally, the Act contains a safe harbor provision shielding businesses from liability if they cure a non-willful violation within 90 days of notice.
In light of these recent suits, companies operating in California should consider reviewing their privacy and training policies. The decisions on these cases will be the first decisions to interpret the Act and could set the stage for other actions, while hopefully providing meaningful guidance on how companies can avoid liability.
© Arnold & Porter Kaye Scholer LLP 2012 All Rights Reserved. This blog post is intended to be a general summary of the law and does not constitute legal advice. You should consult with counsel to determine applicable legal requirements in a specific fact situation.