Personal Data Misuse & Privacy Lawsuits
Data misuse can be financially and emotionally damaging. The Lyon Firm can protect you.
Investigating Unlawful Data Sharing and Misuse Claims
How secure are data systems? Judging by the huge number of data breaches announced each year, it is safe to say online privacy and cybersecurity desperately need improvement on several fronts.
This has been an enormous issue, and beyond the security and theft of personal data lies another privacy violation concern–perhaps a more egregious offense: illegal data sharing and data misuse.
The Lyon Firm is currently filing data misuse cases against companies that sell data they obtain from first-party customers without consent. Your digital security and confidentiality are our top priorities.
With nearly two decades of proven results and a commitment to your privacy, we’re dedicated to securing justice for individuals in this ever-evolving digital world. Contact us online or call (513) 381-2333 to protect your sensitive personal data and hold companies accountable for abusing it.
You have the right to decide who collects and stores your data. When your information is shared or sold without your consent, you may file a lawsuit against the offending party to recover any damages.
What Is Data Misuse?
Data misuse refers to the improper or unauthorized use of information that has been collected, stored, or shared by companies or individuals. This violation includes several activities, including:
- Accessing data without consent.
- Using data for purposes other than what was originally intended or agreed upon.
- Selling or sharing data without permission.
- Failing to protect data, leading to leaks or breaches.
Misuse of data is increasingly relevant today due to the inescapable fact that large amounts of personal and sensitive information are routinely collected and processed. Such exploitation can have serious consequences for victims, such as:
- Identify Theft: Stolen data can be used to impersonate individuals, leading to financial fraud and other crimes.
- Severe Financial Losses: Misused data can lead to unauthorized charges, drained bank accounts, or fraudulent loans taken out in the victim’s name.
- Damage to Reputation: The publication of private information can tarnish a person’s reputation or ruin their personal relationships.
- Psychological Distress: Knowing that your sensitive data could be exposed any minute or that it’s currently being misused can cause stress and anxiety.
What Personal Data Can Be Collected and Sold?
- Consumer behavior
- Location data
- Home address
- Social security number
- Banking information
- Browsing history
- Video Viewing History
- Purchase history
- Telephone numbers & email
- Credit card information
- TV tracking data
- Genetic Data & DNA Test Results
- Biometric data—facial recognition, fingerprints, genetic information, and retina scans
CONTACT THE LYON FIRM TODAY
Please complete the form below for a FREE consultation.
ABOUT THE LYON FIRM
Joseph Lyon has 17 years of experience representing individuals in complex litigation matters. He has represented individuals in every state against many of the largest companies in the world.
The Firm focuses on single-event civil cases and class actions involving corporate neglect & fraud, toxic exposure, product defects & recalls, medical malpractice, and invasion of privacy.
NO COST UNLESS WE WIN
The Firm offers contingency fees, advancing all costs of the litigation, and accepting the full financial risk, allowing our clients full access to the legal system while reducing the financial stress while they focus on their healthcare and financial needs.
Companies Misusing Data: Who Is Buying My Personal Data?
A whole host of marketers and companies are vying for your business. Retailers and tech companies collect vast amounts of data and sell it to third parties for various consumer tracking and marketing purposes.
However, the concerns surrounding this data collection and sharing extend beyond consumer profiling. If that data is leaked, then other bad actors can use that info in more damaging ways.
Several high-profile corporations that were found to have participated in misusing consumer data or failed to protect private information include:
- Uber
- Marriott
- Morgan Stanley
- Yahoo
Are Healthcare Companies Misusing Data?
There have been several reports of healthcare entities, including telehealth sites and pharmacies, sharing data with third parties.
In 2024, the FTC handed down a $7 million fine after Cerebral, a telehealth company, allegedly provided sensitive data to third parties.
Cerebral chose to settle allegations that it disclosed personal health information for advertising purposes and misled customers about easy cancellation policies.
The mental healthcare provider shared sensitive data of over 3 million consumers — including medical and prescription histories and pharmacy and health insurance information — to third parties through tracking technologies embedded on its website and apps.
In addition to mental health apps, several other health apps, like period tracker apps, weight loss apps, and fitness tracker apps, may be sharing your personal information.
What Role Do Data Brokers Play in Data Misuse Cases?
Data brokers are companies that make money from collecting, analyzing, and selling large volumes obtained through different sources, like public records, online activities, surveys, or transactions.
Data brokers largely operate in the shadows, and although it is still legal to collect and share personal data, there are limits on what is considered lawful and ethical. The problem is that data brokers compile extensive profiles of people without their knowledge or consent. This information could encompass demographics, preferences, behaviors, and even health data.
These profiles are then sold to businesses and other third parties unbeknownst to the consumer who may then use this data for personalized ads or sell it again, further putting their information at risk.
Data brokering remains a profitable enterprise for many online entities, though if they are found to be operating illegally, whistleblowers can come forward and file class action claims.
Why File a Data Privacy Lawsuit?
Despite the constant intrusion into our personal lives by large media companies, American consumers still have privacy rights.
