Patricia M. Wagner, a Member of the Firm in Health Care and Life Sciences practice, in the firm’s Washington, DC, office, authored an article in eHealth Law & Policy Journal titled “FTC Complaint Dismissed in LabMD Data Security Case.”

Following is an excerpt (see below to download the full article in PDF format):

In his dismissal, the ALJ held that the FTC had failed to demonstrate that consumers had been harmed or were likely to be harmed. Rather than merely relying on statistical studies evaluating the likelihood of identity theft, the ALJ evaluated the veracity and applicability of those studies to the case at hand. One of the FTC’s experts testified regarding the risk to consumers using a four factor risk analysis: 1) the nature of the information disclosed; 2) to whom the disclosure was made; 3) whether the information was actually acquired or viewed; and 4) whether the data is still available for misuse by others. … In applying this test to the information available in the Insurance File, the ALJ held that the evidence demonstrated that the Insurance File had not been accessed by multiple outside individuals. Instead the Insurance File had only been accessed by Tiversa, a professor with whom Tiversa was collaborating, and the FTC. As a result, the ALJ opined, “there is no contention, or evidence, that the foregoing persons or entities present a threat of harming consumers.” …

Resources

Jump to Page

Privacy Preference Center

When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.

Strictly Necessary Cookies

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.

Performance Cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.