The Pennsylvania Supreme Court has ruled that employers have a legal duty to use reasonable care to safeguard the sensitive personal information of employees stored on an Internet-accessible computer system. In Dittman v. UPMC, former and present employees of the University of Pittsburgh Medical Center filed a putative class action against UPMC arising from a data breach in which the personal and financial information – including names, birth dates, Social Security numbers, addresses, tax forms,…

In A-1 Premium Acceptance, Inc. v. Hunter, the Missouri Supreme Court upheld the circuit court’s order denying counterclaim defendant A-1’s motion to compel arbitration because the plain language of the consumer arbitration agreement limited the arbitrator to the National Arbitration Forum (NAF).  After the parties executed the arbitration agreement, NAF entered into a consent decree with the Minnesota Attorney General requiring NAF immediately to stop providing arbitration services for consumer claims nationwide. The parties’…

On December 10, the Bureau of Consumer Financial Protection issued proposed revisions to its 2016 Policy on No-Action Letters and proposed a BCFP Product Sandbox. The proposed new policy has two parts: Part I is a revision of a 2016 policy on No-Action Letters, and Part II is a description of the BCFP Product Sandbox. The revised No-Action policy would eliminate the data-sharing requirement of the 2016 Policy, which required applicants to commit to sharing…