When companies choose to illegally collect, sell, share, or misuse your information, they may be held accountable. In the past, the best way to change unsavory corporate behavior has been to hit companies in the pocket.
However, when federal regulation fails to properly address your privacy concerns, a civil case may be considered, and companies may change due to the threat of expensive litigation.
Not only can you protect yourself from further exploitation and recover compensation for the damages you already suffered, but you can also stop companies from continuing to disregard consumer privacy.
What Damages Are Available in a Data Misuse Lawsuit?
Damages available in consumer data privacy lawsuits can vary depending on the specific circumstances, applicable laws, and jurisdiction.
If your information is being shared or sold without your knowledge, and companies are profiting from the practice, you may be eligible to file a lawsuit. Here are some common types of damages that may be available:
- Compensatory Damages: These are intended to compensate the plaintiff for the actual harm they suffered due to the data privacy violation. It can include monetary losses, such as identity theft-related expenses, and non-monetary losses, such as emotional distress.
- Statutory Damages: Some data privacy laws, like the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR), provide for statutory damages, which are predetermined amounts that can be awarded to plaintiffs without the need to prove actual harm.
- Punitive Damages: In cases where the defendant’s conduct is particularly egregious, punitive damages may be awarded to punish the wrongdoer and deter others from similar actions.
- Injunctive Relief: Courts may issue injunctions to prevent further data breaches or to compel the defendant to take specific actions to improve data security and protect consumer information.
- Equitable Remedies: Plaintiffs may seek equitable remedies, such as the destruction of wrongfully obtained data or the implementation of stronger data protection measures.
Consumers who believe their privacy rights have been violated should consult with an attorney experienced in data privacy and consumer protection law to understand their rights and potential remedies.
Data and privacy violations can leave you in financial turmoil, struggling with extreme debt and loans. Beyond that, companies reduce you to mere numbers or dollar signs when they abuse your data for ads or sell it to others.
The knowledgeable lawyers at The Lyon Firm remind corporations that they are not above the law. Reach out to us online or call (513) 381-2333 to regain control over your private data.
Data Sales & Data Sharing Whistleblowers
Our attorneys are representing whistleblowers and plaintiffs who come forward with knowledge of widespread corporate data misuse. It is no secret that data brokers are working behind the scenes to collect as much personal information as possible.
Companies sell this data, which is aggregated into large bundles and sold to third parties for profit. Such brazen acts may be illegal if the personal information in question is sold or shared without prior consent.
Examples of Data Misuse Cases
The Lyon Firm is currently investigating a variety of data sharing and privacy violation cases on behalf of plaintiffs nationwide. Below are just a few recent examples of companies that allegedly violated the trust of consumers by misusing their personal data.
InMarket Media Tracking Consumer Location Data
In 2024, the Federal Trade Commission (FTC) banned the data aggregator InMarket Media from selling or sharing any precise location data when they did not fully inform consumers and obtain their consent before collecting and using their location data for advertising and marketing.
GM Cuts Ties With LexisNexis and Verisk
In another recent incident involving location data, GM ended its business relationship with two data analysis firms, LexisNexis and Verisk, after they allegedly shared the private OnStar data of individual consumers without first obtaining the vehicle owner’s consent.
Zoom Reportedly Shared User Data
In 2021, Zoom agreed to a $85 million settlement after the company allegedly misrepresented its end-to-end encryption on video calls. According to complaints, the company shared user data with companies like Facebook and Google without users’ consent.
Attorneys and plaintiffs claimed that Zoom willingly shared personally identifiable information with third parties without permission, which in turn made it possible for such third parties to identify and track users’ behavior. The official legal complaint also accused Zoom of misrepresenting its security features.
The court allowed claims of breach of contract, breach of implied contract, and quasi-contract to proceed. Under the proposed settlement, Zoom agreed to “major changes to its practices,” meant to better protect consumer data.
Of course, Zoom is not the only company facing legal scrutiny about data sharing practices.
What Is Data Tracking?
Companies have been known to track users’ location and online activity across websites. Some instances of data tracking have even led to the filing of wiretapping complaints. California and other states have enacted strict laws prohibiting companies from tracking users in certain circumstances. Data tracking, however, is not easy to identify, and most consumers have no idea when a company has been illegally tracking them.
The misuse of data collected by media conglomerates and other corporate entities can pose a privacy concern to consumers and lead to class action lawsuits. In recent years, some landmark litigation and judgments handed down by the FTC have strengthened consumer data laws.
In most cases, if a company does not have your permission or written consent to track, collect, and disseminate your personal information (location data, viewing history, demographics), they may be liable for violating privacy protection statutes and can be sued accordingly.
Joe Lyon is a class action data privacy lawyer representing plaintiffs nationwide in a variety of personal data tracking litigation.
Reviewing Data Sharing & Data Misuse Claims
Why Hire The Lyon Firm?
Misusing data is not something to be taken lightly. In today’s digital age, with so much information at our fingertips and available on our online profiles, it might be easy to write off the potential consequences.
