The Supreme Court has just issued a major ruling that is a significant win for defendants in data privacy and data breach litigations. In Ramirez v. TransUnion, the Supreme Court reconsidered the question of what constitutes an “injury in fact” under Article III, five years after its significant holding in Spokeo, Inc. v. Robins, 136 S. Ct. 1540. In a ruling out this morning, the Supreme Court held that “[o]nly plaintiffs concretely harmed by a defendant’s statutory violation have Article III standing to seek damages against that private defendant in federal court.” (emphasis added).
