PogoWasRight.org

Menu
  • About
  • Privacy
Menu

Bad Idea: Overdisclosing People’s Positive STD Status–Doe v. Successfulmatch

Posted on November 15, 2014 by pogowasright.org

Venkat Balasubramani has an interesting analysis and commentary on a privacy lawsuit that’s not the run-of-the-mill lawsuit. I had noted this lawsuit previously on this blog (here) after a previous lawsuit failed. Venkat writes:

This is a privacy lawsuit brought by people who signed up for a dating site (Positive Singles) for people with STDs. Plaintiffs allege that Successfulmatch, the company that operates the site, made numerous privacy representations stating in its website copy that it “care[s] about [users’] privacy more than other sites.”

[…]

This is a privacy case where the plaintiffs and claims have key differences from the run-of-the-mill privacy case. First, the facts here are sensitive, and even incidental disclosure would support a claim for damages. Second, these are paying customers and did not sign-up for a free service. It’s unclear whether this is what keeps the lawsuit going in contrast to the numerous other information-sharing lawsuits we see that are routinely dismissed. The case of course contains the age-old scenario of a website making rosy marketing assurances that may not be backed up by its actual practices. (Something the FTC has been cracking down on and that ensnared mainstream sites and services such as Facebook, Snapchat, and even Twitter.)

The key factual question is the role of these affiliate sites. They could just be a means of driving traffic, and while this does not neutralize allegedly misleading statements, it does put it in a slightly different light than a case where a site is actually sharing information with third parties. Unstated in the court’s opinion is whether there is increased security risk or downstream disclosure from the affiliate sites. Once the information is out of SuccessfulMatch’s hands, it’s tough to control what happens to it.

Again, this case is a rare standout as a privacy lawsuit with legs.

Read more on Technology & Marketing Law Blog.

 

Category: BreachesCourt

Post navigation

← AT&T Ditches Tracking Header Program; Verizon Still Refuses
WY: Lawmakers forward privacy constitutional amendment →

Now more than ever

Search

Contact Me

Email: info@pogowasright.org

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

Categories

Recent Posts

  • The App Store Freedom Act Compromises User Privacy To Punish Big Tech
  • Florida bill requiring encryption backdoors for social media accounts has failed
  • Apple Siri Eavesdropping Payout Deadline Confirmed—How To Make A Claim
  • Privacy matters to Canadians – Privacy Commissioner of Canada marks Privacy Awareness Week with release of latest survey results
  • Missouri Clinic Must Give State AG Minor Trans Care Information
  • Georgia hospital defeats data-tracking lawsuit
  • No Postal Service Data Sharing to Deport Immigrants

RSS Recent Posts on DataBreaches.net

  • Masimo Manufacturing Facilities Hit by Cyberattack
  • Education giant Pearson hit by cyberattack exposing customer data
  • Star Health hacker claims sending bullets, threats to top executives: Reports
  • Nova Scotia Power hit by cyberattack, critical infrastructure targeted, no outages reported
  • Georgia hospital defeats data-tracking lawsuit
©2025 PogoWasRight.org. All rights reserved.
Menu
  • About
  • Privacy