Elsewhere in the Courts: Privacy
The Illinois Court of Appeals has ruled that a public school and a printing company had no duty to safeguard the personal information of school employees and complied with data breach laws. In the case, the school contracted with the printing company to send a notice to former school employees. The employees were erroneously sent a list containing the names, addresses, Social Security numbers, marital status, medical and dental insurers, and insurance plan information for all of the employees. The school sent a letter to the employees asking them to return the list or destroy it. The school also offered the employees one year of credit protection. The employees sued, but the court dismissed the lawsuit, finding that the school and printing company were not guilty of negligence because they had no legal duty to protect the information except under data breach laws, which they complied with.