But data misuse can change the course of your life, both financially and reputationally. The Lyon Firm refuses to let companies continue to chip away at your privacy and security. Our team of experienced data privacy lawyers has made it their mission to hold large companies accountable for negligent and fraudulent practices.
We have successfully supported several clients in taking a stand against data privacy violations. Contact us online or call (513) 381-2333 to let us help you ensure your data is used responsibly and respectfully.
CONTACT THE LYON FIRM TODAY
Data Privacy Lawsuits FAQs
It’s not as easy as just alerting companies to stop collecting and selling your personal information, but you can take certain steps to protect yourself, including:
- Opt out of data collection practices if possible.
- Review your credit report.
- Use strong and different passwords for all of your accounts.
- Do not offer your personal information unless necessary.
- Check bank accounts for suspicious activity.
- Limit how exposed you are to social media.
- Speak with a cybersecurity attorney.
Lawmakers established the Illinois Biometric Information Privacy Act (BIPA) in 2008 in response to the growing concern about biometric data misuse. The act seeks to help regulate the “collection, use, safeguarding, handling, storage, retention, and destruction of biometric identifiers and information.”
According to the BIPA, biometric identifiers may include:
- Retina or iris scan
- Fingerprint
- Voiceprint
- Scan of hand
- Face geometry
The BIPA addresses the retention, collection, disclosure, and destruction of personal biometric data. Private entities collecting biometric data must inform subjects of the data collection and provide the specific purpose and length of the collection term. The subject must provide a written release.
Under the BIPA, any person harmed by a privacy violation has a right to legal action. Plaintiffs may recover damages of $1,000 and, for intentional or reckless violations, up to $5,000 in liquidated damages or actual damages, whichever is greater.
We offer free and confidential consultations to data-sharing whistleblowers and individuals concerned with the widespread misuse of their personal information.
Large media corporations have had their way with our data for a long time, and the only way to fight back sometimes is to file a lawsuit. The Lyon Firm has filed numerous consumer class action complaints in the privacy practice area. We work tirelessly on your behalf to hold any negligent company accountable to compensate consumers for any invasion of personal privacy.
Protecting sensitive personal information is getting more difficult, but that doesn’t mean it’s impossible. Consumers will have a more secure future by forcing companies to become accountable for their lack of cybersecurity measures following data misuse and data breach incidents.
Large companies control vast amounts of data, leaving nearly all Americans at risk when their personal data is compromised. You may file a data privacy violation claim if your financial, medical, or consumer information is misused.
The majority of BIPA lawsuits are filed against employers who utilize biometric timekeeping systems with fingerprint or facial recognition scans and collect employee biometric data.
Motorola, Clearview AI, and Vigilant are facing legal action for allegedly collecting mugshots that were used by law enforcement.
Also, Microsoft, Amazon, Alphabet, and FaceFirst Inc. allegedly violated privacy laws by collecting photos for facial recognition data from Flickr, a photo storage website.
A proposed class action alleges Ring, LLC, has failed to protect the privacy of its motion-activated cameras and the personal information of its customers. The complaint claims Ring’s devices are rife with security vulnerabilities, which may compromise the personal data of existing and future customers.
Cybercriminals may have the potential to hack into Ring devices and home networks. The lawsuit also brings to light the fact that Ring has shared users’ personal identifying information with third parties without first obtaining prior consent. The complaint says the devices are not well-equipped to deal with potential hacks.
Plaintiffs in the case want Ring to take additional security measures to protect the privacy of user accounts and installed devices, as well as stop sharing personal data without clear and informed consent.
Reports have surfaced that several user accounts and devices were hacked, and plaintiffs argue the company was late in addressing security issues.
Beyond the security issues, Ring permits third parties to track users, raising eyebrows from consumer safety and data privacy advocates.
There are laws in place to protect consumers from illegal data sharing and unlawful data sales. The courts may deem a practice “data misuse” if personal information is regularly shared or sold without the consent of individuals.
Many times, consumers have no idea when a website or a company operating online has collected their data and is sharing it with third parties. If it is not very clear that your data is being sold or shared, this may constitute a privacy violation.
Other times, however, companies will make it almost obligatory to consent to data sharing if you want to use their services. Some apps and websites almost bully consumers into consenting to data sharing if they expect to use the service. This may not be illegal, but it does put unfair and undue pressure on consumers to consent to a shady practice that they don’t necessarily agree with.
Class Action Information Center
- invasion of privacy law
- HIPAA Violations
- Medical Data Theft
- Health App Privacy Violations
- Consumer Fraud
- TCPA Violations
- biometric authentication
- Genetic Data Privacy
- biometric data privacy
- CMIA
- CCPA
- telehealth data privacy
- Sovos
- Google Incognito Lawsuit
- CIPA
- Dating App Privacy Lawsuits
- Facial Recognition Privacy
- Credit Card Data Collection
-
-
Answer a few general questions.
-
A member of our legal team will review your case.
-
We will determine, together with you, what makes sense for the next step for you and your family to take.
-