Insights
HHS-OCR Risk Analysis Enforcement Initiative Continues Under New Administration
May 27, 2025
Obtained dismissal of a data breach class action involving the protected health information of more than 1.2 million individuals on grounds that plaintiffs lacked Article III standing.
Obtained order striking plaintiffs' class allegations in a consumer products false advertising class action, which was subsequently affirmed by the Fifth Circuit Court of Appeals.
Defeated plaintiffs' motion for class certification in a Fair Debt Collection Practices Act (FDCPA) suit arising out of the use of outdated garnishment forms, on the grounds that the changes in the forms were immaterial and the purported class lacked sufficient commonality.
Obtained dismissal of a data breach class action involving the protected health information of more than 1.2 million individuals on grounds that plaintiffs lacked Article III standing.
Obtained order striking plaintiffs' class allegations in a consumer products false advertising class action, which was subsequently affirmed by the Fifth Circuit Court of Appeals.
Defeated plaintiffs' motion for class certification in a Fair Debt Collection Practices Act (FDCPA) suit arising out of the use of outdated garnishment forms, on the grounds that the changes in the forms were immaterial and the purported class lacked sufficient commonality.
Anjali Das (Partner-Chicago, IL), Brian Myers (Of Counsel-Washington, DC) and Tommy Spitaletto (Partner-Dallas, TX) obtained dismissal of a data breach class action filed against a mental health care provider in the Western District of Texas. The lawsuit arose out of a cyber-attack that involved personal information that included sensitive information such as health information and Social Security numbers. In support of our client’s motion to dismiss, Wilson Elser argued that the plaintiff lacked Article III standing to sue because she failed to allege any injury-in-fact in the form of identity theft fraud, or misappropriation as a result of the breach. Instead, the plaintiff alleged that her harm consisted of (1) lost time and out-of-pocket expenses spent dealing with the data breach; (2) diminished value of her personal, health and financial information; (3) anxiety; (4) violation of privacy rights; (5) loss of the benefit of the bargain made with our client and overpayment for services intended to include data security; and (6) increased risk of future fraud and identity theft. The District Court agreed with Wilson Elser’s position that the plaintiff lacked standing to bring suit and dismissed the case on the basis that the plaintiff failed to allege any actual injury in the form of identity theft, financial fraud or misuse of personal information that could be traced to the cyber incident.
Anjali C. Das, Brian H. Myers and Thomas M. Spitaletto
Obtained dismissal of a data breach class action involving the protected health information of more than 1.2 million individuals on grounds that plaintiffs lacked Article III standing.
Obtained order striking plaintiffs' class allegations in a consumer products false advertising class action, which was subsequently affirmed by the Fifth Circuit Court of Appeals.
Defeated plaintiffs' motion for class certification in a Fair Debt Collection Practices Act (FDCPA) suit arising out of the use of outdated garnishment forms, on the grounds that the changes in the forms were immaterial and the purported class lacked sufficient commonality.