Injury-in-Fact vs. Actual Damages –– Avoiding a Jurisdictional Sideshow in Data Breach Class Actions by Challenging Damages, Not InjuryFollowing the Supreme Court’s ruling in Spokeo v. Robins, which held that federal plaintiffs alleging a statutory violation must have suffered a real, concrete injury in order to have Article III standing, many defendants began to assert lack of standing as a defense in data breach class actions in federal court. Data breach cases

Illinois Supreme Court Adopts Expansive Interpretation of Standing under Illinois BIPA, Potentially Opening the Flood Gates for Class ActionsIn a much-anticipated ruling, the Illinois Supreme Court recently held that allegations of actual injury are not required to seek damages under Illinois’ Biometric Information Privacy Act (BIPA or the Act). The case is Rosenbach v. Six Flags Entertainment Corporation, and after Rosenbach, “an individual need not allege some actual injury or

Standing in Data Breach Cases Likely Heading Back to the Supreme CourtData breach plaintiffs often have a very difficult time stating a concrete injury, and courts have wrestled with whether these plaintiffs can file suit in federal court. We have been watching this issue and writing about it frequently. The issue is whether plaintiffs have suffered an “injury in fact” that gives them Article III